Image forming apparatus

Abstract

To provide technique to improve processing in connecting an image forming apparatus to a wireless LAN access point.SOLUTION: A MFP 1 can set restriction information 24 indicating an access point that may have low security, while receiving input by an administrator. The MFP 1 searches for access points in response to a connection instruction, receives selection of one of the access points searched for, and determines whether the selected access point satisfies the restriction information 24. When determining that the selected access point satisfies the restriction information 24, the MFP 1 receives, through a user IF 13, operation as to whether to permit connection to the selected access point, and when receiving operation to permit the connection or when determining that the selected access point does not satisfy the restriction information 24, establishes connection between the selected access point and a wireless LAN-IF 141.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The technical field disclosed in this specification relates to a technology for an image forming apparatus that can be connected to a wireless LAN access point. [Background technology]

[0002] In recent years, with the spread of teleworking, there are cases where an image forming device such as a printer is installed in an outside space and work is performed using the image forming device in the outside space, as disclosed in Patent Document 1. In the system disclosed in Patent Document 1, the image forming device is connected to a LAN in advance, a mobile terminal brought by a user is connected to a wireless Wi-Fi access point, and the mobile terminal downloads a multi-purpose application program, thereby enabling the image forming device to be used. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2019-157587 A Summary of the Invention [Problem to be solved by the invention]

[0004] When an image forming apparatus is used in an outside space, the image forming apparatus may also be connected to a wireless LAN access point. In this case, a highly secure wireless LAN access point is not necessarily installed in the outside space. Connecting to a wireless LAN access point with low security poses a risk of information leakage, so connecting to such a wireless LAN access point is not desirable. On the other hand, restricting the connection to the wireless LAN access point may impair the convenience of the outside space. For this reason, there is room for improvement in the technology for connecting an image forming apparatus to a wireless LAN access point. [Means for solving the problem]

[0005] The image forming apparatus made for the purpose of solving this problem includes a wireless LAN interface, a user interface, an image forming engine, and a computer, and is capable of receiving an instruction related to image formation from an external device by wireless LAN communication via a wireless LAN access point to which a connection with the wireless LAN interface is established, and is configured to cause the image forming engine to perform image formation when the instruction related to image formation is received from the external device by the wireless LAN communication. A connection attention condition can be set in a state in which an input by an administrator is accepted, and the connection attention condition is a condition indicating a wireless LAN access point that may have a low level of security. The computer performs a search process for searching for a connectable wireless LAN access point in response to a connection instruction for starting the wireless LAN communication, and a search process for searching for a connectable wireless LAN access point by the search process. and a determination process for determining whether or not the wireless LAN access point selected in the selection process satisfies the connection attention condition. The computer is further configured to execute a confirmation process for accepting, via the user interface, an operation for determining whether or not to permit a connection to the wireless LAN access point selected in the selection process when it is determined in the determination process that the connection attention condition is satisfied, and to execute an establishment process for establishing a connection between the wireless LAN access point selected in the selection process and the wireless LAN interface when the operation for permitting the connection is accepted in the confirmation process or when it is determined in the determination process that the connection attention condition is not satisfied.

[0006] When the image forming apparatus disclosed in this specification determines that the wireless LAN access point selected by the user may be a low security connection destination, it checks whether the access point can be connected before connecting to the access point, and establishes a connection to the access point if the user operates to permit the connection. This reduces the possibility of connecting to a low security access point without thinking, and reduces the risk of information leakage from the access point. In addition, if the user permits the connection, wireless LAN communication is possible even with a low security access point, so there is a high degree of freedom when using wireless LAN, and the image forming apparatus can be operated with a high degree of freedom that takes into account safety and convenience.

[0007] A control method for implementing the functions of the image forming apparatus, a computer program, and a computer-readable storage medium storing the program are also novel and useful. Effect of the Invention

[0008] The technology disclosed in this specification realizes a technology that improves the process when connecting an image forming apparatus to a wireless LAN access point. [Brief description of the drawings]

[0009] [Figure 1] 2 is a block diagram showing the electrical configuration of the MFP according to the present embodiment. FIG. [Diagram 2] FIG. 1 is an explanatory diagram showing an example of a usage environment of an MFP. [Diagram 3] FIG. 13 is an explanatory diagram showing an example of a connection condition setting screen. [Figure 4] FIG. 13 is an explanatory diagram showing an example of a selection display setting screen. [Diagram 5] 13 is a flowchart illustrating an example of a procedure for AP connection processing. [Figure 6] 13 is a flowchart illustrating an example of a procedure for a display process. [Figure 7] FIG. 11 is an explanatory diagram showing an example of confirmation history information. [Figure 8]13 is a flowchart illustrating an example of a connection process procedure. [Figure 9] FIG. 13 is an explanatory diagram showing an example of a confirmation screen. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An image forming apparatus according to an embodiment of the present invention will be described in detail below with reference to the accompanying drawings. In this specification, a multifunction peripheral (hereinafter, referred to as "MFP") having a wireless communication function is disclosed.

[0011] As shown in Fig. 1, the MFP 1 of this embodiment includes a controller 10 including a CPU 11 and a memory 12. The MFP 1 is an example of an image forming device. The CPU 11 is an example of a computer. The MFP 1 also includes a user interface (hereinafter referred to as "user IF") 13, a communication interface (hereinafter referred to as "communication IF") 14, a print engine 15, and a scanner 16, which are electrically connected to the controller 10. The print engine 15 and the scanner 16 are examples of an image forming engine.

[0012] The CPU 11 executes various processes according to the programs read from the memory 12 and based on the user's operations. As shown in Fig. 1, the memory 12 stores various programs and data including an operating system (hereinafter referred to as "OS") 21, a setting program 22, a program and data for implementing an embedded web server function (hereinafter referred to as "EWS") 23, restriction information 24, selection setting information 25, and confirmation history information 26. The programs and data will be described in detail later.

[0013] The memory 12 is also used as a working area when various processes are executed. A buffer provided in the CPU 11 is also an example of the memory 12. An example of the memory 12 is not limited to a ROM, RAM, HDD, etc. built into the MFP 1, but may be a storage medium that is readable and writable by the CPU 11. A computer-readable storage medium is a non-transitory medium. In addition to the above examples, non-transitory media also include recording media such as CD-ROMs and DVD-ROMs. A non-transitory medium is also a tangible medium. On the other hand, an electrical signal carrying a program downloaded from a server on the Internet is a computer-readable signal medium, which is a type of computer-readable medium, but is not included in non-transitory computer-readable storage media.

