Image processing device, control method of the same, and program

Abstract

To sense a change in environment of a network on the basis of information concerning the network, and notify a user of the change.SOLUTION: An image processing device comprises: a setting part that sets a first security setting on the image processing device, as a security setting for the image processing device; an identifying part that identifies a current network type in an environment in which the image processing device is used; and a giving part that gives a notification concerning the necessity of change of the security setting, when the first security setting is not suitable to the identified network type.SELECTED DRAWING: Figure 3

Description

Technical Field

[0001] The present invention relates to an image processing apparatus connected to a network, a control method thereof, and a program.

Background Art

[0002] Generally, an information processing apparatus connected to a network has a setting function for performing settings related to security functions based on user operations. In recent years, information processing apparatuses have come to be installed in various environments such as home offices and public spaces shared by a large number of unspecified people, and the required security settings have become more complex. Patent Document 1 discloses a technique for collectively setting security-related functions of an MFP according to a security level specified by a user by designating a security level divided into steps.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] Even if the security level is displayed, it may be difficult for the user to select an appropriate security level, or even if the security level is selected, the selection may not be suitable for the actual environment. In this case, there is a problem that the settings are not made and the operation is performed with the default settings, or the operation is performed with a security that does not match the environment, and there is a risk that the security of the information processing apparatus is not ensured.

[0005] The present invention has been made in view of at least one of the above-mentioned problems. One aspect of the present invention is to provide a mechanism for detecting changes in the network environment and notifying the user of the detected changes. [Means for solving the problem]

[0006] To achieve at least one of the above objectives, according to one aspect of the present invention, an image processing apparatus is provided, The security settings for the image processing device include a setting means for setting a first security setting for the image processing device, A means for identifying the current network type in the operating environment of the image processing device, If the first security setting is not suitable for the identified network type, the system includes a means for providing a notification regarding the need to change the security setting. An image processing device characterized by the above is provided. [Effects of the Invention]

[0007] According to the present invention, it is possible to provide a mechanism that detects changes in the network environment and notifies the user of the detected changes. [Brief explanation of the drawing]

[0008] [Figure 1] This is a diagram showing an example of an information processing system. [Figure 2] This figure shows an example of the hardware configuration of the MFP101. [Figure 3] This figure shows an example of the software configuration of the MFP101. [Figure 4] This figure shows an example of a screen displayed on the control panel 216 of the MFP101. [Figure 5] This figure shows an example of a screen displayed on the control panel 216 of the MFP101. [Figure 6] This flowchart shows an example of control in MFP101. [Figure 7] This flowchart shows an example of control in MFP101. [Figure 8] This flowchart shows an example of control in MFP101. [Figure 9] This figure shows an example of a screen displayed on the control panel 216 of the MFP101. [Modes for carrying out the invention]

[0009] The embodiments will be described in detail below with reference to the attached drawings. Note that the following embodiments do not limit the invention as defined in the claims. While the embodiments describe multiple features, not all of these features are essential to the invention, and the features may be combined in any way. Furthermore, in the attached drawings, identical or similar configurations are given the same reference numerals, and redundant descriptions are omitted.

[0010] <First Embodiment> Figure 1 shows an example of an information processing system in this embodiment. The MFPs (Multi-Function Peripherals) 101 to 103, which are examples of information processing devices in this embodiment, are installed in different installation environments 111 to 113. An MFP is an image processing device equipped with at least one of either a printing function or a scanning function. The installation environment here refers to the environment in which the information processing device is used by users. The type (category) of network to which the information processing device is connected differs for each usage environment. The installation environments 111 to 103 exemplified in Figure 1 represent, respectively, a company intranet environment 111, a direct internet connection environment 112, and an internet-restricted environment 113.

[0011] The company's intranet environment 111 is an intranet environment in which MFPs 101 and PCs 121 are connected via the company's LAN (Local Area Network) 131. A firewall 141 is installed at the boundary between LAN 131 and the internet 100. In other words, communication between each information processing device within the company's intranet environment 111 and the internet 100 is monitored and protected by the firewall 141. Therefore, threats such as attackers from the internet 100 gaining access to each information processing device are greatly reduced in the company's intranet environment 111.

[0012] On the other hand, the direct internet connection environment 112 does not have a firewall installed. The direct internet connection environment 112 is an environment in which the MFP 102 and PC 122 are directly connected to the internet 100 and communicate with it. Therefore, information processing devices such as the MFP 102 and PC 122 need to take measures against threats such as access by attackers from the internet 100, by using the personal firewall function within each information processing device.

[0013] The internet-restricted environment 113 is a closed network environment isolated from other networks such as the Internet 100. Information processing devices such as MFP 103 and PC 123 are connected via LAN 133. In the internet-restricted environment 113, network communication is only possible between information processing devices installed on LAN 133. Each information processing device is not accessible by unspecified users on the Internet 100.

[0014] In this embodiment, an environment in which an information processing apparatus such as an MFP is used is classified into three categories such as the installation environments 111 to 113 described in FIG. 1, and a batch setting function for collectively performing security-related settings suitable for each category is provided. The batch setting function presents options representing categories to the user so that the user can perform security settings more easily, and by accepting the selection of an option from the user, it is a function that can collectively execute appropriate security policies or settings according to the usage environment. The set category is stored, for example, in the storage 214 of the MFP 101.

