Image processing device, control method of image processing device and program

Abstract

To suppress increase of processing loads due to the number of setting items, while performing control so that restriction by a security policy is kept unchanged in a function of initializing a set value.SOLUTION: An image processing device 200 has an initializing function of initializing a plurality of settings for the image processing device 200 collectively. When initialization of a network setting is selected, the initializing function initializes the network setting (S901-S902), and further when restriction is put on a set value by a security policy, initializes the setting in accordance with the restriction (S903-S907).SELECTED DRAWING: Figure 12

Description

[Technical field]

[0001] The present invention relates to an image processing apparatus, a control method for an image processing apparatus, and a program. [Background technology]

[0002] It is desirable that personal computers (PCs) and server devices (file servers, authentication servers, etc.) connected to an office network be operated in accordance with a security policy determined for each office. A security policy is a basic guideline regarding information security for the entire company, and is a compilation of policies for preventing the use of information, external intrusions, and information leaks.

[0003] In addition to PCs and server devices, devices connected to an office network include image processing devices such as multifunction devices and printers. In recent years, image processing devices do not simply print or send images, but also provide users with a WebUI that allows them to operate the image processing device from a web browser on a PC, and provide various cloud services in cooperation with cloud servers. In other words, image processing devices are beginning to play the same role as other PCs and server devices on the network. Therefore, in order to maintain a safe and secure office environment, image processing devices are also required to comply with security policies, just like PCs and server devices.

[0004] Complying with the security policy here means, for example, placing restrictions on the security operations of the image processing device to prevent unauthorized use and information leaks, such as requiring user authentication when operating the image processing device or requiring encryption of communication paths.

[0005] In such an image processing device, control is performed to maintain a state in accordance with the security policy. Patent Document 1 proposes a technique in which, when a certain security policy is set, a specific setting item related to the security policy becomes a fixed value, and cannot be changed by users other than the security administrator.

[0006] Furthermore, recent image processing devices have various functions and have many setting items to operate these various functions appropriately. Some devices have a function (called a setting value initialization function or setting reset function) to reset all these setting items to their initial values ​​(factory default values). At this time, in order to maintain a state in accordance with the security policy, it is necessary to execute the setting value initialization function for specific setting values ​​restricted by the security policy so as not to deviate from the security policy. Patent Document 2 proposes a technology that checks whether each setting item related to the image processing device is restricted by the security policy and resets only the setting items that are not restricted to their initial values. [Prior art documents] [Patent documents]

[0007] [Patent Document 1] JP 2017-163557 A [Patent Document 2] JP 2022-134175 A Summary of the Invention [Problem to be solved by the invention]

[0008] In the conventional method of checking whether each setting item is restricted by a security policy and then deciding whether to initialize the setting item or not, the processing load for checking increases in proportion to the number of setting items.

[0009] The present invention has been made to solve the above problems, and aims to provide a mechanism for suppressing an increase in processing load due to the number of setting items while controlling the setting value initialization function so that restrictions imposed by a security policy are maintained. [Means for solving the problem]

[0010] The present invention is an image processing device having an initialization means for performing a process of initializing multiple settings related to the image processing device all at once, and when initialization of network settings is selected, the initialization means initializes the network settings, and further, for settings whose setting values ​​are restricted by a security policy, sets the settings in accordance with the restrictions. Effect of the Invention

[0011] According to the present invention, when a setting value initialization function is executed in an image processing device to which a security policy is applied, it is possible to prevent settings that violate the security policy while suppressing an increase in processing load due to the number of setting items. [Brief description of the drawings]

[0012] [Figure 1] 1 is a diagram showing the configuration of a system including an image processing apparatus according to an embodiment of the present invention; [Diagram 2] FIG. 1 is a diagram showing the appearance of an image processing apparatus according to an embodiment of the present invention. [Diagram 3] 1 is a block diagram showing a configuration of an image processing apparatus according to an embodiment of the present invention. [Figure 4] FIG. 2 is a diagram illustrating a configuration of an operation and display unit of the image processing apparatus according to the embodiment. [Diagram 5] FIG. 2 is a block diagram conceptually showing the software configuration of the image processing apparatus of the present embodiment. [Figure 6] 2 is a diagram showing setting item management information of the image processing apparatus according to the embodiment; [Figure 7] 3 is a diagram showing a schematic diagram of a dependency relationship between a security policy setting and other settings in the image processing apparatus according to the embodiment; [Figure 8A] 5A and 5B are diagrams showing screens displayed by a Web browser of a terminal device when setting a security policy for the image processing apparatus of this embodiment. [Figure 8B] 5A and 5B are diagrams showing screens displayed by a Web browser of a terminal device when setting a security policy for the image processing apparatus of this embodiment. [Figure 8C] 5A and 5B are diagrams showing screens displayed by a Web browser of a terminal device when setting a security policy for the image processing apparatus of this embodiment. [Figure 8D] 5A and 5B are diagrams showing screens displayed by a Web browser of a terminal device when setting a security policy for the image processing apparatus of this embodiment. [Figure 9] 5 is a flowchart showing a security policy setting process of the image processing apparatus according to the present embodiment. [Figure 10] 6 is a screen flow showing a setting screen for setting items whose setting changes are restricted by the security policy of the image processing apparatus according to this embodiment. [Figure 11] 6 is a screen flow of a setting screen when executing a setting reset function of the image processing device according to the first embodiment. [Figure 12] 6 is a flowchart showing a network setting reset process of the image processing device according to the first embodiment. [Figure 13] 6 is a flowchart showing a full setting reset process of the image processing device according to the first embodiment. [Figure 14] 13 is a screen flow of a setting screen when executing a setting reset function of the image processing device according to the second embodiment. [Figure 15] 10 is a flowchart showing a setting reset process of the image processing device according to the second embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] Preferred embodiments of the present invention will be described below with reference to the drawings. However, it should be understood that the scope of the present invention includes any modifications and improvements to the embodiments described below that are made based on the ordinary knowledge of those skilled in the art without departing from the spirit of the present invention.

[0014] [First embodiment] First, the network configuration in this embodiment will be described with reference to Fig. 1. Note that the network configuration described below is merely one example of an embodiment, and is applicable to various configurations that enable wired or wireless communication between an image processing device and a terminal device, and is not limited to the configuration shown in this figure. Also, in documents and figures, the network may be written as NW for abbreviation.

[0015] 1 is a diagram showing an example of the configuration of a system including an image processing device according to an embodiment of the present invention. The system of this embodiment includes a local area network (LAN) 101 constituted by an access point 100, and an image processing device 200 and a terminal device 300 connected to the network. Here, the connection form of the LAN 101 may be wired communication or wireless communication, and for example, it is assumed that the connection is made by Wi-Fi (Wireless Fidelity) (registered trademark), which is a communication standard conforming to the IEEE802.11 series. In the LAN 101, different IP addresses are assigned to the image processing device 200 and the terminal device 300 by the access point 100. This enables devices in the LAN 101 to specify IP addresses as destinations and communicate with each other.