[0014] The user IF 13 includes hardware for displaying a screen for notifying the user of information and hardware for accepting operations by the user. For example, the user IF 13 includes a touch panel 131 having a screen display function and an operation acceptance function. The user IF 13 may include a display unit and an operation button.

[0015] The communication IF 14 includes hardware for communicating with an external device. For example, the communication IF 14 includes a wireless LAN interface (hereinafter referred to as "wireless LAN-IF") 141 having a wireless LAN communication function compatible with at least the Wi-Fi (registered trademark) standard. The MFP 1 can be connected to a wireless LAN access point (hereinafter simply referred to as "access point" or "AP") having a wireless LAN communication function via the wireless LAN-IF 141. The communication IF 14 may include a function compatible with communication standards such as Ethernet (registered trademark) and USB. The MFP 1 may be provided with multiple communication IFs 14 compatible with multiple communication standards.

[0016] The print engine 15 includes a configuration for printing an image based on image data on a print medium such as a sheet. The print method of the print engine 15 is, for example, an electrophotographic method or an inkjet method. The scanner 16 includes a configuration for reading an image of an original document and acquiring image data.

[0017] Next, the operation procedure of the MFP1 will be described with reference to a flowchart. The following process basically indicates the process of the CPU 11 according to the instructions written in the program. That is, the processes such as "judgment", "extraction", "selection", "calculation", "decision", "identification", "acquisition", "reception", and "control" in the following description represent the process of the CPU. The process by the CPU also includes hardware control using the API of the OS. In this specification, the operation of each program will be described with the description of the OS omitted. That is, in the following description, a description to the effect that "program B controls hardware C" may also mean that "program B controls hardware C using the API of the OS". In addition, the process of the CPU according to the instructions written in the program may be described in abbreviated terms. For example, it may be described as "performed by the CPU". In addition, the process of the CPU according to the instructions written in the program may be described in abbreviated terms such as "performed by program A".

[0018] Note that "obtaining" is used as a concept that does not require a request. In other words, the process of receiving data without the CPU requesting it is also included in the concept of "the CPU obtaining data." In addition, "data" in this specification is represented as a bit string that can be read by a computer. Data with the same substantial meaning but different formats will be treated as the same data. The same applies to "information" in this specification. In addition, "requesting" and "instructing" are concepts that indicate outputting information indicating a request or information indicating an instruction to the other party. In addition, information indicating a request or information indicating an instruction will also be simply referred to as "request" and "instruction."

[0019] Furthermore, the process by a CPU to determine whether information A indicates event B is sometimes conceptually described as "determining, from information A, whether event B is present." The process by a CPU to determine whether information A indicates event B or event C is sometimes conceptually described as "determining, from information A, whether event B or event C is present."

[0020] When an employee works remotely, for example, as shown in Figure 2(A), the employee PC3, which is a personal computer (hereafter referred to as "PC") used, is often configured by a user with administrator privileges to access company information using highly secure communications such as a VPN (short for Virtual Private Network). In addition, there are a wide variety of high-performance operating systems and antivirus software available for PCs. For the employee PC3, it is easy for a user with administrator privileges to take security measures using high-performance operating systems and antivirus software.

[0021] 2A, an MFP1 used by an employee who works remotely may exchange image data with an employee PC 3 by communication via an access point 101. In other words, when a connection between the wireless LAN-IF 141 and the access point 101 is established, the MFP 1 can receive instructions related to image formation, such as print instructions and scan instructions, from an external device such as the employee PC 3 by wireless LAN communication via the access point 101. If a low-security access point is used for communication between the MFP 1 and the employee PC 3, there is a risk of information leakage.

[0022] 2A shows that the employee PC 3 can be directly connected to the company, but in reality, the connection between the employee PC 3 and the company often uses VPN communication via an access point or cloud. The access point used to connect the employee PC 3 to the company may be the access point 101 used to connect the MFP 1 and the employee PC 3, or it may be an access point other than the access point 101.

[0023] However, there are fewer security measures for MFPs than for PCs. Also, since the MFP1 administrator cannot necessarily grasp the environment in which each employee uses the MFP1, it is difficult to individually specify the access points that are allowed to establish connections.

[0024] As shown in Fig. 2(B), for example, the MFP1 of this embodiment can receive settings for access points to which connection is permitted to be established, that is, settings of restriction information 24 (see Fig. 1), from an administrator PC 4 used by an administrator via a communication IF 14. For example, before being installed in a remote work environment, the MFP1 receives settings from the administrator, and is installed in the remote work environment in a configured state. Employees who perform remote work can use the MFP1 freely within the scope of security measures by using the MFP1 based on the settings made by the administrator.

[0025] The administrator can set the restriction information 24, for example, by using the EWS 23 included in the MFP1. The MFP1 can accept access to the EWS 23, for example, via a wired connection. When the MFP1 accepts access to the EWS 23 via the communication IF 14, it can provide web page data to the device that is the source of the access, for example, the administrator PC 4. Then, a browser built into the administrator PC 4 can display a web page based on the web page data provided by the MFP1. Note that the MFP1 may be in a state where it does not accept settings for an access point when shipped from the factory.

[0026] When the browser of the administrator PC 4 displays a screen based on the web page data received from the MFP 1, it can transmit information indicating the accepted operation on that screen to the MFP 1. Based on the information received from the administrator PC 4, the MFP 1 can obtain, for example, authentication information input in the administrator PC 4. Then, when it is determined that the login is by the administrator, the MFP 1 provides the administrator PC 4 with web page data for displaying a screen for the administrator.

[0027] The MFP 1 can accept settings of conditions related to connection with access points via a screen for an administrator. For example, as shown in FIG. 3, the MFP 1 provides web page data of a connection condition setting screen 50 to the administrator PC 4 to accept settings of conditions related to access points to which connection is permitted. The MFP 1 stores the conditions set by the administrator on the connection condition setting screen 50 in the memory 12 as the restriction information 24, and does not accept changes by users other than the administrator. The conditions stored in the restriction information 24 are an example of connection caution conditions. By accepting the settings via the EWS 23, it is possible to limit users who can set the restriction information 24 to the administrator.