[0015] By the way, when allowing the user to use the batch setting function, even if the user selects an appropriate category, the category of the installation environment may change due to a network infrastructure replacement or an office move. In this case, there is a risk that the information processing apparatus may be operated with security settings for a category that does not match its usage environment. That is, there is a problem that the information processing apparatus may be operated in a state where its security is not guaranteed.

[0016] In this embodiment, in view of at least one of the above problems, a mechanism is provided that detects a change in the category corresponding to the environment in which the information processing apparatus is used based on information related to the network and utilizes the detection result. Note that the above definition of the category does not limit the present invention, and some or other categories exemplified in this embodiment may be defined.

[0017] This will be specifically described below. First, the categories corresponding to the three installation environments described in FIG. 1 and the security measures to be taken for each installation environment will be described using Table 1.

[0018]

Table 1

[0019] MFP101 to 103, which are examples of information processing devices, have a wide variety of settings, including settings related to security functions and other settings, and execute various controls of MFP101 according to the setting values ​​corresponding to these settings. In this embodiment, the items targeted for batch setting related to security functions are the six items shown in the leftmost column of Table 1.

[0020] Encrypting communication paths is a security measure that prevents information leakage by encrypting the content of communications over a network. One example of a function that enables communication path encryption is TLS (Transport Layer Security). In environments connected to the internet, it is desirable to encrypt communication paths because there is a possibility of third parties eavesdropping on communications. In other words, except in internet-restricted environments (113), it is recommended to encrypt communication paths.

[0021] Disabling legacy protocols is a security measure that prevents impersonation and information leakage by disabling functions that use insecure legacy communication protocols. An example of a legacy protocol is WINS (Windows Internet Name Service). Similar to encrypting communication paths, disabling legacy protocols is desirable in environments connected to external networks such as the internet. In other words, disabling legacy protocols is recommended except in internet-restricted environments (113).

[0022] A personal firewall is a firewall installed and used with an MFP (Multifunction Printer). Like a regular firewall, it monitors communication between the MFP and external networks such as the internet. Examples of firewall functions include IP (Internet Protocol) filtering and port number filtering. IP filtering is a security measure that reads the destination and source information of communication packets and allows only communication packets with pre-configured destination and source information. This prevents access by third parties and prevents information leakage. Port number filtering is a security measure that closes unused ports to prevent intrusion through ports. This prevents Denial of Service (DoS) cyberattacks that overload a system and exploit vulnerabilities. In environments connected to external networks and without a firewall installed, it is desirable to enable a personal firewall due to the possibility of information leakage and DoS attacks. In other words, except for internet-restricted environments 113 that are not connected to external networks and internal intranet environments 111 where a firewall is configured, enabling a personal firewall is recommended.

[0023] Strengthening authentication security involves measures to combat impersonation, such as prohibiting password caching or specifying a minimum password length. Except for internet-restricted environments (113) connected within isolated networks, there is a possibility of impersonation, making it desirable to strengthen authentication security.

[0024] The file sharing function is a function for sharing files on the network within the environment. In an environment where unspecified users share the network within the environment, it is desirable to disable the file sharing function in order to prevent information leakage. That is, it is recommended to disable the file sharing function except in a private network environment where specific users share the network within the environment. As described above, the private network environments in this embodiment are the in-company intra environment 111 and the Internet prohibited environment 113. Therefore, in the Internet direct connection environment 112 that is directly connected to a public network, it is recommended to disable the file sharing function. As an example of the settings related to the file sharing function, there is an SMB (Server Message Block) server setting.

[0025] The invalidation of the external storage device means, for example, setting so that a USB (Universal Serial Base) storage device cannot be used in the MFP as an external storage device. Thereby, it is possible to prevent the information held by the MFP from being written to the external storage device and prevent information leakage. In addition, it is possible to prevent infection with a computer virus via the USB memory device and the accompanying information leakage. The threat of information leakage by an external storage device such as USB is common in any installation environment. Therefore, it is desirable to be invalidated in all installation environments.

[0026] Table 1 shows a summary of the above recommended setting values. For items where the setting is recommended, it is marked as "On", and for items where the setting can be either "On" or "Off", it is marked with a diagonal line.

[0027] <Hardware Configuration of MFP101> The hardware configuration of MFP101, which is an example of the information processing apparatus in this embodiment, will be described using FIG. 2. Although FIG. 2 illustrates the hardware configuration of MFP101, MFP102 and 103 also have the same hardware configuration as MFP101.

[0028] The MFP101 has a reading function to read images on a sheet, a file transmission function that allows the read images to be sent to an external communication device, and a printing function to print images onto the sheet.

[0029] As mentioned above, in this embodiment, the MFP101 is described as an example of an information processing device, but it is not limited to this. For example, a single-function SFP (Single Function Peripheral) such as a scanner or printer may also be used. Furthermore, this embodiment can be applied to a wide variety of communication devices and IoT devices connected to a network, such as 3D printers, smartphones, digital cameras, network cameras, and televisions.

