Information processing device, control method, and program

Abstract

To enable easily setting a password on an information processing device.SOLUTION: An information processing device capable of communicating with an external device comprises: receiving means for receiving a request from the external device to the information processing device; and display means for, if the request received by the receiving means while a password set on the information processing device is in an initial state is a request for displaying a password change screen to change the password, displaying the password change screen.SELECTED DRAWING: Figure 11

Description

Technical Field

[0001] The present disclosure relates to an information processing apparatus capable of setting the apparatus from an external device.

Background Art

[0002] Among information processing apparatuses connectable to a network, there is an apparatus that provides means for performing various settings from an external device connected via the network. Specifically, the information processing apparatus provides a screen necessary for various setting operations to a Web browser operating on the external device, receives the operation result performed on the Web browser, and reflects the operation result. Hereinafter, the operation means for the information processing apparatus provided by the information processing apparatus to the external device is referred to as "remote UI".

[0003] Also, from the viewpoint of security in the use of remote UI, it has been required to provide a function for forcing a password change at the first use or the like in an information processing apparatus connectable to a network. For example, Patent Document 1 discloses a method of suppressing a remote operation when the password is an initial password and enabling all remote operations by allowing a user to set a password.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] However, in the method of Patent Document 1, when attempting to perform a remote operation with the initial password set, the operation cannot be continued unless the password is changed on the device main body. In order to change the password on the device main body, it is necessary to search for the password change menu from the operation menu of the device main body, which has the problem of being complicated and difficult to understand.

[0006] An object of the present disclosure is to provide an information processing apparatus capable of easily setting a password.

Means for Solving the Problems

[0007] An information processing apparatus according to an aspect of the present disclosure is an information processing apparatus capable of communicating with an external device, comprising: a receiving means for receiving a request from the external device to the information processing apparatus; and a display means for displaying a password change screen for changing the password when the request received by the receiving means in the initial state of the password set in the information processing apparatus is a request for displaying the password change screen.

Effects of the Invention

[0008] According to the present disclosure, password setting on the information processing apparatus main body can be easily performed.

Brief Description of the Drawings

[0009]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Mode for Carrying Out the Invention

[0010] Hereinafter, preferred embodiments of the present disclosure will be described in detail with reference to the accompanying drawings. Note that the following embodiments do not limit the matters of the present disclosure, and not all combinations of the features described in the following embodiments are essential for the solution means of the present disclosure. For the same configuration, the same reference numerals will be used for explanation.

[0011] In an information processing apparatus capable of network connection, it is necessary to perform installation settings such as network connection settings required for using the apparatus, and parameter settings required for the operation of the apparatus. Some small and inexpensive information processing apparatuses do not have display means and operation means necessary for settings. In such an information processing apparatus, a remote UI function for performing installation settings and parameter settings, etc. from an external apparatus connected via a network is provided. The remote UI function is a function of displaying a setting screen for performing various settings of the information processing apparatus on the display unit of the external apparatus. Specifically, in order to execute the remote UI function, first, the user inputs the IP address of the information processing apparatus to which the external apparatus is connected via a wireless network, a wired network, etc. into the Web browser of the external apparatus. Then, the external apparatus accesses the information processing apparatus by using the input IP address and requests execution of the remote UI function. When the request is permitted by the information processing apparatus, the information processing apparatus provides information for displaying the above setting screen to the external apparatus. The request is, for example, a password for executing the remote UI function, and is permitted when the password transmitted to the information processing apparatus by being input into the external apparatus is correct. The external apparatus that has received the information for displaying the above setting screen displays the above setting screen on the Web browser. When an operation is performed by the user on the above setting screen, the external apparatus transmits instructions and information, etc. based on the operation to the information processing apparatus, and the information processing apparatus performs processing and settings, etc. based on the operation. Settings that can be executed by the remote UI function are, for example, various settings related to printing and scanning functions, etc., and various settings related to the network of the information processing apparatus, etc. Needless to say, a remote UI function is also provided in an information processing apparatus having display means and operation means necessary for settings.

[0012] If a remote UI is used, installation settings, parameter settings, etc. can be performed even if the information processing apparatus does not have a display screen and operating means. However, there is a possibility that it may be connected via a network by an external malicious third party and the settings may be viewed or changed illegally. For this reason, as described above, it is common to provide a password authentication function for using the remote UI so that the remote UI cannot be used unless the user is a legitimate administrator. On the other hand, with the spread of the Internet and wireless LAN technologies, the number and types of devices that can be connected to a network have increased dramatically. Thus, as the use of information processing apparatuses becomes more convenient, the number of cases in which information processing apparatuses connected to a network without properly setting passwords become targets of attacks by malicious third parties is also increasing. For this reason, it has come to be required that a random password different for each device be set and shipped for information processing apparatuses that can be connected to a network, and that a function be provided to force the password to be changed at the time of first use.