[0028] The connection condition setting screen 50 includes, for example, a selection field 51 for authentication method conditions and a setting field 52 for passwords. In the example of FIG. 3, the selection field 51 for authentication method conditions includes radio buttons that alternatively accept the selection of the minimum level of the authentication method that is permitted. For example, the option of "WPA or higher" means that connection with an access point set with any of the authentication methods "WPA", "WPA2", and "WPA3" is permitted. Note that, instead of accepting the minimum level alternatively, the authentication method conditions may list various authentication methods and accept the selection of all authentication methods that are permitted for connection.

[0029] Password condition setting field 52 includes fields for accepting conditions of minimum length 521 and complexity 522. Minimum length 521 is the minimum number of characters that a password set for an access point is permitted to have for connection. In other words, an access point set with a password having fewer characters than the number set in minimum length 521 is an access point for which connection is restricted. An access point set with a short password is likely to have low security.

[0030] Complexity 522 is a condition related to the combination of character types included in a password, and is, for example, the minimum number of categories that allow connection. An access point for which a password is set that includes character types from less than the number of categories set in complexity 522 is an access point for which connection is restricted. Examples of categories include uppercase Latin letters, lowercase Latin letters, numbers, and symbols. An access point with a password that includes a small combination of character types is likely to be less secure.

[0031] In addition to the condition based on the number of categories, options for complexity 522 may include conditions that restrict passwords that are likely to be easily thought up by anyone or passwords that match rules indicating a simple structure, such as prohibiting passwords that are only words that appear in a dictionary of inappropriate words stored in memory, prohibiting passwords that are only a sequence of the same characters, and prohibiting passwords that are only consecutive numbers. An access point that is set with a password that is likely to be easily thought up by anyone or a password with a simple structure is likely to have low security. Also, MFP 1 may be able to set multiple conditions for complexity 522 in combination.

[0032] For example, when the MFP1 receives information indicating an input operation to the OK button 53 on the connection condition setting screen 50 shown in Figure 3 via the EWS 23, it stores restriction information 24 (see Figure 1) including information on the authentication method selected in the selection field 51 and information on the password conditions set in the setting field 52 in a non-volatile storage area of ​​the memory 12.

[0033] The MFP 1 can also accept the setting of selection setting information 25 (see FIG. 1) as a setting related to connection with an access point. For example, when the MFP 1 accepts a login with administrator authority via the EWS 23, it can display a selection display setting screen 60, which is a screen for accepting the setting of the selection setting information 25, as shown in FIG. 4. Note that the selection display setting screen 60 may be part of the connection condition setting screen 50 shown in FIG. 3.

[0034] Although the details will be described later, the MFP1 judges whether or not the access point selected by the user satisfies the stored restriction information 24. Then, when an access point that does not satisfy the restriction information 24, that is, an access point that cannot be determined as being permitted to connect based on the restriction information 24, is selected, the MFP1 confirms with the user whether or not to establish a connection with the access point. An access point that does not satisfy the restriction information 24 is likely to be an access point with low security. When the user's confirmation result indicates that a connection with the access point is to be established, the MFP1 establishes the connection. In other words, even if the access point is determined as being low security based on the restriction information 24, when the user's confirmation result indicates that the establishment of a connection with the access point is permitted, the MFP1 establishes the connection. Note that when the user's confirmation result indicates that the establishment of a connection with the access point is not permitted, the MFP1 does not establish the connection.

[0035] Furthermore, the MFP 1 can store the user's confirmation result in confirmation history information 26 (see FIG. 1) and use it as an index for processing the next and subsequent connection instructions. The confirmation history information 26 is information that associates information indicating the user's confirmation result, "permitted" or "not permitted," with information indicating the access point. The MFP 1 stores the settings received by the administrator on the selection display setting screen 60 as selection setting information 25, and determines the contents to be stored in the confirmation history information 26 based on the selection setting information 25. Details of the confirmation history information 26 will be described later.

[0036] The selection display setting screen 60 includes a radio button 61 for accepting a setting as to whether or not to omit re-checking for access points for which the confirmation result was "Allowed," and a radio button 62 for accepting a setting for the period for which the setting in radio button 61 is valid.

[0037] Furthermore, the selection display setting screen 60 includes a radio button 63 for accepting a setting as to whether or not to make reselectable an access point for which the confirmation result was "not permitted," and a radio button 64 for accepting a setting of the period until the setting in the radio button 63 becomes valid. When the MFP 1 receives information indicating an input operation to the OK button 65 on the selection display setting screen 60, it stores the settings accepted in each of the radio buttons 61-64 in a non-volatile storage area of ​​the memory 12 as selection setting information 25.

[0038] The administrator sets the restriction information 24 and the selection setting information 25, and then hands the MFP 1 over to an employee who will be working remotely. The employee who will be working remotely uses the MFP 1 with the restriction information 24 and the selection setting information 25 stored in the MFP 1.

[0039] Next, the procedure of the AP connection process will be described with reference to the flowchart in Fig. 5. The AP connection process is executed by the CPU 11 of the MFP1 when a connection instruction for establishing a connection with an access point to start wireless LAN communication is received in a state where a connection with an access point has not been established. The connection instruction is input, for example, via the touch panel 131 of the user IF 13 by an employee who will be working remotely after the MFP1 is installed in a usage environment where remote work is performed.

[0040] In the AP connection process, the CPU 11 transmits a search signal for searching for a connectable access point via the wireless LAN-IF 141 (S101). S101 is an example of the search process. The CPU 11 receives a response signal from an access point in response to the search signal, and acquires information on each access point that is the source of the response signal (S102). Note that, when each access point receives a search signal, it is configured to transmit a response signal in response to the received search signal. The search signal is also called a probe signal. In addition, transmitting a signal in the wireless LAN frequency band to search for an access point is also called scanning the wireless LAN frequency band.

[0041] Then, the CPU 11 judges whether or not a login with administrator authority is accepted (S103). Note that the MFP 1 can accept a login instruction, for example, via the touch panel 131 of the user IF 13, before an instruction to establish a connection with an access point. The CPU 11 can judge whether or not the user has administrator authority based on the accepted login information. For example, when login information indicating an administrator is accepted, the CPU 11 judges that the login is that of a user with administrator authority. An employee who performs remote work is likely to be a user without administrator authority. Note that the CPU 11 may be able to accept a connection instruction in a state where a login is not accepted, and in that case, it judges that a login with administrator authority is not accepted.

[0042] When it is determined that login with administrator authority is not accepted (S103: NO), the CPU 11 executes a display process (S111). The display process is a process for displaying a list of connectable access points as options. The procedure of the display process will be described with reference to the flowchart of FIG. 6.

