Image processing apparatus, method in image processing apparatus, and program

Abstract

To solve the problem in which: when executing security policy settings related to a network function in an image processing apparatus, mismatching may occur in the network function in operation.SOLUTION: Network settings are copied from a NVRAM to a RAM at the start-up of an apparatus, and control related to a network is performed based thereon. A security policy setting application 254 changes setting values of the network settings stored in the NVRAM according to the settings of a security policy and following restrictions made according to the security policy (S1113), and performs reboot (S1115). When the settings of the security policy are settings for restricting the network settings, the security policy setting application does not change the network settings stored in the RAM, and inhibits further change of the setting values stored in the NVRAM and the setting values stored in the RAM until the apparatus is rebooted (S1113).SELECTED DRAWING: Figure 15

Description

[Technical field]

[0001] The present invention relates to an image processing device, a method in an image processing device, and a program. [Background technology]

[0002] It is desirable that personal computers (PCs) and server devices (file servers, authentication servers, etc.) connected to an office network be operated in accordance with a security policy determined for each office. A security policy is a basic guideline regarding information security for the entire company, and is a compilation of policies for preventing the use of information, external intrusions, and information leaks.

[0003] In addition to PCs and server devices, devices connected to an office network include image processing devices such as multifunction devices and printers. In recent years, image processing devices do not simply print or send images, but also provide users with a WebUI that allows them to operate the image processing device from a web browser on a PC, and provide various cloud services in cooperation with cloud servers. In other words, image processing devices are beginning to play the same role as other PCs and server devices on the network. Therefore, in order to maintain a safe and secure office environment, image processing devices are also required to comply with security policies, just like PCs and server devices.

[0004] Complying with the security policy here means, for example, placing restrictions on the security operations of the image processing device to prevent unauthorized use and information leaks, such as requiring user authentication when operating the image processing device or requiring encryption of communication paths.

[0005] In such an image processing device, control is performed to maintain a state in accordance with the security policy. Patent Document 1 proposes a technique in which, when a certain security policy is set, a specific setting item related to the security policy becomes a fixed value, and cannot be changed by users other than the security administrator.

[0006] Furthermore, when a security policy is set, the setting values ​​of multiple setting items that are dependent on the set security policy are changed in a batch according to the security policy setting. At this time, in order to prevent inconsistencies from occurring depending on the state of the image processing device, a technology is known in which a processing unit that manages the security policy setting inquires of other processing units whether a setting change is possible, and if possible, changes the settings in a batch (Patent Document 2). [Prior art documents] [Patent documents]

[0007] [Patent Document 1] JP 2017-163557 A [Patent Document 2] JP 2007-185814 A Summary of the Invention [Problem to be solved by the invention]

[0008] Consider the case where a security policy setting for a network (NW) function is performed for an image processing device. The security policy setting for the NW function is a function for changing multiple setting items at once, such as "prohibiting the use of wireless LAN" or "restricting IPP ports," which restricts each NW function. If the image processing device accepts the security policy setting and changes the NW setting while each NW function is running, an inconsistency may occur in the operating state. For example, in the procedure for starting and stopping each NW function, a method is conceivable in which only the functions that are enabled according to the enable / disable setting of the function are started and stopped, but if the setting of an active NW function is changed, the stop process cannot be completed correctly. Specifically, if the NW function is started with the wireless LAN connection setting enabled, but the NW function is stopped with the wireless LAN connection setting disabled, the wireless LAN function of the image processing device cannot be stopped correctly. However, conventional techniques have not taken into consideration the issues that arise when setting security policies for such network functions.

[0009] The present invention has been made to solve the above problems, and has an object to provide a mechanism for completing security policy setting for a network function without causing inconsistency in the network function operating in an image processing device. [Means for solving the problem]

[0010] The present invention is an image processing device having a storage means for storing settings related to the image processing device, a storage area for copying and storing network setting values ​​from among the settings stored in the storage means when the image processing device is started up, and a control means for controlling the network based on the network settings stored in the storage area, and further having a processing means for changing the network setting values ​​stored in the storage means in accordance with the restrictions of the security policy depending on the setting of the security policy, and a restart means for restarting the image processing device after the processing means changes the setting values ​​stored in the storage means, and is characterized in that when the processing means changes the setting values ​​stored in the storage means, the setting values ​​stored in the holding area are not changed, and further changes to the setting values ​​stored in the storage means and the setting values ​​stored in the holding area are prohibited until the image processing device is restarted by the restart means. Effect of the Invention

[0011] According to the present invention, it is possible to complete the setting of a security policy for a network function without causing inconsistency in the network function currently operating in the image processing apparatus. [Brief description of the drawings]

[0012] [Figure 1] FIG. 1 is a diagram showing an example of the configuration of a system including an image processing apparatus according to an embodiment of the present invention. [Diagram 2] FIG. 1 is a diagram showing the appearance of an image processing apparatus according to an embodiment of the present invention. [Diagram 3] 1 is a block diagram showing a configuration of an image processing apparatus according to an embodiment of the present invention. [Figure 4] 2 is a diagram illustrating an operation and display unit of the image processing apparatus according to the embodiment. [Diagram 5] FIG. 2 is a block diagram illustrating a software configuration of the image processing apparatus according to the embodiment. [Figure 6] 2 is a diagram showing setting item management information of the image processing apparatus according to the embodiment; [Figure 7]5 is a diagram showing a schematic diagram of start / stop sequence information of network functions of the image processing apparatus according to the embodiment; [Figure 8] 3 is a diagram showing a schematic diagram of a dependency relationship between a security policy setting and other settings in the image processing apparatus according to the embodiment; [Figure 9] 5 is a flowchart showing a power-on process for a network function in the embodiment. [Figure 10] 5 is a flowchart showing a startup sequence of a network function in the embodiment. [Figure 11] 5 is a flowchart showing a network function stop sequence in the embodiment. [Figure 12] FIG. 6 is a diagram showing a screen flow when changing network settings in the embodiment. [Figure 13] 5 is a flowchart showing a process for referring to and changing network settings in the embodiment. [Figure 14A] 4 is a diagram showing a screen displayed by a Web browser of a terminal device when a security policy is set in this embodiment. [Figure 14B] 4 is a diagram showing a screen displayed by a Web browser of a terminal device when a security policy is set in this embodiment. [Figure 14C] 4 is a diagram showing a screen displayed by a Web browser of a terminal device when a security policy is set in this embodiment. [Figure 14D] 4 is a diagram showing a screen displayed by a Web browser of a terminal device when a security policy is set in this embodiment. [Figure 14E] 4 is a diagram showing a screen displayed by a Web browser of a terminal device when a security policy is set in this embodiment. [Figure 14F] 4 is a diagram showing a screen displayed by a Web browser of a terminal device when a security policy is set in this embodiment. [Figure 15] 4 is a flowchart showing a security policy setting process in the embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0013] Preferred embodiments of the present invention will be described below with reference to the drawings. However, it should be understood that the scope of the present invention includes any modifications and improvements to the embodiments described below that are made based on the ordinary knowledge of those skilled in the art without departing from the spirit of the present invention.

[0014] First, the network configuration in this embodiment will be described with reference to Fig. 1. Note that the network configuration described below is merely one example of an embodiment, and is applicable to various configurations that enable wired or wireless communication between an image processing device and a terminal device, and is not limited to the configuration shown in this figure. Also, in documents and figures, the network may be written as "NW" for abbreviation.