[0016] The image processing device 200 is, for example, an inkjet printer, and provides the user with functions such as printing, scanning, and faxing (FAX). Furthermore, the image processing device 200 has a Web server function, and is capable of receiving requests and transmitting responses using HTTP (Hypertext Transfer Protocol) communication. Note that the functions installed in the image processing device 200 do not need to be limited to these, and some of the presented functions may not be installed, or functions other than those presented may be installed. Furthermore, the image processing device 200 is not limited to an inkjet printer, and may be other devices such as a laser beam printer or an office multifunction device.

[0017] The terminal device 300 is, for example, a smartphone, and provides a user with a web browser function within the device. The web browser function transmits requests and receives responses using HTTP communication, and displays a screen associated with these communications. Note that the functions installed in the terminal device 300 do not need to be limited to these, and functions other than those presented may be installed. Also, the terminal device 300 is not limited to a smartphone, and may be other devices such as a PC (personal computer) or a tablet terminal.

[0018] 2 is a diagram showing an example of the external appearance of the image processing device 200. In this embodiment, an inkjet printer (printing device) is shown as an example of the image processing device, which is a multifunction printer (MFP; Multifunction Peripheral) that combines print, scan, fax (FAX) and other functions.

[0019] The operation display unit 201 includes a display and buttons used for operating the image processing device 200. Details will be described with reference to FIG. The print paper insertion slot 202 is an insertion slot for setting paper of various sizes. The paper set here is transported one sheet at a time to the printing section, where the desired printing is performed, and the paper is discharged from the print paper discharge slot 203.

[0020] The manuscript table 204 is a transparent glass table on which a manuscript is placed to be read by the scanner. The manuscript table pressure plate 205 is a cover that presses the manuscript against the manuscript table to prevent it from floating when reading with the scanner, and prevents external light from entering the scanning section.

[0021] The USB communication unit 206 includes a circuit and a USB connector for the image processing device 200 to communicate with an external terminal device 300 or the like via a USB connection. The wireless LAN communication unit 207 has embedded therein circuits such as an antenna for performing wireless communication, such as the above-mentioned wireless connection or a direct connection in which the image processing device 200 itself serves as an access point to configure a wireless LAN.

[0022] The FAX communication unit 208 includes a circuit for transmitting and receiving FAX data, and a connector for a telephone line. The power supply unit 209 includes a power supply circuit and a power jack for supplying power to the image processing device 200 .

[0023] FIG. 3 is a block diagram showing an example of the configuration of the image processing device 200. As shown in FIG. The image processing device 200 includes a main board 210 that controls the entire device, an operation display unit 201 , a USB communication unit 206 , a wireless LAN communication unit 207 , a FAX communication unit 208 , and a power supply unit 209 .

[0024] A microprocessor-type CPU 211 disposed on the main board 210 operates according to a control program stored in a ROM 213 connected via an internal bus 312 and data stored in a RAM 214. Various settings of the image processing device 200 are held in a non-volatile memory, NVRAM 215, and are read and written according to the control program.

[0025] The CPU 211 controls the scan unit 217 to read an original document and store the document in an image memory that is a part of the RAM 214. The CPU 211 also controls the print unit 216 to print an image stored in the image memory that is a part of the RAM 214 onto a recording medium.

[0026] The CPU 211 controls the USB communication unit 206 via a USB communication control unit 218 to perform USB communication with an external device via a USB connection. The CPU 211 also controls the wireless LAN communication unit 207 via a wireless LAN communication control unit 219 to perform wireless LAN communication with an external device via an infrastructure connection or a direct connection. The CPU 211 also controls the FAX communication unit 208 via a FAX communication control unit 220 to perform FAX communication with an external device using a telephone line.

[0027] The CPU 211 controls the operation display control unit 221 to receive operation information from the operation display unit 201. The CPU 211 also controls the operation display control unit 221 to enable the operation display unit 201 to display the status of the image processing device 200 and a function selection menu.

[0028] Fig. 4 is a diagram showing a schematic example of the configuration of the operation display unit 201 of the image processing device 200. The operation display unit 201 is composed of a plurality of buttons, a display, LEDs, etc. In the example of Fig. 4, a touch panel liquid crystal 226 is used as the display of the operation display unit 201.

[0029] When power is being supplied from the power supply unit 209, the user presses the power button 222 to start up the image processing device 200. When the image processing device 200 starts up, a home screen, which is the top layer of the menu that can be operated by the user, is displayed on the touch panel liquid crystal 226.

[0030] The home screen includes a copy area 231 for receiving an instruction to execute a copy function, a scan area 232 for receiving an instruction to execute a scan function, and a fax area 233 for receiving an instruction to execute a fax function. It also includes a network area 234 that transitions to a menu for changing network settings and checking the status of the infrastructure connection, direct connection, etc. of the image processing device 200. It also includes a setting area 235 that transitions to a menu for changing various other settings and executing a setting reset function.

[0031] When a character string needs to be input by the user for password authentication or the like, a software keyboard can be displayed on the touch panel liquid crystal 226 to accept the input.

[0032] In addition, when a screen in a menu hierarchy other than the home screen is displayed, the user can return to the home screen by pressing the home button 223. In addition, when a screen in a menu hierarchy other than the home screen is displayed, the user can return to the screen in the next higher hierarchy by pressing the back button 224.

[0033] Furthermore, when various functions such as a copy function or a scan function are being executed and it is time to stop the process, the process can be stopped by pressing the stop button 225.

[0034] 5 is a block diagram conceptually showing a software configuration for realizing the setting change and setting reset functions among the software operating in the image processing device 200. The process executed for the setting reset function is called a setting reset process, or simply a reset process. The software elements and configuration shown in FIG. 5 are merely an example, and the elements and configuration are not limited to those shown in this figure. The functions of the software group shown in FIG. 5 are realized by the CPU 211 operating in accordance with a control program stored in the ROM 213 and a part of the data stored in the RAM 214 associated with the control program.

[0035] The software group shown in FIG. 5 includes a communication program section 240 that mainly controls communications, an application program section 250 that mainly controls application functions, and a device control program section 260 that mainly controls the lower layers in the image processing device 200.

[0036] The communication program unit 240 includes a network communication control module 241 , a security module 242 , a USB communication control module 243 , a Web server module 244 , and a static content database 245 .

[0037] The network communication control module 241 is a module that controls the wireless LAN communication control unit 219 and is responsible for up to the transport layer of the communication protocol stack, and realizes TCP / IP communication of the image processing device 200. The security module 242 is a module that handles encryption and decryption of communications, and the associated processes such as authentication and hashing, and realizes TLS / SSL communication of the image processing device 200. The USB communication control module 243 is a module that controls the USB communication control unit 218 and is responsible for operations for acting as a USB device, and realizes USB communication of the image processing device 200.

[0038] The Web server module 244 is a module that performs operations for the image processing device 200 to act as a Web server, and realizes HTTP communication with an external terminal device 300 on which a Web browser runs. Specifically, the Web server module 244 analyzes an HTTP request received from the external terminal device 300, operates the WebUI control module 251 and the static content database 245 according to the analysis result, and forms and transmits the generated data as an HTTP response. The Web server module 244 receives requests and transmits responses using TCP / IP communication, TLS / SSL communication, or USB communication. The static content database 245 is a module that operates as a file system, and reads out JPEG data, HTML data, and the like stored in the ROM 213 or the RAM 214 .