[0043] In the display process, the CPU 11 extracts information on one of the access points that has received a response signal (S201), and judges whether or not the authentication method set in the extracted access point is an authentication method permitted in the restriction information 24 (S211). Specifically, the CPU 11 judges whether or not the authentication method set in the access point is included in the authentication methods accepted in the selection field 51 of the connection condition setting screen 50 shown in FIG. The CPU 11 can obtain information indicating the authentication method from the wireless LAN access point that has responded to the wireless LAN access point search signal. The CPU 11 may also obtain identification information, the MAC address of the access point, the encryption method, and the like in addition to the authentication method.

[0044] When it is determined that the authentication method is permitted (S211: YES), the CPU 11 determines whether or not information indicating "not permitted" is stored in association with the access point in the confirmation history information 26 (see FIG. 1) stored in the memory 12 (S212). As described above, the confirmation history information 26 is information indicating whether the user's confirmation result for an access point that has been determined to have low security based on the restriction information 24 was "permitted" or "not permitted" for the establishment of a connection with the access point. The confirmation procedure will be described in detail later.

[0045] 7, the confirmation history information 26 includes AP information 261, history 262, and expiration date 263. The AP information 261 is identification information that identifies each access point that has been determined to have low security based on the restriction information 24, and is, for example, the name or SSID of the access point. The history 262 is information that indicates whether the user's confirmation result was "permitted" or "not permitted." Among the confirmation history information 26, a record that includes the history 262 that indicates "permitted" is an example of permission history information. Among the confirmation history information 26, a record that includes the history 262 that indicates "not permitted" is an example of not permitted history information. The MFP 1 may store the information that includes the history that indicates "permitted" and the information that includes the history that indicates "not permitted" together as the confirmation history information 26, or may store each piece of information as separate information.

[0046] The expiration date 263 is information indicating the expiration date of the information indicated by the history 262 of that access point. A record in which the history 262 indicates "Allowed" stores information indicating a display period as the expiration date 263. The display period is a period during which the access point is permitted to be displayed as an option. The expiration date 263 of a record indicating "Allowed" is, for example, a combination of information indicating the time when the record in which the history 262 is "Allowed" was registered and information based on the period corresponding to the radio button 62 selected on the selection display setting screen 60 (see FIG. 4) described above. The procedure for registering a record will be described later.

[0047] A record whose history 262 indicates "not permitted" stores information indicating a non-display period as expiration date 263. The non-display period is a period during which the access point is not permitted to be displayed as an option. The expiration date 263 of a record indicating "not permitted" is, for example, a combination of information indicating the time when the record whose history 262 indicates "not permitted" was registered and information based on the period corresponding to the radio button 64 selected on the selection display setting screen 60.

[0048] If it is determined in S211 that the confirmation history information 26 does not store history 262 indicating “not permitted” in association with AP information 261 indicating an access point that has been determined to have an acceptable authentication method (S212: NO), the CPU 11 displays the information of that access point as a selectable option (S221).

[0049] On the other hand, when it is determined that the history 262 indicating "not permitted" is stored in association with the AP information 261 indicating the access point (S212: YES), the CPU 11 determines whether or not the access point, which has been determined to have an permitted authentication method, is in a non-display period (S213). The CPU 11 determines whether or not the current date and time is within the period indicated by the expiration date 263 included in the record of the access point. Specifically, if the current date and time is within the period corresponding to the radio button 64 selected on the selection display setting screen 60 from the time when the history 262 indicating "not permitted" was stored, the CPU 11 determines that the access point is in a non-display period.

[0050] If it is determined that the target access point is not in a hidden period, that is, the hidden period has ended (S213: NO), CPU 11 deletes the record indicating this access point from confirmation history information 26 (S214). Then, CPU 11 displays the information of that access point as an option (S221). Even if the information indicating "not permitted" is stored as history 262 in confirmation history information 26 for an access point, if the hidden period has ended, CPU 11 displays it as an option so that it can be selected.

[0051] If it is determined that the history 262 is not displayed (S213: YES), the CPU 11 does not display the information of the access point extracted in S201 as an option (S222). The CPU 11 may display the information of the access point as unselectable. Even if the access point is determined to be an allowed authentication method, if information indicating "not permitted" is stored in the history 262 and the access point is not displayed as selected, as indicated by the expiration date 263 included in the record, the CPU 11 does not display the access point as selectable.

[0052] CPU 11 will not make the access point selectable if it is within the non-display period indicated by expiration date 263 from the time the confirmation result of "not permitted" is accepted and stored in confirmation history information 26. The setting of whether or not to store information indicating "not permitted" as history 262 in confirmation history information 26 is accepted by radio button 63 on selection display setting screen 60 (see FIG. 4) described above. The setting of whether or not to store information indicating "not permitted" is a setting indicating the condition of whether or not to restrict reselection of an access point that was not permitted to be connected, and is an example of a restricting condition.

[0053] On the other hand, if it is determined that the authentication method set for the access point is not an allowed authentication method (S211: NO), the CPU 11 determines whether or not a history 262 indicating "permitted" is stored in the confirmation history information 26 in association with the AP information 261 indicating the access point (S216). If it is determined that the history 262 indicating "permitted" is stored (S216: YES), the CPU 11 determines whether or not the display period is in progress (S217). In other words, the CPU 11 determines whether or not the current date and time is within the period indicated by the expiration date 263 included in the record of the access point.

[0054] When it is determined that the target access point is in the display period (S217: YES), the CPU 11 displays information about the access point as an option (S221). Even if the authentication method set in the access point is not an allowed authentication method, if information indicating that the access point is permitted to be displayed as an option is stored, the CPU 11 displays the access point as selectable as an option.

[0055] For example, even if an access point has an authentication method that is not permitted based on the restriction information 24, if the access point has history 262 indicating "permission" stored therein, such as an access point whose safety was previously confirmed by a user and "permission" for connection, the CPU 11 displays the access point as an option. If "No" is selected with the radio button 61, the history 262 indicating "permission" is not stored. In other words, by selecting the radio button 61, the administrator can prohibit or permit a user from independently determining the safety of an access point and permitting connection.

[0056] If it is not the display period for the target access point, that is, if it is determined that the display period has ended (S217: NO), CPU 11 deletes the record indicating this access point from confirmation history information 26 (S218). After S218, or if it is determined that history 262 indicating "permitted" is not stored (S216: NO), CPU 11 does not display the information of the access point extracted in S201 as a choice (S222). CPU 11 may display the information of the access point in such a way that it cannot be selected.