[0030] The control unit 210, including the CPU (Central Processing Unit) 211, controls the operation of the entire MFP 101. The CPU 211 reads control programs stored in the ROM (Read Only Memory) 212 or storage 214 and performs various controls such as print control and read control. The ROM 212 stores control programs that can be executed by the CPU 211. The RAM (Random Access Memory) 213 is the main memory of the CPU 211 and is used as a work area or a temporary storage area for deploying various control programs. The storage 214 stores print data, image data, various programs, and various setting information. In this embodiment, an auxiliary storage device such as an SSD (Solid State Drive) is assumed as the storage 214, but non-volatile memory such as an HDD (Hard Disk Drive) may be used instead of an SSD. In this way, the hardware such as the CPU 211, ROM 212, RAM 213, and storage 214 constitute a so-called computer.

[0031] In this embodiment of the MFP101, one CPU 211 uses one memory (RAM 213) to execute each process shown in the flowchart described later, but other configurations are also possible. For example, multiple CPUs, RAM, ROM, and storage can work together to execute each process shown in the flowchart described later. Alternatively, some processes may be executed using hardware circuits.

[0032] The control interface (I / F) 215 connects the control unit 216 and the control unit 210. The control unit 216 is equipped with a liquid crystal display with touch panel functionality and various hard keys. The control unit 216 functions as a display unit for displaying information and a reception unit for receiving user instructions.

[0033] The reading unit interface 217 connects the reading unit 218 and the control unit 210. The reading unit 218 reads documents placed on the document glass or ADF and generates a scanned image. The generated scanned image is stored in the storage 214 or RAM 213. The scanned image generated by the reading unit 218 is transmitted to an external device via a network or used for printing the image onto a sheet.

[0034] The printing interface 219 connects the printing unit 220 and the control unit 210. The read image generated by the reading unit 218 and stored in the storage unit 214 or RAM 213 is transferred from the control unit 210 to the printing unit 220 via the printing interface 219. The printing unit 220 receives the read image via the control unit 210 and prints it onto the sheet. It can also perform printing based on print jobs received from external devices. The printing method of the printing unit 220 may be electrophotographic, inkjet, or other printing methods such as thermal transfer.

[0035] The communication unit I / F 221 is a communication interface provided in the MFP 101. The control unit 210 is connected to the LAN 131 via the communication unit I / F 221. The communication unit I / F 221 can transmit data to devices, servers on the LAN 131, and servers on the Internet via a gateway (not shown).

[0036] In this embodiment, it is assumed that the communication unit I / F 221 is a communication interface that performs wired communication compliant with Ethernet (registered trademark), but it is not limited thereto. For example, it may be a wireless communication interface compliant with the IEEE 802.11 series. Although the communication unit I / F 221 of the MFP 101 is connected to the LAN 131, the connected network varies depending on the installation environment. For example, the MFP 102 is directly connected to the Internet 100. As a communication I / F for directly connecting to the Internet 100, for example, an interface for a mobile phone line may be used. The MFP 103 is connected to the LAN 133.

[0037] <Software Configuration of MFP 101> FIG. 3 is an example of the software configuration of the MFP 101. The software in the MFP 101 is composed of three layers: an OS (Operating System) 300, router setting units 310 to estimation unit 315 that function as middleware, and a communication application / server 313.

[0038] The OS 300 is basic software for controlling the operation of the entire MFP 101. The OS 300 has a communication control unit 301. The communication control unit 301 controls the transmission and reception of packets via the communication unit I / F 221. The communication control unit 301 has a communication monitoring unit 302.

[0039] In this embodiment, it is assumed that the communication monitoring unit 302 is a software tool such as tcpdump or iptables that can run on OS300 such as a Linux (registered trademark) system. The communication monitoring unit 302 monitors the transmission and reception of packets by the MFP101 via the communication unit I / F221, and outputs and records the monitoring results as a log.

[0040] Next, we will describe the case where the communication application / server 313 communicates with an external device. In this case, the communication application / server 313 requests data transmission from the communication control unit 301 of the OS 300. Upon receiving the data transmission request, the communication control unit 301 works in cooperation with the communication interface 221 to transmit the data to the external device. The communication control unit 301 also controls the transmission and reception of packets via the communication interface 221. The communication control unit 301 has a DNS (Domain Name System) client 303 and a DHCP (Dynamic Host Configuration Protocol) client 304.

[0041] In this embodiment, it is assumed that the DNS client 303 is a DNS client that is included as standard in OS 300, such as a Linux (registered trademark) system. When performing name resolution of a domain name using these clients, the DNS server is specified by adding an entry such as "nameserver "IP address of DNS server"" to the file located at " / etc / resolve.conf". Multiple DNS servers can be specified for redundancy. The DNS client 303 has the function of requesting the specified DNS server to resolve the hostname or domain name. In response to the request, the DNS client 303 receives the name resolution result and obtains the IP address corresponding to the hostname or domain name.

[0042] DHCP client 304 automatically obtains network information such as IP addresses, default gateways, and subnets from DHCP servers on the network. DHCP client 304 can also attempt to obtain proxy server information from DHCP servers using WPAD (Web Proxy Auto-Discovery) technology.