[0013] In the following embodiments, taking a printer as an example of an information processing apparatus provided with a function of forcing a password change at the time of first use of a remote UI, a printer capable of easily performing password change settings and processing of an external device will be described. Note that in the following embodiments, the information processing apparatus is not limited to a printer. For example, the information processing apparatus may be a device that provides a remote UI to an external device and in which setting operations for processing executed by the information processing apparatus are performed. Specifically, the information processing apparatus may be a scanner, a smart speaker, a wireless LAN router, a camera, or other household appliances. Also, in the following embodiments, an external device will be described by taking a smartphone as an example, but it is not limited thereto. For example, the external device may be a device equipped with a general web browser, such as a desktop PC (Personal Computer), a notebook PC, a tablet terminal, or a television.

[0014] <<First Embodiment>> FIG. 1 is a diagram showing an example of the configuration of system 100 in the present embodiment. With reference to FIG. 1, system 100 will be described. System 100 is composed of a cloud server 300 and a device group 400 connected by a local area network 102 and the Internet 104. The device group 400 includes various devices capable of network connection. Specifically, the device group 400 includes a smartphone 500, a printer 200, a client terminal 401 such as a personal computer or a workstation, and a digital camera 402. However, the device group 400 is not limited to these types, and may include, for example, household appliances such as a refrigerator, a television, or an air conditioner.

[0015] The various devices in the device group 400 are interconnected by the local area network 102 and can be connected to the Internet 104 via a router 103 installed in the local area network 102. Here, the router 103 is illustrated as a device connecting the local area network 102 and the Internet 104, but it is also possible to provide the wireless LAN access point function constituting the local area network 102. In this case, in addition to connecting to the router 103 by a wired LAN, the various devices in the device group 400 can be configured to connect to an access point by a wireless LAN and participate in the local area network 102. For example, it is also possible to configure the printer 200 or the client terminal 401 to be connected by a wired LAN and the smartphone 500 or the digital camera 402 to be connected by a wireless LAN.

[0016] Each device in device group 400 can communicate with cloud server 300 via Internet 104 connected through router 103. Also, the various devices in device group 400 can communicate with each other via local area network 102. Further, smartphone 500 and printer 200 can communicate by short-range wireless communication 101. As short-range wireless communication 101, wireless communication conforming to the Bluetooth (registered trademark) standard or NFC standard, etc. can be considered. Also, smartphone 500 is connected to mobile phone line network 105, and can also communicate with cloud server 300 via this line network 105. Note that this configuration shows an example of the present disclosure, and even if a different configuration is adopted, the effects of the present disclosure do not change. For example, although an example in which router 103 has an access point function is shown, the access point may be configured by a device different from router 103.

[0017] Figure 2 is an external view showing an example of printer 200. In the present embodiment, a multifunction printer (MFP) having a scanner and other functions incorporated in the printer is taken as an example. Figure 2(a) represents an overall external view of printer 200. Figure 2(b) represents an external view of the upper surface of printer 200. With reference to Figures 2(a) and (b), the configuration of printer 200 will be described.

[0018] Printer 200 includes document table 211, document table platen 212, printing paper insertion slot 213, printing paper discharge port 214, operation panel 215, short-range wireless communication unit 216, and wireless LAN unit 217. Document table 211 is a glass-like transparent table and is used when placing a document and reading it with a scanner. Document table platen 212 is a cover for pressing against document table 211 so that the document does not float when reading with the scanner, and for preventing external light from entering the scanner unit. Printing paper insertion slot 213 is an insertion slot for setting papers of various sizes. The papers set here are conveyed one by one to the printing unit, subjected to desired printing, and discharged from printing paper discharge port 214.

[0019] On the upper part of the original document platen 212, an operation panel 215 and a short-range wireless communication unit 216 are arranged. The operation panel 215 is composed of a touch panel type liquid crystal display, and various displays are performed. Also, the user can give instructions for various processes to the printer 200 by operating the operation panel 215. The short-range wireless communication unit 216 is a unit for performing short-range wireless communication, and can communicate with the short-range wireless communication unit of a communication partner within a predetermined distance. The wireless LAN unit 217 has an antenna embedded therein for connecting to and communicating with the local area network 102 using the wireless LAN.

[0020] FIG. 3 is a block diagram showing an example of the configuration of the printer 200. With reference to FIG. 3, the configuration of the printer 200 will be described. The printer 200 includes a main board 310 that controls the entire apparatus, a wireless LAN unit 217, a short-range wireless communication unit 216, and an operation panel 215. Also, the main board 310 includes a CPU 311, a program memory 313, a data memory 314, a scanner mechanism control circuit 315, a printing mechanism control circuit 317, a wireless LAN communication control unit 318, a short-range wireless communication control circuit 319, and an operation unit control circuit 320.

[0021] The CPU 311 in the form of a microprocessor arranged on the main board 310 reads out the control program stored in the program memory 313 in the form of a ROM, which is connected via the internal bus 312, to the data memory 314 in the form of a RAM, and executes various controls. The CPU 311 controls the scanner mechanism control circuit 315 to read a document and stores it in the image memory 316 in the data memory 314. Also, the CPU 311 can control the printing mechanism control circuit 317 to print the image in the image memory 316 in the data memory 314 on a recording medium. The CPU 311 controls the wireless LAN unit 217 via the wireless LAN communication control unit 318 to perform wireless LAN communication with other communication terminal devices. Also, the CPU 311 can detect connection with other short-range wireless communication terminals or perform data transmission and reception with other short-range wireless communication terminals by controlling the short-range wireless communication unit 216 via the short-range wireless communication control circuit 319. The CPU 311 can perform control to display the state of the printer 200 and the function selection menu, etc. on the operation panel 215 via the operation unit control circuit 320, and can receive input operations, etc. from the user from the operation panel 215.

