Information processor, control method for information processor, and program

Abstract

To improve security.SOLUTION: An information processor has: first receiving means which can receive an instruction to set first server connection setting to be used for connecting a server at a first level; second receiving means which can receive an instruction to set second server connection setting to be used when connecting the server at a second level higher in security level than the first level; and control means which performs control to suppress reception of the instruction to set the fist server connection setting in the first receiving means on the basis that the instruction to set the second server connection setting is received in the second receiving means.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present disclosure relates to a technique for controlling an authentication operation in an information processing device. [Background technology]

[0002] An image processing device such as a printer has various communication functions. An image processing device is a type of information processing device. In the image processing device, server connection settings used for communication with various servers can be set. For example, assume that the communication partner is a mail server. In this case, as an example of the server connection setting, POP (Post Office Protocol) or SMTP-AUTH (Simple Mail Transfer Protocol-Authentication) can be set. Furthermore, OAuth2.0 (Open Authorization2.0) can also be set. A user can select and set a desired server connection setting.

[0003] POP and SMTP-AUTH are methods for authentication using passwords, and are implemented by a client and an authentication server. When a client requests data from the authentication server, the authentication server requests a password from the client, and if authentication is successful, the authentication server sends the data to the client.

[0004] OAuth2.0 is a method for authorization using an access token, and is implemented by a client, authorization server, and resource server. When a client requests a token from the authorization server, the authorization server queries the user for permission to issue a token. If the user approves permission to issue a token, the client can receive data from the resource server using the token obtained from the authorization server. OAuth2.0 is adopted as a highly secure server connection method because it can prevent the leakage of information such as passwords.

[0005] In such server connection settings, there is a technique for controlling the setting screen to improve security. Patent Document 1 discloses a technique for controlling the server connection setting screen of an image processing device according to administrator authority and user authentication status. [Prior art documents] [Patent documents]

[0006] [Patent Document 1] JP 2022-131236 A Summary of the Invention [Problem to be solved by the invention]

[0007] There is a demand for technologies that can improve security.

[0008] An object of the present disclosure is to provide a technique capable of improving security. [Means for solving the problem]

[0009] An information processing device according to one embodiment of the present disclosure is characterized in having a first receiving means capable of receiving an instruction to set a first server connection setting to be used when connecting to a server at a first level, a second receiving means capable of receiving an instruction to set a second server connection setting to be used when connecting to the server at a second level having a higher security level than the first level, and a control means that performs control to suppress acceptance of an instruction to set the first server connection setting by the first receiving means based on receipt of an instruction to set the second server connection setting by the second receiving means. Effect of the Invention

[0010] According to the present disclosure, it is possible to improve security. [Brief description of the drawings]

[0011] [Figure 1] FIG. 2 is a block diagram illustrating a hardware configuration of the image processing device. [Diagram 2] FIG. 2 is a diagram illustrating an example of a software configuration of the image processing apparatus. [Diagram 3] 13 is a flowchart illustrating an example of a setting confirmation process of OAuth2.0. [Figure 4] FIG. 13 is a diagram illustrating an example of an OAuth2.0 setting screen. [Diagram 5] FIG. 13 is a diagram illustrating an example of a server connection setting screen other than OAuth2.0. [Figure 6] FIG. 13 is a diagram illustrating an example of an OAuth2.0 setting screen. [Figure 7] FIG. 11 is a diagram illustrating an example of a flowchart for performing an OAuth2.0 setting cancellation process. [Figure 8] 13 is a flowchart for performing a setting confirmation process of OAuth2.0. [Figure 9] FIG. 13 is a diagram showing an example of a confirmation screen. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0012] Preferred embodiments of the present disclosure will be described in detail below with reference to the accompanying drawings. Note that the following embodiments do not limit the subject matter of the present disclosure, and not all combinations of features described in the following embodiments are necessarily essential to the solution of the present disclosure. Note that the same components will be described with the same reference numerals.

[0013] <<First embodiment>> In this embodiment, an example will be described in which a server connection setting with a higher security level can be given priority. Taking a mail server as an example, POP and SMTP-AUTH are methods for performing authentication using a password. The security level of POP and SMTP-AUTH is the first level. OAuth2.0 is a method for performing authorization using an access token. As described above, OAuth2.0 can prevent information such as passwords from leaking, so it can be said to be a second level server connection setting with a higher security level than the first level. Note that the first level and the second level are used for relative comparison, and the number of levels does not have any particular meaning.

[0014] As such, there are server connection settings with relatively high security levels. However, users who are not familiar with server connection settings (such as administrator users) may not know which server connection settings are appropriate. For this reason, even if a server connection setting with a high security level is once set, it may be unintentionally changed to a setting with a low security level.

[0015] In view of this, in this embodiment, an example will be described in which, when a server connection setting with a high security level is set, the user is prevented from setting other server connection settings.