[0043] Furthermore, DNS client 303 can also send queries regarding WPAD. A DNS server that receives a query regarding WPAD responds to DNS client 303 with proxy server information. In this embodiment, if proxy server information cannot be obtained when acquiring network information using DHCP client 304, DNS client 303 will perform a query regarding WPAD.

[0044] ● Communication with external parties Next, we will explain the case where the communication application / server 313 communicates with an external device. In this case, the communication application / server 313 requests the communication control unit 301 of the OS 300 to send data. Upon receiving the request to send data, the communication control unit 301 sends the data to the external device. If the destination of the external device is specified by a hostname, the communication control unit 301 works with the DNS client 303 to perform the name resolution described above and obtain the IP address of the external device. Subsequently, the communication control unit 301 works with the communication interface 221 to send a packet with that IP address as the destination.

[0045] Furthermore, the communication control unit 301 also controls the forwarding of packets received by the communication unit I / F221 to internal communication applications and servers.

[0046] The communication application / server 313 is an application layer module that allows the MFP101 to exchange data with external devices. For example, the MFP101 has modules such as a network print application, a network scan application, and an HTTP server.

[0047] The network print application is an application that receives print data. The network print application works in cooperation with the printing unit 220 to print images onto sheets based on print jobs received from print clients of external devices. The network scan application is an application that sends files based on scanned images obtained by the reading unit 218 to scan clients of external devices. The HTTP server is a web server that provides the MFP101's settings screen and information confirmation screen to a web browser. Note that, due to space limitations, the MFP101 also has various other communication applications / servers.

[0048] ● MFP middleware Next, the middleware of the MFP101 will be described. The configuration storage unit 312 stores settings made via the middleware, as well as setting values ​​and data used by the middleware and the OS. In this embodiment, the storage unit 312 stores a set of recommended setting data, which combines categories corresponding to the installation environment with recommended security measures and setting values ​​for each category, as exemplified in Table 1. That is, it stores categories in association with the set of recommended setting data corresponding to those categories. It also stores security settings set for the MFP101 by users such as administrators. The network type (category) that has been set may also be stored.

[0049] Furthermore, the setting memory unit 312 stores a combination of various setting items and the current setting values ​​corresponding to those setting items as the operating settings for the MFP101. In this embodiment, as an example, a True / False Boolean value is stored for each setting item. That is, True is stored for setting values ​​that are shown as ON in Table 1, and False is stored for setting values ​​that are shown with diagonal lines in Table 1. False indicates that there is no particular recommended setting value. Note that this data storage method is just an example and is not limited to this.

[0050] The communication log storage unit 314 stores the transmission and reception information of network packets acquired by the communication monitoring unit 302. The communication log storage unit 314 stores the network packet dump data acquired by tcpdump as a log. In addition, the communication log storage unit 314 stores the log of the packet filtering results acquired by iptables. Note that the logs stored in the communication log storage unit 314 are examples and are not limited to these.

[0051] The rule setting unit 310 provides the aforementioned batch setting function. This batch setting function presents the user with options representing categories to make security settings easier for the user. By accepting the user's selection of options, it is a function that can execute appropriate security policies or settings according to the usage environment in a batch.

[0052] The environmental change detection unit 311 uses various logs stored in the communication log storage unit 314 to detect changes in the category corresponding to the usage environment set in the MFP 101. When the environmental change detection unit 311 detects a change in the category, it notifies the rule setting unit 310 that a change in the category has been detected.

[0053] The estimation unit 315 estimates the environment in which the MFP 101 is being used based on network information obtained via the network and network information obtained by acquiring operating settings from the setting storage unit 312. The environment change detection unit 311 requests the estimation unit 315 to estimate the network environment. The estimation unit 315 estimates the environment in which the MFP 101 is being used and responds with the estimation result.

[0054] ● Notification of environmental changes Furthermore, the batch setting function of this embodiment also has a notification function that notifies the user of the detection results of changes in the usage environment. The notification function for detecting changes in the usage environment will now be explained. Figure 4 shows an example of a setting screen that the rule setting unit 310 displays on the operation unit 216 of the MFP101. Figure 4(a) shows an example of a setting screen that is displayed when the usage environment is not set, and Figure 4(b) shows an example of a setting screen that is displayed when the usage environment is set. Figure 4(c) shows an example of a setting screen that includes notification of estimation results.

[0055] In Figure 4(a), List 401 is a list containing multiple options corresponding to a category. The user can select any one of the options displayed in List 401. In this embodiment, an example is shown where the options are strings that succinctly represent the environment in which the MFP corresponding to the category is used.

[0056] Key 402 (or indicator or button 402) is used to reflect the recommended settings corresponding to the selected category in the operation settings of the MFP101. Cancel key 404 is used to discard the settings made via the settings screen in Figure 4(a) without reflecting them in the operation settings of the MFP101.

[0057] Information 405 is a message that notifies the user that the environment type is not set and that they should select an environment type. Icon 404 is a key used to display a manual that explains the environment types in detail. When the system detects that icon 404 has been selected by the user, the settings unit 310 displays a manual on recommended security settings.