[0022] Figure 4 is a diagram showing an example of the module configuration of the software operating on the printer 200. With reference to Figure 4, the module configuration of the software of the printer 200 will be described. The software operating on the printer 200 operates on the embedded control operating system (OS) 410. Each module is classified into a system control layer 420, a job management layer 430, a middleware layer 440, and an application layer 450.

[0023] The embedded control OS 410 is an operating system (OS) that controls the basic operations of the control software of the printer 200, and generally a real-time OS with excellent responsiveness is used.

[0024] The system control layer 420 is a group of modules mainly responsible for controlling the hardware of the printer 200. The print control module 421 is a control module for controlling the print mechanism control circuit 317 to execute the printing operation of the printer 200. The reading control module 422 is a control module for controlling the scanner mechanism control circuit 315 to execute the reading operation of the document placed on the document table 211. The panel control module 423 is a control module for controlling the display of the operation panel 215 of the printer 200 and detecting various key operations. The memory management module 424 is a control module for managing the dynamic allocation etc. of the data memory 314 including the image memory 316. The power control module 425 is a control module for controlling the power supply of the printer 200, supplying the power required for operation to each block of the hardware, and performing power saving mode control. The proximity wireless communication control module 426 is a control module for controlling the short-range wireless communication unit 216 to communicate with a terminal device such as a smartphone 500. The network communication control module 427 is a control module for controlling the wireless LAN unit 217 to perform communication physical layer control for performing LAN communication with an external device.

[0025] The job management layer 430 is a group of modules that execute various operations using the system control layer 420 while performing resource allocation, exclusive control, scheduling, etc. of the hardware in response to a job execution request from the upper layer.

[0026] The middleware layer 440 is located between the application layer 450 and the job management layer 430, which will be described later, and is a collection of a group of modules commonly used by a plurality of functional modules in the application layer 450. The application framework 441 is a framework module commonly used when requesting job execution from the application layer 450 to the job management layer 430. The network protocol stack 442 is a module for performing communication in accordance with various network protocols such as HTTP or TCP / IP. The encryption processing module 443 is a module for performing encryption and decryption processing required for network communication and the like. The Web server 444 is a module for operating the printer 200 as a Web server in order to deliver remote UI content.

[0027] The application layer 450 is a group of applications that implement various functions of the printer 200. The copy application 451 is an application module for reading and printing a document and for executing a copy operation. The driver printing application 452 is an application module for receiving a job from the printer driver of the smartphone 500 or the client terminal 401 and executing an operation. Jobs from the driver include a printing job for executing a printing operation, a scan job for reading a document and outputting image data, and a maintenance job for exchanging information with an external device and setting and managing the printer 200. The standard printing application 453 is an application module for receiving a job from the standard printing service provided by the system of the smartphone 500 and executing an operation. Jobs from the standard printing service include a printing job for executing a printing operation and a scan job for reading a document and outputting image data. However, since the standard printing service is provided by a smartphone manufacturer or a standard OS vendor, there is a limitation that it cannot perform specific settings and management regarding individual printer models of each manufacturer.

[0028] The remote UI module 454 is a module that uses the web server 444 to provide the remote UI function of the printer 200 to an external device. With the remote UI function of the printer 200, a user can set and manage the printer 200 from a smartphone 500 or a client terminal 401. Here, depending on the type and functions of the printer, etc., the information that can be displayed on the operation panel of the printer and the information that can be set in the printer may be restricted. For example, as described above, even if the standard printing application 453 is installed in the printer 200, specific settings regarding individual manufacturer's printer models may not be possible. In the printer 200 in the present embodiment, the remote UI function can be used to perform more detailed settings and management. Also, when dedicated drivers are not prepared for the smartphone 500 and the client terminal 401, etc., only the standard printing service is available, so the use of the remote UI is essential for performing detailed settings and management.

[0029] FIG. 5 is a block diagram showing an example of the configuration of the smartphone 500. With reference to FIG. 5, the configuration of the smartphone 500 will be described. The smartphone 500 includes a main board 510 that controls the entire device, a short-range wireless communication unit 501, a wireless LAN unit 502, a line connection unit 503, and a touch panel display 504. The main board 510 includes a CPU 511, a program memory 513, a data memory 514, a wireless LAN control circuit 515, a short-range wireless communication control circuit 516, a line control circuit 517, an operation unit control circuit 518, a camera unit 519, and a non-volatile memory 521.

[0030] The CPU 511 in the form of a microprocessor arranged on the main board 510 reads out the control program stored in the program memory 513 in the form of a ROM, which is connected via the internal bus 512, to the data memory 514 in the form of a RAM and executes various controls. The CPU 511 controls the wireless LAN unit 502 via the wireless LAN control circuit 515 to perform wireless LAN communication with other communication terminal devices. The CPU 511 can detect a connection with other short-range wireless communication terminals or perform data transmission and reception with other short-range wireless communication terminals by controlling the short-range wireless communication unit 501 via the short-range wireless communication control circuit 516. Also, the CPU 511 can connect to the mobile phone line network 105 and perform calls and data transmission and reception by controlling the line connection unit 503 via the line control circuit 517. The CPU 511 can perform a desired display on the touch panel display 504 and receive a user's operation input from the touch panel display 504 by controlling the operation unit control circuit 518.