[0039] The application program section 250 includes a WebUI control module 251, a device UI control module 252, and various application modules exemplified by 253-256.

[0040] The WebUI control module 251 generates data for displaying the WebUI of the image processing device 200 on the Web browser of the external terminal device 300 in response to a request from the Web server module 244. The WebUI control module 251 can display the operation state and setting state of the image processing device 200 on the WebUI by acquiring the operation state and setting state of the image processing device 200 from each application module and responding with the formed data. The WebUI displayed on the Web browser of the terminal device 300 is also configured to be able to instruct the image processing device 200 to change settings or perform password authentication, etc. When a user operates the Web browser and instructs the image processing device 200 to change settings or perform password authentication, etc. from the WebUI, the image processing device 200 receives an HTTP request in which the instruction contents are stored. The WebUI control module accepts the instruction via the Web server module 244 and causes the corresponding application module to perform processing such as setting change and password authentication according to the instruction contents. When the processing is completed, the processing result such as success or failure is stored in an HTTP response and transmitted.

[0041] The device UI control module 252 realizes the UI of the image processing device 200 main body by controlling the operation display control unit 221. The device UI control module 252 stores menu hierarchy information and displays an operation menu or the like corresponding to the current menu hierarchy on the touch panel liquid crystal 226. The device UI control module 252 can also acquire and shape the operating state and setting state of the image processing device 200 from each application module and display them on the touch panel liquid crystal 226. Furthermore, the device UI control module 252 accepts operations such as setting change and password authentication from the operation display unit 201 and causes the corresponding application module to carry out processing according to the operation. When the processing is completed, the device UI control module 252 displays the processing result such as success or failure on the touch panel liquid crystal 226.

[0042] The security policy setting application 253 receives instructions from the Web UI control module 251 and the device UI control module 252, and acquires the security policy setting status and changes the security policy setting. The NW setting application 254 receives instructions from the WebUI control module 251 and the device UI control module 252, and acquires the NW setting status and changes the NW settings. The address book setting application 255 receives instructions from the Web UI control module 251 and the device UI control module 252, and acquires address book information including FAX destination information and adds / deletes new destination information to the address book information. The setting reset application 256 receives instructions from the WebUI control module 251 and the device UI control module 252 and performs various settings reset processing for the image processing device 200 .

[0043] The device control program section 260 includes a system control module 261 and a setting value storage module 262 . The system control module 261 is responsible for controlling the entire software system, such as starting and stopping the image processing device 200. In this embodiment, the system control module 261 accepts a restart request from the security policy setting application 253 and executes the restart process of the image processing device 200. The setting value storage module 262 operates to supervise storage of setting values ​​of the image processing device 200. The setting value storage module 262 receives an instruction to store setting values ​​from other modules such as each application module, and writes the setting values ​​to the NVRAM 215. The setting value storage module 262 also receives an instruction to refer to setting values ​​from other modules such as each application module, and reads setting values ​​from the NVRAM 215.

[0044] FIG. 6 is a diagram showing an example of setting item management information of the image processing device 200. As shown in FIG. The example shown in FIG. 6 is a part of setting item management information 400, which is a schematic representation of the setting values ​​of each setting item stored in the NVRAM 215 via the setting value storage module 262 and their management information.

[0045] As shown in column 401, all setting items can be uniquely identified by an item ID, and setting values ​​can be written or read by specifying an item ID. Column 402 shows the current setting value for each setting item. Column 403 shows the factory default setting value of each setting item. When each setting reset function described later is executed, each setting item targeted by the setting reset function is reset to the factory default value shown in column 403.

[0046] Column 404 is a reset flag for each initialization request that indicates whether or not the item is subject to the setting reset function when the setting reset function is executed. If it is "TRUE", it indicates that the item is subject to the setting reset function, and if it is "FALSE", it indicates that the item is not subject to the setting reset function. Examples of the setting reset functions are a network setting reset, an address book reset, a full setting reset, a security policy reset, and a factory reset. Hereinafter, returning a setting value to its initial value will be referred to as "resetting."

[0047] Resetting the network settings will reset the settings for each communication protocol, as well as whether infrastructure connections or direct connections are enabled or disabled. When the address book is reset, the address book information that stores destination information used in the FAX function and the like is reset. In the all setting reset, all setting items of the image processing device 200 that can be changed by the user are reset except for the security policy setting.

[0048] Security policy reset resets the settings related to the security administrator password and the security policy settings. Here, the security administrator password is a password that protects the security policy settings so that they cannot be changed by a third party. When a user sets a security administrator password value, the security administrator password setting is turned ON, and in that case, authentication using this password is required for security policy setting operations, security policy reset operations, etc.

[0049] The factory reset forcibly resets all resettable setting items among the setting items of the image processing device 200. Note that the factory reset is a special process for production, repair, service, etc. of the image processing device 200, and can be executed only by using a special key entry or a special external tool.

[0050] 6, the setting item management information 400 is shown in a table format, but the format in which this information is stored in the image processing device 200 is not limited to this. For example, the information may be stored in a specific database format, or in a format such as a JSON file. Furthermore, only the setting values ​​shown in column 402 may be stored in the RAM 214 or NVRAM 215, and other information may be expressed as a program stored in the ROM 213.

[0051] 7 is a diagram showing a schematic diagram of the dependency relationship between the security policy setting and other settings, which are managed and controlled by the security policy setting application 253 of the image processing device 200. The dependency relationship here means that the content of the setting value of the dependency source affects the content of the setting value of the dependency destination.

[0052] Column 411 indicates the setting item of the security policy setting on which dependency is based and the condition under which the dependency occurs. Column 412 indicates the configuration item on which a dependency is established and how the configuration value is forced when a dependency occurs.

[0053] For example, the security policy setting "Prohibit use of direct connection" indicated by item ID "10001" affects the dependent setting value when the setting value of the relevant setting item is "ON." In this case, the setting value of "Direct connection setting" indicated by item ID "00001" is forced to "OFF," and the setting value of "Automatic startup of easy connection" indicated by item ID "00002" is forced to "OFF."

[0054] Additionally, the security policy setting "Minimum password length" indicated by item ID "10007" affects the dependent setting value when the setting value of the relevant setting item is an integer value between 1 and 32. In that case, the setting value of "Rule: Minimum password length" indicated by item ID "01005" is forced to the same value as the value set in the security policy setting "Minimum password length".

[0055] Additionally, the security policy setting indicated by item ID "10012" "Allow sending only to addresses registered in the address book" affects the dependent setting value when the setting value of the relevant setting item is "ON." In that case, the setting value of "Allow adding new addresses" indicated by item ID "02001" is forced to "OFF," and furthermore, changes to the setting values ​​of the address book information listed in the lines from item ID "02002" onwards are prohibited.

[0056] 7, the dependency relationship 410 between the security policy setting and other settings is shown in a table format, but the format in which this information is stored in the image processing device 200 is not limited to this. For example, the information may be stored in a specific database format, may be stored in a format such as a JSON file, or may be expressed as a program stored in the ROM 213.