[0058] When a usage environment is set, the rule setting unit 310 displays a setting screen, as illustrated in Figure 4(b), based on the selected usage environment. Information 415 is an example of information displayed in place of information 405, and is a message to inform the user of the currently set usage environment. Figure 4(b) shows an example of the screen displayed when the company intranet type is set in the category corresponding to the environment in which the MFP is used.

[0059] Furthermore, when the rule setting unit 310 receives a notification from the environment change detection unit 311 of a change in the category corresponding to the usage environment, it displays the setting screen shown in Figure 4(c) based on the notification result. Information 425 is an example of information that is displayed in place of information 415, and includes information indicating that a change in the category has been detected and information indicating that a change in the category is necessary. The example notification shown in Figure 4 can also be described as a message prompting the user to change the security settings to one that is appropriate for the identified current network type in response to a change in the network environment.

[0060] Furthermore, the rule setting unit 310 may notify the user of changes in categories corresponding to the usage environment using means other than the setting screen shown in Figure 4(c). Figure 5 shows an example of a screen in which the rule setting unit 310 notifies the user of such changes in categories. Figure 5(a) is an example of a notification displayed immediately after the detection of the change in categories, and Figure 5(b) is an example of a notification that is continuously displayed after the detection of the change in categories. The notification shown in Figure 5 notifies the user of changes in the network environment, but it can also be said to be a notification that informs (or warns) the need to change security settings.

[0061] When the rule setting unit 310 detects a change in the category, it displays a notification screen 500 on the operation unit 216 of the MFP 101. The notification screen 500 is a pop-up notification displayed on the operation unit 216. Information 501 is information that notifies the user that a change in the category has been detected. Information 502 is information that prompts the user to change the category in response to the change in the category. The shortcut key 503 is a key for transitioning to the settings screen shown in Figure 4. When the shortcut key 503 is pressed (or touched), the user transitions directly to the settings screen shown in Figure 4. The cancel key 504 is a key used to close the notification screen 500. When the cancel key 504 is pressed, the notification screen 500 is closed and the user transitions to the screen before the notification screen 500 was displayed.

[0062] Furthermore, Figure 5(b) shows an example of notifying the user by displaying information regarding the batch setting function in the status display area on the operation unit 216. Information 511, like information 501, is information that notifies the user that a change in the category has been detected. Information 512, like information 502, is information that prompts the user to change the category in response to the change in the category. In this embodiment, by utilizing the status display area for notification, continuous notification is provided even after the pop-up notification is closed.

[0063] <Detection process for changes in the operating environment> Next, specific methods for detecting changes in the operating environment will be explained using Figures 6-7 and Table 1. Figure 6 is a flowchart showing an example of the process for detecting changes in the operating environment according to this embodiment. Each process shown in the flowchart in Figure 6 is realized by the CPU 211 calling a program for realizing each control module stored in ROM 212 or storage 214 into RAM 213 and executing it. Data transmission and reception processes are realized in cooperation with each communication interface. In cases where it is desired to clarify the subject of the process, the software module executed by the CPU 211 will be described as the subject. The flowchart illustrated in Figure 6 is an example of a process that is executed after the power of the MFP 101 is changed from OFF to ON and the startup process is completed. Note that in Figure 6, due to space limitations, only processes related to estimation and batch setting are excerpted and described.

[0064] In S601, the rule setting unit 310 determines whether the conditions for performing network packet monitoring have been met. Specifically, it determines that the conditions for performing monitoring have been met when the communication monitoring unit 302 has finished starting up and begun operating, and when the storage of network dump data to the communication log storage unit 314 has begun. If the rule setting unit 310 determines that the conditions for performing monitoring have been met, it requests the environment change detection unit 311 to monitor the network environment.

[0065] In S602, the environmental change detection unit 311, having received the request, begins monitoring whether the network packet dump data in the communication log storage unit 314 has been updated. Upon detecting an update in the dump data, the environmental change detection unit 311 executes a detection process in S603-S604 to determine if an environmental change has occurred. In this embodiment, the detection process is assumed to be executed at 10-minute intervals. However, in other embodiments, it may be executed each time a packet is received, or every 24 hours, and the execution timing and interval are not limited to this.

[0066] In S603, the environmental change detection unit 311, which has detected the update of the dump data, compares the updated dump data with the environmental change detection conditions corresponding to each category. The environmental change detection conditions for each category are explained using Table 2. Note that the detection conditions shown in Table 2 are just examples for realizing this embodiment and are not limited to those conditions.

[0067] [Table 2]

[0068] In this embodiment, the detection conditions for environmental changes defined for each category are determined to detect when a change has occurred in the environment in which the MFP is being used. Also, in this embodiment, detection conditions common to all categories are listed together for the sake of space. That is, in S603, the environmental change detection unit 311 compares the dump data with the detection conditions for each category shown in Table 2. The IP address is determined from the source and destination IP addresses stored in the IP header of the network packet. The protocol is determined from the port number stored in the UDP (User Datagram Protocol) header. The communication request is determined from the result of the TCP (Transport Control Protocol) connection request.