[0057] After S221 or S222, the CPU 11 judges whether or not the processing for all access points that have received a response signal has been completed (S231). If it is judged that the processing has not been completed (S231: NO), the CPU 11 proceeds to S201, extracts another access point, and similarly determines whether or not to display it. If it is judged that the processing for all access points has been completed (S231: YES), the CPU 11 ends the display processing and returns to the AP connection processing.

[0058] The information stored as the expiration date 263 is not limited to a combination of information indicating the time when the record was registered and information indicating the selected period. For example, when registering a record, the CPU 11 may store, as the expiration date 263, information indicating the date and time after the period selected on the selection display setting screen 60 has elapsed from the time of the registration, that is, information indicating the end date and time of the display period or non-display period. In this case, the CPU 11 compares the current date and time with the date and time stored as the expiration date 263 to determine whether the access point is in a non-display period or a display period.

[0059] Also, for example, CPU 11 may simply store information indicating the period selected on selection display setting screen 60 as expiration date 263. When registering a record, CPU 11 may start a timer in association with information indicating the access point to be registered, and may determine that the record is within the expiration date if the period indicated by the timer is within the period stored as expiration date 263.

[0060] Returning to the description of the AP connection process in Fig. 5, the CPU 11 causes the touch panel 131 to display a selection screen displaying a list of information on the access points determined to be displayed as options in the display process, and accepts the user's selection (S115). S115 is an example of the selection process. When it is determined that the selection of an access point has been accepted (S115: YES), the CPU 11 executes the connection process (S121).

[0061] The procedure of the connection process will be described with reference to the flowchart of Fig. 8. In the connection process, the CPU 11 accesses the access point selected by the user in S115 of the AP connection process via the wireless LAN-IF 141 (S301). Then, the CPU 11 determines whether or not a password needs to be input to connect to the access point, that is, whether or not a password is requested by the access point (S302). If it is determined that a password needs to be input (S302: YES), the CPU 11 causes the touch panel 131 to display a password input screen, and accepts a password input by a user operation (S303).

[0062] The CPU 11 requests authentication by transmitting the password received in S303 to the selected access point, and determines whether the authentication is successful or not (S304). If there is a response indicating that the connection is permitted from the access point to which the password was transmitted, the CPU 11 determines that the authentication is successful.

[0063] If it is determined that password entry is not required (S302: NO) or that password authentication has been successful (S304: YES), CPU 11 determines whether the password setting state for this access point is a state in which connection is permitted based on the restriction information 24 (S311). S311 is an example of a determination process. CPU 11 determines whether the password is a state in which connection is permitted based on the password conditions stored in the restriction information 24. Note that if password entry is not required, CPU 11 assumes that a password with both the number of characters and the number of character type combinations of 0 is set.

[0064] Specifically, CPU 11 first does not determine that a password is acceptable if the number of characters in the password is shorter than the minimum password length condition (e.g., minimum length 521 in FIG. 3) stored in restriction information 24. If the password is sufficiently long, CPU 11 further obtains the number of combinations of character types included in the password, and does not determine that the password is acceptable if the number of combinations of character types is less than the number of combinations of character types accepted in the password complexity condition (e.g., complexity 522 in FIG. 3) stored in restriction information 24.

[0065] If it is determined that the password set for this access point is a password that allows connection (S311: YES), the CPU 11 transmits a connection request signal to the selected access point to establish a connection (S312). S312 is an example of the establishment process.

[0066] On the other hand, if it is determined that the password is not deemed to allow connection (S311: NO), the CPU 11 determines whether history 262 indicating "Allowed" is stored in association with AP information 261 indicating the currently selected access point as the confirmation history information 26 (see FIG. 7) stored in the memory 12 (S321).

[0067] When it is determined that the history 262 indicating "permission" is stored in association with the selected access point (S321: YES), the CPU 11 determines whether or not the history 262 is valid (S322). Specifically, the CPU 11 determines whether or not the expiration date has not passed, based on the information indicated by the expiration date 263 stored in association with the AP information 261 indicating the selected access point. As described above, the expiration date 263 of the record including the history 262 indicating "permission" stores information indicating the time when the confirmation result of "permission" was accepted, and information indicating the period accepted by the radio button 62 on the selection display setting screen 60 (see FIG. 4) described above.

[0068] If it is determined that the history 262 is not valid based on the expiration date 263 (S322: NO), the CPU 11 deletes the record indicating this access point from the confirmation history information 26 (S323). Then, after S323, or if it is determined that the record of the AP information 261 indicating the currently selected access point is not stored in the confirmation history information 26 (S321: NO), the CPU 11 displays a confirmation screen on the touch panel 131 and receives confirmation from the user (S325). S325 is an example of the confirmation process.

[0069] 9, the confirmation screen 70 includes a message informing the user that the security of the selected access point is low, and then accepts the selection of a button 71 for selecting whether to permit a connection to the selected access point or a button 72 for selecting not to permit the connection. The CPU 11 waits until it accepts an operation on either button on the displayed confirmation screen 70. The confirmation screen 70 may further include information indicating the reason for the low security and a method of dealing with the problem, such as changing the password.

[0070] When any of the selections is accepted, the CPU 11 stores a confirmation history based on the selection setting information 25 (see FIG. 1) stored in the memory 12 (S326). Specifically, when the confirmation result accepted in S325 is "permitted", that is, the operation on the button 71 and the selection setting information 25 stores that the setting of "Yes" has been accepted on the radio button 61 on the selection display setting screen 60 (see FIG. 4), the CPU 11 creates a record related to this access point and stores it in the confirmation history information 26. For example, if the confirmation result for the access point "AP02" is "permitted", the CPU 11 stores AP information 261, a history 262 indicating "permitted", and its expiration date 263 as information on the access point "AP02" in the confirmation history information 26, as shown in FIG. 7.

[0071] Then, the CPU 11 judges whether or not the confirmation result received in S325 is "permission" (S328). If it is judged that "permission" has been received (S328: YES), the CPU 11 establishes the connection (S312). Although security may be reduced depending on the password configuration, the CPU 11 displays the confirmation screen 70 to prompt the user to confirm whether or not to permit the connection, thereby achieving operation that takes security into consideration.