[0015] 1 is a diagram showing an example of the configuration of a system including an image processing device according to an embodiment of the present invention. The system of this embodiment includes a local area network (LAN) 101 constituted by an access point 100, and an image processing device 200 and a terminal device 300 connected to the network. Here, the connection form of the LAN 101 may be wired communication or wireless communication, and for example, it is assumed that the connection is made by Wi-Fi (Wireless Fidelity) (registered trademark), which is a communication standard conforming to the IEEE802.11 series. In the LAN 101, the image processing device 200 and the terminal device 300 are assigned different IP addresses by the access point 100. This makes it possible for devices in the LAN 101 to specify IP addresses as destinations and communicate with each other.

[0016] The image processing device 200 is, for example, an inkjet printer, and provides the user with functions such as printing, scanning, and faxing (FAX). Furthermore, the image processing device 200 has a Web server function, and is capable of receiving requests and sending responses using HTTP (Hypertext Transfer Protocol) communication. Note that the functions installed in the image processing device 200 do not need to be limited to these, and some of the presented functions may not be installed, or functions other than those presented may be installed. Furthermore, the image processing device 200 is not limited to an inkjet printer, and may be other devices such as a laser beam printer or an office multifunction device.

[0017] The terminal device 300 is, for example, a smartphone, and provides a web browser function within the device to the user. The web browser function transmits requests and receives responses using HTTP communication, and displays a screen associated with these communications. Note that the functions installed in the terminal device 300 do not need to be limited to these, and functions other than those presented may be installed. Also, the terminal device 300 is not limited to a smartphone, and may be other devices such as a PC (personal computer) or a tablet terminal.

[0018] 2 is a diagram showing an example of the external appearance of the image processing device 200. In this embodiment, an inkjet printer (printing device) is shown as an example of the image processing device, which is a multifunction printer (MFP; Multifunction Peripheral) that combines print, scan, fax (FAX) and other functions.

[0019] The operation display unit 201 includes a display and buttons used for operating the image processing device 200. Details will be described with reference to FIG. The print paper insertion slot 202 is an insertion slot for setting paper of various sizes. The paper set here is transported one sheet at a time to the printing section, where the desired printing is performed, and the paper is discharged from the print paper discharge slot 203.

[0020] The manuscript table 204 is a transparent glass table on which a manuscript is placed to be read by the scanner. The manuscript table pressure plate 205 is a cover that presses the manuscript against the manuscript table to prevent it from floating when reading with the scanner, and prevents external light from entering the scanning section.

[0021] The USB communication unit 206 includes a circuit and a USB connector for the image processing device 200 to communicate with an external terminal device 300 or the like via a USB connection. The wireless LAN communication unit 207 has embedded therein circuits such as an antenna for performing wireless communication, such as the above-mentioned wireless connection or a direct connection in which the image processing device 200 itself serves as an access point to configure a wireless LAN.

[0022] The FAX communication unit 208 includes a circuit for transmitting and receiving FAX data, and a connector for a telephone line. The power supply unit 209 includes a power supply circuit and a power jack for supplying power to the image processing device 200 .

[0023] FIG. 3 is a block diagram showing an example of the configuration of the image processing device 200. As shown in FIG. The image processing device 200 includes a main board 210 that controls the entire device, an operation display unit 201 , a USB communication unit 206 , a wireless LAN communication unit 207 , a FAX communication unit 208 , and a power supply unit 209 .

[0024] A microprocessor-type CPU 211 disposed on the main board 210 operates according to a control program stored in a ROM 213 connected via an internal bus 312 and data stored in a RAM 214. Various settings of the image processing device 200 are held in a non-volatile memory, NVRAM 215, and are read and written according to the control program.

[0025] The CPU 211 controls the scan unit 217 to read an original document and store the document in an image memory that is a part of the RAM 214. The CPU 211 also controls the print unit 216 to print an image stored in the image memory that is a part of the RAM 214 onto a recording medium.

[0026] The CPU 211 controls the USB communication unit 206 via a USB communication control unit 218 to perform USB communication with an external device via a USB connection. The CPU 211 also controls the wireless LAN communication unit 207 via a wireless LAN communication control unit 219 to perform wireless LAN communication with an external device via an infrastructure connection or a direct connection. The CPU 211 also controls the FAX communication unit 208 via a FAX communication control unit 220 to perform FAX communication with an external device using a telephone line.

[0027] The CPU 211 controls the operation display control unit 221 to receive operation information from the operation display unit 201. The CPU 211 also controls the operation display control unit 221 to enable the operation display unit 201 to display the status of the image processing device 200 and a function selection menu.

[0028] Fig. 4 is a diagram showing a schematic example of a configuration of the operation display unit 201 of the image processing device 200. The operation display unit 201 is composed of a plurality of buttons, a display, LEDs, etc. In the example of Fig. 4, a touch panel liquid crystal 226 is used as the display of the operation display unit 201.

[0029] When power is being supplied from the power supply unit 209, the user presses the power button 222 to start up the image processing device 200. When the image processing device 200 starts up, a home screen, which is the top layer of the menu that can be operated by the user, is displayed on the touch panel liquid crystal 226.

[0030] The home screen includes a copy area 231 for receiving an instruction to execute a copy function, a scan area 232 for receiving an instruction to execute a scan function, and a fax area 233 for receiving an instruction to execute a fax function. It also includes a network area 234 that transitions to a menu for changing network settings and checking the status of the infrastructure connection, direct connection, etc. of the image processing device 200. It also includes a setting area 235 that transitions to a menu for changing various other settings and executing a setting reset function.

[0031] When a character string needs to be input by the user for password authentication or the like, a software keyboard can be displayed on the touch panel liquid crystal 226 to accept the input.

[0032] In addition, when a screen in a menu hierarchy other than the home screen is displayed, the user can return to the home screen by pressing the home button 223. In addition, when a screen in a menu hierarchy other than the home screen is displayed, the user can return to the screen in the next higher hierarchy by pressing the back button 224.

[0033] Furthermore, when various functions such as a copy function or a scan function are being executed and it is time to stop the process, the process can be stopped by pressing the stop button 225.

[0034] Fig. 5 is a block diagram conceptually showing a software configuration for changing the settings of each NW function and setting a security policy among the software operating in the image processing device 200. The software elements and configuration shown in Fig. 5 are merely an example, and the elements and configuration are not limited to those shown in this figure. The functions of the software group shown in Fig. 5 are realized by the operation of the CPU 211 in accordance with a control program stored in the ROM 213 and part of the data stored in the RAM 214 associated with the control program.

[0035] The software group shown in FIG. 5 includes a communication program section 240 that mainly controls communications, an application program section 250 that mainly controls application functions, and a device control program section 260 that mainly controls the lower layers in the image processing device 200.

[0036] The communication program unit 240 includes a network communication control module 241 , a security module 242 , a USB communication control module 243 , a Web server module 244 , and a static content database 245 .

[0037] The network communication control module 241 is a module that controls the wireless LAN communication control unit 219 and is responsible for up to the transport layer of the communication protocol stack, and realizes TCP / IP communication of the image processing device 200. Furthermore, the network communication control module 241 also acquires a NW setting state via a NW setting application 253 in response to power ON / OFF, etc., of the image processing device 200, and is responsible for NW function supervision processing that starts / stops each NW function accordingly.

[0038] The security module 242 is a module that handles encryption and decryption of communications, and the associated processes such as authentication and hashing, and realizes TLS / SSL communication of the image processing device 200. The USB communication control module 243 is a module that controls the USB communication control unit 218 and is responsible for operations for acting as a USB device, and realizes USB communication of the image processing device 200.