[0016] For example, in this embodiment, when OAuth2.0, which has a high security level, is set, the setting items related to other server connection settings are grayed out on the server connection setting screen for setting the server connection. In this way, by controlling the user not to be able to set other server connection settings, an example will be described in which it is possible to prevent unintentional change from a server connection setting with a high security level to other server connection settings.

[0017] <Hardware configuration> 1 is a block diagram illustrating a hardware configuration of an image processing device 1 according to this embodiment. The image processing device 1 has a control unit 10, a display / operation unit 12, and an image processing unit 13.

[0018] The control unit 10 controls the operation of each unit of the image processing device 1. The control unit 10 has a CPU 100, a communication unit 101, a RAM 102, a HDD 103, a ROM 104, a timer 105, and a fax unit 106. The CPU 100 controls the entire control unit 10. The communication unit 101 transmits and receives data via a LAN 11. The LAN 11 indicates a network for exchanging data with an external device, and the image processing device 1 is connected to the Internet via the LAN 11. For example, an external device is a personal computer (PC).

[0019] The RAM 102 provides a system work memory for the CPU 100 to operate. The HDD 103 is a hard disk drive. The HDD 103 may be, for example, a magnetic disk, an optical medium, or another storage device such as a flash memory, or may be a combination of these. The HDD 103 can store job data, setting data, and the like. The HDD 103 does not have to exist within the image processing device 1. For example, an external server or a personal computer may be used as a storage device via the communication unit 101.

[0020] The ROM 104 is a boot ROM that stores a boot program for the system. The CPU 100 loads a program installed in the HDD 103 into the RAM 102 using the boot ROM of the ROM 104, and performs various controls based on the program.

[0021] A timer 105 counts time according to instructions from the CPU 100, and when the specified time has elapsed, notifies the CPU 100 by an interrupt or the like. A fax unit 106 transmits and receives fax data via the telephone line 14.

[0022] The display / operation unit 12 is controlled by the control unit 10. The display / operation unit 12 has a display unit 120 and an input unit 121. The display unit 120 is a display for displaying information of the image processing device to a user. The input unit 121 accepts input from a user through an interface such as a touch panel, a mouse, a camera, voice input, or a keyboard.

[0023] The image processing unit 13 is controlled by the control unit 10. The image processing unit 13 has an image analysis unit 130, an image generation unit 131, and an image output unit 132. The image analysis unit 130 analyzes the structure of an original image and extracts necessary information from the analysis result. The image generation unit 131 reads (scans) an original document, digitizes the image of the original document, generates image data, and stores the image data in the HDD 103. The image generation unit 131 can also generate original image data in a different format using the information analyzed by the image analysis unit 130.

[0024] The image output unit 132 outputs image data stored in the HDD 103 or the like. Examples of the output method include printing the document image data on paper, and transmitting the document image data to an external device, a server, or a facsimile machine connected to the network via the communication unit 101. The image output unit 132 can also output and store the image data in a storage medium connected to the image processing device 1.

[0025] <Software configuration> 2 is a diagram showing an example of the software configuration of the image processing device 1. The image processing device 1 has a server connection setting screen display unit 201, a confirmation screen display unit 202, a button press receiving unit 203, and a security level identification unit 204. The image processing device 1 also has a server connection setting selection control unit 205, a server connection setting selection control release unit 206, a server connection setting confirmation unit 207, and a server connection setting storage unit 208. Each of these functional units is realized by the CPU 100 loading a program installed in the HDD 103 into the RAM 102 using the boot ROM of the ROM 104, and executing the program.

[0026] The server connection setting screen display unit 201 performs processing to display a server connection setting screen. The confirmation screen display unit 202 displays a screen for confirming that the server connection settings are to be changed. In detail, when a server connection setting with a high security level has already been set, the confirmation screen display unit 202 displays the confirmation screen when the user presses the setting button for other server connection settings on the server connection setting screen. The confirmation screen display unit 202 will be described in the second embodiment described later.

[0027] The button press receiving unit 203 receives a button press by the user. The security level identifying unit 204 identifies the security level of the set server connection setting or the server connection setting selected by the user. When a server connection setting with a high security level has been set, the server connection setting selection control unit 205 grays out the setting area for other server connection settings on the server connection setting screen. When a server connection setting with a high security level has been canceled, the server connection setting selection control canceling unit 206 cancels the graying out of the setting area for other server connection settings on the server connection setting screen.

[0028] A server connection setting confirmation unit 207 confirms the server connection settings. A server connection setting storage unit 208 stores the server connection settings set by the user.

[0029] Furthermore, each functional unit shown in FIG. 2 is merely an example and is not limited to this example. The apparatus may include functional units other than those shown in FIG. 2, or may not include some of the functional units shown in FIG. 2.