[0031] The CPU 511 can control the camera unit 519 to take an image and store the image obtained by the shooting in the image memory 520 in the data memory 514. Also, in addition to the image obtained by the shooting, the CPU 511 can store an image obtained from the outside through the mobile phone line, the local area network 102, or the short-range wireless communication 101 in the image memory 520. Furthermore, the CPU 511 can transmit the image obtained by the shooting or the image obtained from the outside to the outside. The non-volatile memory 521 is composed of a flash memory or the like and stores data that needs to be saved even after the power is turned off. For example, in addition to phone book data, various communication connection information, and device information connected in the past, image data that needs to be saved or application software that realizes various functions in the smartphone 500 is stored.

[0032] FIG. 6 is a diagram showing an example of the module configuration of software operating on the smartphone 500. With reference to FIG. 6, the module configuration of the software of the smartphone 500 will be described. The software operating on the smartphone 500 operates on an operating system (OS) 600. Each module is classified into a system control layer 610, a middleware layer 620, and an application layer 630.

[0033] The system control layer 610 is a group of modules mainly responsible for controlling the hardware of the smartphone 500. The GUI control module 611 is a control module for controlling the display on the touch panel display 504 and detecting touch panel operations. The camera control module 612 is a module for controlling shooting by the camera unit 519. The proximity wireless communication control module 613 is a control module for controlling the short-range wireless communication unit 501 to perform proximity wireless communication with other devices. The network communication control module 614 is a control module for performing communication physical layer control for controlling the wireless LAN unit 502 to perform wireless LAN communication with an external device. The memory management module 615 is a control module for managing the dynamic allocation of the data memory 514 including the image memory 520. The power control module 616 is a control module for controlling the power supply of the smartphone 500, supplying the power required for operation to each block of the hardware, and performing power-saving mode control.

[0034] The middleware layer 620 is located between the application layer 630 and the system control layer 610, which will be described later, and is a collection of a group of modules commonly used by a plurality of application modules in the application layer 630. The application framework 621 is a framework module commonly used by the applications in the application layer 630. The network protocol stack 623 is a module for performing communication in accordance with various network protocols such as HTTP or TCP / IP. The standard printing service 622 is a service module that provides the applications in the application layer 630 with the function of using the printer 200 corresponding to the standard printing service. The functions provided by the standard printing service 622 include a printing function for causing the printer 200 to execute a printing job and a scanning function for causing a scanning job to be executed. However, since the standard printing service is provided by a smartphone manufacturer or a standard OS vendor, there is a limitation that it is not possible to perform specific settings and management regarding the printer models of individual manufacturers.

[0035] The application layer 630 is a group of applications that implement various functions of the smartphone 500. The applications installed on the smartphone 500 include those pre-installed at the time of product shipment and those that can be downloaded and installed later by the user. In FIG. 6, App 1 (631) and App 2 (632) are shown as applications installed on the smartphone 500. However, in this embodiment, the number and types of such applications are not limited to this. That is, the applications can be added or deleted as necessary by the user. The custom printing driver 633 is a dedicated driver corresponding to the model of the printer 200, and provides the function of executing print jobs and scan jobs to the corresponding printer 200. The user selects a dedicated driver corresponding to the model of the printer 200 he / she uses and installs it on the smartphone 500 for use. Here, although the custom printing driver 633 is described as being installed in the application layer, it is not limited to this. The custom printing driver 633 may be installed in the middleware layer and configured to operate upon receiving a print job request from an application. The web browser 634 is an application module that connects to a web server through a network, acquires and displays web content. The web browser 634 can also acquire and display the web content of the cloud server 300, or can acquire and display remote UI content using the web server function of the printer 200.

[0036] FIG. 7 is a diagram showing an example of a screen of the remote UI. Referring to FIGS. 7(a) to (d), the screen of the remote UI displayed by the web browser 634 of the smartphone 500 will be described. FIGS. 7(a) to (d) are screens that the printer 200 transmits to the smartphone 500 according to the processing of FIG. 10 or FIG. 12 described later. FIG. 7(a) is a diagram showing an example of an unrestricted screen 700 of the remote UI. The unrestricted screen 700 is an entrance page of the entire remote UI that is displayed when password authentication has been completed. On the unrestricted screen 700, buttons 701, 702, and 703 with hyperlinks for transitioning to other pages are arranged. Button 701 is an element for requesting a transition to a printer status display screen (not shown). Hereinafter, in the present embodiment, an element provided on the displayed screen, which accepts the execution of predetermined processing by the CPU by the user's operation on the element, is referred to as a button. Also, a request for a transition to a predetermined screen transmitted from the smartphone 500 to the printer 200 is referred to as a page request.