[0039] The Web server module 244 is a module that performs operations for the image processing device 200 to act as a Web server, and realizes HTTP communication with an external terminal device 300 on which a Web browser runs. Specifically, the Web server module 244 analyzes an HTTP request received from the external terminal device 300, operates the WebUI control module 251 and the static content database 245 according to the analysis result, and forms and transmits the generated data as an HTTP response. The Web server module 244 receives requests and transmits responses using TCP / IP communication, TLS / SSL communication, or USB communication.

[0040] The static content database 245 is a module that operates as a file system, and reads out JPEG data, HTML data, and the like stored in the ROM 213 or the RAM 214 .

[0041] The application program unit 250 includes a WebUI control module 251, a device UI control module 252, application modules exemplified by 253 to 255, and a NW setting database 256.

[0042] The WebUI control module 251 generates data for displaying the WebUI of the image processing device 200 on the Web browser of the external terminal device 300 in response to a request from the Web server module 244. The WebUI control module 251 can display the operation state and setting state of the image processing device 200 on the WebUI by acquiring the operation state and setting state of the image processing device 200 from each application module and responding with the formed data. The WebUI displayed on the Web browser of the terminal device 300 is also configured to be able to instruct the image processing device 200 to change settings or perform password authentication, etc. When a user operates the Web browser and instructs the image processing device 200 to change settings or perform password authentication, etc. from the WebUI, the image processing device 200 receives an HTTP request in which the instruction contents are stored. The WebUI control module accepts the instruction via the Web server module 244 and causes the corresponding application module to perform processing such as setting change and password authentication according to the instruction contents. When the processing is completed, the processing result such as success or failure is stored in an HTTP response and transmitted.

[0043] The device UI control module 252 realizes the UI of the image processing device 200 main body by controlling the operation display control unit 221. The device UI control module 252 stores menu hierarchy information and displays an operation menu or the like corresponding to the current menu hierarchy on the touch panel liquid crystal 226. The device UI control module 252 can also acquire and shape the operating state and setting state of the image processing device 200 from each application module and display them on the touch panel liquid crystal 226. Furthermore, the device UI control module 252 accepts operations such as setting change and password authentication from the operation display unit 201 and causes the corresponding application module to carry out processing according to the operation. When the processing is completed, the device UI control module 252 displays the processing result such as success or failure on the touch panel liquid crystal 226.

[0044] The NW setting application 253 receives instructions from the NW communication control module 241, the Web UI control module 251, and the device UI control module 252, and acquires the NW setting status and changes the NW settings. The security policy setting application 254 receives instructions from the Web UI control module 251 and the device UI control module 252, and acquires the security policy setting status and changes the security policy setting.

[0045] The setting reset application 255 receives instructions from the WebUI control module 251 and the device UI control module 252 and executes a setting value reset process for the image processing device 200 .

[0046] The NW setting database 256 has a synchronization restriction flag 257, and when the image processing device 200 is powered on, the NW setting database 256 holds a copy of each NW setting stored in the NVRAM 215 in the RAM 214. The NW setting database 256 receives instructions from the NW setting application 253 and the security policy setting application 254 to perform reference processing and change processing for each NW setting. In addition, in a change processing for each NW setting, the NW setting database 256 switches whether or not to store the NW setting in the NVRAM 215 via the setting value storage module 262, taking into account the state of the synchronization restriction flag 257 and the setting change contents. Here, the synchronization restriction flag 257 has two states, "ON" and "OFF." The synchronization restriction flag 257 being "ON" indicates that synchronization is restricted between the copy of the NW setting stored in the RAM 214 by the NW setting database 256 and the NW setting stored in the NVRAM 215 by the setting value storage module 262. Furthermore, when the synchronization restriction flag 257 is “OFF”, this indicates that there is no restriction on synchronization between the copy of the NW settings that the NW setting database 256 holds in the RAM 214 and the NW settings that the setting value storage module 262 holds in the NVRAM 215.

[0047] The device control program section 260 includes a system control module 261 and a setting value storage module 262 . The system control module 261 is responsible for controlling the entire software system, such as starting and stopping the image processing device 200. In this embodiment, the system control module 261 accepts a restart request from the security policy setting application 254 and executes the restart process of the image processing device 200.

[0048] The restart process of the image processing device 200 refers to a process in which the image processing device 200 performs a power-off process in an activated state and then performs a power-on process. Also, the image processing device 200 performs a power-on process or a power-off process when the user presses the power button 222. In the power-on process or the power-off process, the system control module 261 notifies the main software modules of the image processing device 200, such as the NW communication control module 241, of a power-on command or a power-off command and waits for the processing result (not shown).

[0049] The setting value storage module 262 operates to supervise storage of setting values ​​of the image processing device 200. The setting value storage module 262 receives an instruction to store setting values ​​from other modules such as each application module, and writes the setting values ​​to the NVRAM 215. The setting value storage module 262 also receives an instruction to refer to setting values ​​from other modules such as each application module, and reads setting values ​​from the NVRAM 215.

[0050] FIG. 6 is a diagram showing an example of setting item management information of the image processing device 200. As shown in FIG. The example shown in FIG. 6 is a part of setting item management information 400, which is a combination of the setting values ​​of each setting item stored in the NVRAM 215 via the setting value storage module 262 and the management information thereof.

[0051] As shown in column 401, all setting items can be uniquely identified by an item ID, and setting values ​​can be written or read by specifying an item ID. Column 402 shows the current setting value for each setting item. Column 403 shows the setting value of each setting item in the factory default state. When the user operates operation / display unit 201 shown in FIG. 4 to request a setting value reset process, setting reset application 255 accepts the request and initializes each setting value according to the setting value of each setting item shown in column 403 in the factory default state.

[0052] 6, the setting item management information 400 is shown in a table format, but the format in which this information is stored in the image processing device 200 is not limited to this. For example, the information may be stored in a specific database format, or in a format such as a JSON file. Furthermore, only the setting values ​​shown in column 402 may be stored in the RAM 214 or NVRAM 215, and other information may be expressed as a program stored in the ROM 213.

[0053] FIG. 7 is a diagram showing a schematic diagram of activation / shutdown sequence information of NW functions of the image processing device 200. As shown in FIG. The example shown in FIG. 7 is a part of information on the activation and shutdown order of NW functions of the image processing apparatus 200 managed by the NW communication control module 241, which is represented diagrammatically as NW function activation and shutdown order information 410.

[0054] A column 411 indicates the priority order in the activation / stop processing of each NW function. When activating, the activation processing is performed in ascending order of priority, and when terminating, the stop processing is performed in descending order of priority. A column 412 indicates a NW function ID, which is used when the NW communication control module 241 controls each NW function. Since the NW function ID is associated with each NW function of the image processing device 200, the NW communication control module 241 can specify the NW function ID to instruct each NW function to start or stop.

[0055] A column 413 indicates the function name of each NW function that the image processing device 200 has. Column 414 indicates the preconditions when the NW communication control module 241 starts / stops each NW function. A blank cell in column 414 indicates that there is no precondition. The precondition "IP address confirmed" indicates that the image processing device 200 is connected to a NW for wired or wireless communication and the assignment of an IP address has been completed.

[0056] Column 415 indicates the processing conditions when the NW communication control module 241 starts / stops each NW function. A blank column in column 415 indicates that there is no processing condition. For processing conditions that are not blank, for example, the direct connection function indicated by NW function ID 001 indicates that the start process is performed when the setting value of the "direct connection function" indicated by item ID "00001" is "ON".