[0072] Furthermore, if the confirmation history information 26 already stores history 262 indicating "permission" in association with the selected access point and it is determined that the history 262 is within the validity period (S322: YES), the CPU 11 establishes a connection with this access point (S312). In other words, if an access point that has been permitted to establish a connection within the validity period is selected, the CPU 11 establishes the connection in the same manner as in the case of an acceptable password, without displaying the confirmation screen 70. The setting of whether or not to store history 262 indicating "permission" accepted by the radio button 61 on the selection display setting screen 60 is a setting indicating a condition of whether or not to omit acceptance of a confirmation operation after acceptance of permission, and is an example of an omission condition.

[0073] For an access point for which connection has been permitted by user operation, there is a possibility that the user will find it bothersome to perform a confirmation operation to permit connection every time a connection is subsequently made. The MFP1 of this embodiment is able to establish a connection to an access point for which permission has been granted without performing a confirmation operation thereafter, which is highly convenient for the user.

[0074] On the other hand, even if the confirmation result received in S325 is "permitted," if the selection setting information 25 stores that a setting of "No" has been received in the radio button 61 on the selection display setting screen 60, the CPU 11 does not store the current confirmation result in the confirmation history information 26. When a setting of "No" has been received in the radio button 61 on the selection display setting screen 60, the history 262 indicating "permitted" is not stored even for an access point that has been permitted to establish a connection in the past. Therefore, when this access point is selected again, the CPU 11 determines NO in S321 and displays the confirmation screen 70. This allows the user to always recognize that the access point is a low-security access point, and it is expected that the user will use the access point with security in mind, for example, by being careful when printing highly confidential documents.

[0075] Even if the previous confirmation result was "Allowed," continuing to use the device while omitting subsequent confirmations may result in a decrease in security. The MFP1 of this embodiment can accept settings from the administrator regarding omission conditions indicating whether or not to omit the confirmation operation and the period for which confirmation is to be omitted, allowing for more flexible operation.

[0076] Furthermore, when the confirmation result received in S325 is "not permitted" and the selection setting information 25 stores the fact that the setting of "Yes" has been received via the radio button 63 on the selection display setting screen 60, the CPU 11 creates a record related to this access point and stores it in the confirmation history information 26. For example, if the confirmation result for the access point "AP03" is "not permitted", the CPU 11 stores AP information 261, a history 262 indicating "not permitted", and its expiration date 263 as information on the access point "AP03" in the confirmation history information 26, as shown in FIG. 7. Note that the expiration date 263 is information including information indicating the current date and time and information indicating the period received via the radio button 64 on the selection display setting screen 60, as described above. When "Until reboot" is selected via the radio button 64, the CPU 11 may store information related to this access point in a volatile memory.

[0077] When history 262 indicating "not permitted" is stored and a response signal from "AP03" is received in response to a search signal, CPU 11 determines in S212 of the display process (see FIG. 6) that there is a non-permission history. Furthermore, if the non-permission history is not displayed (YES in S213), CPU 11 does not display "AP03" as an option. Therefore, the user cannot select "AP03". In other words, MFP 1 can accept a setting to exclude an access point to which connection was not permitted from selection targets when selecting a connection destination thereafter. This prevents a non-permission access point from being displayed as selectable multiple times, which may lead the user to repeatedly select it.

[0078] Also, if the non-display period has ended, as described above, the CPU 11 displays "AP03" as an option. Even if the confirmation result is "not permitted" for an access point, if subsequent selection is continued to be restricted, that access point will remain unselectable even if, for example, the user changes the password and its security changes. Since the MFP1 of this embodiment can accept settings by the administrator as to whether or not an access point that was not permitted to be connected can be selected from the next time onwards, it is possible to achieve a more flexible operation. In addition, since a non-display period can be set, it is possible to avoid the access point being displayed again as an option immediately after "not permitted" is accepted, which is highly convenient for the user.

[0079] On the other hand, if the confirmation result received in S325 is "not permitted" and the acceptance of the setting of "No" in radio button 63 on selection display setting screen 60 is stored in selection setting information 25, CPU 11 creates a record for this access point and stores it in confirmation history information 26. In this case, CPU 11 stores, as information about access point "AP03," history 262 indicating "not permitted" and expiration date 263 indicating that no expiration date is set. In this case, an access point for which "not permitted" has once been selected will not be displayed again as an option.

[0080] The CPU 11 may be capable of accepting an instruction to change the selected setting information 25 by an operation of an administrator. When an instruction to change the selected setting information 25 is accepted, the CPU 11 may change the stored confirmation history information 26. However, it is preferable that the CPU 11 does not accept an instruction to change the selected setting information 25 by an operation of anyone other than the administrator.

[0081] Furthermore, if it is determined that the input password has not been authenticated (S304: NO), CPU 11 causes touch panel 131 to display a message indicating an authentication error (S331). After S331, or if it is determined that the confirmation result is not permitted, that is, that an operation on button 72 has been accepted (S328: NO), CPU 11 does not establish a connection (S332). After S312 or S332, CPU 11 ends the connection process and returns to the AP connection process of FIG. 5.

[0082] Returning to the description of the AP connection process in FIG. 5, the CPU 11 determines whether or not a connection with the selected access point has been established in the connection process of S121 (S125). If it is determined that the connection has been established (S125: YES), the CPU 11 ends the AP connection process. This enables the MFP 1 to communicate with external devices such as the employee PC 3 (see FIG. 2) by wireless LAN communication via the access point with which the connection has been established. For example, an employee who works remotely can use the employee PC 3 to send instructions related to image formation, such as print instructions and scan instructions, to the MFP 1. The MFP 1 can execute printing using the print engine 15 or scanning using the scanner 16 based on the received instructions.

[0083] On the other hand, when it is determined that the connection has not been established (S125: NO), the CPU 11 executes the display process of S111 again. In this case, for example, if the CPU 11 has changed the denial history of the confirmation history information 26 in the connection process (S121), the CPU 11 determines the access point to be displayed as an option based on the changed confirmation history information 26. Then, the CPU 11 accepts the user's selection again (S115) and executes the connection process (S121). By returning to the selection of an access point when a connection has not been established, the effort required to select and connect to another access point is reduced compared to returning to the home screen or the like.

[0084] Furthermore, if it is determined that login with administrator authority has been accepted (S103: YES), CPU 11 displays information on all access points from which response signals were accepted in S102 as options (S131) ​​and accepts selection of one of the access points (S132). Furthermore, CPU 11 accepts input of a password as necessary, establishes a connection with the selected access point (S133), and ends the AP connection process. In other words, if used by the administrator, MFP 1 allows connection to all access points regardless of the restriction information 24.