[0037] Button 702 is a button for transitioning to a printer operation setting screen (not shown). For example, the printer operation setting screen is a screen for performing parameter settings necessary for using the functions of the printer 200. Button 703 is a button for transitioning to a network connection setting screen (not shown). For example, the network connection setting screen is a screen for performing settings necessary for connecting the printer 200 to the network. A page request for a screen for checking the status of the printer 200 and a page request for a screen related to the settings of the printer 200 can be made from the unrestricted screen 700 to the printer 200. When these page requests are transmitted from the smartphone 500 to the printer 200, the printer 200 transmits a screen corresponding to the received page request to the smartphone 500.

[0038] FIG. 7(b) is a diagram showing an example of a restricted screen 710 of the remote UI. The restricted screen 710 is an entrance page that is displayed instead of the unrestricted screen 700 when the password authentication has not been performed or when the password has not been changed from the factory shipment state. Hereinafter, in this specification, the state in which the password has not been changed from the factory shipment state is referred to as the "initial state". On the restricted screen 710, a button 711 with a hyperlink for transitioning to another page is arranged. The button 711 is a button for transitioning to a printer status display screen (not shown). On the other hand, on the restricted screen 710, buttons for transitioning to the printer operation setting screen and the network connection setting screen are not arranged. That is, a page request for a screen for checking the state of the printer 200 can be made from the restricted screen 710 to the printer 200, but a page request for a screen related to the settings of the printer 200 cannot be made. When the password authentication has not been performed or the operation is performed in the initial state, it is configured so that a remote attacker cannot illegally change the printer operation settings and the network connection settings. In this way, in the use of the remote UI, access to the setting screen is prohibited so that the settings of the printer 200 cannot be illegally changed or viewed by a malicious third party in a situation where the password authentication has not been completed. On the other hand, from the viewpoint of usability, access to screens other than the screen related to the settings of the printer 200 is permitted.

[0039] FIG. 7(c) is a diagram showing an example of the authentication screen 720. The authentication screen 720 is displayed when there is a request to access the remote UI without password authentication. That is, the authentication screen 720 is a screen that the printer 200 transmits when there is a page request from the smartphone 500 to the printer 200 as a request to access the remote UI without password authentication. For example, the request to access the remote UI may be made by the user entering the IP address set for the printer 200 operating as a web server, or a URL including the address, into the web browser 634. The request to access the remote UI may be made by an operation on a text or image with a link displayed on the screen of the dedicated driver of the printer 200 installed or an application for accessing the remote UI. Alternatively, the request to access the remote UI may be made by starting the dedicated driver of the printer 200 installed or an application for accessing the remote UI.

[0040] The password field 721 is a character input field for entering the password to be authenticated. Here, the entered password is converted to black dot characters and displayed so that it cannot be peeked at by looking into the user's terminal. The OK button 722 is a button for sending an authentication request with the entered password. The cancel button 723 is a button for canceling the authentication and returning to the restricted screen 710. The user can send an authentication request by entering the password in the field 721 and pressing the OK button 722. When the authentication request is permitted by the printer 200, the screen transitions from the password authentication screen 720 to the requested remote UI page screen.

[0041] FIG. 7(d) is a diagram showing an example of a password change warning screen 730. The password change warning screen 730 is a screen that prompts the user to change the password and is displayed when there is a request to access the remote UI in the initial state. That is, the password change warning screen 730 is a screen that the printer 200 transmits when there is a page request from the smartphone 500 to the printer 200 as a request to access the remote UI in the initial state. The change button 731 is a button for displaying the password change screen on the operation panel 215 of the printer 200. The back button 732 is a button for ending the password change warning screen 730 and returning to the restricted screen 710.

[0042] FIG. 8 is a diagram showing an example of a display screen of the main body operation panel of the printer 200. With reference to FIGS. 8(a) to (c), the screen displayed on the operation panel 215 of the printer 200 will be described.

[0043] FIG. 8(a) is a diagram showing an example of a home screen 800. The home screen 800 is displayed when the printer 200 is in a standby state and can receive a function execution instruction from the user. Buttons 801, 802, and 803 for selecting the function to be executed are provided on the home screen 800. When the copy button 801 is pressed, the screen transitions to a screen for executing the copy function. When the scan button 802 is pressed, the screen transitions to a screen for executing the scan function. When the settings button 803 is pressed, the screen transitions to a settings menu screen 810 described later.

[0044] FIG. 8(b) is a diagram showing an example of a setting menu screen 810. The setting menu screen 810 is displayed when the setting button 803 on the home screen 800 is pressed. On the setting menu screen 810, buttons 811, 812, and 813 for selecting items to be set are provided. When the network setting button 811 is pressed, the screen transitions to a screen for performing settings for network connection of the printer 200. When the print setting button 812 is pressed, the screen transitions to a screen for performing print settings such as the paper size and paper type used by the printer 200 for printing. When the password change button 813 is pressed, the screen transitions to a password change screen 820 described later.

[0045] FIG. 8(c) is a diagram showing examples of password change screens 820, 830, and 840. The password change screen is displayed when changing the password. These password change screens may be displayed by switching with the previous screen or may be displayed as a pop-up. When changing the password, the user inputs the old password and the new password on the password change screen. In the present embodiment, since the display area of the operation panel 215 of the printer 200 is limited, a case where one item is input on each of the three password change screens is shown.