[0057] 7, the NW function activation / shutdown order information 410 is shown in a table format, but the format in which this information is stored in the image processing device 200 is not limited to this. For example, the information may be stored in the NVRAM 215 in a specific database format or a JSON file format, or may be expressed as a program stored in the ROM 213.

[0058] Fig. 8 is a diagram showing a schematic representation of the dependency relationship between the security policy setting and other settings of the image processing device 200. The example in Fig. 8 shows a part of a schematic representation of the dependency relationship 420 between the security policy setting and other settings managed and controlled by the security policy setting application 254 of the image processing device 200. The dependency relationship here means that the content of the setting value of the dependency source affects the content of the setting value of the dependency destination.

[0059] Column 421 indicates the setting item of the security policy setting on which dependency is based and the condition under which the dependency occurs. Column 422 indicates the configuration item on which a dependency is established and how the configuration value is forced when a dependency occurs.

[0060] For example, the security policy setting "Prohibit use of direct connection" indicated by item ID "10001" affects the dependent setting value when the setting value of the relevant setting item is "ON." In this case, the setting value of "Direct connection setting" indicated by item ID "00001" is forced to "OFF," and the setting value of "Automatic startup of easy connection" indicated by item ID "00002" is forced to "OFF."

[0061] Additionally, the security policy setting "Minimum password length" indicated by item ID "10007" affects the dependent setting value when the setting value of the relevant setting item is an integer value between 1 and 32. In that case, the setting value of "Rule: Minimum password length" indicated by item ID "01005" is forced to the same value as the value set in the security policy setting "Minimum password length".

[0062] 8, the dependency relationship 420 between the security policy setting and other settings is shown in a table format, but the format in which this information is stored in the image processing device 200 is not limited to this. For example, the information may be stored in the NVRAM 215 in a specific database format or a JSON file format, or may be expressed as a program stored in the ROM 213.

[0063] 9 and 10, a description will be given of a startup process of the NW function that operates when the image processing device 200 is powered on. The process of these flowcharts is realized by the CPU 211 operating in accordance with a control program stored in the ROM 213 and part of the data stored in the RAM 214 associated with the control program.

[0064] FIG. 9 is a flowchart showing the power ON process for the NW function of the image processing device 200. When the power button 222 is pressed while the image processing device 200 is in a stopped state, the system control module 261 performs a power-on process and starts up the image processing device 200. The process of this flowchart begins when the system control module 261 transmits a power-on command to the main software modules of the image processing device 200 for the power-on process.

[0065] In S501, when the NW communication control module 241 receives a power ON command, the process proceeds to S502. In S502, the NW communication control module 241 instructs the NW setting database 256 to perform initialization, and advances the process to S503.

[0066] In S503, the NW setting database 256 instructed to be initialized in S502 sets the value of the synchronization restriction flag 257 to "OFF" and advances the process to S504. In S504, the NW setting database 256 acquires the setting values ​​of each NW setting stored in the NVRAM 215 via the setting value storage module 262, and stores a copy of each NW setting in the RAM 214. This completes the initialization of the NW setting database 256.

[0067] Next, in S505, the NW communication control module 241 starts a startup sequence of the NW function. The startup sequence of the NW function is shown in sub-process S600, the details of which will be described in Fig. 10. When the startup sequence of the NW function (sub-process S600) is completed, the NW communication control module 241 advances the process to S506.

[0068] In S506, the NW communication control module 241 notifies the system control module 261 of the completion of the activation of the NW function, and ends the process of this flowchart.

[0069] FIG. 10 illustrates a sub-process S600 showing the activation sequence of a NW function. When the sub-process S600 starts, the NW communication control module 241 acquires the NW function activation / shutdown order information 410 in S601.

[0070] Next, the NW communication control module 241 executes the repetitive process shown in S602 to S610. In this repetitive process, the NW functions are started in ascending order of priority shown in the column 411 based on the NW function activation / shutdown order information 410. That is, in the first repetitive process, the process is performed on the row of the NW function activation / shutdown order information 410 with the smallest priority value shown in the column 411.

[0071] In the repeated process, first in S603, the NW communication control module 241 acquires information on the NW function ID, prerequisites, and processing conditions corresponding to the priority order to be processed. Next, in S604, the NW communication control module 241 determines whether or not a precondition exists. If the precondition exists (Yes in S604), the NW communication control module 241 advances the process to S605. On the other hand, if the precondition does not exist (No in S604), the NW communication control module 241 advances the process to S606.

[0072] In S605, the NW communication control module 241 checks whether the preconditions are met. If the preconditions are met (Yes in S605), the NW communication control module 241 advances the process to S606. On the other hand, if the preconditions are not met (No in S605), the NW communication control module 241 advances the process to S610.

[0073] In S606, the NW communication control module 241 checks whether or not a processing condition exists. If a processing condition exists (Yes in S606), the NW communication control module 241 advances the process to S607. On the other hand, if a processing condition does not exist (No in S606), the NW communication control module 241 advances the process to S609.

[0074] In S607, the NW communication control module 241 acquires the setting value of the item ID based on the processing condition shown in column 415 from the NW setting database 256, and proceeds to S608. At this time, the NW setting database 256 responds to the NW communication control module 241 with the setting value corresponding to the item ID among the copies of each NW setting held in the RAM 214.

[0075] In S608, the NW communication control module 241 checks whether the setting values ​​of the processing conditions shown in column 411 match the setting values ​​acquired from the NW setting database 256. If they match (Yes in S608), the NW communication control module 241 advances the process to S609. On the other hand, if they do not match (No in S608), the NW communication control module 241 advances the process to S610.

[0076] In S609, the NW communication control module 241 performs a process of starting up the NW function associated with the NW function ID. Here, each NW function is associated with a NW function ID and made into a software module, and performs a process to make the function available upon receiving a start request from the NW communication control module 241 (not shown). Then, when the NW communication control module 241 receives a response indicating that the process for the start request has been completed, the process proceeds to S610.

[0077] In S610, the NW communication control module 241 returns the process to S602 if there is an unprocessed NW function based on the NW function activation / shutdown order information 410, whereas if there is no unprocessed NW function, ends the repeated process shown in S602 to S610 and completes the activation sequence of the NW function.

[0078] Note that the sub-process S600 showing the activation sequence of the NW function described in Fig. 10 can be executed at a timing other than the power-on process of the image processing device 200. For example, this corresponds to a case where the NW setting is changed by a user operation while the image processing device 200 is in an activated state. More specifically, this will be described later with reference to Figs. 12 and 13.

[0079] Next, a sequence for stopping the NW function of the image processing device 200 will be described. 11 is a flowchart showing a sequence for stopping the NW function of the image processing device 200. The processing of this flowchart is realized by the CPU 211 operating in accordance with a control program stored in the ROM 213 and part of the data stored in the RAM 214 associated with the control program. The NW function stop sequence is shown as sub-process S700 because it is executed when the image processing device 200 is powered off or when the NW settings are changed by a user operation. The sub-process S700 starts when the NW communication control module 241 starts the NW function stop sequence.

[0080] First, in S701, the NW communication control module 241 acquires the NW function activation / shutdown order information 410. Next, the NW communication control module 241 executes the repetitive process shown in S702 to S710. In this repetitive process, the NW functions are stopped in descending order of priority shown in the column 411 based on the NW function activation / stop order information 410. That is, in the first repetitive process, the process is performed on the row of the NW function activation / stop order information 410 with the largest priority value shown in the column 411.