[0069] Sending or receiving packets with a global IP address as the destination or source should not occur if the category is Internet-prohibited. Therefore, as shown in Table 2, if such packets are found despite the category being Internet-prohibited, the category may have changed. For this reason, in Internet-prohibited environments, such packets serve as a criterion for determining a change in the environment. Also, the use of older protocols such as NetBIOS is not normally used in environments connected to the internet. Therefore, if NetBIOS discovery packets are detected despite the environment being an internal intranet type or directly connected to the internet, the category may have changed. For this reason, in internal intranet types or directly connected to the internet, such packets serve as a criterion for determining a change in the environment. Furthermore, LLMNR (Link-local Multicast Name Resolution) discovery packets are used in the local segment of IPv6. Therefore, if NetBIOS LLMNR discovery packets are detected despite the environment being directly connected to the internet, the category may have changed. For this reason, in internal intranet types, such packets serve as a criterion for determining a change in the environment.

[0070] In S604, the environmental change detection unit 311 determines whether the detection conditions are met based on the comparison results. That is, it determines whether the corresponding packet has been found according to each category shown in Table 2.

[0071] In S605, the environmental change detection unit 311, which determines that the detection conditions are met, notifies the rule setting unit 310 that an environmental change has been detected.

[0072] Through the process described above, the environment change detection unit 311 can detect changes in the category corresponding to the environment in which the MFP 101 is being used, from the network packet dump data acquired via the communication monitoring unit 302. In other words, it can detect packets that are not used in a particular environment setting, thereby determining whether the current security settings are appropriate for the network environment, and thereby detecting the possibility that the environment settings have been changed. If an inappropriate setting is found, it can be inferred that the network environment has been changed.

[0073] Next, the utilization of the detection results from the environmental change detection unit 311 will be explained using Figure 7. Each process shown in the flowchart of Figure 7 is executed when the rule setting unit 310 receives a detection result from the environmental change detection unit 311. Note that, due to space limitations, Figure 7 only shows the processes related to the batch setting function.

[0074] In S701, the rule setting unit 310 displays the notification screen shown in Figure 5 on the operation unit 216.

[0075] In S702, the rule setting unit 310 determines whether it has received the result of detecting an environmental change.

[0076] In S703, when the rule setting unit 301 receives a result of detecting an environmental change, it displays a setting screen on the operation unit 216 that includes a notification of the environmental change, corresponding to Figure 4(c).

[0077] In step S703, the screen shown in Figure 5(a) may be displayed. Furthermore, in step S703, information indicating that the detection result of an environmental change has been received may be stored in storage 214, etc., and when the MFP displays the waiting screen for selecting a function such as copy, it may refer to this information and display the screen shown in Figure 5(b) if there has been an environmental change. In this case, it is sufficient to simply add messages 511 and 512 to the normal waiting screen.

[0078] Through the process described above, the information processing device can detect changes in the category corresponding to the environment in which it is being used, based on the network packet dump data, and the detection results can be utilized in the MFP101. Specifically, by notifying the user of the detection results, it becomes possible to assist the user in changing the category. When the user selects the type of network environment, i.e., the category, on the user interface screen shown in Figure 4, the current security settings are changed to security settings corresponding to the selected category.

[0079] <Second Embodiment> In the first embodiment, a means for detecting a change in the category corresponding to the environment based on network packet dump data was illustrated. In the second embodiment, filtering result logs may be used instead of network packet dump data. For example, with iptables, the detection conditions shown in Table 2 can be determined by acquiring all logs for TCP, UDP, and ICMP. Specifically, to determine whether an LLMNR packet has been received, it is sufficient to check the log to see if there is a received packet in the log that is UDP and has a destination port of 5355. Similarly, for other detection conditions, a comprehensive determination is made from information such as IP address, protocol, and port number in the log to determine if it is the packet in question. Note that even when filtering result logs are used instead of network packet dump data, the detection process can be carried out using the same procedure as in the first embodiment. Therefore, the explanation using a follow chart is omitted due to space limitations.

[0080] Through the processes described above, it becomes possible to detect changes in categories corresponding to the environment in which the information processing device is being used, based on the filtering result log.

[0081] <Third Embodiment> In the first and second embodiments, examples were given of means for notifying only that the MFP's operating environment has changed. In the third embodiment, a means is described in which, triggered by the detection of a possible change in the MFP's operating environment, an estimation process of the MFP's operating environment is performed, and if the estimation result differs from the category in which it is installed, it is determined that an environmental change has been detected and the user is notified.

[0082] Table 3 shows the detection conditions in this embodiment. In Table 3, detection conditions common to all categories are added to the detection conditions shown in Table 2. In this embodiment, the usage environment estimation process is performed when the detection conditions common to all types are detected. In the example in Table 3, the detection conditions common to all types are a communication request from a network address with no communication history, and the success of a communication request to a network address with no communication history. Note that the timing at which the MFP performs the usage environment estimation process is not limited to the example described in this embodiment, but may also be performed at other times. Specifically, when the MFP detects an LLMNR discovery request packet, the estimation process may be performed to determine whether it is appropriate for the MFP's usage environment to be set to the Internet-prohibited type or the company intranet type category.