[0085] In a state where login by a user with administrator privileges is accepted, it is assumed that work will be performed in a certain degree of security. Therefore, it is more convenient for the MFP1 to be able to connect to a wireless LAN access point at the administrator's responsibility without checking whether to permit connection to the wireless LAN access point, and to be able to freely use the wireless LAN.

[0086] As described above in detail, when a wireless LAN access point that may be unsafe is selected as a connection destination, the MFP1 of the present embodiment checks whether or not the access point can be connected before connecting to the access point, and connects to the access point only if the user operates to permit the connection. This reduces the possibility of connecting to an unsafe access point without thinking, and reduces the risk of information leakage from the access point. Furthermore, if the user permits the connection, wireless LAN communication is possible even with an unsafe access point, so there is a high degree of freedom when using wireless LAN, and the image forming apparatus can be operated with a high degree of freedom that takes into account safety and convenience.

[0087] It should be noted that the present embodiment is merely an example and does not limit the present invention in any way. Therefore, the technology disclosed in this specification can be naturally improved and modified in various ways without departing from the scope of the present invention. For example, an example of an image forming device is not limited to an MFP, but may be a printer, a scanner, a FAX device, etc., and is applicable as long as it has at least a wireless communication function and an image forming function.

[0088] In addition, the display modes of the various screens illustrated in the present embodiment are all examples, and the wording and arrangement of options and buttons displayed on each screen are not limited to the illustrated examples. For example, if the MFP1 does not establish a connection in the connection process, the MFP1 may end the AP connection process and return to the home screen.

[0089] Also, for example, in the present embodiment, the MFP 1 accepts settings such as the restriction information 24 before being installed in a remote work environment, but the MFP 1 may accept settings after being installed in a remote work environment. For example, the MFP 1 may be able to accept settings of the restriction information 24 when it accepts access from an administrator via a network after being installed in a remote work environment. Also, even if the MFP 1 accepts settings of the restriction information 24 before being installed in a remote work environment, the MFP 1 may be able to accept changes to the restriction information 24 when it accepts access from an administrator via a network, for example.

[0090] Furthermore, although the MFP 1 has been described as accepting an instruction to set the restriction information 24 and an instruction to set the selection setting information 25 via the EWS 23, the MFP 1 may also be able to accept the instruction when logged in with administrator authority via the user IF 13. The MFP 1 may also be able to accept a login instruction from either the EWS 23 or the user IF 13, or only one of them. The MFP 1 may also accept a login instruction not only through an operation on the touch panel 131, but also through an operation on a button included in the user IF 13, or through short-range wireless communication with an IC card or the like in accordance with the NFC (abbreviation for Near Field Communication) standard.

[0091] Furthermore, while the MFP 1 is in a state where it is logged in with administrator authority, it allows all access points from which it has received a response signal, regardless of the restriction information 24, but this is not limited to the above. The MFP 1 may determine the access points to be displayed as selectable, based on the restriction information 24, regardless of whether it is logged in. Specifically, the determination in S103 and steps S131 to S133 of the AP connection process may be omitted.

[0092] In the embodiment, the CPU 11 determines whether or not to display an access point as an option based on the authentication method in the display process (see FIG. 6), but all access points that have received a response signal may be displayed as selectable. In that case, in S311 of the connection process (see FIG. 8), the CPU 11 may determine not only the password setting state of the selected access point, but also whether or not the authentication method is permitted. In other words, the CPU 11 may determine that the access point is permitted to be connected if both the authentication method and password are permitted based on the restriction information 24.

[0093] Furthermore, in the connection process, CPU 11 may determine whether the password is an allowable password before requesting the access point to authenticate the password. That is, CPU 11 may request authentication when the password is an allowable password (YES in S311) or when there is a valid authorization history (YES in S321 and YES in S322).

[0094] Furthermore, in the present embodiment, when the confirmation result received on confirmation screen 70 is "permitted," the MFP 1 stores the information in confirmation history information 26 and omits confirmation from the next time onward, but this does not have to be omitted. That is, when the security of the selected access point is low, the MFP 1 may display confirmation screen 70 every time to receive confirmation from the user. Furthermore, when confirmation is received while a login by a user is being accepted, the MFP 1 may store information of the user who has accepted the login in confirmation history information 26 and apply the history only to an access point selection instruction by that user.

[0095] In addition, the MFP 1 of this embodiment may store the confirmation history information 26 indicating "not permitted" in a volatile memory or in a non-volatile memory. In the case of a volatile memory, it is valid during processing in response to a connection instruction, and is valid only on a selection screen that is returned after an operation that does not permit connection is performed, and if a connection instruction is input again, it is in a state in which it is not stored, so that there are many opportunities to select it. In the case of a non-volatile memory, it is stored even after processing in response to a connection instruction is completed, and it is in a state in which it is stored not only on a selection screen that is returned after an operation that does not permit connection is performed, but also when a connection instruction is input again, so that there are few opportunities to select it. On the other hand, since the confirmation history information 26 indicating "permitted" is information that is used in the next and subsequent connection instructions, it is preferable to store it in a non-volatile memory.

[0096] In addition, in the embodiment, the expiration date 263 of the confirmation history information 26 is selectively accepted by the radio buttons 62 and 64 on the selection display setting screen 60, but this is not limited to the above. The expiration date may be a fixed value, may be able to be set by freely inputting, or may not have a deadline.

[0097] In addition, in any sequence diagram disclosed in the embodiments, the execution order of multiple processes in any multiple steps can be changed as desired or the processes can be executed in parallel as long as no contradiction occurs in the process content.