[0046] The Next buttons 823 and 833 are for transitioning to the next screen. The Back button 822 on the first password change screen 820 is for aborting the password change process. The Back buttons 832 and 843 on the second and subsequent password change screens 830 and 840 are for transitioning to the previous screen. The Set button 843 on the last password change screen 840 is for instructing password change with the entered password. The Old Password field 821 is an area for entering the password before change. The New Password field 831 is an area for entering the password after change. The Confirm New Password field 841 is an area for re-entering the password after change. Characters, numbers, etc. that make up the password are entered into each field using input means (not shown). The printer 200 may be provided with hard keys as input means. Alternatively, it may be configured to use a soft keyboard displayed on the screen of the operation panel 215 as the input means.

[0047] The password before change entered in the Old Password field 821 is used to authenticate that the person attempting to change the password is a legitimate user. The new password entered in the Confirm New Password field 841 is used to confirm that it matches the password entered in the New Password field 831. That is, the new password entered in the Confirm New Password field 841 is compared with the password entered in the New Password field 831 and used to confirm that there are no input errors. Here, the case where three password change screens 820, 830, and 840 are sequentially displayed to allow entry of old and new passwords when changing the password has been described, but it may also be configured to allow entry of three old and new passwords on one password change screen.

[0048] Here, the process of displaying the screens of FIGS. 7 and 8 when accessing the remote UI from the web browser 634 of the smartphone 500 in the initial state will be described. When accessing the remote UI in the initial state, a password change warning screen 730 is displayed on the web browser 634.

[0049] When the button 731 on the password change warning screen 730 is pressed, a password change screen is displayed on the operation panel 215 of the printer 200. The user inputs the old password, the new password, and the new password for confirmation into the respective input fields of the password change screens 820, 830, and 840 on the operation panel 215. Then, the input passwords are verified, and if there is no problem, the password is changed. Also, when the button 731 or the button 732 on the password change warning screen 730 is pressed, a restricted screen 710 of the remote UI is displayed.

[0050] Next, after the password is changed in the printer 200 and the remote UI is accessed again, an authentication screen 720 is displayed. When the button 723 on the authentication screen 720 is pressed, or when the button 722 is pressed with an incorrect password entered in the password field 721, a restricted screen 710 of the remote UI is displayed. On the other hand, when the button 722 is pressed with the correct password entered in the password field 721 of the authentication screen 720, an unrestricted screen 700 of the remote UI is displayed. In this way, when accessing the remote UI in the initial state, if there are no problems with subsequent operations such as password input, it is possible to access the unrestricted remote UI screen 700.

[0051] FIG. 9 is a flowchart showing an example of the processing of the printer 200. The processing shown in FIG. 9 is realized by the CPU 311 of the printer 200 reading a control program stored in the program memory 313 in the form of a ROM into the data memory 314 in the form of a RAM and the CPU 311 executing it. Note that some or all of the functions of the steps in FIG. 9 may be realized by hardware such as an ASIC or an electronic circuit. The symbol "S" in the description of each process means that it is a step in the flowchart diagram (the same applies to the flowchart diagrams in this specification hereinafter). Also, the processing shown in FIG. 9 starts when the power of the printer 200 is turned on. Note that the processing from S901 to S909 is repeatedly executed while the power of the printer 200 is on.

[0052] In S901, when the power of the printer 200 is turned on, the CPU 311 executes the repetitive processing from S902 to S909. Then, the CPU 311 proceeds to the processing of S902. In S902, the CPU 311 waits for the occurrence of an event at the beginning of the repetitive processing. The events include a remote UI request from the smartphone 500 described later. Then, when the CPU 311 detects the occurrence of an event, it proceeds to the processing of S903.

[0053] In S903, the CPU 311 proceeds to the necessary processing according to the type of the event. Specifically, when the CPU 311 detects the pressing of the power key provided on the operation panel 215 in S902, it proceeds to the processing of S904 and shifts the printer 200 from the powered-on state to the powered-off state. Thereby, the repetitive loop is exited, and the printer 200 enters a standby state until the next power-on. When the CPU 311 detects the pressing of the start key provided on the operation panel 215 in S902, it proceeds to the processing of S905 and starts the copy operation. However, when the start key is pressed in a state where the display on the operation panel 215 has transitioned from the home screen 800 to the scan execution screen or another screen, the CPU 311 starts the scan operation or another operation according to the state of the screen displayed on the operation panel 215.

[0054] When the CPU 311 detects the reception of an external job at S902, it proceeds to the process of S906 and executes job execution processing according to the content of the received job. When the CPU 311 detects a remote UI request from the outside at S902, it proceeds to the process of S907 and executes the response processing when receiving a remote UI request, which will be described later. When the CPU 311 detects an operation on the operation panel 215 at S902, it proceeds to the process of S908 and executes processing according to the performed operation. For example, in the case of an operation on the touch panel, appropriate processing is performed according to the touched coordinates. When a touch on a button arranged on the home screen 800, the setting menu screen 810, or other screens is detected, the CPU 311 appropriately changes the screen or executes an appropriate operation. Also, when the CPU 311 detects an operation on an input field arranged on the password change screens 820, 830, and 840, or other screens, it executes an input operation or an editing operation.