[0030] <OAuth2.0 Setting Confirmation Process> FIG. 3 is a flowchart showing an example of the OAuth2.0 setting confirmation process. FIG. 4 is a diagram showing an example of the OAuth2.0 setting screen displayed on the web browser of the PC. FIG. 5 is a diagram showing an example of a server connection setting screen other than OAuth2.0 displayed on the display unit 120 of the image processing apparatus. FIG. 6 is a diagram showing an example of the OAuth2.0 setting screen that continues to be displayed on the web browser of the PC after FIG. 4. Hereinafter, the OAuth2.0 setting confirmation process, which is a server connection setting with a high security level, will be described with reference to FIGS. 3, 4, 5, and 6.

[0031] FIG. 3 is a flowchart for performing the OAuth2.0 setting confirmation process. The process shown in FIG. 3 is realized when the CPU 100 functions as each functional unit shown in FIG. 2 as described above. That is, the flowchart of FIG. 3 is realized when the CPU 100 reads out and executes the program stored in the ROM 104 or the like into the RAM 102. Note that part or all of the functions of the steps in FIG. 3 may be realized by hardware such as an ASIC or an electronic circuit. The symbol "S" in the description of each process means that it is a step in the flowchart diagram (the same applies to the flowchart diagrams in this specification hereinafter).

[0032] The process shown in Fig. 3 is performed in response to the image processing device 1 receiving an instruction from a user to display a server connection setting screen of OAuth2.0. In S301, the button press receiving unit 203 judges whether or not a button press for confirming the OAuth2.0 settings has been detected. If the button press receiving unit 203 judges in S301 that a button press for confirming the OAuth2.0 settings has been detected, the process proceeds to S302. If the button press receiving unit 203 judges that a button press for confirming the OAuth2.0 settings has not been detected, the process proceeds to S306. The button for confirming the OAuth2.0 settings is the OK button 403 that is pressed after various settings are completed by pressing the setting button 401, as described later with reference to Fig. 4(a).

[0033] In this embodiment, the image processing device 1 accepts an instruction to set OAuth2.0 from a PC or the like other than the image processing device 1 via a LAN. Also, the image processing device 1 accepts server connection settings other than OAuth2.0 via a local UI (display / operation unit 12) of the image processing device 1. In setting OAuth2.0, the number of characters that the user needs to input tends to be large. The keyboard and screen size used in the local UI of the image processing device 1 may degrade operability. For this reason, in this embodiment, an example in which the OAuth2.0 setting is performed through a PC will be described, but the OAuth2.0 setting may be performed through the local UI of the image processing device 1. Also, server connection settings other than OAuth2.0 may be performed through a PC. The OAuth2.0 setting may be performed from the same screen as the server connection settings other than OAuth2.0, or from a different screen.

[0034] When the button press receiving unit 203 determines that a button press for confirming the OAuth2.0 settings has been detected, the security level identifying unit 204 identifies that a server connection setting with a high security level has been selected. Note that a high security level refers to a level higher than a predetermined level when security levels are classified in stages. As described above, the security levels of POP and SMTP-AUTH are defined as the first level, and the predetermined level is defined as the first level. In this case, OAuth2.0 becomes a server connection setting with a higher security level than the first level (predetermined level).

[0035] FIG. 4 shows an example of an OAuth2.0 setting screen displayed when the OAuth2.0 setting screen is selected from a web browser of a PC. FIG. 4(a) shows an example of a setting screen 400 before OAuth2.0 is set, and FIG. 4(b) shows an example of a setting screen 410 after OAuth2.0 is set. The process shown in FIG. 3 is started, for example, in response to the display of the setting screen 400 shown in FIG. 4(a). For example, assume that a setting screen (not shown) of the image processing device 1, which is a device to be set, is displayed in a web browser of a PC. The setting screen 400 in FIG. 4(a) is displayed in response to the selection of the "OAuth2.0 setting" item by a user via a web browser in such a state. FIG. 4(a) is an example of a screen for setting a server connection when the image processing device 1 connects to a mail server. Note that a server connection setting screen is provided for each server to be connected, and it is configured so that server connection setting can be performed individually for each server.

[0036] In the setting screen of FIG. 4(a), a "Set" button 401, a cancel button 402, and an OK button 403 for setting OAuth2.0 are arranged. In this embodiment, when the "Set" button 401 for setting OAuth2.0 is pressed, various processes for setting OAuth2.0 are performed as described later with reference to FIG. 6. Then, when the OK button 403 is selected by the user via the Web browser after various settings are completed, information indicating that the button for finalizing the OAuth2.0 settings has been selected by the user is sent to the image processing device 1. Based on this information, the button press receiving unit 203 of the image processing device 1 determines that the button press for finalizing the OAuth2.0 settings has been detected in S301. That is, when the OK button 403 is pressed after various settings are made in response to the pressing of the "Set" button 401, the process proceeds to S302. As described above, when OAuth2.0 is set through the local UI of the image processing device 1, the button press receiving unit 203 may determine whether or not an equivalent button press on the local UI has been detected.