[0098] The processes disclosed in the embodiments may be executed by a single CPU, multiple CPUs, hardware such as ASIC, or a combination of these. The processes disclosed in the embodiments may be realized in various forms, such as a recording medium having a program for executing the processes recorded thereon, or a method. [Explanation of symbols]

[0099] 1 MFP 11 CPU 12. Memory 13 User Interface 141 Wireless LAN-IF 15 Printing Engine 16 Scanner 23 EWS

Claims

1. A wireless LAN interface; A user interface; An image forming engine; A computer, Equipped with an instruction regarding image formation can be received from an external device by wireless LAN communication via a wireless LAN access point to which a connection with the wireless LAN interface is established, and when the instruction regarding image formation is received from the external device by the wireless LAN communication, the image forming engine is caused to perform image formation; A connection caution condition can be set in a state where an input by an administrator is being accepted, the connection caution condition being a condition indicating a wireless LAN access point that may be low in security, In response to a connection instruction for starting the wireless LAN communication, the computer A search process for searching for a connectable wireless LAN access point; a selection process of accepting, via the user interface, a selection of one of the selectable wireless LAN access points among the wireless LAN access points searched for by the search process; a determination process for determining whether or not the wireless LAN access point selected in the selection process satisfies the connection caution condition; It is possible to execute The computer further comprises: executes a confirmation process for accepting, via the user interface, an operation as to whether or not to permit connection to the wireless LAN access point selected in the selection process when it is determined in the determination process that the connection attention condition is satisfied; When an operation for permitting the connection is received in the confirmation process, or when it is determined in the determination process that the connection caution condition is not satisfied, an establishment process is executed for establishing a connection between the wireless LAN access point selected in the selection process and the wireless LAN interface. The image forming apparatus is configured as follows.

2. 2. The image forming apparatus according to claim 1, The computer includes: When an operation for permitting connection is accepted in the confirmation process, permission history information corresponding to the wireless LAN access point selected in the selection process is stored in a memory; Thereafter, in the next process in response to the connection instruction, the computer When it is determined in the determination process that the connection attention condition is satisfied, If the permission history information corresponding to the wireless LAN access point selected in the selection process is stored, the establishment process can be executed without executing the confirmation process, and if the permission history information corresponding to the wireless LAN access point selected in the selection process is not stored, the confirmation process is executed, and then the establishment process is executed in response to receiving an operation to permit connection in the confirmation process. The image forming apparatus is configured as follows.

3. 3. The image forming apparatus according to claim 2, In a state where an input by an administrator is being accepted, an omission condition can be set that indicates whether or not the operation by the confirmation process is to be omitted from the next time onwards for the wireless LAN access point that is permitted to be connected, The computer includes: When it is determined in the determination process that the connection attention condition is satisfied, If the omission condition is set, which indicates that the operation by the confirmation process is to be omitted from the next time onwards, If the permission history information corresponding to the wireless LAN access point selected in the selection process is stored, the establishment process can be executed without executing the confirmation process. If the permission history information corresponding to the wireless LAN access point selected in the selection process is not stored, the establishment process is executed after the confirmation process is executed, in response to receiving an operation to permit connection in the confirmation process. If the omission condition is set, which indicates that the operation by the confirmation process will not be omitted from the next time onwards, executes the confirmation process, and then executes the establishment process in response to receiving an operation to permit connection in the confirmation process, regardless of whether the permission history information corresponding to the wireless LAN access point selected in the selection process is stored. The image forming apparatus is configured as follows.

4. 2. The image forming apparatus according to claim 1, The computer includes: After the connection is established by the process in response to the connection instruction, even if the wireless LAN access point to which the connection was established in the previous connection instruction is selected in the next process in response to the connection instruction, if it is determined in the determination process that the connection attention condition is satisfied, the confirmation process is executed. The image forming apparatus is configured as follows.

5. 2. The image forming apparatus according to claim 1, An embedded web server is a program for functioning as a web server; The computer includes: When the embedded web server is accessed and a user having administrator authority is logged in to the embedded web server, the embedded web server can provide a web page showing a setting screen on which the connection attention condition can be set to the access source, and the setting of the connection attention condition can be accepted by inputting the setting to the web page. The image forming apparatus is configured as follows.

6. 2. The image forming apparatus according to claim 1, The connection attention condition includes a condition regarding a password for connecting to a wireless LAN access point, In the determination process, determining whether or not a password set for the wireless LAN access point selected in the selection process satisfies the connection caution condition; The image forming apparatus is configured as follows.

7. 2. The image forming apparatus according to claim 1, The computer includes: If an operation not permitting the connection is received in the confirmation process, the establishment process is not performed, and the selection process is performed again to receive the selection of one of the selectable wireless LAN access points. The image forming apparatus is configured as follows.

8. 2. The image forming apparatus according to claim 1, The computer includes: when an operation to not permit connection is received in the confirmation process, storing in a memory denial history information corresponding to the wireless LAN access point selected in the selection process; In the selection process after storing the non-permission history information, the computer accepting, via the user interface, a selection of one of the wireless LAN access points found by the search process, excluding the wireless LAN access point for which the non-permission history information is stored; The image forming apparatus is configured as follows.

9. 9. The image forming apparatus according to claim 8, In a state where an input by an administrator is being accepted, a restriction condition can be set indicating whether or not to restrict reselection of a wireless LAN access point that has not been permitted to be connected thereto from the next time onwards; The computer includes: In the selection process, when the restriction condition indicating that reselection from the next time onwards is set, a selection of one of the wireless LAN access points searched for by the search process, excluding the wireless LAN access point for which the non-permission history information is stored, is accepted via the user interface; when the restriction condition indicating that reselection from the next time onwards is not restricted is set, a selection of one of the selectable wireless LAN access points among the wireless LAN access points searched for by the search process is accepted via the user interface, regardless of whether the wireless LAN access point is a wireless LAN access point for which the disallowance history information is stored. The image forming apparatus is configured as follows.

10. 9. The image forming apparatus according to claim 8, The disapproval history information stored for each wireless LAN access point is associated with an expiration date; The computer includes: accepting, via the user interface, a selection of one of the wireless LAN access points found by the search process, excluding the wireless LAN access point for which the non-permission history information that satisfies the expiration date is stored; The image forming apparatus is configured as follows.

11. 11. The image forming apparatus according to claim 10, The range of validity of the disapproval history information can be set while accepting input from an administrator; The computer includes: accepting, via the user interface, a selection of one of the wireless LAN access points found by the search process, excluding a wireless LAN access point for which the disapproval history information that satisfies the expiration date set by an administrator is stored; The image forming apparatus is configured as follows.

12. 2. The image forming apparatus according to claim 1, The computer includes: when the connection instruction is given while an input from an administrator is being accepted, regardless of which wireless LAN access point searched for in the search process is selected, the establishment process can be executed to establish a connection between the wireless LAN access point selected in the selection process and the wireless LAN interface without executing the confirmation process, When the connection instruction is given in a state where an input from an administrator is not being accepted, for a wireless LAN access point that is judged in the judgment process to satisfy the connection caution condition, the confirmation process is executed, and then, in response to the acceptance of an operation to permit connection in the confirmation process, the establishment process is executed. The image forming apparatus is configured as follows.

Images