[0081] In the repeated process, first in S703, the NW communication control module 241 acquires information on the NW function ID, prerequisites, and processing conditions corresponding to the priority order to be processed. Next, in S704, the NW communication control module 241 checks whether the precondition exists. If the precondition exists (Yes in S704), the NW communication control module 241 proceeds to S705. On the other hand, if the precondition does not exist (No in S704), the NW communication control module 241 proceeds to S706.

[0082] In S705, the NW communication control module 241 checks whether the preconditions are met. If the preconditions are met (Yes in S705), the NW communication control module 241 advances the process to S706. On the other hand, if the preconditions are not met (No in S705), the NW communication control module 241 advances the process to S710.

[0083] In S706, the NW communication control module 241 checks whether or not a processing condition exists. If a processing condition exists (Yes in S706), the NW communication control module 241 advances the process to S707. On the other hand, if a processing condition does not exist (No in S706), the NW communication control module 241 advances the process to S709.

[0084] In S707, the NW communication control module 241 acquires the setting value of the item ID based on the processing condition shown in column 415 from the NW setting database 256, and proceeds to S708. At this time, the NW setting database 256 responds to the NW communication control module 241 with the setting value corresponding to the item ID among the copies of each NW setting held in the RAM 214.

[0085] In S708, the NW communication control module 241 checks whether the setting values ​​of the processing conditions shown in column 411 match the setting values ​​acquired from the NW setting database 256. If they match (Yes in S708), the NW communication control module 241 advances the process to S709. On the other hand, if they do not match (No in S708), the NW communication control module 241 advances the process to S710.

[0086] In S709, the NW communication control module 241 performs a process of stopping the NW function associated with the NW function ID. In the stop process, the NW function module to be stopped, which is implemented as a software module, performs a process for stopping the function upon receiving a stop request from the NW communication control module 241. Then, when the NW communication control module 241 receives a response indicating that the process for the stop request has been completed, the process proceeds to S710.

[0087] In S710, the NW communication control module 241 returns the process to S702 if there is an unprocessed NW function based on the NW function activation / shutdown order information 410. On the other hand, if there is no unprocessed NW function, the NW communication control module 241 ends the repeated process shown in S702 to S710 and completes the NW function shutdown sequence.

[0088] In the image processing device 200 of this embodiment, the NW function activation / stop order information 410 described in FIG. 7 and the sub-process S600 showing the activation sequence of the NW function described in FIG. 10 realize activation of the NW function taking into consideration the dependency between the NW functions and the setting value of the image processing device 200. Also, the NW function activation / stop order information 410 described in FIG. 7 and the sub-process S700 showing the stop sequence of the NW function described in FIG. 11 realize stop of the NW function taking into consideration the dependency between the NW functions and the setting value of the image processing device 200. Note that the preconditions shown in column 414 and the processing conditions shown in column 415 of FIG. 7 may be more complicated conditions. For example, the processing conditions shown as an example only check the matching of the setting value for one item ID, but the matching of the setting value for each of multiple item IDs may be checked. Also, instead of checking the matching, the condition may be to check that the setting value is included in a specific range. In other words, it should be understood that appropriate preconditions and processing conditions can be applied to realize activation / stop of the NW function taking into consideration the dependency between the NW functions and the setting value of the image processing device 200.

[0089] Next, the operation when referring to or changing the NW setting in this embodiment will be described with reference to FIG. 12 and FIG. Fig. 12 is a diagram showing a screen flow when trying to change RAW print settings as an example of changing the NW settings of the image processing device 200. The screen flow shown in Fig. 12 is processed by the CPU 211 executing a program stored in the ROM 213, and is mainly controlled by the device UI control module 252.

[0090] Screen 801 is a network setting menu screen that is displayed when area 234 is touched while the home screen is displayed on touch panel liquid crystal 226 of image processing device 200. Touching "Network detailed settings" on this screen transitions to screen 802.

[0091] Next, when “RAW print settings” is touched on the screen 802 , the process proceeds to decision step 803 . In decision 803, device UI control module 252 acquires the setting value of "Restrict RAW port" for item ID "10004" via security policy setting application 254 or setting value storage module 262. If the acquired value is "ON" (No in decision 803), a transition to screen 804 occurs. On the other hand, if the acquired value is "OFF" (Yes in decision 803), a transition to screen 805 occurs.

[0092] A screen 804 notifies the user that changing the RAW print settings is restricted by security policy settings, and when the OK button is pressed, the screen returns to the screen 802.

[0093] When displaying screen 805, it is necessary to obtain the current setting value of the RAW print setting. Therefore, the device UI control module 252 makes a reference request to the NW setting application 253 for the "RAW print setting" of item ID "00009" and obtains the setting value. The specific operation of the reference request will be described in FIG. 13. Screen 805 displays options for the RAW print setting, and displays either "Enable" or "Invalid" selected according to the current setting value of item ID 00009 "RAW print setting". Then, when the user touches either "Enable" or "Invalid", the screen transitions to screen 806.

[0094] A screen 806 is displayed to notify the user that the setting change is being processed, and the setting change of the image processing device 200 is performed. Here, the device UI control module 252 requests the NW setting application 253 to change the "RAW print setting" of the item ID "00009", and changes the setting value. The specific operation of the change request will be described with reference to FIG. 13.

[0095] When the processing for changing the settings of the image processing device 200 is completed, the screen transitions to a screen 807, which notifies the user of the completion of the setting changes. When the OK button is pressed on this screen, the screen returns to the screen 802.

[0096] 13 is a flowchart showing the process of referring to or changing the NW settings. The process of this flowchart is performed by the CPU 211 executing a program stored in the ROM 213. This flowchart is started when the NW setting application 253 receives a request to refer to or change the NW settings.

[0097] First, in S901, the NW setting application 253 acquires an item ID included in the received request and sets it as the setting item to be processed. Next, in step S902, the NW setting application 253 acquires a setting value associated with the item ID of the processing target from the copy of the NW setting stored in the RAM 214.

[0098] Next, in S903, the NW setting application 253 checks whether the received request is a request to refer to the NW settings or a request to change the NW settings. If the received request is a request to refer to the NW settings ("request to refer" in S903), the NW setting application 253 advances the process to S904.

[0099] In S904, the NW setting application 253 responds to the source of the NW setting reference request with the setting value acquired from the RAM 214, and ends the process of this flowchart.

[0100] On the other hand, if the received request is a request to change the NW settings (S903: "change request"), the NW setting application 253 advances the process to S905. In S905, the NW setting application 253 checks the synchronization restriction flag 257. If the synchronization restriction flag 257 is "ON" (No in S905), the NW setting application 253 ends the process of this flowchart. In this case, the request to change the NW setting is ignored, and the reason for this will be described later.

[0101] On the other hand, if the synchronization restriction flag 257 is "OFF" (Yes in S905), the process proceeds to S906. In S906, the NW setting application 253 checks whether the setting value specified in the request to change the NW setting is different from the setting value acquired from the RAM 214 in S902. If these values ​​are not different (i.e., the same value) (No in S906), the NW setting application 253 ends the processing of this flowchart.

[0102] On the other hand, if these values ​​are different (Yes in S906), the NW setting application 253 advances the process to S700. The sub-process S700 is a sequence for stopping the NW function described with reference to FIG. 11. When the sub-process S700 is completed, the NW setting application 253 advances the process to S907.

[0103] In S907, the NW setting application 253 changes the setting value associated with the item ID to be processed, among the copies of the NW settings stored in the RAM 214, to the setting value specified in the change request for the NW settings. Furthermore, the NW setting application 253 changes the setting value associated with the item ID to be processed, among the copies of the NW settings stored in the NVRAM 215, to the setting value specified in the change request for the NW settings, via the setting value storage module 262.