[0037] In S302, the server connection setting storage unit 208 determines whether there is a server connection setting other than OAuth 2.0 that has already been set. If the server connection setting storage unit 208 determines that there is a server connection setting other than OAuth 2.0 that has already been set, the process proceeds to S303, and if it determines that there is no server connection setting other than OAuth 2.0 that has already been set, the process proceeds to S304.

[0038] In S303, the server connection setting confirmation unit 207 cancels the already set server connection setting other than OAuth2.0. That is, in order to give priority to the OAuth2.0 setting, the already set server connection setting other than OAuth2.0 is cancelled. Here, canceling the server connection setting refers to controlling to change the server connection setting set to valid to invalid. For example, as described later, some server connection settings have a form in which a user name and a password are registered and stored. In S303, the registered and stored user name and password are not erased, but are left stored. If the released server connection setting is later returned to valid, the registered and stored user name and password are returned to the set state. After S303, the process proceeds to S304. In S304, the server connection setting confirmation unit 207 confirms the OAuth2.0 setting.

[0039] Next, in S305, the server connection setting selection control unit 205 performs a setting for graying out a setting area for server connection settings other than OAuth2.0 on the server connection setting screen. In this embodiment, a server connection setting screen for connecting to a server other than OAuth2.0 is displayed on the local UI of the image processing device 1. For this reason, the server connection setting selection control unit 205 performs a setting for graying out a setting area for server connection settings other than OAuth2.0 on the server connection setting screen displayed on the display unit 120. In response to this setting, the server connection setting screen display unit 201 grays out a setting area for server connection settings other than OAuth2.0.

[0040] FIG. 5 is an example of a server connection setting screen other than OAuth2.0 that is displayed when server connection setting is selected in the local UI of the image processing device 1. Here, server connection setting of a mail server is shown. FIG. 5(a) shows a setting screen 500 before being grayed out. POP authentication setting buttons 501 to 505 and SMTP-AUTH authentication setting buttons 506 to 507 are displayed on the setting screen 500. Also, text boxes 508 to 509 for inputting a user name and a password used for SMTP-AUTH authentication are displayed on the setting screen 500. Also, a cancel button 510 for canceling the change of the server connection setting and an OK button 511 for confirming the change of the server connection setting are displayed. The setting screen 500 in the display form shown in FIG. 5(a) is, for example, a setting screen before OAuth2.0 setting is performed. A user of the image processing device 1 can perform various server connection settings through the setting screen 500.

[0041] FIG. 5B shows the setting screen 520 after the graying out in S305. The setting screen 520 is the same as the setting screen 500, but the setting items are grayed out. The setting screen 520 displays POP authentication setting buttons 521-525 and SMTP-AUTH authentication setting buttons 526-527. The setting screen 520 also displays text boxes 528-529 for inputting a user name and a password used for SMTP-AUTH authentication. The setting screen 520 also displays a cancel button 530 for canceling the change of the server connection setting, and an OK button 531 for confirming the change of the server connection setting. In this embodiment, when OAuth2.0 is set, the server connection setting screen display unit 201 is configured to gray out all buttons in FIG. 5B except for the cancel button 530 and the OK button 531. In this embodiment, the grayed out items are configured to be unable to be selected by the user. That is, the setting cannot be updated even if the user presses (touches) the grayed out items. According to this control, the OAuth2.0 settings can be maintained according to the settings made, and therefore it is possible to prevent unintentional changes to settings with a lower security level even if a server connection setting with a high security level has been set once.

[0042] As described above, if values ​​have already been registered in text boxes 528-529 for inputting a user name and password, those values ​​are maintained even when the boxes are grayed out. In this case, values ​​may or may not be displayed in text boxes 528-529 for inputting a user name and password when the boxes are grayed out. After S305, the process of the flowchart shown in FIG. 3 ends.

[0043] In S306, the server connection setting screen display unit 201 determines whether the display of the setting screen 400 shown in Fig. 4(a) has ended. For example, when the cancel button 402 is pressed on the setting screen 400 in Fig. 4(a), it is determined that the display of the setting screen 400 has ended, and the processing of the flowchart shown in Fig. 3 ends. If it is not determined that the display of the setting screen 400 has ended, the process returns to S301 and repeats. Note that when the cancel button 402 is selected by the user via the web browser, information indicating that the cancel button 402 has been selected is sent to the image processing apparatus 1 in the same manner as when the OK button 403 is pressed. Based on this information, the button press reception unit 203 of the image processing apparatus 1 determines that the cancel button 402 has been pressed in S306 and notifies the server connection setting screen display unit 201 of the end instruction of the setting screen.

[0044] Note that in the processing of the flowchart in Fig. 3, an example in which various settings are performed in response to the pressing of the "Set" button 401, and then the processing after S302 is performed based on the pressing of the OK button 403 has been described. However, it is not limited to this example. For example, the processing after S302 may be performed in response to the pressing of the "Set" button 401. That is, regardless of whether the actual OAuth2.0 setting is completed, the processing after S302 may be performed in response to determining that the pressing of the button for OAuth2.0 setting has been detected.