[0057] Next, a process for setting a security policy from the WebUI will be described with reference to FIGS. 8A to 8D and 9. FIG. 8A to 8D are diagrams showing examples of screens displayed by the web browser of the terminal device 300 when a security policy is set in this embodiment. Fig. 9 is a flowchart showing an example of a security policy setting process of the image processing device 200 in this embodiment. Each step shown in Fig. 9 is processed by the CPU 211 executing a program stored in the ROM 213. Note that the process shown in the flowchart in Fig. 9 starts when the Web server module 244 of the image processing device 200 receives an HTTP request from the Web browser of the terminal device 300.

[0058] In S601, the Web server module 244 checks whether the received HTTP request is a security policy setting screen request. Whether the request is a security policy setting screen display request is determined based on the requested URL and request parameters.

[0059] If the request is not a security policy setting screen request (No in S601), the Web server module 244 ends the process of this flowchart. Note that an actual image processing device can accept requests other than a security policy setting screen request, so it continues to check whether it is another acceptable request and processes it, but this is omitted because it is outside the scope of this description.

[0060] On the other hand, if it is determined that the request is for a security policy setting screen (Yes in S601), the Web server module 244 requests the WebUI control module 251 to generate a security policy setting screen, and advances the process to S602.

[0061] In S602, the WebUI control module 251 determines whether or not a security administrator password has been set. Specifically, the WebUI control module 251 acquires the setting value for the security administrator password setting from the NVRAM 215 via the security policy setting application 253 and the setting value storage module 262. Then, if the acquired setting value is "ON", it is determined that the security administrator password has been set.

[0062] If the security administrator password has not been set (No in S602), the WebUI control module 251 advances the process to S605. On the other hand, if the security administrator password has been set (Yes in S602), the WebUI control module 251 advances the process to S603.

[0063] In S603, the WebUI control module 251 generates a security administrator password authentication screen, and responds with the security administrator password authentication screen as shown in FIG. 8A to the terminal device 300 via the Web server module 244.

[0064] FIG. 8A shows an example of a screen 510 that is displayed by the Web browser of the terminal device 300 after receiving a security administrator password authentication screen in response from the image processing device 200. Reference numeral 511 denotes an input field for a security administrator password. An OK button 512 is a button for performing authentication using the security administrator password. When the user inputs the security administrator password in the input field 511 and clicks the OK button 512, information on the input security administrator password is transmitted to the image processing device 200.

[0065] When the WebUI control module receives the security administrator password information via the Web server module 244, it causes an application module (not shown) that supports password authentication to perform password authentication processing. The application module determines whether the received security administrator password authentication has been successful. Specifically, the image processing device 200 receives the security administrator password information transmitted from the terminal device 300, compares it with the "security administrator password value" stored in the NVRAM 215, and determines whether they match. If they do not match, it determines that the security administrator password authentication has failed. The application module responds to the WebUI control module 251 with the success or failure of the security administrator password authentication.

[0066] Returning now to the explanation of the flowchart in FIG. In S604, the WebUI control module 251 determines whether the security administrator password authentication has been successful. If it is determined that the security administrator password authentication has failed (No in S604), the WebUI control module 251 returns the process to S603 and responds again with a security administrator password authentication screen to the Web browser of the terminal device 300, prompting the user to re-enter the password.

[0067] On the other hand, if it is determined that the authentication of the security administrator password has failed (Yes in S604), the WebUI control module 251 advances the process to S605. In S605, the WebUI control module 251 generates a security policy setting screen as shown in FIG. 8B, and responds with the security policy setting screen to the terminal device 300 via the Web server module 244.

[0068] FIG. 8B shows an example of a screen 520 that is displayed by the Web browser of the terminal device 300 after receiving the security policy setting screen returned by the image processing device 200. OK button 521 is a button for confirming the changes to the security policy settings. When the user presses OK button 521, a setting change list of the security policy settings operated on screen 520 (hereinafter referred to as "setting change list") is temporarily saved in the Web browser, and the screen transitions to one as shown in FIG. 8C.

[0069] The cancel button 522 is a button for canceling the security policy setting. When the user presses the cancel button 522, an HTTP request is sent from the Web browser requesting a menu screen one level above the security policy setting menu. The image processing device 200 then generates and responds with data for the requested screen, and ends the processing of the flowchart shown in FIG. 9 (not shown).

[0070] Area 523 is an area where various setting items related to the security policy are displayed together with check boxes, text boxes, etc. for enabling each setting. A user operating the Web browser of terminal device 300 can change the security policy setting of image processing device 200 by operating the above-mentioned check boxes, text boxes, etc.

[0071] FIG. 8C is an example of security policy setting execution confirmation screen 530. Cancel button 532 is a button for canceling transmission of the setting change list. When the user presses cancel button 532, the web browser displays screen 520 again. At this time, the web browser reads out the temporarily saved setting change list and displays it with the list applied to check boxes, text boxes, etc. in area 523.

[0072] The OK button 531 is a button for transmitting the setting change list. When the user presses the OK button 531, an HTTP request including the setting change list temporarily stored in the Web browser is transmitted to the image processing device 200. The setting change list here is information such as a list combining item ID values ​​and changed setting values ​​of the items for rows included in the category "security policy settings" in column 401 in Fig. 6.

[0073] Returning now to the explanation of the flowchart in FIG. When the WebUI control module receives the HTTP request including the setting change list via the Web server module 244, the process proceeds to S606. In S606, the WebUI control module starts the process of changing the security policy setting. Specifically, when the WebUI control module 251 receives the setting change list via the Web server module 244, it generates response data indicating that the security policy setting process is in progress.

[0074] Next, in S607, the WebUI control module 251 sends an HTTP response including response data (a screen like that in FIG. 8D) indicating that the security policy setting process is in progress to the terminal device 300 via the Web server module 244. Furthermore, the WebUI control module passes the received setting change list to the security policy setting application 253, and proceeds to S608.

[0075] FIG. 8D shows an example of a screen 540 displayed by the Web browser of the terminal device 300 after receiving response data from the image processing device 200 indicating that a security policy setting process is in progress. The screen 540 does not accept any user operations. Then, the background processing of the Web browser periodically queries whether the security policy setting process has been completed, and if it has been completed, the top screen of the WebUI of the image processing device 200 is displayed (not shown).

[0076] Returning now to the explanation of the flowchart in FIG. Upon receiving the setting change list, the security policy setting application 253 executes the repeated process shown in S608 to S611. This repeated process is repeated for the received setting change list until the entire list has been processed.

[0077] In the above-mentioned repetitive process, first in S609, the security policy setting application 253 acquires a set of combinations of item IDs and setting values ​​that have not been processed in the repetitive process from the setting change list. Then, the security policy setting application 253 stores the acquired set of setting changes in the NVRAM 215 via the setting value storage module 262. Here, since the setting values ​​are stored based on the item IDs, it is possible to update the specified items in the security policy settings.

[0078] Next, in S610, the security policy setting application 253 performs a setting value restriction process based on the dependency relationship 410 between the security policy setting and other settings as shown in Fig. 7. Specifically, the row that matches the item ID of the security policy setting saved this time is checked in column 411, and it is checked whether the saved setting value matches the "setting value when causing a restriction on another restricted item". If they match, the setting value is forced for the dependent setting item as shown in column 412. For example, if the acquired set of setting changes is "setting value 'ON' for item ID '10001'", "OFF" is saved as the setting value for item ID '00001' and "OFF" is saved as the setting value for item ID '00002' in the NVRAM 215 via the setting value saving module 262.