[0104] Next, the NW setting application 253 advances the process to S600. The sub-process S600 is the activation sequence of the NW function described in FIG. Then, upon completion of the activation sequence of the NW function (sub-process S600), the NW setting application 253 completes the operation for the request to change the NW setting, and ends the processing of this flowchart.

[0105] In this embodiment, as in S905 above, the synchronization restriction flag 257 is checked, and if it is "ON", the process is terminated, thereby ignoring the request to change the NW setting. This is a process for setting the synchronization restriction flag "ON" when the NW setting is forcibly changed due to the security policy setting, thereby preventing the NW setting from being changed unintentionally thereafter and becoming a setting state that violates the security policy setting. The process associated with the security policy setting will be described with reference to Figs. 14 and 15.

[0106] Also, if the determination in S906 above shows that the setting value specified in the change request matches the value of the NW setting stored in the RAM, there is no need to change it, so the request to change the NW setting is ignored. This makes it possible to skip unnecessary NW function stop sequence operations, start sequence operations, and setting value writing operations, thereby reducing the user's waiting time.

[0107] Note that part of the process shown in FIG.

[0108] Next, a process for setting a security policy from the WebUI will be described with reference to FIGS. 14A to 14F and 15. FIG. 14A to 14F are diagrams showing examples of screens displayed by the web browser of the terminal device 300 when a security policy is set in this embodiment. 15 is a flowchart showing an example of security policy setting processing of the image processing device 200 according to this embodiment. 15 begins when the Web server module 244 of the image processing device 200 receives an HTTP request from the Web browser of the terminal device 300.

[0109] In S1101, the Web server module 244 checks whether the received HTTP request is a security policy setting screen request. Whether the request is a security policy setting screen display request is determined based on the requested URL and request parameters.

[0110] If the request is not a security policy setting screen request (No in S1101), the Web server module 244 ends the process of this flowchart. In addition, since an actual image processing device is capable of accepting requests other than a security policy setting screen request, the Web server module 244 continues to check whether the request is another acceptable request and processes it, but this is omitted as it is outside the scope of this explanation.

[0111] If it is a security policy setting screen request (No in S1101), the Web server module 244 requests the WebUI control module 251 to generate a security policy setting screen, and the WebUI control module 251 executes S1102.

[0112] In S1102, the WebUI control module 251 determines whether or not a security administrator password has been set. Specifically, the WebUI control module 251 acquires the setting value for the security administrator password setting from the NVRAM 215 via the security policy setting application 254 and the setting value storage module 262. If the acquired setting value is "ON", it is determined that a security administrator password has been set, and if not, it is determined that a security administrator password has not been set.

[0113] Here, if a security administrator password has been set (Yes in S1102), the WebUI control module 251 advances the process to S1103. On the other hand, if the security administrator password has not been set (No in S1102), the WebUI control module 251 advances the process to S1105.

[0114] In S1103, the WebUI control module 251 generates a security administrator password authentication screen as shown in FIG.

[0115] FIG. 14A shows an example of a screen 1010 that is displayed by the Web browser of the terminal device 300 after receiving the security administrator password authentication screen in response from the image processing device 200. Reference numeral 1011 denotes an input field for a security administrator password. An OK button 1012 is a button for performing authentication using the security administrator password. When the user inputs the security administrator password in the input field 1011 and clicks the OK button 1012, information on the input security administrator password is transmitted to the image processing device 200.

[0116] When the WebUI control module 251 receives the security administrator password information via the Web server module 244, it causes an application module (not shown) that supports password authentication to execute password authentication processing. The application module judges whether the received security administrator password authentication is successful or not. Specifically, the application module compares the received security administrator password information with the "security administrator password value" stored in the NVRAM 215 and judges whether they match. If they match, it is judged that the security administrator password authentication has been successful, and on the other hand, if they do not match, it is judged that the security administrator password authentication has failed. The application module responds to the WebUI control module 251 with the success or failure of the security administrator password authentication.

[0117] Returning now to the explanation of the flowchart in FIG. In S1104, the WebUI control module 251 determines whether the security administrator password authentication has been successful. If it is determined that the security administrator password authentication has failed (No in S1104), the WebUI control module 251 returns the process to S1103 and responds again with a security administrator password authentication screen to the Web browser of the terminal device 300, prompting the user to re-enter the password.

[0118] On the other hand, if it is determined that the security administrator password authentication has failed (Yes in S1104), the WebUI control module 251 advances the process to S1105. In S1105, the WebUI control module 251 generates a security policy setting screen as shown in FIG.

[0119] FIG. 14B shows an example of a screen 1020 that is displayed by the Web browser of the terminal device 300 after receiving the security policy setting screen returned by the image processing device 200. In the area 1023, various setting items related to the security policy are displayed together with check boxes, text boxes, etc. for enabling each setting. A user operating the Web browser of the terminal device 300 can change the security policy setting of the image processing device 200 by operating the above-mentioned check boxes, text boxes, etc.

[0120] The cancel button 1022 is a button for canceling the security policy setting. When the user presses the cancel button 1022, an HTTP request is sent from the Web browser requesting a menu screen one level above the security policy setting menu. The WebUI control module 251 then generates and responds with data for the requested screen, and ends the processing of the flowchart shown in FIG. 9 (not shown).

[0121] An OK button 1021 is a button for confirming the change of the security policy setting. When the user presses the OK button 1021, a setting change list of the security policy setting operated on the screen 1020 (hereinafter, referred to as a "setting change list") is temporarily saved in the Web browser, and the screen transitions to a screen as shown in FIG. 14C.

[0122] FIG. 14C is an example of a security policy setting execution confirmation screen 1030. The OK button 1031 is a button for transmitting the setting change list. When the user presses the OK button 1031, an HTTP request including the setting change list temporarily stored in the Web browser is transmitted to the image processing device 200. Furthermore, the Web browser displays a security policy setting execution screen 1040 as shown in Fig. 14D. The setting change list is information that lists, for rows included in the category "security policy setting" in column 401 in FIG. 6, the item ID values ​​and the changed setting values ​​of the items.

[0123] A cancel button 1032 is a button for canceling transmission of the setting change list. When the user presses the cancel button 1032, the web browser displays the screen 1020 again. At this time, the web browser reads out the setting change list that has been temporarily saved, and displays it with the list applied to the check boxes, text boxes, etc. in area 1023.

[0124] Returning now to the explanation of the flowchart in FIG. When the image processing device 200 receives the HTTP request including the setting change list transmitted by the terminal device 300, in S1106, the WebUI control module 251 receives the HTTP request including the setting change list transmitted by the terminal device 300 via the Web server module 244. Then, the WebUI control module 251 passes the setting change list to the security policy setting application 254. In response to this, the security policy setting application 254 executes S1107.

[0125] In S1107, the security policy setting application 254 checks whether the image processing device 200 is in a state in which the security policy setting can be executed. Here, the state in which the security policy setting can be executed means that the image processing device 200 is in an idle state. Therefore, when the image processing device 200 is performing a printing operation, a scanning operation, a FAX sending / receiving operation, etc., the security policy setting is not in a state in which the security policy setting can be executed.

[0126] If the security policy setting is not possible (No in S1107), the security policy setting application 254 responds to the WebUI control module 251 that the security policy setting cannot be executed. In response to this, the WebUI control module 251 executes S1108.

[0127] In S1108, the WebUI control module 251 generates response data (a screen like that in FIG. 14E) indicating that the security policy setting cannot be executed. Then, the WebUI control module 251 sends an HTTP response including the response data indicating that the security policy setting cannot be executed to the terminal device 300 via the Web server module 244.