[0083] [Table 3]

[0084] Next, a specific method for estimating the usage environment will be explained using Figure 8 and Tables 4-5. Figure 8 is a flowchart showing an example of the usage environment estimation process according to this embodiment. Each process shown in the flowchart in Figure 8 is realized by the CPU 211 calling a program for realizing each control module stored in ROM 212 or storage 214 from RAM 213 and executing it. Data transmission and reception processes, etc., are realized in cooperation with each communication interface. Furthermore, in cases where it is desired to clarify the subject of the process, the software module executed by the CPU 211 will be described as the subject.

[0085] The flowchart shown in Figure 8 illustrates an example of the processes executed after the MFP101's power is changed from OFF to ON and the startup process is completed. Note that, due to space limitations, Figure 8 only includes excerpts of processes related to estimation and batch settings.

[0086] In S801, the environmental change detection unit 311 determines whether the conditions for performing estimation have been met. Specifically, it determines that the conditions for performing estimation have been met when it detects the detection conditions common to all types as exemplified in Table 3. Alternatively, the detection of all the detection conditions exemplified in Table 3 may be used as the conditions for performing estimation. The setting storage unit 312 stores an operation setting indicating whether or not to perform automatic estimation. This operation setting for whether or not to perform automatic estimation is set by a user with administrator privileges via a management screen (not shown). If automatic estimation is set, the setting unit 310 also determines that the conditions for performing estimation have been met when the MFP 101 is started up or when a predetermined time (e.g., 8:00 AM) is reached. In this embodiment, the condition is set to reach a predetermined time as an example, but it is not limited to this. It is also possible to determine that the conditions for performing estimation have been met when a predetermined time interval (e.g., 24 hours or 48 hours) has elapsed since the previous estimation. When the setting unit 310 determines that the conditions for performing estimation have been met, it requests the estimation unit 315 to estimate the network environment.

[0087] In S802, the estimation unit 315, having received the request, obtains network-related operational settings from the setting storage unit 312. Hereafter, the operational settings obtained in S802 will also be simply referred to as network settings. Subsequently, in S803, the estimation unit 315 obtains various information from an external DHCP server via the DHCP client 304.

[0088] Furthermore, in S804, the estimation unit 315 obtains various information from an external DNS server via the DNS client 303. The network-related information obtained in the processing of S802 to S804 is explained with reference to Table 4.

[0089] [Table 4]

[0090] Information 1-6 are network-related settings obtained by referring to the current operating settings of the MFP101 or from a DHCP server on the network. In the example in Table 4, these are the gateway address and the addresses of various servers that access the network. Information 7 is a setting for cloud services that access the MFP101 or that the MFP101 accesses, obtained by referring to the current operating settings of the MFP101. Specifically, Information 7 is a setting value indicating whether the MFP101 is configured to use a remote management service that manages the MFP101's device information on a cloud server, or a setting value indicating whether the cloud print service is configured to use. Information 8 is the proxy server address, a network-related setting obtained by referring to the operating settings or from a DHCP server or DNS server on the network using the aforementioned WPAD technology.

[0091] The estimation unit 315 acquires network-related information shown in Table 4 as information 1 to 8. The estimation unit 311 performs estimations S805 and S806 based on the acquired information. Next, the estimation algorithm will be explained using Table 5.

[0092] [Table 5]

[0093] In this embodiment, two different types of determinations are made to estimate the category corresponding to the environment in which the MFP101 is used. The first determination is whether the environment is connected to the internet. The second determination is whether the environment has a firewall.

[0094] In S805, the estimation unit 315 performs a first determination to determine whether the environment is connected to the Internet. Using the acquired network-related information, if it determines that any of conditions 1 to 4 are met, it determines that the environment is connected to the Internet. On the other hand, if none of conditions 1 to 4 are met, it determines that the environment is not connected to the Internet. If it is determined that the environment is connected to the Internet, the process proceeds to S806; if it is determined that the environment is not connected to the Internet, the process proceeds to S809.

[0095] In S809, the estimation unit 315 notifies the environmental change detection unit 311 of the estimation result in which the recommended type is set to the internet-prohibited type.

[0096] Meanwhile, in S806, the estimation unit 315 performs a second determination to determine whether a firewall exists in the environment. Specifically, the estimation unit 315 uses the acquired network-related information to determine whether condition 5 is met. That is, if a proxy server address can be obtained, it is determined that a firewall exists in the environment; if a proxy server address cannot be obtained from any data source, it is determined that a firewall does not exist in the environment. If it is determined that a firewall does not exist, the process proceeds to S807; if it is determined that a firewall exists, the process proceeds to S808.

[0097] In S807, the estimation unit 315 notifies the environmental change detection unit 311 of the estimation result in which the recommended type is set to the company intranet type. Also, in S808, the estimation unit 315 notifies the environmental change detection unit 311 of the estimation result in which the recommended type is set to the internet direct connection type.

[0098] In steps S807-S809, the environmental change detection unit 311 receives the estimation result from the estimation unit 315 and compares it with the currently set usage environment category in the MFP 101. If the comparison results are different, the process proceeds to S811. On the other hand, if the comparison results are the same, there is no environmental change, and the series of processes is terminated.

[0099] In S811, the environmental change detection unit 311 notifies the rule setting unit 310 of the detection and estimation results of the environmental change.