[0079] Next, in S611, if there are any unprocessed pairs remaining in the setting change list, the security policy setting application 253 returns to the process of S608, and if not, advances the process to S612.

[0080] In S612, the security policy setting application 253 requests the system control module 261 to reboot the image processing device 200. In response to this request, the system control module 261 executes the reboot process, and the process of this flowchart ends.

[0081] Note that the process of setting a security policy from the WebUI described above with reference to Figures 8A to 8D and 9 may be performed from the device UI. In this case, the device UI control module 252 is mainly responsible for the control.

[0082] 10 is a diagram showing a screen flow when attempting to operate / display RAW print settings, as an example of how security policy settings limit UI operations of the image processing device 200. The screen flow shown in FIG. 10 is processed by the CPU 211 executing a program stored in the ROM 213, and is mainly controlled by the device UI control module 252.

[0083] Screen 701 is a network setting menu screen that is displayed when area 234 is touched while the home screen is displayed on touch panel liquid crystal 226 of image processing device 200. Touching "Network detailed settings" on this screen transitions to screen 702.

[0084] Next, when “RAW print settings” is touched on the screen 702 , the process proceeds to decision step 703 . In decision 703, device UI control module 252 acquires the setting value of "Restrict RAW port" for item ID "10004" via security policy setting application 253 or setting value storage module 262. If the acquired value is "ON" (No in decision 703), the screen transitions to screen 704, and if it is "OFF" (Yes in decision 703), the screen transitions to screen 705.

[0085] A screen 704 notifies the user that changing the RAW print settings is restricted by security policy settings, and when the OK button on the screen 704 is pressed, the screen returns to the screen 702.

[0086] Screen 705 displays options for RAW print settings, and in this example screen, touching either "Enable" or "Disable" transitions to screen 706.

[0087] Screen 706 displays a screen notifying the user that a setting change is being processed, and changes the settings of image processing device 200. For example, when "Enabled" is touched on screen 705, device UI control module 252 changes the setting value of "RAW print setting" of item ID "00009" to "ON" via NW setting application 254 and setting value storage module 262. On the other hand, when "Disabled" is touched on screen 705, device UI control module 252 similarly changes the setting value of "RAW print setting" of item ID "00009" to "OFF."

[0088] When the process of changing the settings of "RAW print settings" is completed, the screen transitions to a screen 707, which notifies the user of the completion of the setting changes. When the OK button is pressed on this screen, the screen returns to the screen 702.

[0089] 10 shows a case where the settings are changed by operating the UI of the image processing device 200 main body, but the method of changing the settings is not limited to this. For example, the settings may be changed by a WebUI, and in this case, the same setting change procedure and setting change restrictions as those in the screen flow explained in FIG. 10 can be implemented. In this case, the WebUI control module 251 is mainly responsible for control.

[0090] The setting reset function of the image processing device 200 will be described below with reference to Fig. 11, Fig. 12, and Fig. 13. The flows shown in Fig. 11, Fig. 12, and Fig. 13 are processed by the CPU 211 executing a program stored in the ROM 213, and are mainly controlled by the device UI control module 252.

[0091] FIG. 11 is a diagram showing a screen flow when various setting values ​​stored in the NVRAM 215 are reset by operating the UI of the main body of the image processing device 200 in the first embodiment. Screen 801 is a setting menu screen that is displayed when area 235 is touched while the home screen is displayed on touch panel liquid crystal 226 of image processing device 200. Touching "Main unit settings" on this screen transitions to screen 802.

[0092] Next, when “Reset Settings” is touched on screen 802 , the process proceeds to decision step 803 . In decision 803, device UI control module 252 checks with security policy setting application 253 to see if any security policies are valid. The security policy setting application 253 acquires the security administrator password setting and the security policy setting stored in the NVRAM 215 via the setting value storage module 262, and determines whether either of them is valid. Specifically, it acquires the value of the "security administrator password setting" of the item ID "01001" from the NVRAM 215, and the values ​​of each item of the security policy setting starting with the item ID "10001". Then, if any of the acquired values ​​is neither "0" nor "OFF", it is determined that one of the security policy settings is valid (set).

[0093] If any of the security policy settings are valid (Yes in decision 803), the screen transitions to screen 804; if none of the security policy settings are valid (No in decision 803), the screen transitions to screen 805.

[0094] Screen 804 notifies the user that, due to the security policy being set, setting items that have dependencies on each item in the security policy setting may not be reset. When the OK button is touched on this screen, the screen transitions to screen 805.

[0095] Screen 805 lists menus for each setting reset function. Here, when “Address book registration only” is touched, the screen transitions to screen 806 . Moreover, when “NW setting only” is touched, the screen transitions to screen 807. Moreover, when “Reset All” is touched, a transition to screen 808 occurs. Moreover, when “Security Policy Only” is touched, a transition to screen 809 occurs.

[0096] First, the transition when "Address Book Registration Only" is touched will be described. Screen 806 is a screen for confirming whether or not to execute address book reset processing. If the "Yes" button is touched on this screen, the screen transitions to decision 810, whereas if the "No" button is touched, the screen transitions to screen 805.

[0097] In decision 810, the device UI control module 252 acquires the setting value of "Allow transmission only to destinations registered in the address book" for item ID "10012" via the security policy setting application 253 and the setting value storage module 262. If the acquired value is "ON" (No in decision 810), the display transitions to screen 811, and if the acquired value is "OFF" (Yes in decision 810), the display transitions to screen 812.

[0098] Screen 811 notifies the user that the address book reset process is restricted by security policy settings, and when the OK button is pressed, the screen returns to screen 702. This process is for realizing that when "Allow transmission only to destinations registered in the address book" of item ID "10012" is "ON", changes to address book information such as item ID "02002" are prohibited.

[0099] When the screen 806 is changed to the screen 812, the device UI control module 252 requests the setting reset application 256 to perform an address book reset process. Upon receiving the request for the address book reset process, the setting reset application 256 changes the settings based on the initial value shown in column 403 of the setting item management information 400 and the reset flag by initialization request shown in column 404. Specifically, the setting reset application 256 extracts items for which the address book reset column is "TRUE" from the reset flag by initialization request shown in column 404, and changes the area of ​​the NVRAM 215 associated with the item ID for each extracted item to the value in the initial value column via the setting value storage module 262. When the address book reset process is completed, the screen transitions to a screen 813. The screen 813 notifies the user that the reset has been completed.

[0100] In other words, when address book initialization (address book reset) is selected, if the security policy setting "Allow sending only to destinations registered in the address book" is enabled (ON), the image processing device 200 does not initialize (reset) the address book settings, but if the security policy setting "Allow sending only to destinations registered in the address book" is disabled (OFF), the image processing device 200 initializes the address book settings.

[0101] Next, a case where "Network setting only" is touched will be described. In this case, the screen transitions to a screen 807. Screen 807 is a screen for confirming whether or not to execute the NW setting reset process. If the "Yes" button is touched, the screen transitions to screen 812, and if the "No" button is touched, the screen transitions to screen 805.