[0128] FIG. 14E shows an example of a screen 1050 displayed by the Web browser of the terminal device 300 upon receiving response data from the image processing device 200 indicating that the security policy setting cannot be executed. When the user presses the OK button 1051, the Web browser operates to display the top screen of the WebUI of the image processing device 200 (not shown).

[0129] Returning now to the explanation of the flowchart in FIG. Furthermore, if it is possible to execute the security policy setting in S1107 above (Yes in S1107), WebUI control module 251 instructs security policy setting application 254 to start processing to change the security policy setting. In response to this, security policy setting application 254 executes the repeated processing shown in S1109 to S1114 as processing to change the security policy setting. This repeated processing is repeated for the received setting change list until the entire list has been processed.

[0130] First, in S1110, the security policy setting application 254 acquires a set of combinations of unprocessed item IDs and setting values ​​from the setting change list through repeated processing. Then, the security policy setting application 254 stores the acquired set of setting changes in the NVRAM 215 via the setting value storage module 262. Here, since the setting values ​​are stored based on the item IDs, it is possible to update the specified items in the security policy settings.

[0131] Next, in S1111, the security policy setting application 254 checks whether the setting item that is restricted in accordance with the update in S1110 is a network setting, based on the dependency relationship 420 between the security policy setting and other settings shown in Fig. 8. If the setting item that is restricted is not a network setting (No in S1111), the security policy setting application 254 advances the process to S1112. On the other hand, if the setting item to be restricted is the network setting (Yes in S1111), the security policy setting application 254 advances the process to S1113.

[0132] In S1112, the security policy setting application 254 performs a setting value restriction process based on the dependency relationship 420 between the security policy setting and other settings shown in Fig. 8. Specifically, the row that matches the item ID of the security policy setting saved this time is checked in column 411, and whether the saved setting value matches the "setting value when causing a restriction on another restricted item" is checked. If they match, the setting value is forced for the dependent setting item as shown in column 412. For example, if the acquired set of setting changes is "setting value "10" for item ID "10007", "10" is saved as the setting value for item ID "01005" in the NVRAM 215 via the setting value saving module 262. After the process of S1112, the security policy setting application 254 advances the process to S1114.

[0133] In S1113, the security policy setting application 254 performs a process of restricting the setting value based on the dependency relationship 420 between the security policy setting and other settings as shown in FIG. 8. Specifically, the security policy setting application 254 checks the row that matches the item ID of the security policy setting saved this time in column 411, and checks whether the saved setting value matches the "setting value when causing a restriction on another restricted item". If they match, the security policy setting application 254 requests the NW setting database 256 to forcibly change the setting value of the dependent setting item as shown in column 412. In response to this, the NW setting database 256 sets the synchronization restriction flag 257 to "ON" and saves the forcible change of the setting value in the NVRAM 215 via the setting value saving module 262. For example, if the acquired set of setting changes is "setting value "ON" of item ID "10001", the NW setting database 256 is requested to forcibly change the setting values ​​to change item ID "00001" to "OFF" and item ID "00002" to "OFF". Based on this request, the NW setting database 256 sets the synchronization restriction flag 257 to "ON" and saves "OFF" as the setting value for item ID "00001" and "OFF" as the setting value for item ID "00002" in the NVRAM 215 via the setting value saving module 262. At this time, the NW setting database 256 does not change the copy of the NW setting held in the RAM 214. After the process of S1113, the security policy setting application 254 advances the process to S1114.

[0134] Although not shown, if the setting items subject to the restriction are both the NW setting and other settings, control is performed so that both S1112 and S1113 are executed.

[0135] In S1114, if there are any unprocessed pairs remaining in the setting change list, the security policy setting application 254 returns to S1109, and if not, proceeds to S1115.

[0136] In S1115, the security policy setting application 254 notifies the WebUI control module 251 that the security policy setting has been completed. Upon receiving this notification, the WebUI control module 251 responds to the terminal device 300 via the Web server module 244 with an HTTP response including response data (a screen such as that in FIG. 14F) indicating that the security policy setting has been completed, and proceeds to S1116.

[0137] 14F shows an example of a screen 1060 displayed by the Web browser of the terminal device 300 upon receiving response data indicating that security policy setting has been completed from the image processing device 200. The screen 1060 operates not to accept any user operations. Then, in the background processing of the Web browser, the browser periodically inquires whether the reboot has been completed, and if it has been completed, operates to display the top screen of the WebUI of the image processing device 200 (not shown).

[0138] Returning now to the explanation of the flowchart in FIG. In S1116, the security policy setting application 254 requests the system control module 261 to reboot the image processing device 200. In response to this request, the system control module 261 executes the reboot process of the image processing device 200, and this flowchart ends.

[0139] Here, in the reboot process of the image processing device 200, a NW function stop sequence is executed in the power OFF process accompanying the reboot. In the NW function stop sequence, the NW communication control module 241 judges the processing conditions based on the copy of the NW settings stored in the RAM 214, and each NW function is stopped. That is, even if the NW settings are forcibly changed by the security policy setting, the NW function stop sequence can be executed correctly without being affected by the security policy setting. Then, in the subsequent power ON process, the NW settings are copied from the NVRAM 215 to the NW setting database 256 as shown in Figs. 9 and 10, and the NW function start sequence is executed according to the processing conditions based on the copied NW settings. Through the above process, the security policy setting can be completed without causing inconsistency in the operating NW functions.

[0140] Furthermore, since each NW function can remain in operation (is maintained) until the restart process is started in the security policy setting, the completion of the security policy setting can be appropriately responded to the terminal device 300. Even if some error occurs during the update process of the security policy setting shown in S1109 to S1114, the occurred error can be appropriately responded to the terminal device 300.

[0141] That is, in the image processing device 200 of this embodiment, when the image processing device is started, the network settings among the settings stored in the NVRAM 215 are copied to a storage area in the RAM 214. The NW communication control module 241 and the NW setting application 253 perform control related to the network based on the network settings stored in the storage area. The security policy setting application 254 changes the setting values ​​of the network settings stored in the NVRAM 215 in accordance with the restrictions imposed by the security policy in accordance with the setting of the security policy (S1113) and restarts the device (S1115). Note that, when the setting of the security policy is a setting that restricts the network settings, the security policy setting application 254 does not change the network settings stored in the RAM 214 and prohibits further changes to the setting values ​​stored in the NVRAM 215 and the setting values ​​stored in the RAM 214 until the image processing device is restarted (S1113). After the image processing apparatus is restarted, a copy of the network setting values ​​among the settings stored in the NVRAM 215 is stored in the RAM 214, and furthermore, the prohibition on changing the setting values ​​stored in the NVRAM 215 and the RAM 214 is lifted (S503). Note that, during the restart, after a number of network-related functions based on the network settings stored in the RAM 214 are stopped, the power supply of the image processing apparatus is turned off.

[0142] The Web server module 244 and the WebUI control module 251 provide a Web page to a Web browser of an external device (such as the terminal device 300) connected via the network, and realize a Web service that accepts instructions via the Web page. The security policy of the image processing device 200 can be set according to the instructions accepted by the Web service.