[0045] <OAuth2.0 Setting Process> Fig. 6 is a diagram showing examples of various screens displayed on the web browser of the PC after the "Set" button 401 is pressed on the setting screen 400 in Fig. 4(a). When the "Set" button 401 is pressed, various processes for causing the authorization server to acquire an access token for the image processing apparatus 1 are performed.

[0046] A screen 610 is a setting screen for the image processing device 1, which is displayed on the web browser of the PC. When the user presses an edit button 611 on the screen 610, a screen 620 is displayed on the web browser. The user inputs an endpoint URL corresponding to an authorization server in an area 621 (S1). When the user then presses an OK button 622, a device authorization request process of the image processing device 1 is started for the authorization server indicated by the endpoint URL (S2). Specifically, the image processing device 1 requests the authorization server indicated by the endpoint URL to issue information including a Verification URL, a user code, a message, and an expiration date (S3). In response to this request, the authorization server transmits information including a Verification URL, a user code, a message, and an expiration date to the image processing device 1, and the image processing device 1 receives this information (S4).

[0047] The image processing device 1 presents the information received from the authorization server to the user (S5). On screen 610, the information issued by the authorization server and received by the image processing device 1 is displayed by the web browser of the PC. When the user selects URL 612, which is the Verification URL notified from the authorization server, on the web browser, screen 630 is displayed in a separate window on the web browser (S6). Following the message on screen 630, the user inputs the user code notified to the image processing device 1 by the authorization server and presses login button 632 (S7). The authorization server managing the Verification URL verifies the input user code, and if there is no problem, causes screen 640 to be displayed on the web browser (S8).

[0048] On the other hand, the image processing device 1 transmits the device code received from the authorization server to the authorization server and requests the authorization server to issue an access token (S9). This access token issuance request (S9) by the image processing device 1 is performed in parallel with the above-mentioned S4 to S8 in the image processing device 1.

[0049] On the approval screen of screen 640, the user is asked whether to approve the authorization request. When the user presses the "Yes" button 641 on the web browser, the authorization by the user is completed. In response to the completion of the authorization by the user, the authorization server sends an access token, the expiration date of the access token, and a refresh token to the image processing apparatus 1 that is the source of the device code associated with the user code (S10). The image processing apparatus receives and stores the access token, the expiration date of the access token, and the refresh token from the authorization server (S11). Also, on the screen of the web browser, screen 650 is displayed in response to the pressing of the "Yes" button 641. When the OK button 651 is pressed by the user on screen 650, the web browser returns to the setting screen 400 in Fig. 4(a). Then, when the OK button 403 is pressed, as described above, it will be determined as YES in S301.

[0050] In this way, when the image processing apparatus 1 that has completed the OAuth2.0 setting communicates with the mail server, it will perform processing using the stored access token. Note that an expiration date is set for the access token, and the access token will be updated using the refresh token before the expiration date.

[0051] The access token acquisition process by the image processing apparatus 1 described above is only an example and is not limited to this example. Also, as described above, the OAuth2.0 setting process may be performed using the local UI of the image processing apparatus 1.

[0052] <OAuth2.0 Setting解除処理> FIG. 7 is a diagram showing an example of a flowchart for performing the OAuth2.0 setting release process. Hereinafter, the OAuth2.0 setting release process will be described with reference to FIG. 4, FIG. 5, and FIG. 7. The process shown in FIG. 7 is realized by the CPU 100 functioning as each functional unit shown in FIG. 2, as described above. That is, the flowchart in FIG. 7 is realized by the CPU 100 reading a program stored in the ROM 104 or the like into the RAM 102 and executing it. Note that some or all of the functions of the steps in FIG. 7 may be realized by hardware such as an ASIC or an electronic circuit.

[0053] The process shown in Fig. 7 is performed in response to receiving an instruction from a user to display an OAuth2.0 server connection setting screen when OAuth2.0 has been set. Fig. 4(b) shows a setting screen 410 after OAuth2.0 has been set, and a "Cancel" button 411 for canceling the OAuth2.0 setting is displayed. When the setting screen 410 in Fig. 4(b) is displayed, the process shown in Fig. 7 is performed.

[0054] In S701, the button press receiving unit 203 determines whether or not a press of a button for canceling the OAuth2.0 settings has been detected on the setting screen 410. That is, it determines whether or not the "Cancel" button 411 on the setting screen 410 has been pressed. If it is determined that a press of a button for canceling the OAuth2.0 settings has been detected, the process proceeds to S702. If it is determined that a press of a button for canceling the OAuth2.0 settings has not been detected, the process proceeds to S704.

[0055] In S702, the server connection setting determination unit 207 cancels the OAuth2.0 setting. Next, in S703, the server connection setting selection control release unit 206 cancels the graying out of the setting area of ​​the server connection setting other than OAuth2.0 on the server connection setting screen. That is, the display setting is changed from the grayed out state of the setting area of ​​the server connection setting other than OAuth2.0 as shown in FIG. 5(b) to the grayed out state as shown in FIG. 5(a). As described above, if an item has already been input and selected in the setting area of ​​the server connection setting other than OAuth2.0, the screen returns to the screen of FIG. 5(a) with those settings maintained. Then, the processing of FIG. 7 ends.