[0102] When the screen 807 transitions to a screen 812, the device UI control module 252 requests the setting reset application 256 to perform NW setting reset processing. The NW setting reset processing by the setting reset application 256 will be described later with reference to Fig. 12. When the NW setting reset processing is completed, the screen transitions to a screen 813.

[0103] Next, a case where "Reset All" is touched will be described. In this case, the screen transitions to screen 808. Screen 808 is a screen for confirming whether or not to execute the all setting reset process. If the "Yes" button is touched, the screen transitions to screen 812, and if the "No" button is touched, the screen transitions to screen 805.

[0104] When the screen 808 transitions to the screen 812, the device UI control module 252 requests the setting reset application 256 to perform a total setting reset process. The total setting reset process by the setting reset application 256 will be described later with reference to Fig. 13. When the total setting reset process is completed, the screen transitions to the screen 813.

[0105] Next, a case where "Security Policy Only" is touched will be described. In this case, the screen transitions to screen 809. Screen 809 is a screen for confirming whether or not to execute security policy reset processing. If the "Yes" button is touched, the screen transitions to decision 814, and if the "No" button is touched, the screen transitions to screen 805.

[0106] In decision 814, the device UI control module 252 acquires the setting value of "security administrator password setting" of item ID "01001" via the security policy setting application 253 or the setting value storage module 262. If the acquired value is "OFF" (No in decision 814), the screen transitions to screen 812, and if the acquired value is "ON" (Yes in decision 814), the screen transitions to screen 815.

[0107] The screen 815 is a screen for performing authentication using a security administrator password. The screen 815 has an input field for the security administrator password, and when the user touches the input field, a software keyboard is displayed, prompting the user to input the security administrator password. When the user inputs the security administrator password and touches the OK button, the device UI control module 252 acquires the input information and requests the security policy setting application 253 to authenticate the security administrator password. The security policy setting application 253 compares the information on the security administrator password acquired by the user input with the "security administrator password value" stored in the NVRAM 215 and determines whether they match. If they do not match, it is determined that the security administrator password authentication has failed, and if they match, it is determined that the security administrator password authentication has succeeded. If the security administrator password authentication has failed, the device UI control module 252 transitions to a screen 816 and notifies the user that the security administrator password authentication has failed. If the OK button is touched on this screen, the screen 815 is displayed again, prompting the user to input the security administrator password. On the other hand, if the security administrator password authentication is successful, the device UI control module 252 transitions to a screen 812.

[0108] When the screen transitions from the screen 809 or the screen 815 to the screen 812, the device UI control module 252 requests the setting reset application 256 to perform security policy reset processing. Upon receiving the request for security policy reset processing, the setting reset application 256 changes the settings based on the initial value shown in the column 403 of the setting item management information 400 and the initialization request-specific reset flag shown in the column 404. Specifically, the setting reset application 256 extracts items in which the security policy reset column is "TRUE" from the initialization request-specific reset flag shown in the column 404, and changes the area of ​​the NVRAM 215 associated with the item ID for each extracted item to the value in the initial value column via the setting value storage module 262. Furthermore, although not shown, the security policy setting application 253 forces settings whose settings are restricted by the security policy to values ​​that comply with the restrictions. When the security policy reset processing is completed, the screen transitions to 813.

[0109] Screen 813 is a screen indicating that various reset processes have been completed, and when the user touches the OK button on this screen, the screen returns to screen 805.

[0110] Next, the NW setting reset process performed by the setting reset application 256 will be described with reference to the flowchart of FIG. 12 is a flowchart showing the network setting reset process of the image processing apparatus in the first embodiment. This flowchart is started when the setting reset application 256 receives a request for NW setting reset process.

[0111] In S901 to S902, the setting reset application 256 changes the settings based on the initial values ​​shown in column 403 of the setting item management information 400 and the reset flags by initialization request shown in column 404. Specifically, in S901, the setting reset application 256 extracts items for which the NW setting reset column is "TRUE" from the reset flags by initialization request shown in column 404. Then, in S902, the setting reset application 256 changes the area of ​​the NVRAM 215 associated with the item ID for each extracted item to the value in the initial value column via the setting value storage module 262.

[0112] Next, the setting reset application 256 executes the repetitive process shown in S903 to S907. This repetitive process is repeated until all security policy settings have been processed for each item ID. That is, the process is started from "prohibit use of direct connection" for item ID "10001", and the item ID to be processed is incremented each time the process is repeated. Then, when the item ID exceeds the range of the security policy settings, the repetition is ended and the process is completed.

[0113] First, in S904, the setting reset application 256 acquires from the NVRAM 215 via the setting value storage module 262 the setting value associated with the item ID of the security policy setting to be processed.

[0114] Next, in S905, the setting reset application 256 checks whether the setting value acquired in S904 matches the "setting value when restricting other setting items" for the row of the item ID to be processed among the dependency sources shown in the dependency relationship 410 between the security policy setting and other settings. If there is no match (No in S905), the setting reset application 256 advances the process to S907. On the other hand, if they match (Yes in S905), the setting reset application 256 advances the process to S906.

[0115] In S906, the setting reset application 256 enforces the setting value according to the setting value restrictions imposed by the security policy shown in column 412 for each setting item that has the item ID of the processing target as a dependency.

[0116] For example, consider a case where the processing target is item ID "10001" and its setting value is "ON." In this case, "OFF" is saved in the NVRAM 215 via the setting value saving module 262 as the setting value for item ID "00001" and "OFF" is saved as the setting value for item ID "00002."

[0117] Also consider a case where the item ID to be processed is "10007" and its setting value is "10." In this case, "10" is saved in the NVRAM 215 via the setting value saving module 262 as the setting value for the item ID "01005."

[0118] Also, consider a case where the processing target is item ID "10012" and its setting value is "ON." In this case, "OFF" is saved in NVRAM 215 as the setting value for item ID "02001" via setting value saving module 262, and the setting values ​​for each address book information item ID "02002" and onward are not changed. After the process of S906, the setting reset application 256 advances the process to S907.

[0119] In S907, the setting reset application 256 returns the process to S903 if there is an item ID that has not yet been processed for the security policy settings, and ends the process of this flowchart if not.

[0120] That is, in the image processing device 200, when initialization of the network settings (network setting reset) is selected, the network settings are initialized (S901 to S902), and further, for settings for which the setting values ​​are restricted by a security policy, settings are made in accordance with the restrictions (S903 to S907).

[0121] By the above process, it is possible to maintain the restriction of the setting value by the security policy setting in the NW setting reset process. Furthermore, compared with the method of checking whether all NW setting items of the image processing device 200 are restricted by the security policy setting, this method reduces the processing load because the number of comparisons and checks is reduced, and the waiting time of the user can also be shortened.

[0122] Next, the full setting reset process performed by the setting reset application 256 will be described with reference to the flowchart of FIG. 13 is a flowchart showing the all-settings reset process of the image processing device in embodiment 1. This flowchart starts when the setting reset application 256 receives a request for all-settings reset process.

[0123] In steps S1001 to S1005, the setting reset application 256 changes the settings based on the initial values ​​shown in column 403 of the setting item management information 400 and the reset flags for each initialization request shown in column 404.