[0143] With the above-described configuration, when the image processing device 200 executes security policy setting regarding network functions, the security policy setting can be completed without causing inconsistency in the network functions in operation. In addition, as a method for avoiding inconsistencies in network functions during operation when executing security policy settings related to network functions using a method other than the present embodiment, for example, it is possible to accept security policy settings only when the network functions are stopped, but since image processing devices in recent years are generally used by connecting to a NW, there is a possibility that convenience will be reduced. In addition, as another method, when the image processing device receives security policy settings, it is possible to wait for each network function to be stopped before reflecting the security policy settings, but stopping the network functions may take time, and the user may have to wait. Furthermore, when accepting security policy settings from an external device via a WebUI or the like, if the network functions are stopped at this timing, it will be impossible to respond to the success or failure of the accepted security policy settings. In contrast, in this embodiment, it is possible to more appropriately solve the problem of inconsistency in network functions during operation when security policy settings related to network functions are executed.

[0144] It goes without saying that the configurations and contents of the various data described above are not limited to those described above, and the data may have various configurations and contents depending on the application and purpose. Although one embodiment has been described above, the present invention can be embodied, for example, as a system, an apparatus, a method, a program, a storage medium, etc. Specifically, the present invention may be applied to a system composed of multiple devices, or may be applied to an apparatus composed of a single device. Furthermore, any combination of the above-described embodiments is also included in the present invention.

[0145] (Other embodiments) The present invention can also be realized by a process in which a program for implementing one or more of the functions of the above-described embodiments is supplied to a system or device via a network or a storage medium, and one or more processors in a computer of the system or device read and execute the program. The present invention can also be realized by a circuit (e.g., ASIC) that implements one or more of the functions. Furthermore, the present invention may be applied to a system made up of a plurality of devices, or to an apparatus made up of a single device. The present invention is not limited to the above-mentioned embodiment, and various modifications (including organic combinations of the embodiments) are possible based on the spirit of the present invention, and are not excluded from the scope of the present invention. In other words, the present invention includes all configurations that combine the above-mentioned embodiments and their modifications.

[0146] The disclosure of this embodiment includes the following configuration, method, and program. (Configuration 1) A storage means for storing settings related to the image processing device; a storage area for storing a copy of network setting values ​​among the settings stored in the storage means when the image processing device is started up; a control unit for controlling a network based on the network settings stored in the storage area, a processing means for changing the network setting values ​​stored in the storage means in accordance with a security policy setting and restrictions imposed by the security policy; a restart unit that restarts the image processing device after the processing unit changes the setting value stored in the storage unit, An image processing device characterized in that, when the processing means changes the setting value stored in the storage means, the setting value stored in the holding area is not changed, and further changes to the setting value stored in the storage means and the setting value stored in the holding area are prohibited until the image processing device is restarted by the restart means. (Configuration 2) a web service means for providing a web page to a web browser of an external device connected via a network and for receiving an instruction via the web page; 2. The image processing device according to configuration 1, wherein the security policy is set in response to an instruction received by the web service. (Configuration 3) The image processing device according to configuration 1 or 2, characterized in that after the image processing device is restarted by the restart means, a copy of the network setting value among the settings stored in the storage means is stored, and further, the prohibition on changing the setting values ​​stored in the storage means and the setting values ​​stored in the storage area is lifted. (Configuration 4) The image processing device according to any one of configurations 1 to 3, characterized in that, in the restart by the restart means, the power supply to the image processing device is turned off after a plurality of network-related functions based on the network settings stored in the storage area are stopped. (Configuration 5) 5. The image processing device according to any one of configurations 1 to 4, wherein the storage means stores settings relating to the image processing device in a non-volatile memory. (Method 1) A storage means for storing settings related to the image processing device; a storage area for storing a copy of network setting values ​​among the settings stored in the storage means when the image processing device is started up; and a control unit that performs control related to a network based on the network settings stored in the storage area, a processing step of changing the set values ​​of the network settings stored in the storage means in accordance with the setting of a security policy and in accordance with the restrictions imposed by the security policy; a restart step of restarting the image processing device after the setting value stored in the storage means is changed in the processing step, A method characterized in that when the setting value stored in the storage means is changed in the processing step, the setting value stored in the holding area is not changed, and further changes to the setting values ​​stored in the storage means and the setting values ​​stored in the holding area are prohibited until the image processing device is restarted. (Program 1) A storage means for storing settings related to the image processing device; a storage area for storing a copy of network setting values ​​among the settings stored in the storage means when the image processing device is started up; a control unit for controlling a network based on the network settings stored in the storage area, a processing step of changing the set values ​​of the network settings stored in the storage means in accordance with the setting of a security policy and in accordance with the restrictions imposed by the security policy; a restart step of restarting the image processing device after the setting value stored in the storage means is changed in the processing step, A program characterized in that, when the setting value stored in the storage means is changed in the processing step, the setting value stored in the retention area is not changed, and further changes to the setting values ​​stored in the storage means and the setting values ​​stored in the retention area are prohibited until the image processing device is restarted.

Claims

1. A storage means for storing settings related to the image processing device; a storage area for storing a copy of network setting values ​​among the settings stored in the storage means when the image processing device is started up; a control unit for controlling a network based on the network settings stored in the storage area, a processing means for changing the network setting values ​​stored in the storage means in accordance with a security policy setting and restrictions imposed by the security policy; a restart unit that restarts the image processing device after the processing unit changes the setting value stored in the storage unit, An image processing device characterized in that, when the processing means changes the setting value stored in the storage means, the setting value stored in the holding area is not changed, and further changes to the setting value stored in the storage means and the setting value stored in the holding area are prohibited until the image processing device is restarted by the restart means.

2. a web service means for providing a web page to a web browser of an external device connected via a network and for receiving an instruction via the web page; 2. The image processing apparatus according to claim 1, wherein the security policy is set in response to an instruction received through the web service.

3. The image processing device according to claim 1, characterized in that after the image processing device is restarted by the restart means, a copy of the setting values ​​of the network settings among the settings stored in the storage means is stored, and further, the prohibition on changing the setting values ​​stored in the storage means and the setting values ​​stored in the retention area is lifted.

4. 2. The image processing apparatus according to claim 1, wherein, in the rebooting by the rebooting means, a power supply to the image processing apparatus is turned off after a plurality of network-related functions based on the network settings stored in the storage area are stopped.

5. 2. The image processing apparatus according to claim 1, wherein the storage means stores the settings relating to the image processing apparatus in a non-volatile memory.

6. A storage means for storing settings related to the image processing device; a storage area for storing a copy of network setting values ​​among the settings stored in the storage means when the image processing device is started up; and a control unit that performs control related to a network based on the network settings stored in the storage area, a processing step of changing the set values ​​of the network settings stored in the storage means in accordance with the setting of a security policy and in accordance with the restrictions imposed by the security policy; a restart step of restarting the image processing device after the setting value stored in the storage means is changed in the processing step, A method characterized in that when the setting value stored in the storage means is changed in the processing step, the setting value stored in the holding area is not changed, and further changes to the setting values ​​stored in the storage means and the setting values ​​stored in the holding area are prohibited until the image processing device is restarted.

7. A storage means for storing settings related to the image processing device; a storage area for storing a copy of network setting values ​​among the settings stored in the storage means when the image processing device is started up; a control unit for controlling a network based on the network settings stored in the storage area, a processing step of changing the set values ​​of the network settings stored in the storage means in accordance with the setting of a security policy and in accordance with the restrictions imposed by the security policy; a restart step of restarting the image processing device after the setting value stored in the storage means is changed in the processing step, A program characterized in that, when the setting value stored in the storage means is changed in the processing step, the setting value stored in the retention area is not changed, and further changes to the setting values ​​stored in the storage means and the setting values ​​stored in the retention area are prohibited until the image processing device is restarted.

Images