[0056] In S704, the server connection setting screen display unit 201 determines whether the display of the setting screen 410 shown in Fig. 4(b) has ended. For example, when the cancel button 412 is pressed on the setting screen 410 in Fig. 4(a), it is determined that the display of the setting screen 410 has ended, and the process of the flowchart shown in Fig. 7 ends. When it is not determined that the display of the setting screen 410 has ended, the process returns to S701 and repeats the process.

[0057] As described above, according to this embodiment, it is possible to improve security. That is, it is possible to set a server connection setting with a high security level with priority. More specifically, in this embodiment, when OAuth2.0 with a high security level is set in the server connection setting, a process is performed to prevent other server connection settings from being set. This makes it possible to prevent a user from unintentionally changing to other server connection settings after setting a server connection setting with a high security level, thereby improving security.

[0058] In the present embodiment, an example of graying out the server connection settings other than OAuth2.0 has been described as a means for suppressing the setting of the server connection settings other than OAuth2.0, but the present invention is not limited to this example. For example, the setting area for server connection settings other than OAuth2.0 may be hidden. Also, when transitioning to a screen for server connection settings other than OAuth2.0, a pop-up may be displayed to notify the user that the settings cannot be changed.

[0059] <<Second embodiment>> In the first embodiment, an example was described in which when OAuth2.0, which is a server connection setting with a high security level, is set, the setting area for other server connection settings is grayed out to prevent other server connection settings from being set. However, in some cases, there may be cases in which a user wishes to change the server connection settings on a trial basis, even if they are aware that the security level will be lowered.

[0060] In this embodiment, when OAuth2.0 is set, the process of graying out the setting area for server connection settings other than OAuth2.0, as described in the first embodiment, is not performed. Instead, in this embodiment, when the setting button for server connection settings other than OAuth2.0 is pressed by the user after OAuth2.0 is set, a screen for confirming that the setting is changed from a setting with a high security level is displayed. An example of suppressing changes to the server connection settings in this way will be described.

[0061] The basic configuration is similar to the example described in the first embodiment, so a description thereof will be omitted here. The difference from the first embodiment is that the process of confirming the server connection settings by the server connection setting confirmation unit 207 is changed from Fig. 3 to Fig. 8. The following description will focus on the differences from the first embodiment.

[0062] Fig. 8 is a flowchart for performing the setting confirmation process of OAuth2.0. The process shown in Fig. 8 is realized by the CPU 100 functioning as each functional unit shown in Fig. 2 as described above. That is, the flowchart in Fig. 8 is realized by the CPU 100 reading a program stored in the ROM 104 or the like into the RAM 102 and executing it. Note that some or all of the functions of the steps in Fig. 8 may be realized by hardware such as an ASIC or an electronic circuit.

[0063] The process shown in Fig. 8(a) is performed in response to receiving an instruction from a user to display an OAuth2.0 server connection setting screen. The processes from S801 to S804 and S806 in Fig. 8(a) are the same as the processes from S301 to S304 and S306 in Fig. 3, respectively. The process in Fig. 8(a) does not perform the process of graying out server connection setting buttons other than OAuth2.0, as described in S305 in Fig. 3.

[0064] The process shown in Fig. 8(b) is performed in response to receiving an instruction to display a server connection setting screen when OAuth2.0 is set. Specifically, the process shown in Fig. 8(b) is performed when the setting screen 500 in Fig. 5(a) is displayed on the display unit 120 of the image processing device 1 in a state where OAuth2.0 is set.

[0065] In S811, the button press reception unit 203 determines whether or not a press of a setting button for server connection settings other than OAuth2.0 has been detected on the server connection setting screen of the setting screen 500 in a state in which OAuth2.0 has been set. For example, on the setting screen 500 of Fig. 5(a), a user performs some input, and then it is determined whether a press of the OK button 531 has been detected. If it is determined that a press of the setting button for server connection settings other than OAuth2.0 has been detected, the process proceeds to S812, and if not, the process proceeds to S815.

[0066] In S812, the confirmation screen display unit 202 displays a screen for confirming that the server connection setting is to be changed from OAuth2.0.

[0067] Fig. 9 is a diagram showing an example of a confirmation screen 900. The confirmation screen 900 shown in Fig. 9 is a screen displayed on a UI (in this example, a local UI of the display unit 120 of the image processing device 1) for performing server connection settings other than OAuth2.0. The confirmation screen 900 in Fig. 9 shows an example in which an "OK" button 801 for confirming the change of the server connection settings and a "Cancel" button 802 for canceling the change of the server connection settings are displayed.