[0124] Specifically, in S1001, the setting reset application 256 extracts items for which the all settings reset column is TRUE from among the reset flags by initialization request shown in column 404. Then, in S1002, the setting reset application 256 acquires the setting value of “Allow transmission only to destinations registered in the address book” of the item ID “10012” via the setting value storage module 262.

[0125] Next, in S1003, if the value acquired in S1002 above is "OFF" (No in S1003), the setting reset application 256 proceeds to S1005, and if the value is "ON" (No in S1003), the setting reset application 256 proceeds to S1004. In S1004, the setting reset application 256 excludes setting items whose "address book reset" flag is "TRUE" based on the initialization request specific reset flag from among the items extracted in S1001 above, and proceeds to S1005. In S1005, the setting reset application 256 changes the area of ​​the NVRAM 215 associated with the item ID for each extracted item via the setting value storage module 262 to the value in the initial value column.

[0126] Next, the setting reset application 256 executes a repeat process shown in S903 to S907. This repeat process is the same as the content described with reference to FIG.

[0127] That is, in the image processing device 200, when initialization of all settings (all settings reset) is selected, if the security policy setting "Allow sending only to destinations registered in the address book" is enabled (ON), all settings except the address book settings are initialized, whereas if the security policy setting "Allow sending only to destinations registered in the address book" is disabled (OFF), all settings are initialized (S1001-S1005). Furthermore, for settings whose setting values ​​are restricted by the security policy, settings are made in accordance with the restrictions (S903-S907).

[0128] By the above process, the restriction of the setting value by the security policy setting can be maintained even in the all setting reset process. Furthermore, compared with the method of checking whether all the setting items of the image processing device 200 are restricted by the security policy setting, the method of this embodiment has a smaller processing load because the number of comparisons and checks is smaller, and the waiting time of the user can be shortened. Therefore, in the past, the processing time of the setting value initialization function increased, and the waiting time of the user could be increased (especially in low-end image processing devices with relatively low CPU performance, the impact is significant). However, in this embodiment, when the setting value initialization function is executed in an image processing device to which a security policy is applied, it is possible to prevent the setting from being contrary to the security policy and suppress the increase in the processing load due to the number of setting items.

[0129] Second Embodiment In the above-mentioned first embodiment, in each setting reset function when a security policy is set, a method is presented in which the setting items to be initialized are changed to their initial values ​​and further set according to the restrictions imposed by the security policy setting. However, in this method, it is necessary to devise a way to exclude setting items such as address book information, which cannot be restored to their original values ​​once they have been changed to their initial values, from being targets for reset in advance. Therefore, in the second embodiment, a setting value initialization function when a security policy is set is presented, which can be applied to setting items which cannot be restored to their original values ​​once they have been changed to their initial values. The contents described in Figs. 1 to 10 are the same in the first and second embodiments, and therefore description thereof will be omitted.

[0130] The setting reset function of the image processing device 200 in the second embodiment will be described with reference to Fig. 14 and Fig. 15. The flows shown in Fig. 14 and Fig. 15 are processed by the CPU 211 executing a program stored in the ROM 213, and are mainly controlled by the device UI control module 252.

[0131] FIG. 14 is a diagram showing a screen flow when various setting values ​​stored in the NVRAM 215 are reset by a UI operation of the main body of the image processing device 200 in the second embodiment. Screen 801 is a setting menu screen that is displayed when area 235 is touched while the home screen is displayed on touch panel liquid crystal 226 of image processing device 200. Touching "Main unit settings" on this screen transitions to screen 802.

[0132] Note that the screen flow in Fig. 14 is largely the same as the contents explained in Fig. 11, so only the differences will be explained. The UI flow when performing the address book reset process in Fig. 14 is different from that in Fig. 11. In Fig. 14, when the "Yes" button is touched on screen 806, the screen transitions to screen 812, and the device UI control module 252 requests the setting reset application 256 to perform the address book reset process. Here, the specific operations of the various reset processes on screen 812 in the second embodiment are summarized in the flowchart explained in Fig. 15.

[0133] 15 is a flowchart showing various reset processes of the image processing device in the second embodiment. This flowchart is started when the setting reset application 256 receives a request for various reset processes such as an address book reset process, a network setting reset, a full setting reset, and a security policy reset.

[0134] First, in S1101, the setting reset application 256 creates a list of the item IDs and current setting values ​​of each setting item that is dependent on the security policy settings and other setting items indicated in the dependency relationship 410 between the security policy settings and other settings, and temporarily stores the list in the RAM 214 as a setting value backup.

[0135] Next, in S1102 to S1103, the setting reset application 256 changes the settings based on the initial values ​​shown in column 403 of the setting item management information 400 and the reset flags for each initialization request shown in column 404. Specifically, in S1102, the setting reset application 256 extracts items for which the column of the reset flags for each initialization request shown in column 404 that matches the requested reset process is "TRUE." For example, if an address book reset process has been requested, an item for which the address book reset column is "TRUE" can be extracted, and if an all settings reset process has been requested, an item for which the all settings reset column is "TRUE" can be extracted. Then, in S1103, the setting reset application 256 changes, via the setting value storage module 262, the area of ​​the NVRAM 215 associated with the item ID for each extracted item to the value in the initial value column.

[0136] Next, the setting reset application 256 executes the repetitive process shown in S1104 to S1108. This repetitive process is repeated until all security policy settings have been processed for each item ID. That is, the process starts from "prohibit use of direct connection" for item ID "10001", and the item ID to be processed is incremented each time it is repeated. Then, when the item ID exceeds the range of the security policy settings, the repetition ends and the process is completed.

[0137] First, in S1105, the setting reset application 256 acquires from the NVRAM 215 via the setting value storage module 262 the setting value associated with the item ID of the security policy setting to be processed.

[0138] Next, in S1106, the setting reset application 256 checks whether the setting value acquired in S1105 matches the "setting value when restricting other setting items" for the row of the item ID to be processed among the dependency sources shown in the dependency relationship between security policy settings and other settings 410. If they match (Yes in S1106), the setting reset application 256 advances the process to S1107, and if they do not match (No in S1106), the setting reset application 256 advances the process to S1108.

[0139] In S1107, the setting reset application 256 forces the setting value of each setting item that depends on the item ID of the processing target to the value of the setting value backup temporarily stored in the RAM 214. Specifically, the setting reset application 256 acquires the setting value paired with the item ID that matches the item ID of the dependency target setting item from the setting value backup in S1101. Then, via the setting value storage module 262, the setting reset application 256 changes the area of ​​the NVRAM 215 associated with the item ID of the dependency target setting item to the value acquired from the setting value backup. After the processing of S1107, the setting reset application 256 advances the processing to S1108.

[0140] In S1108, the setting reset application 256 returns the process to S1104 if there is an item ID that has not yet been processed for the security policy settings, and proceeds to S1109 if not.

[0141] In S1109, the setting reset application 256 deletes the setting value backup information temporarily stored in the RAM 214, and ends the processing of this flowchart.