[0055] When the CPU 311 detects the occurrence of other events at S902, it proceeds to the process of S909 and executes processing according to the detected events. After the CPU 311 executes any of the processes from S904 to S909, it proceeds to the process of S910. In S910, when the printer 200 is in the power-on state, the CPU 311 returns to the process of S901 and repeats the processes from S902 to S909. On the other hand, when the printer 200 shifts to the power-off state at S904, the CPU 311 ends the processing shown in FIG. 9 as described above.

[0056] FIG. 10 is a flowchart showing an example of the processing content of the printer 200 when receiving a remote UI request. With reference to FIG. 10, the processing executed by the CPU 311 when receiving a remote UI request will be described. The processing shown in FIG. 10 is executed as a sub-flow of S907 in the flowchart of FIG. 9. That is, when an event of a remote UI request from the web browser 634 of the smartphone 500 to the web server 444 of the printer 200 is detected, the CPU 311 of the printer 200 executes the processing shown in FIG. 10.

[0057] In S1001, the CPU 311 determines the type of the received remote UI request. The CPU 311 executes the following processing according to the determined request type. Specifically, in S1001, if the CPU 311 determines that the received remote UI request is a page request for page transition, the process proceeds to the processing of S1002.

[0058] In S1002, the CPU 311 discriminates the type of the received page request. If the CPU 311 determines that the received page request is a page request caused by pressing the return button 732 of the password change warning screen 730 or the cancel button 723 of the password authentication screen 720, the process proceeds to the processing of S1009. On the other hand, if the CPU 311 determines that the received page request is a page screen request of the remote UI, the process proceeds to the processing of S1003.

[0059] In S1003, the CPU 311 determines whether the password of the printer 200 is in the initial state. That is, the CPU 311 determines whether the password has not been changed since factory shipment. Regarding this determination, the CPU 311 stores in a flag whether a password change operation has been performed, and if the flag is set, it can be determined that it is not in the initial state. Alternatively, the CPU 311 may compare the password setting at factory shipment with the current password setting, and if they are different, determine that it is not in the initial state. If the CPU 311 determines that the password is in the initial state (Yes), the process proceeds to the processing of S1007, and if it determines that the password is not in the initial state (No), the process proceeds to the processing of S1004. In S1007, the CPU 311 transmits the password change warning screen 730 to the request source and ends the processing shown in FIG. 10.

[0060] In S1004, the CPU 311 determines whether the requesting terminal has completed password authentication. If the CPU 311 determines that the requesting terminal has completed password authentication (Yes), the process proceeds to the processing of S1005. If the CPU 311 determines otherwise (No), the process proceeds to the processing of S1006.

[0061] In S1005, the CPU 311 sends the requested page screen to the requester. That is, when the requested page is the entrance screen of the remote UI, the CPU 311 sends the unrestricted remote UI screen 700 to the requester and ends the process shown in FIG. 10. In S1006, the CPU 311 sends the password authentication screen 720 to the requester and ends the process shown in FIG. 10.

[0062] In S1001, when the request type is a password authentication request, the CPU 311 proceeds to the processing of S1008. In S1008, the CPU 311 determines whether the password received as an authentication request matches the password set in the printer 200. If the CPU 311 determines that the passwords match (Yes), it is considered that password authentication has been completed, and the process proceeds to the processing of S1005. Thereafter, as described above, the CPU 311 sends the requested page screen to the requester. On the other hand, if the CPU 311 determines in S1008 that the passwords do not match (No), it is considered that authentication has failed, and the process proceeds to the processing of S1009. In S1009, the CPU 311 sends the restricted remote UI screen 710 to the requester and ends the process shown in FIG. 10.

[0063] In S1001, if the request type is a password change request, the CPU 311 proceeds to the process of S1010. In S1010, the CPU 311 displays a password change screen 820 on the operation panel 215 of the printer 200. Thereafter, until the password is changed according to the password change screens 820, 830, and 840 displayed on the operation panel 215 of the printer 200, the unrestricted screen 700 of the remote UI cannot be used. Therefore, the CPU 311 proceeds to the process of S1008 and transmits the restricted remote UI screen 710 to the request source.

[0064] FIG. 11 is a sequence diagram showing an example of information exchange between the printer 200 and the smartphone 500. With reference to FIG. 11, when the password of the printer 200 is in the initial state and the user 110 accesses the remote UI with the smartphone 500, the processes performed between the printer 200 and the smartphone 500 will be described.

[0065] In S1101, the user 110 performs a page transition operation on the smartphone 500. That is, the user 110 performs an operation to access the remote UI with the smartphone 500. The operation to access the remote UI includes, as described above, an input operation of the IP address set for the printer 200 to the web browser 634. In S1102, the smartphone 500 transmits a page request to the printer 200. In S1103, the printer 200 transmits a password change warning screen 730 to the smartphone 500. Then, the password change warning screen 730 is displayed on the web browser 634 of the smartphone 500. In S1101, when the user 110 performs a page transition operation via an application such as a dedicated driver of the printer 200 installed on the smartphone 500, the password change warning screen 730 may be displayed on the in-app browser.

[0066] In S1104, user 110 presses button 731 on password change warning screen 730. In S1105, smartphone 500 sends a password change request to printer 200. In S1106, printer 200 displays password change screen 820 on operation panel 215 of printer 200. And in S1107, printer 200 sends restricted remote UI screen 710 to smartphone 500.