[0100] Through the process described above, the estimation unit 315 can estimate the category corresponding to the environment in which the MFP 101 is being used, based on network information obtained from external devices on the network and its own operating setting information, and utilize the estimation result.

[0101] Figure 9 illustrates the settings screen and notification screen for providing user notifications utilizing environmental estimation results. Figure 9(a) is an example of the settings screen corresponding to Figure 4(c). Figure 9(b) is an example of the notification screen corresponding to Figure 5(a). Note that this is just one example of the notification means in this embodiment, and the means of notifying the user are not limited to this.

[0102] The settings screen in Figure 9(a) presents the user with recommended specification environment categories based on estimation results, in addition to changes in the specification environment. Information 901 is information that informs the user of the appropriate category to change to in response to changes in the usage environment, based on the estimation results. By selecting any category and touching the apply key, the currently set category will be changed to the selected category. Note that the screen in Figure 9(a) may be displayed with the estimated category already selected.

[0103] The notification screen in Figure 9(b) notifies the user of changes in the usage environment, as well as the recommended usage environment category based on the recommendation results. The notification screen also provides a means to perform setting changes based on the notification results. Information 910 is information that, based on the estimation results, tells the user the appropriate category to change to in response to the change in the usage environment. The setting application button 911 is a button for setting the appropriate usage environment setting for the MFP101, corresponding to the changed usage environment based on the estimation results. By pressing the setting application button 911, the user can change the usage environment in a single step without opening the settings screen. Also, touching the "Open Recommended Security Settings" button displays the screen in Figure 9(a). The process described above enables the detection of changes in the category corresponding to the environment being used, based on estimation, and allows for user notifications utilizing the estimation process. This allows users to easily set the category of the changed environment without having prior knowledge or having to investigate it.

[0104] <Other Embodiments> In the first and second embodiments, means for detecting changes in the category corresponding to the environment were illustrated. On the other hand, in embodiments that only provide notifications, if there is a possibility that a change to a category requiring stronger security measures is necessary, the information processing device will continue to operate while exposed to security risks. Therefore, it is also possible to mitigate security risks by applying the setting of the category with the strongest security measures. Specifically, in the first and second embodiments, the detection result is notified to the user, and the category is changed to the direct internet connection type.

[0105] The present invention can also be realized by supplying a program that implements one or more of the functions of the above-described embodiments to a system or device via a network or storage medium, and by having one or more processors in the computer of that system or device read and execute the program. It can also be realized by a circuit (e.g., an ASIC) that implements one or more functions.

[0106] The invention is not limited to the embodiments described above, and various modifications and variations are possible without departing from the spirit and scope of the invention. Accordingly, claims are attached to disclose the scope of the invention. [Explanation of Symbols]

[0107] 301 Communication control unit, 302 Communication monitoring unit, 310 Rule setting unit, 311 Environmental change detection unit, 312 Setting storage unit, 314 Communication log storage unit, 315 Estimation unit, 425 Information, 502 Information, 512 Information, 911 Setting reflection button

Claims

1. An image processing device, A monitoring means for monitoring packets received by the image processing device; a providing means for providing a notification indicating the presence of an appropriate security setting of the image processing device corresponding to the predetermined condition when the result of the monitoring satisfies a predetermined condition; and a setting means for executing security settings corresponding to one usage environment selected by a user from among a plurality of usage environments.

13. An image processing device comprising:

2. The plurality of usage environments includes a first usage environment and a second usage environment, providing said notification when said first usage environment is selected and said monitoring results satisfy a predetermined condition corresponding to said second usage environment; 2. The image processing device according to claim 1,

3. The notification is provided when one packet included in the packets being monitored satisfies the predetermined condition.

3. The image processing device according to claim 1, wherein the first and second inputs are input to the image processing device.

4. 4. The image processing device according to claim 1, The identification unit further includes an identification unit that identifies a current usage environment of the image processing device based on the monitoring result that satisfies the predetermined condition, The suitable security settings are security settings that correspond to the identified current usage environment.

13. An image processing device comprising:

5. 5. The image processing device according to claim 1, Packets received by the image processing device are filtered according to the implemented security settings.

13. An image processing device comprising:

6. 6. The image processing device according to claim 1, The multiple usage environments include an Internet-prohibited environment, an Internet-directly connected environment, and an intranet environment.

13. An image processing device comprising:

7. 7. The image processing device according to claim 1, The providing means further provides information indicating the current network type identified by the identifying means.

13. An image processing device comprising:

8. 8. The image processing device according to claim 1, The providing means provides the notification by displaying on an operation unit of the image processing device.

13. An image processing device comprising:

9. A program for causing a computer to function as the image processing device according to any one of claims 1 to 8.

10. A method for controlling an image processing device having a monitoring means, a providing means, and a setting means, comprising: the monitoring means monitors packets received by the image processing device, when a result of the monitoring satisfies a predetermined condition, the providing means provides a notification suggesting the presence of an appropriate security setting of the image processing device corresponding to the predetermined condition; The setting means executes security settings corresponding to one of a plurality of usage environments selected by a user.

23. A method for controlling an image processing apparatus comprising the steps of:

Images