[0142] That is, in the image processing device 200 of the second embodiment, in the process of initializing multiple settings all at once, the setting values ​​are backed up and then initialized (S1101 to S1103), and further, for settings whose setting values ​​are restricted by a security policy, settings are made in accordance with the backup (S1104 to S1108).

[0143] As described above, for setting items for which there may be restrictions on the setting values ​​in various setting reset processes, the current setting values ​​are temporarily backed up, and if restrictions are actually imposed, the settings are written back, making it possible to perform reset processes that maintain the restrictions. This method can realize setting value initialization processes when a security policy is set, which can be applied to setting items that cannot be restored to their original values ​​once they have been changed to their initial values. Furthermore, compared to a conventional method of checking whether all setting items of an image processing device are restricted by a security policy setting, this method requires fewer comparisons and checks, so the processing load is smaller and the user's waiting time can be shortened. Therefore, when a setting value initialization function is executed in an image processing device to which a security policy is applied, it is possible to prevent settings that violate the security policy and to suppress an increase in the processing load due to the number of setting items.

[0144] According to each embodiment described above, when the setting value initialization function is executed in an image processing device to which a security policy is applied, it is possible to prevent the setting from violating the security policy and to suppress an increase in the processing load due to the number of setting items. This effect is particularly noticeable in low-end image processing devices with relatively low CPU performance.

[0145] It goes without saying that the configurations and contents of the various data described above are not limited to those described above, and the data may have various configurations and contents depending on the application and purpose. Although one embodiment has been described above, the present invention can be embodied, for example, as a system, an apparatus, a method, a program, a storage medium, etc. Specifically, the present invention may be applied to a system composed of multiple devices, or may be applied to an apparatus composed of a single device. Furthermore, any combination of the above-described embodiments is also included in the present invention.

[0146] (Other embodiments) The present invention can also be realized by a process in which a program for implementing one or more of the functions of the above-described embodiments is supplied to a system or device via a network or a storage medium, and one or more processors in a computer of the system or device read and execute the program. The present invention can also be realized by a circuit (e.g., ASIC) that implements one or more of the functions. Furthermore, the present invention may be applied to a system made up of a plurality of devices, or to an apparatus made up of a single device. The present invention is not limited to the above-mentioned embodiment, and various modifications (including organic combinations of the embodiments) are possible based on the spirit of the present invention, and are not excluded from the scope of the present invention. In other words, the present invention includes all configurations that combine the above-mentioned embodiments and their modifications.

[0147] The disclosure of this embodiment includes the following configuration, method, and program. (Configuration 1) An image processing device, an initialization unit for performing a process of collectively initializing a plurality of settings related to the image processing device; The image processing device is characterized in that the initialization means initializes the network settings when initialization of the network settings is selected, and further, for settings whose setting values ​​are restricted by a security policy, sets settings that comply with the restrictions. (Configuration 2) The image processing device according to configuration 1, wherein the initialization means, when initialization of the address book settings is selected and a specific security policy is set, does not initialize the address book settings, and initializes the address book settings if the specific security policy is not set. (Configuration 3) 3. The image processing apparatus according to configuration 2, wherein the initialization means, when the address book settings are not initialized, notifies the user to that effect. (Configuration 4) The image processing device according to configuration 1, characterized in that when initialization of all settings related to the image processing device is selected and a specific security policy is set, the initialization means initializes all of the settings except for address book settings, and further, for settings whose setting values ​​are restricted by the security policy, sets settings in accordance with the restrictions. (Configuration 5) The image processing device according to configuration 4, characterized in that the initialization means initializes all of the settings when initialization of all settings related to the image processing device is selected and a specific security policy is not set, and further, for settings whose setting values ​​are restricted by the security policy, sets settings in accordance with the restrictions. (Configuration 6) The image processing device according to any one of configurations 2 to 5, characterized in that the case where the specific security policy is set is a case where it is set to permit transmission only to destinations registered in an address book. (Configuration 7) An image processing device, an initialization unit for performing a process of collectively initializing a plurality of settings related to the image processing device; The image processing device is characterized in that the initialization means initializes the settings to be initialized after backing up the setting values, and further, for settings whose setting values ​​are restricted by a security policy, sets the settings to conform to the backup. (Method 1) A control method for an image processing device, comprising: an initialization step for performing a process for collectively initializing a plurality of settings related to the image processing device; A control method for an image processing device, characterized in that, in the initialization step, if initialization of network settings is selected, the network settings are initialized, and further, for settings whose setting values ​​are restricted by a security policy, settings are set in accordance with the restrictions. (Method 2) A control method for an image processing device, comprising: an initialization step for performing a process for collectively initializing a plurality of settings related to the image processing device; A control method for an image processing device, characterized in that, in the initialization process, settings to be initialized are initialized after backing up their setting values, and further, for settings whose setting values ​​are restricted by a security policy, settings are set in accordance with the backup. (Program 1) A program for causing a computer to function as each of the means of the image processing device according to any one of configurations 1 to 7.

Claims

1. An image processing device, an initialization unit for performing a process of collectively initializing a plurality of settings related to the image processing device; The image processing device is characterized in that the initialization means initializes the network settings when initialization of the network settings is selected, and further, for settings whose setting values ​​are restricted by a security policy, sets settings that comply with the restrictions.

2. 2. The image processing device according to claim 1, wherein the initialization means does not initialize the address book settings if a specific security policy is set when initialization of the address book settings is selected, and initializes the address book settings if the specific security policy is not set.

3. 3. The image processing apparatus according to claim 2, wherein, when the address book settings are not to be initialized, the initialization means notifies the user of that effect.

4. The image processing device according to claim 1, characterized in that, when initialization of all settings related to the image processing device is selected and a specific security policy is set, the initialization means initializes all of the settings except for address book settings, and further, for settings whose setting values ​​are restricted by the security policy, sets settings in accordance with the restrictions.

5. The image processing device according to claim 4, characterized in that the initialization means initializes all settings when initialization of all settings related to the image processing device is selected and a specific security policy is not set, and further, for settings whose setting values ​​are restricted by the security policy, sets settings in accordance with the restrictions.

6. The image processing device according to any one of claims 2 to 5, characterized in that the case where the specific security policy is set is a case where it is set to permit transmission only to destinations registered in an address book.

7. An image processing device, an initialization unit for performing a process of collectively initializing a plurality of settings related to the image processing device; The image processing device is characterized in that the initialization means initializes the settings to be initialized after backing up the setting values, and further, for settings whose setting values ​​are restricted by a security policy, sets the settings to conform to the backup.

8. A control method for an image processing device, comprising: an initialization step for performing a process for collectively initializing a plurality of settings related to the image processing device; A control method for an image processing device, characterized in that, in the initialization step, if initialization of network settings is selected, the network settings are initialized, and further, for settings whose setting values ​​are restricted by a security policy, settings are set in accordance with the restrictions.

9. A control method for an image processing device, comprising: an initialization step for performing a process for collectively initializing a plurality of settings related to the image processing device; A control method for an image processing device, characterized in that, in the initialization process, settings to be initialized are initialized after backing up their setting values, and further, for settings whose setting values ​​are restricted by a security policy, settings are set in accordance with the backup.

10. A program for causing a computer to function as each of the means of the image processing device according to any one of claims 1 to 5 and 7.

Images