[0067] In S1108, user 110 operates operation panel 215 of printer 200 to sequentially input appropriate passwords into password change screens 820, 830, and 840. In S1109, printer 200 collates the input passwords and, if there is no problem, changes the password. As a result, since the password has been changed and is no longer in the initial state, it becomes possible to use it with password authentication from the next remote UI access.

[0068] In S1110, user 110 operates smartphone 500 to access the remote UI. In S1111, smartphone 500 sends a page request to printer 200. In S1112, printer 200 sends password authentication screen 720 to smartphone 500. And password authentication screen 720 is displayed on the screen of smartphone 500.

[0069] In S1113, user 110 inputs the newly set password in S1109 into password field 721 of password authentication screen 720 and presses button 722. In S1114, smartphone 500 sends a password authentication request to printer 200. In S1115, printer 200 authenticates the sent password. If there is no problem with the password authentication, in S1116, printer 200 sends unrestricted screen 700 to smartphone 500. And unrestricted screen 700 is displayed on the screen of smartphone 500.

[0070] As described above, according to this embodiment, when a password change is required during remote UI access, the password change screen 820 can be easily displayed on the operation panel 215 of the printer 200. As a result, when the remote UI is used for the first time, the password can be easily set on the device main body.

[0071] <<Second Embodiment>> In the configuration described in the first embodiment, when the button 731 on the password change warning screen 730 is pressed, the password change screen 820 is displayed on the operation panel 215 of the printer 200 every time. Even if the password is not illegally changed by an attacker in a remote location, the use of the device may be hindered because the password change screen 820 is displayed on the operation panel 215 many times regardless of the intention of the legitimate user. In this embodiment, in order to prevent such interference attacks, a configuration will be described in which when the password change screen 820 is displayed from the password change warning screen 730, the next password change request is suppressed for a predetermined period. Hereinafter, the differences from the first embodiment will be described.

[0072] FIG. 12 is a flowchart showing an example of the processing of the printer 200 when a remote UI request is received in this embodiment. The processing shown in FIG. 12 is executed as a sub-flow of S907 in the flowchart of FIG. 9. That is, it is executed by the CPU 311 of the printer 200 when an event of a remote UI request from the web browser 634 of the smartphone 500 to the web server 444 of the printer 200 is detected. In FIG. 12, the processing from S1001 to S1009 is equivalent to each step with the same reference numerals in FIG. 10 in the first embodiment, and thus the description thereof is omitted.

[0073] In S1001, if the request type is a password change request, the CPU 311 proceeds to S1201. In S1201, the CPU 311 determines whether a suppression timer for suppressing the display of the password change screen 820 is running. If the CPU 311 determines that the suppression timer is running (Yes), it proceeds to the process of S1009, and if it determines otherwise (No), it proceeds to the process of S1202. That is, while the suppression timer is running in S1201, the processes of S1202 and S1203 described later are not performed.

[0074] In S1202, the CPU 311 displays the password change screen 820 on the operation panel 215 of the printer 200. Thereafter, the CPU 311 proceeds to the process of S1203. In S1203, the CPU 311 starts the suppression timer and proceeds to the process of S1009. Note that when the suppression timer is started, it operates for a predetermined time and automatically stops. The operation time of the suppression timer may be a fixed time, or may be set to be selectable or arbitrarily set by the user.

[0075] According to the present embodiment, even if an attacker at a remote location presses the button 731 of the password change warning screen 730 multiple times while the suppression timer is running, the password change screen 820 is not displayed multiple times in response to the pressing of the button 731. That is, once the password change screen 820 is displayed, it is not displayed multiple times until the suppression timer stops thereafter.

[0076] This can reduce the risk that a legitimate user's use of the device is disrupted by an attacker located remotely. For example, when the operation time of the deterrence timer is set to 1 hour, even if the attacker continuously presses the button 731, the display of the password change screen 820 on the operation panel 215 is suppressed once per hour. During the period when the deterrence timer is activated, the button 731 on the password change warning screen 730 may be configured to be hidden. For example, when the deterrence timer is activated, the printer 200 may send a password change warning screen 730 configured such that the button 731 is not displayed to the smartphone 500. Then, when the deterrence timer stops, the printer 200 may send a password change warning screen 730 configured such that the button 731 is displayed to the smartphone 500. In this way, it is possible to prevent an inconsistency where, after a legitimate user cancels the password change screen 820 halfway for some reason, the password change screen 820 is not displayed even when the button 731 is displayed. Instead of the processing of the printer 200 as described above, the smartphone 500 may perform processing to deactivate or activate the button 731. In this case, the printer 200 may send information instructing the deactivation or activation of the button 731 to the smartphone 500.

[0077] <<Other Embodiments>> In the above embodiments, it is also possible to implement with the configuration changed as follows. In the above embodiments, the case where the password change screen 820 is displayed by operating the password change warning screen 730 displayed when there is remote UI access in the initial state has been described, but it can also be applied at other times. For example, regardless of whether it is the initial state or not, the password change screen 820 may be configured to be displayed on the operation panel 215 of the printer 200 by operating the remote UI screen.

[0078] