Information processing system and program

Abstract

To configure settings to be compatible with a security mode while maintaining the state of ensuring security, for an information processing device to be newly introduced into an information processing system operated in the security mode in which opening of a network port of the information processing device is restricted as a requirement for ensuring the security.SOLUTION: A PC 10 used by an administrator includes a mode switching instruction unit 13 which is configured to: allow a multifunction peripheral 20 set to be compatible with zero trust environment and a multifunction peripheral 30 not yet set to enter an environment setting mode in which only a network port for use in transmission and reception of a setting file including the content of settings of the multifunction peripheral 20 is opened, from a security mode in which opening of network ports is controlled to be reduced to the minimum extent necessary and security is guaranteed; and restore the multifunction peripherals 20, 30 to the security mode when the settings for the multifunction peripheral 30 so as to be compatible with the zero trust environment using the setting file transmitted from the multifunction peripheral 20 is completed.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to an information processing system and a program. [Background technology]

[0002] Recently, in order to protect their internal networks built using LANs, etc. from security threats, companies are shifting from a perimeter defense model using firewalls to a zero-trust defense model that does not use LANs or firewalls. This is because, in recent years, as working styles have diversified due to telecommuting and shared offices, it is becoming difficult to protect corporate assets with the perimeter defense model.

[0003] Solutions for achieving zero trust security based on the idea of ​​"zero trust," which means not trusting anything without authentication, include SASE (Secure Access Service edge) and EDR (Endpoint Detection and Response). "SASE" is a new security framework concept that integrates security functions and network functions in IT environments into a single cloud service. "EDR" is an endpoint security solution that collects and analyzes log data from endpoints connected to an organization's internal network from the cloud to detect suspicious behavior and cyber attacks and notify administrators.

[0004] In a ZTNA (Zero Trust Network Access) environment built on the idea of ​​zero trust, an increasing number of companies are using cloud services such as SASE and EDR. Also, in a ZTNA environment that does not use a firewall, technology has been proposed to prevent external attacks by controlling the opening and closing of network ports (for example, Patent Documents 1 and 2).

[0005] Meanwhile, in an on-premise environment of a company, various devices that can be connected to a network, such as PCs (Personal Computers) and computer-equipped multifunction devices, are usually installed. In addition, it is not rare to introduce a new multifunction device. In such a case, conventionally, the settings of an existing multifunction device are transferred to the new multifunction device as is, that is, a so-called cloning, so that the necessary settings can be easily made for the new multifunction device. Conventionally, settings are made for the new information processing device by utilizing an open network port. [Prior art documents] [Patent documents]

[0006] [Patent Document 1] JP 2022-132074 A [Patent Document 2] JP 2023-004323 A Summary of the Invention [Problem to be solved by the invention]

[0007] However, when a new information processing device is introduced into an information processing system that is operated in a security mode that restricts the opening of the network ports of the information processing device as a requirement for ensuring security, there is a risk that security will no longer be guaranteed if the network ports are unconditionally opened to configure the newly introduced information processing device.

[0008] The present invention aims to configure an information processing device that is newly introduced into an information processing system that is operated in a security mode that restricts the opening of the network port of the information processing device as a requirement for ensuring security, so that the information processing device can be configured to be compatible with the security mode while maintaining a state in which security is guaranteed. [Means for solving the problem]

[0009] The information processing system of the present invention has a first information processing device having a first processor and one or more network ports whose opening is restricted when operating in a security mode in which security is guaranteed, and when making settings compatible with the security mode for a second information processing device having a second processor and one or more network ports, the first processor and the second processor transition the information processing device from the security mode to a setting mode in response to a predetermined trigger, in which only the network port used when making the settings to the second information processing device operates in an open state, and after the information processing device transitions to the setting mode, the settings in the first information processing device are copied to the second information processing device via the network port in an open state, and the information processing device is returned from the setting mode to the security mode in response to completion of the copying of the settings.

[0010] The device also has a third information processing device having a third processor, and the third processor instructs the first processor and the second processor to transition to the setting mode as the specified trigger in response to an instruction from a user.

[0011] The third processor is characterized in that, when copying the settings, the third processor relays information used for the settings, which is transmitted from the first information processing device, to the second information processing device.

[0012] The second processor transitions the second information processing device to the setting mode in response to the specified trigger and directly connects to the first information processing device, and receives information used for the setting directly from the first information processing device, and the first processor transitions the first information processing device to the setting mode in response to an instruction from the second processor as the specified trigger.

[0013] The second processor is characterized in that it accepts an instruction from a user as the predetermined trigger.

[0014] The second processor may detect the first information processing apparatus that is the source of the copy of the settings by itself, as the predetermined trigger.

[0015] The second processor is also characterized in that it determines that another information processing device that it has detected and directly connected to is the first information processing device when the other information processing device holds specific information necessary for supporting the security mode.

[0016] The first processor transitions the first information processing device to the setting mode in response to the specified trigger and directly connects to the second information processing device to which the setting is to be copied, and transmits information used for the setting directly to the connected second information processing device, and the second processor transitions the second information processing device to the setting mode in response to an instruction from the first processor as the specified trigger.

[0017] The first processor is characterized in that it accepts an instruction from a user as the predetermined trigger.

[0018] The first processor may detect the second information processing apparatus that is to be a copy destination of the settings by itself, as the predetermined trigger.

[0019] The first processor is further characterized in that, when it detects multiple second information processing devices to which the settings are to be copied, it transmits the information to be used for the settings directly to each of the detected multiple second information processing devices.

[0020] The first processor is also characterized in that it determines that another information processing device that it has detected and directly connected to is the second information processing device when the other information processing device does not hold specific information necessary to support the security mode.

[0021] The first processor controls execution of a job received when the first information processing apparatus is operating in the setting mode, depending on the type of the job.

[0022] The first processor is further characterized in that, when the type of job is a job to be executed when the first information processing device is operating in the security mode, the first processor stores the job, and executes the stored job after the first information processing device transitions to the security mode.

[0023] The first processor is further characterized in that, if the type of job is one that is not to be executed when the first information processing device is operated in the security mode, the first processor does not execute the job or notifies an administrator of the receipt of the job.

[0024] The program of the present invention provides a first computer having one or more network ports whose opening is restricted when operating in a security mode in which security is guaranteed, and a second computer having one or more network ports and being the target for making settings compatible with the security mode, which realizes the following functions in response to a predetermined trigger: transitioning the computer from the security mode to a setting mode in which only the network port used when making the settings to the second computer is open; copying the settings of the first computer to the second computer via the open network port after the computer has transitioned to the setting mode; and returning the computer from the setting mode to the security mode in response to completion of the copying of the settings. Effect of the Invention

[0025] According to the invention described in claim 1, when an information processing device is newly introduced into an information processing system that is operated in a security mode that restricts the opening of the network port of the information processing device as a requirement for ensuring security, it is possible to configure the information processing device to be compatible with the security mode while maintaining a state in which security is guaranteed.

[0026] According to the invention as recited in claim 2, it is possible to allow the user to specify a copy source and a copy destination of settings compatible with a security mode.

[0027] According to the third aspect of the present invention, it is not necessary to form a communication path between the first information processing apparatus and the second information processing apparatus to which the settings are to be copied.

[0028] According to the invention described in claim 4, the device can select a first information processing device that will be the source of copying settings that are compatible with the security mode, and can directly obtain information used for settings that are compatible with the security mode from the first information processing device.

[0029] According to the invention as recited in claim 5, it is possible to perform settings in the second information processing device that are compatible with the security mode, triggered by an instruction from a user.

[0030] According to the invention as recited in claim 6, it is possible to start the setting compatible with the security mode by oneself without receiving an instruction from the user.

[0031] According to the invention described in claim 7, it is possible to determine whether the detected information processing device is a first information processing device or a second information processing device depending on whether or not it holds specific information necessary for supporting the security mode.

[0032] According to the invention as recited in claim 8, it is possible to directly provide information used for the settings to the second information processing apparatus which is the copy destination of the settings compatible with the security mode.

[0033] According to the invention as recited in claim 9, it is possible to perform settings in the second information processing device that are compatible with the security mode, triggered by an instruction from a user.

[0034] According to the invention as recited in claim 10, it is possible to start the setting compatible with the security mode for the second information processing apparatus by oneself without receiving an instruction from the user.

[0035] According to the eleventh aspect of the present invention, it is possible to cause one first information processing apparatus to perform settings compatible with security modes for a plurality of second information processing apparatuses.

[0036] According to the invention described in claim 12, it is possible to determine whether the detected information processing device is a first information processing device or a second information processing device depending on whether or not it holds specific information necessary for supporting security mode.

[0037] According to the invention as set forth in claim 13, the handling can be set according to the type of job.

[0038] According to the invention as set forth in claim 14, it is possible to start execution of a job when operating in the security mode.

[0039] According to the invention as recited in claim 15, guaranteed security can be guaranteed.

[0040] According to the invention described in claim 16, for an information processing device to be newly introduced into an information processing system that is operated in a security mode that restricts the opening of the network port of the information processing device as a requirement for ensuring security, it is possible to set the information processing device to be compatible with the security mode while maintaining a state in which security is guaranteed. [Brief description of the drawings]

[0041] [Figure 1] 1 is an overall configuration diagram showing an embodiment of an information processing system according to the present invention; [Diagram 2] 1 is a block diagram showing an information processing system according to a first embodiment. [Figure 3A] FIG. 11 is a sequence diagram showing a process for configuring an unconfigured device to be compatible with a zero trust environment in the first embodiment. [Figure 3B] FIG. 3B is a sequence diagram continuing from FIG. 3A. [Figure 4] FIG. 11 is a diagram showing an example of a screen display for confirming with a user whether or not to switch to an environment setting mode in the first embodiment. [Diagram 5] FIG. 11 is a diagram showing an example of a screen display for confirming with a user whether or not to transition to a zero trust mode in the first embodiment. [Figure 6] FIG. 11 is a block diagram showing an information processing system according to a second embodiment. [Figure 7A] FIG. 11 is a sequence diagram showing a process for configuring an unconfigured device to be compatible with a zero trust environment in the second embodiment. [Figure 7B] FIG. 7B is a sequence diagram continuing from FIG. 7A. [Figure 8] FIG. 11 is a diagram showing an example of a screen display for confirming with a user whether or not to switch to an environment setting mode in the second embodiment. [Figure 9] FIG. 11 is a block diagram showing an information processing system according to a third embodiment. [Figure 10A] FIG. 11 is a sequence diagram showing a process for configuring an unconfigured device to be compatible with a zero trust environment in the third embodiment. [Figure 10B] FIG. 10B is a sequence diagram continuing from FIG. 10A. [Figure 11] FIG. 13 is a block diagram showing an information processing system according to a fourth embodiment. [Figure 12A] FIG. 13 is a sequence diagram showing a process for configuring an unconfigured device to be compatible with a zero trust environment in the fourth embodiment. [Figure 12B] FIG. 12B is a sequence diagram continuing from FIG. 12A. [Figure 13]FIG. 13 is a diagram showing an example of a screen display for confirming with a user whether or not to switch to an environment setting mode in the fourth embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0042] Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings.

[0043] Embodiment 1 Fig. 1 is an overall configuration diagram showing one embodiment of an information processing system according to the present invention. Fig. 1 shows a configuration in which a cloud 2, an on-premise environment 4, and a PC 6 are connected via the Internet 8. The cloud 2 provides cloud services 3 such as SASE and EDR that support the construction of a zero trust environment to companies and the like that aim to build a ZTNA environment (hereinafter referred to as a "zero trust environment") based on the idea of ​​not trusting anything without authentication, i.e., "zero trust."

[0044] The on-premise environment 4 is an internal system environment of a certain company. In the on-premise environment 4, a PC 41 used individually by an employee or the like (hereinafter, "user") and a multifunction device 42 shared by the users are installed. Although one PC 41 and two multifunction devices 42 are illustrated in FIG. 1, the number of devices installed is not limited to this example and may be one or more. In the on-premise environment 4 in this embodiment, a firewall is not installed as shown in FIG. 1 in order to conform to a zero trust environment. Furthermore, a LAN is not permanently installed to the extent possible. Each information processing device such as the PC 41 and the multifunction device 42 is individually connected to the Internet 8. For example, a mobile data communication technology may be used for the connection to the Internet 8. Furthermore, a SASE agent or an EDR agent for using a cloud service 3 such as SASE or EDR is installed in each information processing device, thereby conforming to a zero trust environment.

[0045] It is assumed that PC6 is used by a user of the above company outside the on-premises environment 4, for example, at the user's home or a shared office. PC6 may be PC41 taken out of the on-premises environment 4. Since PC6 is assumed to operate in a zero trust environment, a SASE agent and an EDR agent are installed on PC6, just like PC41.

[0046] The PCs 6 and 41 are shown as examples of information processing devices. The PC 41 may be realized by a general-purpose hardware configuration that has existed in the past. That is, the PC 41 includes a storage unit such as a ROM, a RAM, and a HDD, a user interface such as a mouse, a keyboard, or a touch panel, a network interface for performing data communication via the Internet 8, and a wireless communication unit for performing short-range communication with other PCs 41 and multifunction devices 42 that exist in the same on-premise environment 4 using WiFi (registered trademark), BLE, or the like.

[0047] The multifunction machine 42 is a form of an image forming apparatus equipped with various functions such as a printing function, a copying function, a scanning function, etc., and has a built-in computer. The multifunction machine 42 in this embodiment may be realized by a general-purpose hardware configuration that has existed in the past. That is, the multifunction machine 42 includes storage means such as a ROM, a RAM, a HDD, etc., a user interface such as an operation panel, a scanner or a printer that realizes the various functions described above, a network interface for performing data communication via the Internet 8, and wireless communication means for performing short-range communication with the PC 41 or other multifunction machines 42 that exist in the same on-premise environment 4 by WiFi, BLE, etc.

[0048] Fig. 2 is a block diagram showing an information processing system according to the present embodiment. Fig. 2 shows a PC 10 and two multifunction devices 20 and 30. The PC 10 corresponds to the PC 41 shown in Fig. 1, which is used in the same on-premise environment 4 as the multifunction devices 20 and 30. As will be described later, the PC 10 is used to configure the multifunction device 30 to be compatible with a zero trust environment, and is therefore assumed to be used by an administrator.

[0049] The multifunction device 20 corresponds to the multifunction device 42 shown in Fig. 1. Since the multifunction device 20 has been configured to be compatible with the zero trust environment, it will also be referred to as the "configured device 20" in the following description. Since the multifunction device 30 is a new multifunction device introduced into the on-premise environment 4, it has not yet been configured to be compatible with the zero trust environment. For this reason, the multifunction device 30 will also be referred to as the "unconfigured device 30" in the following description.

[0050] In this embodiment, the settings made to the configured machine 20 are copied to the unconfigured machine 30, that is, so-called cloning is performed, so that the unconfigured machine 30 is configured to have the same environment as the configured machine 20. In particular, in this embodiment, settings that can support a zero-trust environment are performed on the unconfigured machine 30. When the environment settings that can support a zero-trust environment are completed, the unconfigured machine 30 becomes the configured machine 20 and is incorporated into the information processing system.

[0051] The PC 10 has a user interface (UI) unit 11, a connection processing unit 12, a mode switching instruction unit 13, a setting file relay unit 14, and a control unit 15. Components that are not used in the description of this embodiment are omitted from the figure. The user interface unit 11 accepts user input and displays it on a display. The connection processing unit 12 makes a network connection to other devices, in this embodiment, the multifunction devices 20 and 30.

[0052] In the information processing system of the present embodiment, as operation modes, a "zero trust mode" is prepared as a normal operation mode, and an "environment setting mode" is prepared when the unconfigured device 30 is set as a multifunction device compatible with a zero trust environment by cloning the setting of the configured device 20 to the unconfigured device 30. Of course, other operation modes may be prepared. The mode switching instruction unit 13 instructs the multifunction devices 20, 30 to switch the mode. Details of each operation mode will be described later. The setting file relay unit 14 relays the setting file transmitted from the configured device 20 to the unconfigured device 30. As described above, the setting file includes the setting contents for the configured device 20, particularly the information required to set the unconfigured device 30 to be compatible with a zero trust environment. The unconfigured device 30 performs environment setting using this setting file. The control unit 15 controls the operation of each of the above components 11 to 14.

[0053] Each of the components 11 to 15 in the PC 10 is realized by the cooperative operation of a computer installed in the PC 10 and a program that runs on a CPU installed in the computer.

[0054] The setting completed machine 20 has a user interface (UI) unit 21, a connection processing unit 22, a setting file transmission unit 23, a control unit 24, and a setting file storage unit 25. Note that components that are not used in the description of this embodiment are omitted from the figure.

[0055] The user interface unit 21 is realized by an operation panel, and accepts user operations on the operation panel and displays them on the operation panel. The connection processing unit 22 performs network connection with other devices, in this embodiment, the PC 10. The setting file storage unit 25 stores the setting file to be transmitted to the unconfigured device 30, and the setting file transmission unit 23 transmits the setting file stored in the setting file storage unit 25 to the unconfigured device 30 via the PC 10. The control unit 24 controls the operations of the above components 21 to 23.

[0056] Each of the components 21 to 24 in the setting completed machine 20 is realized by the cooperative operation of a computer installed in the setting completed machine 20 and a program running on a CPU installed in the computer. Also, the setting file storage unit 25 is realized by a HDD installed in the setting completed machine 20. Alternatively, a RAM or an external storage means may be used via a network.

[0057] The unconfigured device 30 has a user interface (UI) unit 31, a connection processing unit 32, a configuration file receiving unit 33, an environment setting unit 34, and a control unit 35. Note that components that are not used in the description of this embodiment are omitted from the figure.

[0058] The user interface unit 31 is realized by an operation panel, and accepts user operations on the operation panel and displays them on the operation panel. The connection processing unit 32 performs network connection with other devices, in this embodiment, the PC 10. The setting file receiving unit 33 receives the setting file transmitted from the configured machine 20 via the PC 10. The environment setting unit 34 sets the environment in the unconfigured machine 30 by performing cloning with reference to the received setting file. Particularly in this embodiment, the unconfigured machine 30 is set as a multifunction machine compatible with a zero trust environment, thereby becoming the configured machine 20. The control unit 35 controls the operation of each of the above components 31 to 34.

[0059] Each of the components 31 to 35 in the non-setting machine 30 is realized by the cooperative operation of a computer installed in the non-setting machine 30 and a program running on a CPU installed in the computer.

[0060] Furthermore, the programs used in the present embodiment can be provided not only by communication means, but also by being stored in a computer-readable recording medium such as a USB memory. The programs provided from the communication means or recording medium are installed in a computer, and various processes are realized by the computer's CPU sequentially executing the programs.

[0061] Here, the operation modes of the information processing system in this embodiment will be described.

[0062] As described above, in this embodiment, the zero trust mode and the environment setting mode are set. The zero trust mode corresponds to a security mode in which security is guaranteed. In the information processing system in this embodiment, the zero trust mode is set as the operation mode during normal operation. The zero trust mode is an operation mode in which cloud services 3 such as SASE and EDR can be used to guarantee security.

[0063] Devices having a network communication function, such as the PC 6, 41 and the multifunction device 42 shown in FIG. 1, generally have one or more network ports and perform data communication with other devices through a predetermined network port. However, in a zero trust environment that does not use a firewall, if a network port is left open, there is a possibility of being attacked from the outside. Therefore, in the zero trust mode, the opening of network ports is controlled to be limited to the minimum necessary, such as only the network port used for using the cloud service 3. In other words, network ports other than the minimum necessary are controlled to be forcibly blocked. In this way, in the zero trust mode, limiting the opening of network ports is a requirement for ensuring security. Other requirements for ensuring security include the installation of a SASE or EDR agent.

[0064] However, since the unconfigured device 30 is not compatible with the zero trust environment, as described above, the environment is configured so that the device can be compatible with the zero trust environment by receiving a configuration file from the configured device 20. However, in the zero trust mode, the opening of network ports is restricted to the minimum necessary, so that the unconfigured device 30 cannot receive the configuration file. Therefore, in this embodiment, an environment setting mode is provided. That is, in the environment setting mode, the minimum necessary network ports opened in the zero trust mode are blocked. As a result, the cloud service 3 required for guaranteeing security such as SASE cannot be used. On the other hand, only a predetermined network port is opened so that the configuration file can be received. Furthermore, data communication via the predetermined network port to be opened is limited to only the sending and receiving destination of the configuration file. That is, the PC 10 in this embodiment is a partner that can communicate only with the multifunction devices 20 and 30, and the multifunction devices 20 and 30 in this embodiment are a partner that can communicate only with the PC 10.

[0065] As described above, the information processing system in this embodiment operates in the zero trust mode during normal operation, and when performing environment setting on the unconfigured device 30, it operates in the environment setting mode as a setting mode in which only the network port used when performing environment setting on the unconfigured device 30 is opened. Also, as is clear from the above description, the network port in the configured device 20 is opened with the minimum necessary network port when operating in the zero trust mode. Therefore, the configured device 20 corresponds to a first information processing device having a first processor. On the other hand, the unconfigured device 30 corresponds to a second information processing device having a second processor since it is a target for which settings compatible with the security mode are performed. Also, the PC 10 in this embodiment corresponds to a third information processing device having a third processor since it instructs the multifunction devices 20, 30 to transition from the zero trust mode to the environment setting mode in response to an instruction from a user, as will be described in detail later.

[0066] The information processing system in this embodiment includes the PC 41 and the multifunction device 42, but the functions provided by the PC 41 and the multifunction device 42 may be provided by a plurality of information processing devices.

[0067] Next, the operation of this embodiment will be described.

[0068] In the information processing system of this embodiment, security is guaranteed during normal operation in the zero trust mode. When a multifunction device (i.e., an unconfigured device) 30 that is not configured to support a zero trust environment is newly introduced, it is necessary to configure the unconfigured device 30 to support a zero trust environment. Specifically, as described above, the settings of the configured device 20 are cloned to the unconfigured device 30. The process for configuring the unconfigured device 30 to support a zero trust environment will be described below with reference to the sequence diagrams shown in FIGS. 3A and 3B.

[0069] The PC 41 and the multifunction device 42 (the configured device 20 in FIG. 2) operate in the zero trust mode during normal operation. Here, when the unconfigured device 30 is newly introduced into the on-premise environment 4, the administrator issues a cloning instruction from the PC 10 in order to configure the unconfigured device 30 to be compatible with the zero trust environment. When the user interface unit 11 in the PC 10 accepts a cloning instruction from the administrator (step S111), the connection processing unit 12 requests the unconfigured device 30 to connect to a network (step S112). The administrator may specify the unconfigured device 30 to be the target of the environment configuration by specifying an IP address, etc. In response to this connection request, the connection processing unit 32 in the unconfigured device 30 cooperates with the connection processing unit 12 of the PC 10 to execute a process of connecting a communication line (step S113). In this embodiment, the PC 10 and the unconfigured device 30 are connected to each other by using WiFi Direct to connect to a wireless LAN or by connecting a short-distance wireless communication line by BLE. If a LAN exists in the on-premise environment 4, the LAN may be used. Here, we will explain an example of connecting to a wireless LAN using WiFi Direct (hereinafter, simply "WiFi connection"). Of course, the connection is not limited to wireless, and wired connection is also possible. The method and process for connecting this network can use existing technology.

[0070] The connection processing unit 12 also makes a connection request to the configured machine 20 in the same manner as for the unconfigured machine 30 described above (step S114). In response to this connection request, the connection processing unit 22 in the configured machine 20 cooperates with the connection processing unit 12 of the PC 10 to execute processing for connecting a communication line (step S115).

[0071] Next, the mode switching instruction unit 13 in the PC 10 instructs the unconfigured device 30 to switch from the zero trust mode to the environment setting mode (step S116). In response to this instruction, the control unit 35 in the unconfigured device 30 transitions to the environment setting mode (step S311).

[0072] Specifically, the following processing is performed as a process of transitioning to the environment setting mode in the unconfigured device 30. That is, the control unit 35 prohibits transmission and reception with devices other than the PC 10. Also, when connected to the PC 10 via WiFi, only a specified network port used to receive the setting file is opened, and other network ports are blocked. In this embodiment, for example, only an HTTP (Hypertext Transfer Protocol) port is opened and enabled as the specified network port. Note that an HTTPS (Hypertext Transfer Protocol Secure) port may be used instead of the HTTP port.

[0073] The mode switching instruction unit 13 also instructs the setting-completed machine 20 to switch from the zero trust mode to the environment setting mode (step S117). In response to this instruction, the control unit 24 in the setting-completed machine 20 transitions to the environment setting mode (step S211). When transitioning between modes, the control unit 24 restarts the setting-completed machine 20 as necessary.

[0074] Specifically, the following processing is performed as a transition process to the environment setting mode in the configured device 20. That is, the control unit 24 prohibits transmission and reception with devices other than the PC 10. Also, when connected to the PC 10 via WiFi, only the network port used to send the setting file is opened, and other network ports are blocked. In this embodiment, only the same HTTP port as the unconfigured device 30 is opened and enabled. Also, the control unit 24 disables agents for ensuring security such as SASE and EDR that were enabled when operating in the zero trust mode. This is because the network port used to use the cloud service 3 is blocked.

[0075] Furthermore, the control unit 24 does not allow the reception of jobs. This is to prevent the configured machine 20 from being destroyed by an unauthorized job sent from the HTTP port opened for use in the configuration file and executed, or to prevent information held in the configured machine 20 from being leaked via the network. The handling of jobs will be described separately below.

[0076] As described above, the PC 10 uses a user instruction as a predetermined trigger to instruct each of the multifunction peripherals 20 and 30 to transition to the environment setting mode. Then, each of the multifunction peripherals 20 and 30 transitions from the zero trust mode to the environment setting mode in response to a mode switching instruction (steps S116 and S117) issued using a user instruction as a predetermined trigger.

[0077] In the above description, the multifunction peripherals 20 and 30 are controlled to automatically switch to the environment setting mode. Alternatively, the user may be asked in advance whether or not to switch the mode.

[0078] Fig. 4 is a diagram showing an example of a confirmation screen displayed on each of the operation panels of the multifunction devices 20 and 30. The mode switching instruction unit 13, in cooperation with the control units 24 and 35, can display the confirmation screen shown in Fig. 4 on the operation panel to allow the administrator of each multifunction device 20 and 30 and the currently using user to confirm whether or not to switch modes. The mode switching instruction unit 13 may be configured to instruct the mode switching, i.e., to transition to the environment setting mode, only after the OK button 51 is selected.

[0079] Through the above process, the PC 10 connects one unconfigured machine 30 and one configured machine 20, and then transitions to the environment setting mode. Note that in FIG. 3A, the unconfigured machine 30 is first processed, but it is acceptable to first process either the configured machine 20 or the unconfigured machine 30.

[0080] When both the configured device 20 and the unconfigured device 30 transition to the environment configuration mode and start operating in this manner, the control unit 15 in the PC 10 instructs the configured device 20 to transmit a configuration file (step S118). In this embodiment, in the case of a WiFi connection, communication is performed via an HTTP port, so the control unit 15 makes an HTTP request to transmit the configuration file.

[0081] The control unit 24 in the setting completed machine 20 instructs the setting file transmission unit 23 in response to the transmission instruction from the PC 10. The setting file transmission unit 23 reads the setting file from the setting file storage unit 25 in response to the instruction from the control unit 24, and transmits it to the PC 10 (step S212). In this embodiment, in the case of a WiFi connection, communication is performed via an HTTP port, so that the setting file transmission unit 23 transmits the setting file as an HTTP response in response to the HTTP request from the PC 10.

[0082] When the setting file relay unit 14 in the PC 10 receives the setting file transmitted from the configured device 20 (step S119), it transmits the setting file to the unconfigured device 30 (step S120). In this way, the setting file relay unit 14 relays the setting file transmitted from the configured device 20 to the unconfigured device 30.

[0083] When the setting file receiving unit 33 in the unconfigured device 30 receives the setting file from the configured device 20 via the PC 10 (step S312), the environment setting unit 34 performs environment setting by referencing the setting file and cloning the setting of the configured device 20 (step S313). For example, various attributes are set so that the device can function as a multifunction device equivalent to the configured device 20, and in the case of this embodiment, an SASE or EDR agent is installed so that security is guaranteed during zero trust mode operation. Thereafter, the control unit 35 restarts the unconfigured device 30 as necessary. Note that even after the restart, the PC 10 and the unconfigured device 30 will link and connect via WiFi.

[0084] When the administrator knows that cloning in the unconfigured device 30 is completed and the environment setting is completed by rebooting the unconfigured device 30, the administrator inputs an instruction to switch the mode to the PC 10. In response to an instruction from the user, the mode switching instruction unit 13 in the PC 10 instructs the unconfigured device 30 to switch from the environment setting mode to the zero trust mode (step S121). In response to this instruction, the control unit 35 in the unconfigured device 30 transitions to the zero trust mode (step S314). When transitioning modes, the control unit 35 reboots the unconfigured device 30 as necessary.

[0085] In addition, the unconfigured machine 30 becomes a configured machine 20 by having its environment configured. However, in order to avoid confusion with the multifunction machine which is originally a configured machine 20, the unconfigured machine 30 will be referred to as the "multifunction machine 30" in the following description.

[0086] Specifically, the following processes are performed as the process of transitioning to the environment setting mode in the multifunction device 30. That is, the control unit 35 permits transmission and reception with devices other than the PC 10. Also, if a WiFi connection is established with the PC 10, the open HTTP port is blocked. Then, the minimum necessary network ports used for communication with the cloud service 3 used to ensure security such as SASE and EDR are opened. In other words, other network ports are blocked. If a BLE connection is established with the PC 10, BLE is disabled. If a WiFi connection is established with the PC 10, WiFi direct is disabled. Then, the control unit 35 activates the agent installed by the current environment setting to ensure security such as SASE and EDR.

[0087] The mode switching instruction unit 13 also instructs the setting-completed machine 20 to switch from the environment setting mode to the zero trust mode (step S122). The control unit 24 in the setting-completed machine 20 transitions to the zero trust mode in response to this instruction (step S213). When transitioning modes, the control unit 24 restarts the setting-completed machine 20 as necessary.

[0088] Specifically, the following processing is performed as a transition process to the zero trust mode in the configured machine 20. That is, the control unit 24 permits transmission and reception with devices other than the PC 10. Also, if the PC 10 is connected via WiFi, the open HTTP port is blocked. Then, the minimum necessary network ports used for communication with the cloud service 3 used to ensure security such as SASE and EDR are opened. In other words, other network ports are blocked. If the PC 10 is connected via BLE, BLE is disabled. If the PC 10 is connected via WiFi, WiFi direct is disabled. Also, the control unit 24 enables an agent to ensure security such as SASE and EDR. Furthermore, the control unit 24 enables the acceptance of jobs. Basically, in the transition process from the environment setting mode to the zero trust mode, the reverse settings to those used when transitioning from the zero trust mode to the environment setting mode may be performed.

[0089] In the above description, the multifunction peripherals 20 and 30 are controlled to automatically switch to the zero trust mode. Alternatively, the multifunction peripherals 20 and 30 may be configured to inquire in advance about whether or not to switch the mode.

[0090] Fig. 5 is a diagram showing an example of a confirmation screen displayed on each of the operation panels of the multifunction peripherals 20 and 30. The mode switching instruction unit 13, in cooperation with the control units 24 and 35, can display the confirmation screen shown in Fig. 5 on the operation panel to allow the administrator of each of the multifunction peripherals 20 and 30 and the currently using user to confirm whether or not to switch modes. The mode switching instruction unit 13 may be configured to instruct the mode switching, i.e., to transition to the zero trust mode, only after the OK button 52 is selected.

[0091] In FIG. 3B, the mode switching instruction for transitioning to the zero trust mode is executed first by the multifunction device 30, but it may be executed first by either the configured device 20 or the multifunction device 30.

[0092] Here, the handling of jobs in the setting completed machine 20 will be described.

[0093] It has been explained that the control unit 24 in the configuration-completed machine 20 does not accept jobs when operating in the environment setting mode because there is a possibility that it may be affected by an unauthorized job. However, it can also be said that if it can determine whether a job is unauthorized, that is, if the job is not unauthorized, there will be no problem even if it is accepted. Therefore, the control unit 24 controls the execution of jobs received while operating in the environment setting mode according to the type of the job.

[0094] For example, a job to be executed when operating in the zero trust mode can be determined to be a legitimate job because it is accepted in an operating environment where security is guaranteed. For example, jobs such as fax reception print, fax reception forwarding, and email reception print that may normally occur during operation in the zero trust mode may be determined to be legitimate jobs. Therefore, these types of jobs may be accepted during operation in the environment setting mode. However, since the device is operating in the environment setting mode, the control unit 24 may control the device 20 to temporarily store the received job rather than immediately starting execution of the job, and to execute the stored job after the device 20 transitions to the zero trust mode.

[0095] On the other hand, if a print job that does not normally occur during operation in the zero trust mode, such as an HTTP upload print, in which a conventional multifunction device becomes a server, is received, the control unit 24 determines that the job may be an unauthorized job and does not execute the job. For this purpose, the control unit 24 may discard the unauthorized job. In addition, the control unit 24 may notify the administrator of the receipt of the unauthorized job after the configured device 20 transitions to the zero trust mode, or may record the job as a log. In addition, the control unit 24 may not execute the unauthorized job, but may hold it temporarily, and after transitioning to the zero trust mode, upload it to the cloud and execute it in an environment where safety is guaranteed. The job execution control in the control unit 24 described above may be executed by the control unit 24 itself, or may be processed according to instructions from the administrator.

[0096] As described above, the configured device 20 and the multifunction device 30 start normal operation by returning the operation mode from the environment setting mode to the zero trust mode. In particular, the multifunction device 30 becomes the configured device 20 by cloning, and can start operation in a zero trust environment where security is guaranteed.

[0097] In the present embodiment, the setting of the configured machine 20 is cloned to the unconfigured machine 30, that is, the entire setting of the configured machine 20 is copied. However, a part of the setting of the configured machine 20 may be copied to the unconfigured machine 30. The user may select the setting of the configured machine 20 to be reflected in the unconfigured machine 30. For example, the items to be set may be displayed in a list on the operation panel, and the user may select the items to be copied to the unconfigured machine 30 from the list. The unconfigured machine 30 may be configured after changing a part of the setting of the configured machine 20. For example, the SASE or EDR application installed in the configured machine 20 may be replaced with an application of a vendor different from that of the configured machine 20 selected by the user.

[0098] Embodiment 2 In the above-mentioned first embodiment, the environment setting for the unconfigured device 30 is progressed in response to an operation instruction from the administrator under the initiative of the administrator. In this way, it can be said that the environment setting for the unconfigured device 30 is steadily progressed with an instruction from the administrator as a predetermined trigger. However, it is also possible to proceed partially automatically with the process even without an instruction from the administrator. Therefore, in this embodiment, the process for cloning is partially performed automatically.

[0099] FIG. 6 is a block diagram showing an information processing system in this embodiment. The same components as those in the information processing system in the first embodiment shown in FIG. 2 are assigned the same reference numerals, and the description is omitted as appropriate. In this embodiment, the set machine 20 directly transmits the setting file to the unset machine 30, so the setting file relay unit 14 is not required in the PC 10. In addition, since the unset machine 30 takes the lead in controlling the operation of the set machine 20, the unset machine 30 in this embodiment has a configuration in which a set machine identification unit 36 ​​and a mode switching instruction unit 37 are added to the components in the first embodiment. The set machine identification unit 36 ​​identifies the set machine 20 that is the transmission source of the setting file. The mode switching instruction unit 37 instructs the set machine 20 to switch modes.

[0100] The configured machine specifying unit 36 ​​and the mode switching instruction unit 37 are realized by the cooperative operation of a computer installed in the unconfigured machine 30 and a program running on a CPU installed in the computer.

[0101] Due to the differences in the components described above, some components operate slightly differently from those in embodiment 1. The operations different from those in embodiment 1 will be described together with the processing described later.

[0102] Next, a process for setting the unconfigured device 30 to be compatible with a zero trust environment will be described with reference to the sequence diagrams shown in Figures 7A and 7B. Figures 7A and 7B correspond to Figures 3A and 3B in the first embodiment. Therefore, in Figures 7A and 7B, the same process steps as those in Figures 3A and 3B are given the same step numbers, and the description will be omitted as appropriate.

[0103] First, similarly to the first embodiment, in response to an operational instruction from the administrator, the PC 10 connects to the unconfigured device 30 (steps S111 to S113). On the other hand, unlike the first embodiment, the PC 10 does not perform a connection process to the configured device 20.

[0104] Next, the mode switching instruction unit 13 in the PC 10 instructs the unconfigured device 30 to switch from the zero trust mode to the environment setting mode (step S116), and the unconfigured device 30 transitions to the environment setting mode in response to this instruction (step S311).

[0105] Next, since there may be a plurality of multifunction devices 42 in the on-premise environment 4, the set-up machine identifying unit 36 ​​identifies the set-up machine 20 that is to be the transmission source of the setting file from among them (step S321).

[0106] For example, when connecting to the configured machine 20 using BLE, the configured machine identifying unit 36 ​​may select the configured machine 20 that was connected first. Also, when connecting to the configured machine 20 via WiFi, the configured machine identifying unit 36 ​​broadcasts and identifies the configured machine 20 that is to be the source of the setting file from among the detected configured machines 20. For example, when multiple configured machines 20 are detected, the configured machine identifying unit 36 ​​may select the configured machine 20 that was detected first or the configured machine 20 with the strongest radio wave intensity from among the multiple configured machines 20. Alternatively, the configured machine identifying unit 36 ​​may display a list of the detected configured machines 20 on an operation panel to allow the user to select one.

[0107] Incidentally, the multifunction device detected by the unconfigured device 30 is not necessarily the configured device 20, and may be another unconfigured device 30. Therefore, the configured device identification unit 36 ​​needs to determine whether the detected multifunction device is the configured device 20 or another unconfigured device 30. For example, a clear difference between the configured device 20 and the unconfigured device 30 is whether specific information required for responding to the zero trust mode is held. For example, the configured device 20 holds applications such as SASE and EDR as specific information required for responding to the zero trust mode, but the unconfigured device 30 does not hold such information. In addition, applications such as SASE and EDR are installed in the configured device 20, but not in the unconfigured device 30. Therefore, the configured device identification unit 36 ​​can determine whether the detected multifunction device is the configured device 20 or another unconfigured device 30 by checking whether applications such as SASE and EDR are present or installed in the detected multifunction device. In this way, the configured device identification unit 36 ​​detects the configured device 20.

[0108] Alternatively, the set-completed machine identifying unit 36 ​​may identify the set-completed machine 20 as specified by the PC 10, rather than detecting and identifying the set-completed machine 20 itself. When connecting to the set-completed machine 20 via WiFi, the set-completed machine identifying unit 36 ​​acquires connection information including the IP address of the set-completed machine 20 from the PC 10. This connection information may be acquired together with the connection request (step S112) or mode switching instruction (step S116), or may be acquired in a separate processing step.

[0109] In this embodiment, the unconfigured machine 30 takes the initiative in controlling the operation of the configured machine 20, rather than the administrator as in the first embodiment. Therefore, the connection processing unit 32 in the unconfigured machine 30 makes a connection request to the configured machine 20 (step S322), and cooperates with the connection processing unit 22 of the configured machine 20 to connect a communication line (step S323). In this way, the configured machine 20 in this embodiment is directly connected to the unconfigured machine 30 without going through the PC 10, in response to an instruction from the unconfigured machine 30 as a predetermined trigger.

[0110] Next, the mode switching instruction unit 37 in the unconfigured device 30 instructs the configured device 20 to switch from the zero trust mode to the environment setting mode (step S324). In response to this instruction, the control unit 24 in the configured device 20 transitions to the environment setting mode (step S211).

[0111] Incidentally, in this embodiment, similarly to the first embodiment, the propriety of the mode switching may be inquired beforehand. Fig. 8 is a diagram showing an example of a confirmation screen displayed on the operation panel of the unset device 30. The mode switching instruction unit 37 displays the confirmation screen shown in Fig. 8 on the operation panel of the unset device 30, so that the administrator of the unset device 30 or the currently using user can confirm the propriety of the mode switching. The mode switching instruction unit 37 may be configured to instruct the set device 20 to switch the mode, i.e., to transition to the environment setting mode, only after the OK button 53 is selected.

[0112] Note that, although the confirmation screen shown in FIG. 8 prompts the user to input an IP address, it is also possible to display the IP address of the configured machine 20 that has been identified by the configured machine identification unit 36 ​​as the initial value, and have the user confirm the address without inputting it.

[0113] Next, the control unit 35 in the unset machine 30 instructs the set machine 20 identified by the set machine identifying unit 36 ​​in the above manner to send the setting file (step S325). In the first embodiment, the PC 10 instructs the set machine 20 to send the setting file, but in this embodiment, the unset machine 30 instructs the setting file to be sent by an HTTP request. In this embodiment, since the unset machine 30 instructs the setting file to be sent, the setting file sending unit 23 sends the setting file directly to the unset machine 30 as an HTTP response in response to the HTTP request from the unset machine 30 (step S212).

[0114] Thereafter, the environment setting unit 34 sets the environment by referring to the setting file received directly from the configured device 20 (step S313), and the unconfigured device 30 transitions to the zero trust mode (steps S313 to S314). Thereafter, the mode switching instruction unit 37 instructs the configured device 20 to switch modes, i.e., to transition to the zero trust mode (step S326).

[0115] The control unit 24 in the configured device 20 transitions to the zero trust mode in response to an instruction from the unconfigured device 30 as a predetermined trigger (step S213).

[0116] According to this embodiment, the present embodiment is similar to the first embodiment in that an instruction from the user of PC 10, i.e., the administrator, is accepted as a predetermined trigger to start cloning (step S111), but differs from the first embodiment in that the unconfigured machine 30 takes the initiative in controlling the operation of the subsequent processes.

[0117] Embodiment 3 In the second embodiment, instructions from the administrator were accepted as a specified trigger, but in this embodiment, the configured-machine identification unit 36 ​​of the unconfigured machine 30 is characterized in that the specified trigger is the detection by itself of the configured machine 20 that is the source of the configuration file, and the operation mode is switched and cloning is performed.

[0118] Fig. 9 is a block diagram showing an information processing system in this embodiment. The same components as those in the information processing system of embodiment 1 shown in Fig. 2 are given the same reference numerals, and explanations are omitted as appropriate. In this embodiment, the configured machine 20 transmits the setting file directly to the unconfigured machine 30, and instructions from the administrator are not required, so the PC 10 is not required, unlike embodiments 1 and 2. The components of the configured machine 20 and the unconfigured machine 30 may be the same as those in embodiment 2. However, there are some components whose operation is slightly different from that of embodiment 2, and these will be explained together with the explanation of the processing.

[0119] Next, a process for setting the unconfigured device 30 to be compatible with a zero trust environment will be described with reference to the sequence diagrams shown in Figures 10A and 10B. Figures 10A and 10B correspond to Figures 3A and 3B in the first embodiment and Figures 7A and 7B in the second embodiment. Therefore, in Figures 10A and 10B, the same process steps as those in Figures 3A and 3B and Figures 7A and 7B are given the same step numbers, and the description will be omitted as appropriate.

[0120] When the unconfigured device 30 is newly installed in the on-premise environment 4 and powered on, the configured device identification unit 36 ​​uses this as a predetermined trigger to identify the configured device 20 that is the source of the configuration file (step S321). In this embodiment, similar to the second embodiment, the unconfigured device 30 is connected to a wireless LAN using WiFi Direct or a short-range wireless communication line using BLE. Also, if a LAN is used in the on-premise environment 4, that LAN may be used.

[0121] In this embodiment, as described above, the cloning described below is started as a predetermined trigger when the set-up machine identifying unit 36 ​​identifies the set-up machine 20. The subsequent processing steps performed by the set-up machine 20 and the unsetup machine 30 are the same as those in the second embodiment, and therefore a description thereof will be omitted.

[0122] Embodiment 4 In the above-mentioned first and second embodiments, the administrator issues an instruction to the unconfigured machine 30 using the PC 10 as a predetermined trigger for starting cloning. In the present embodiment, the administrator issues an instruction to the configured machine 20 as a predetermined trigger.

[0123] FIG. 11 is a block diagram showing an information processing system in this embodiment. The same components as those in the information processing system in the first embodiment shown in FIG. 2 are given the same reference numerals, and the description is omitted as appropriate. In this embodiment, the set machine 20 directly transmits the setting file to the unset machine 30, so the setting file relay unit 14 of the PC 10 is unnecessary. In addition, since the set machine 20 controls the operation of the unset machine 30, the set machine 20 in this embodiment has a configuration in which an unset machine identification unit 26 and a mode switching instruction unit 27 are added to the components in the first embodiment. The unset machine identification unit 26 identifies the unset machine 30 to which the setting file is to be transmitted. The mode switching instruction unit 27 instructs the unset machine 30 to switch modes.

[0124] The unconfigured machine specifying unit 26 and the mode switching instruction unit 27 are realized by the cooperative operation of a computer installed in the configured machine 20 and a program running on a CPU installed in the computer.

[0125] Due to the differences in the components described above, some components operate slightly differently from those in embodiment 1. These different operations will be described together with the processing described below.

[0126] Next, a process for setting the unconfigured device 30 to be compatible with a zero trust environment will be described with reference to the sequence diagrams shown in Figures 12A and 12B. Figures 12A and 12B correspond to Figures 3A and 3B in the first embodiment. Therefore, in Figures 12A and 12B, the same process steps as those in Figures 3A and 3B are assigned the same step numbers, and the description will be omitted as appropriate.

[0127] When the user interface unit 11 in the PC 10 receives a cloning instruction from the administrator (step S111), the connection processing unit 12 in this embodiment requests a network connection from the configured machine 20 (step S114), and works with the connection processing unit 22 of the configured machine 20 to execute a process of connecting a communication line (step S115).

[0128] Next, when the PC 10 connects to the setting-completed machine 20 in response to an instruction from the user, the mode switching instruction unit 13 instructs the setting-completed machine 20 to switch from the zero trust mode to the environment setting mode (step S117). The control unit 24 in the setting-completed machine 20 transitions to the environment setting mode in response to this instruction (step S211). In this way, the setting-completed machine 20 in this embodiment transitions to the environment setting mode with the instruction from the user as a predetermined trigger.

[0129] As is clear from the above description, the PC 10 in this embodiment does not perform any control over the unset machine 30, and the set machine 20 takes the lead in controlling the operation of the unset machine 30, as will be described below.

[0130] Next, the unset machine identifying unit 26 identifies the unset machine 30 to which the setting file is to be sent (step S241). This process is equivalent to the process in the second embodiment in which the set machine identifying unit 36 ​​in the unset machine 30 identifies the set machine 20 to which the setting file is to be sent (step S321). The unset machine identifying unit 26, like the set machine identifying unit 36, may detect other set machines 20, not just the unset machine 30. In this case, the unset machine identifying unit 26 makes the same judgment as the set machine identifying unit 36. That is, the unset machine identifying unit 26 judges the detected multifunction machine to be an unset machine 30 because the detected multifunction machine does not hold specific information required for compatibility with the zero trust mode.

[0131] Incidentally, the unconfigured machine 30 needs to identify one configured machine 20 as the source of the configuration file, but the configured machine 20 may identify multiple unconfigured machines 30 as the destination of the configuration file.

[0132] Incidentally, in this embodiment, similarly to the above embodiment, the user may be inquired in advance as to whether or not to switch the mode. Fig. 13 is a diagram showing an example of a confirmation screen displayed on the operation panel of the configured machine 20. The mode switching instruction unit 27 can confirm with the administrator of the configured machine 20 or the currently using user whether or not to switch the mode by displaying the confirmation screen shown in Fig. 13 on the operation panel. Then, the mode switching instruction unit 27 may instruct the unconfigured machine 30 to switch the mode, i.e., to transition to the environment setting mode, only after the OK button 54 is selected.

[0133] 13 is a display example when a plurality of unconfigured machines 30 are detected as targets for environment setting by the unconfigured machine identifying unit 26, and is an example in which the IP addresses of the detected plurality of unconfigured machines 30 are simply displayed in a list. However, instead of the IP address, the device name or the like may be displayed as the identification information of the unconfigured machine 30. Also, by displaying a check box in association with the IP address, it may be possible to allow the user to select one or more unconfigured machines 30 as targets for environment setting.

[0134] Also, similar to the set-up machine identification unit 36 ​​in the second embodiment, the unset-machine identification unit 26 may identify the unset machine 30 as the unset machine 30 specified by the PC 10, rather than detecting and identifying the unset machine 30 itself.

[0135] When the unconfigured machine 30 is identified, the connection processing unit 22 then makes a connection request to the unconfigured machine 30 (step S242), and cooperates with the connection processing unit 32 of the unconfigured machine 30 to connect a communication line (step S243). Thus, the unconfigured machine 30 in this embodiment is directly connected to the configured machine 20 without going through the PC 10 in response to an instruction from the configured machine 20 as a predetermined trigger.

[0136] Next, the mode switching instruction unit 27 in the configured device 20 instructs the unconfigured device 30 to switch from the zero trust mode to the environment setting mode (step S244). The control unit 35 in the unconfigured device 30 transitions to the environment setting mode in response to the instruction from the configured device 20 (step S311).

[0137] When the configured machine 20 and the unconfigured machine 30 are connected in this manner, the control unit 35 in the unconfigured machine 30 instructs the configured machine 20 to transmit a configuration file (step S325). Then, the configuration file transmission unit 23 transmits the configuration file directly to the unconfigured machine 30 in response to this instruction.

[0138] When the setting file receiving unit 33 receives the setting file from the setting-completed machine 20 (step S312), the environment setting unit 34 refers to the setting file and performs environment setting (step S313).

[0139] After transmitting the setting file, the control unit 24 in the configured device 20 transitions the configured device 20 to zero trust mode (step S213). Furthermore, upon detecting that the unconfigured device 30 has been rebooted, the mode switching instruction unit 27 instructs the unconfigured device 30 to switch from the environment setting mode to the zero trust mode (step S245). In response to this instruction, the control unit 35 in the unconfigured device 30 transitions to the zero trust mode (step S314).

[0140] According to this embodiment, the configured machine 20 takes the initiative in setting the environment for the unconfigured machine 30. When the configured machine 20 sets the environment for a plurality of unconfigured machines 30, the process of steps S242 to S245 can be repeated for each of the unconfigured machines 30. That is, the configured machine 20 transmits the setting file directly to each of the plurality of unconfigured machines 30. When a plurality of unconfigured machines 30 are to be processed, they may be processed one by one in order, or the plurality of unconfigured machines 30 may be processed simultaneously in parallel according to the progress of the process in each unconfigured machine 30, such as connection completion, completion of transition to the environment setting mode, etc.

[0141] In the third embodiment, a case has been described in which cloning is started using the predetermined trigger when the set-machine identifying unit 36 ​​in the unset machine 30 detects the set-machine 20 from which the setting file is to be sent by itself. Even when the set-machine 20 takes the initiative in controlling cloning, cloning may be started using the predetermined trigger when the unset machine identifying unit 26 detects the unset machine 30 to which the setting file is to be sent by itself, rather than an instruction from the user.

[0142] In the above embodiments, the term "processor" refers to a processor in a broad sense, including general-purpose processors (e.g., CPU: Central Processing Unit, etc.) and dedicated processors (e.g., GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic device, etc.).

[0143] In addition, the operations of the processor in the above embodiments may be performed not only by one processor, but also by multiple processors located at physically separate locations working together. The order of the operations of the processor is not limited to the order described in the above embodiments, and may be changed as appropriate.

[0144] (Additional Note) (((1))) A first information processing device including a first processor and one or more network ports the opening of which is restricted when the device is operating in a security mode in which security is guaranteed, When setting a second information processing device having a second processor and one or more network ports to be compatible with the security mode, the first processor and the second processor in response to a predetermined trigger, transitioning the information processing device from the security mode to a setting mode in which only the network port used when making the setting in the second information processing device is in an open state; After the information processing device transitions to the setting mode, the setting in the first information processing device is copied to the second information processing device via the network port in an open state; returning the information processing device from the setting mode to the security mode in response to completion of copying the setting. An information processing system comprising: (((2))) a third information processing device having a third processor; The information processing system described in (((1))) is characterized in that the third processor instructs the first processor and the second processor to transition to the setting mode as the specified trigger in response to an instruction from a user. (((3))) The information processing system described in (((2))) is characterized in that, when replicating the settings, the third processor relays information used for the settings transmitted from the first information processing device to the second information processing device. (((4))) The second processor, transitioning the second information processing device to the setting mode in response to the predetermined trigger and directly connecting the second information processing device to the first information processing device; receiving information used for the setting directly from the first information processing device; The first processor, transitioning the first information processing device to the setting mode in response to an instruction from the second processor as the predetermined trigger; 1. The information processing system according to claim 1, (((5))) The information processing system according to (((4))), wherein the second processor accepts an instruction from a user as the predetermined trigger. (((6))) The information processing system described in (((4))) is characterized in that the second processor determines that the specified trigger is the detection by itself of the first information processing device that is the source of the copy of the settings. (((7))) The information processing system described in (((6))) is characterized in that the second processor determines that another information processing device that has been detected and directly connected is the first information processing device when the other information processing device holds specific information necessary for supporting the security mode. (((8))) The first processor, transitioning the first information processing device to the setting mode in response to the predetermined trigger and directly connecting the first information processing device to which the setting is to be copied; transmitting information used for the setting directly to the connected second information processing device; The second processor, transitioning the second information processing device to a setting mode in response to an instruction from the first processor as the predetermined trigger; 1. The information processing system according to claim 1, (((9))) The information processing system according to (((8))), wherein the first processor accepts an instruction from a user as the predetermined trigger. (((10))) The information processing system described in (((8))) is characterized in that the first processor determines that the specified trigger is the detection by the first processor of the second information processing device to which the settings are to be copied. (((11))) The information processing system described in (((10))) is characterized in that when the first processor detects multiple second information processing devices to which the settings are to be copied, the first processor transmits information to be used for the settings directly to each of the detected multiple second information processing devices. (((12))) The information processing system described in (((8))) is characterized in that the first processor determines that another information processing device that has been detected and directly connected is the second information processing device when the other information processing device does not hold specific information necessary to support the security mode. (((13))) The information processing system according to any one of (((1))) to (((12))), characterized in that the first processor controls execution of a job received when the first information processing device is operating in the setting mode according to the type of the job. (((14))) The first processor, If the type of the job is a job to be executed when the first information processing apparatus is operated in the security mode, the job is stored; After the first information processing apparatus transitions to the security mode, the stored job is executed. 2. An information processing system according to claim 1, wherein: (((15))) The information processing system described in (((13))) is characterized in that, if the type of job is a job that is not to be executed when the first information processing device is operated in the security mode, the first processor does not execute the job or notifies an administrator of receipt of the job. (((16))) A first computer having one or more network ports that are restricted from being opened when operating in a security mode in which security is guaranteed, and a second computer having one or more network ports and being a target for setting compatible with the security mode, a function of transitioning the computer from the security mode to a setting mode in which only the network port used when making the setting in the second computer is opened in response to a predetermined trigger; after the computer transitions to the configuration mode, replicating the configuration of the first computer to the second computer via the open network port; a function of returning the computer from the setting mode to the security mode upon completion of the duplication of the setting; A program to achieve this.

[0145] According to the invention described in (((1))), for an information processing device to be newly introduced into an information processing system that is operated in a security mode that restricts the opening of a network port of the information processing device as a requirement for ensuring security, it is possible to set up the information processing device to be compatible with the security mode while maintaining a state in which security is guaranteed. According to the invention described in (((2))), it is possible to allow the user to specify a source and a destination of the settings compatible with the security mode. According to the invention described in (((3))), it is not necessary to form a communication path between the first information processing apparatus and the second information processing apparatus which are to be the copy partners of the settings. According to the invention described in (((4))), the device can select a first information processing device that will be the source of copying settings that are compatible with the security mode, and can directly obtain information used for settings that are compatible with the security mode from the first information processing device. According to the invention described in (((5))), a setting compatible with the security mode can be performed in the second information processing device, triggered by an instruction from a user. According to the invention described in (((6))), it is possible to start settings compatible with the security mode by oneself without receiving instructions from the user. According to the invention described in (((7))), it is possible to determine whether a detected information processing device is a first information processing device or a second information processing device depending on whether or not it holds specific information necessary for supporting a security mode. According to the invention described in ((8)), it is possible to directly provide information used for the settings compatible with the security mode to the second information processing apparatus that is to be the copy destination of the settings. According to the invention described in (((9))), a setting compatible with the security mode can be performed in the second information processing device, triggered by an instruction from a user. According to the invention described in (((10))), it is possible to start setting for the second information processing device in a manner compatible with the security mode, without receiving an instruction from a user. According to the invention described in (((11))), it is possible to cause one first information processing device to perform settings compatible with security modes for a plurality of second information processing devices. According to the invention described in (((12))), it is possible to determine whether a detected information processing device is a first information processing device or a second information processing device depending on whether or not it holds specific information necessary for supporting a security mode. According to the invention described in (((13))), it is possible to set the handling according to the type of job. According to the invention described in (((14))), it is possible to start execution of a job while operating in security mode. According to the invention described in (((15))), the guaranteed security can be guaranteed. According to the invention described in (((16))), when an information processing device is newly introduced into an information processing system that is operated in a security mode that restricts the opening of a network port of the information processing device as a requirement for ensuring security, it is possible to set the information processing device to be compatible with the security mode while maintaining a state in which security is guaranteed. [Explanation of symbols]

[0146] 2 Cloud, 3 Cloud service, 4 On-premise environment, 6, 41 PC, 8 Internet, 11, 21, 31 User interface (UI) unit, 12, 22, 32 Connection processing unit, 13, 27, 37 Mode switching instruction unit, 14 Configuration file relay unit, 15, 24, 35 Control unit, 20 Multifunction device (configured device), 23 Configuration file transmission unit, 25 Configuration file storage unit, 26 Unconfigured device identification unit, 30 Multifunction device (unconfigured device), 33 Configuration file reception unit, 34 Environment setting unit, 36 Configured device identification unit, 42 Multifunction device.

Claims

1. A first information processing apparatus including a first processor and one or more network ports the opening of which is restricted when the apparatus is operating in a security mode in which security is guaranteed; When setting a second information processing apparatus including a second processor and one or more network ports to be compatible with the security mode, the first processor and the second processor in response to a predetermined trigger, transitioning the information processing device from the security mode to a setting mode in which only the network port used when making the setting in the second information processing device is in an open state; After the information processing device is switched to the setting mode, the setting in the first information processing device is copied to the second information processing device via the network port in an open state; returning the information processing device from the setting mode to the security mode in response to completion of copying the setting. An information processing system comprising:

2. a third information processing device including a third processor; 2. The information processing system according to claim 1, wherein the third processor instructs the first processor and the second processor to transition to the setting mode as the predetermined trigger in response to an instruction from a user.

3. 3. The information processing system according to claim 2, wherein the third processor relays information used for the settings transmitted from the first information processing device to the second information processing device when copying the settings.

4. The second processor comprises: transitioning the second information processing device to the setting mode in response to the predetermined trigger and directly connecting the second information processing device to the first information processing device; receiving information used for the setting directly from the first information processing device; The first processor, transitioning the first information processing device to the setting mode in response to an instruction from the second processor as the predetermined trigger; 2. The information processing system according to claim 1 .

5. 5. The information processing system according to claim 4, wherein the second processor accepts an instruction from a user as the predetermined trigger.

6. 5. The information processing system according to claim 4, wherein the second processor uses, as the predetermined trigger, its own detection of the first information processing apparatus that is the source of the copy of the settings.

7. The information processing system according to claim 6, characterized in that the second processor determines that another information processing device that has been detected and directly connected is the first information processing device when the other information processing device holds specific information necessary for supporting the security mode.

8. The first processor, transitioning the first information processing device to the setting mode in response to the predetermined trigger and directly connecting the first information processing device to which the setting is to be copied; transmitting information used for the setting directly to the connected second information processing device; The second processor comprises: transitioning the second information processing device to a setting mode in response to an instruction from the first processor as the predetermined trigger; 2. The information processing system according to claim 1 .

9. 9. The information processing system according to claim 8, wherein the first processor accepts an instruction from a user as the predetermined trigger.

10. 9. The information processing system according to claim 8, wherein the first processor uses, as the predetermined trigger, its own detection of the second information processing apparatus to which the settings are to be copied.

11. The information processing system according to claim 10, characterized in that when the first processor detects multiple second information processing devices to which the settings are to be copied, the first processor transmits the information to be used for the settings directly to each of the detected multiple second information processing devices.

12. The information processing system according to claim 8, characterized in that the first processor determines that another information processing device that has been detected and directly connected is the second information processing device when the other information processing device does not hold specific information necessary to support the security mode.

13. 2. The information processing system according to claim 1, wherein the first processor controls execution of a job received when the first information processing apparatus is operating in the setting mode, depending on the type of the job.

14. The first processor, If the type of the job is a job to be executed when the first information processing apparatus is operated in the security mode, the job is stored; executing the stored job after the first information processing apparatus has entered the security mode; 14. The information processing system according to claim 13.

15. The information processing system according to claim 13, characterized in that if the type of job is one that is not to be executed when the first information processing device is operated in the security mode, the first processor does not execute the job or notifies an administrator of the receipt of the job.

16. A first computer includes one or more network ports that are restricted from being opened when the first computer operates in a security mode in which security is guaranteed, and a second computer includes one or more network ports and is a target for performing settings compatible with the security mode. a function of transitioning the computer from the security mode to a setting mode in response to a predetermined trigger, the computer operating in an open state with only the network port used when making the setting in the second computer; after the computer transitions to the configuration mode, replicating the configuration in the first computer to the second computer via the open network port; a function of returning the computer from the setting mode to the security mode upon completion of the duplication of the setting; A program to achieve this.

Images