[0068] In S813, the button press receiving unit 203 determines whether the button pressed on the confirmation screen 900 is the "OK" button 801. If it is determined that the button pressed on the confirmation screen 900 is the "OK" button 801, the process proceeds to S814. If it is determined that the button pressed on the confirmation screen 900 is not the "OK" button 801, that is, if the "Cancel" button 802 is pressed on the confirmation screen, the process ends with the processing of the flowchart shown in FIG. 8(b) without changing the settings.

[0069] In S814, the server connection setting confirmation unit 207 confirms the server connection setting selected by the user. If the user continues the server connection setting despite being warned of the situation, the server connection setting selected by the user is confirmed, with the user's intention respected.

[0070] In S815, the server connection setting screen display unit 201 determines whether the display of the setting screen 500 shown in Fig. 5(a) has ended. For example, when the cancel button 510 is pressed on the setting screen 500 in Fig. 5(a), it is determined that the display of the setting screen 500 has ended, and the process of the flowchart shown in Fig. 8 ends. When it is not determined that the display of the setting screen 500 has ended, the process returns to S811 and repeats the process.

[0071] As described above, in this embodiment, it is possible to set a server connection setting with a high security level with priority. More specifically, in this embodiment, when OAuth2.0 with a high security level is set in the server connection setting, a process is performed to suppress the setting of other server connection settings. Specifically, when a server connection setting other than OAuth2.0 is set by the user in a state where OAuth2.0 is set, a confirmation screen is displayed to suppress the setting of other server connection settings. By displaying the confirmation screen 900 as shown in FIG. 9, the user confirms that the setting is changed from the server connection setting with a high security level before finalizing the setting, so that it is possible to suppress the user from unintentionally setting a low security level.

[0072] <<Other embodiments>> In the above-described embodiments, an image processing device such as a multifunction peripheral has been described as an example of an information processing device. However, the information processing device is not limited to an image processing device as long as it is a device capable of communicating with other devices.

[0073] In addition, POP and SMTP-AUTH are given as examples of the first server connection setting with a low security level, and OAuth2.0 is given as an example of the second server connection setting with a high security level, but the present invention is not limited to these examples. Any method may be applied as long as there is a relative difference in security level. The high and low security levels may be managed in advance in the image processing device using a table or the like, or the user may be configured to set the security level for each server connection setting.

[0074] In addition, in the above-mentioned embodiments, the relationship with the OAuth2.0 settings has been described, but in the case of server connection settings with a low security level, processing different from the processing in the above-mentioned embodiments can be performed. For example, when an instruction to set SMTP-AUTH is given in a state where POP is set, the image processing device 1 can perform processing to set SMTP-AUTH.

[0075] In addition, in each of the above-described embodiments, a mail server has been described as an example of a service server with which the information processing device communicates using an access token obtained by OAuth2.0, but the example is not limited to this. The information processing device can perform processing using an access token obtained by OAuth2.0 with any type of service server.

[0076] Furthermore, if there are multiple service servers that use OAuth2.0, the processes described in the above embodiments can be performed for each connected service server.

[0077] The present invention can also be realized by a process in which a program for implementing one or more of the functions of the above-described embodiments is supplied to a system or device via a network or a storage medium, and one or more processors in a computer of the system or device read and execute the program. The present invention can also be realized by a circuit (e.g., ASIC) that implements one or more of the functions.

[0078] The disclosure of the present embodiment includes configurations typified by the following information processing device example, information processing device control method example, and program example.

[0079] <Configuration 1> A first receiving means capable of receiving an instruction to set a first server connection setting used when connecting to a server at a first level; a second receiving means capable of receiving an instruction to set a second server connection setting used when connecting to the server at a second security level higher than the first security level; a control means for performing control to suppress acceptance of an instruction to set the first server connection setting by the first reception means, based on acceptance of an instruction to set the second server connection setting by the second reception means; 13. An information processing device comprising:

[0080] <Configuration 2> 2. The information processing device according to configuration 1, wherein the control means performs the suppressing control by making an area that accepts an instruction to set the first server connection setting an area that cannot be selected.

[0081] <Configuration 3> 2. The information processing device according to configuration 1, wherein the control means performs the suppression control by graying out an area for receiving an instruction to set the first server connection setting.

[0082] <Configuration 4> 2. The information processing device according to configuration 1, wherein the control means performs the suppression control by controlling so as not to display an area for receiving an instruction to set the first server connection setting.

[0083] <Component 5> The information processing device according to configuration 1, wherein the control means performs the suppression control by outputting a predetermined notification when the first reception means receives an instruction to set the first server connection setting.

[0084] <Component 6> The information processing device described in configuration 1, characterized in that when the control means receives an instruction to set the first server connection setting at the first reception means, it performs the suppression control by outputting a predetermined notification that enables further instructions to be accepted from the user.

[0085] <Component 7> The information processing device according to configuration 6, characterized in that when an instruction from a user based on the specified notification is an instruction to set the first server connection setting, the control means performs control to set the first server connection setting.

[0086] <Component 8> The information processing device of any one of configurations 1 to 7, characterized in that the control means, when the second reception means receives an instruction to set the second server connection setting while the first server connection setting is set, cancels the first server connection setting.

[0087] <Component 9> The information processing device according to configuration 8, wherein when the second receiving means receives an instruction to cancel the second server connection setting that has already been set, the control means restores the first server connection setting that had been canceled.

[0088] <Component 10> When the first server connection setting is set, information of a specific setting item is stored in the information processing device; The information processing device described in configuration 9, wherein the control means stores information of the specific setting item even when the first server connection setting is released, and when the first server connection setting is restored, the information of the specific setting item is also restored.

[0089] <Component 11> The information processing device of any one of configurations 1 to 10, characterized in that when the first server connection setting is set and the first reception means receives an instruction to set a third server connection setting of the first level, the control means performs control such that the setting of the third server connection setting is not suppressed.

[0090] <Component 12> 12. The information processing device according to any one of configurations 1 to 11, wherein the first server connection setting is POP or SMTP-Auth.

[0091] <Component 13> 13. The information processing device according to any one of configurations 1 to 12, wherein the second server connection setting is OAuth2.0.

[0092] <Component 14> A method for controlling an information processing device capable of receiving an instruction to set a first server connection setting used when connecting to a server at a first level, and an instruction to set a second server connection setting used when connecting to the server at a second level having a higher security level than the first level, comprising: receiving an instruction to configure the second server connection setting; performing control to suppress acceptance of an instruction to set the first server connection setting based on acceptance of an instruction to set the second server connection setting; 13. A method for controlling an information processing apparatus comprising the steps of:

[0093] <Component 15> A program for causing a computer to function as each of the means of the information processing device according to any one of configurations 1 to 13. [Explanation of symbols]

[0094] 1 Image processing device 100 CPU 101 Communication unit 102 RAM 103 HDD 104 ROM

Claims

1. A first receiving means capable of receiving an instruction to set a first server connection setting used when connecting to a server at a first level; a second receiving means for receiving an instruction to set a second server connection setting to be used when connecting to the server at a second security level that is higher than the first security level; a control means for performing control to suppress acceptance of an instruction to set the first server connection setting by the first reception means, based on acceptance of an instruction to set the second server connection setting by the second reception means; 13. An information processing device comprising:

2. The information processing apparatus according to claim 1 , wherein the control means performs the suppression control by making an area for accepting an instruction to set the first server connection setting an area that cannot be selected.

3. The information processing apparatus according to claim 1 , wherein the control means performs the suppression control by graying out an area for receiving an instruction to set the first server connection setting.

4. The information processing apparatus according to claim 1 , wherein the control means performs the suppression control by controlling so as not to display an area for receiving an instruction to set the first server connection setting.

5. The information processing apparatus according to claim 1, characterized in that the control means performs the suppression control by outputting a predetermined notification when the first reception means receives an instruction to set the first server connection setting.

6. The information processing device according to claim 1, characterized in that when the control means receives an instruction to set the first server connection setting at the first reception means, the control means performs the suppression control by outputting a predetermined notification that enables further instructions to be accepted from the user.

7. 7. The information processing apparatus according to claim 6, wherein, when the instruction from the user based on the predetermined notification is an instruction to set the first server connection setting, the control means performs control to set the first server connection setting.

8. The information processing device according to any one of claims 1 to 7, characterized in that when the control means receives an instruction to set the second server connection setting from the second reception means while the first server connection setting is set, the control means cancels the first server connection setting.

9. 9. The information processing device according to claim 8, characterized in that, when the second reception means receives an instruction to cancel the second server connection setting that has already been set, the control means restores the first server connection setting that had been canceled.

10. When the first server connection setting is set, information of a specific setting item is stored in the information processing device; The information processing device according to claim 9, characterized in that the control means stores information of the specific setting item even when the first server connection setting is released, and when the first server connection setting is restored, the control means also restores the information of the specific setting item.

11. An information processing device as described in any one of claims 1 to 7, characterized in that when the first server connection setting is set and the first reception means receives an instruction to set a third server connection setting of the first level, the control means controls so as not to suppress the setting of the third server connection setting.

12. 8. The information processing apparatus according to claim 1, wherein the first server connection setting is POP or SMTP-Auth.

13. 8. The information processing apparatus according to claim 1, wherein the second server connection setting is OAuth 2.

0.

14. A method for controlling an information processing device capable of receiving an instruction to set a first server connection setting used when connecting to a server at a first level, and an instruction to set a second server connection setting used when connecting to the server at a second level having a higher security level than the first level, comprising: receiving an instruction to configure the second server connection setting; performing control to suppress acceptance of an instruction to set the first server connection setting based on acceptance of an instruction to set the second server connection setting; 13. A method for controlling an information processing apparatus comprising the steps of:

15. A program for causing a computer to function as each of the means of the information processing apparatus according to any one of claims 1 to 7.

Images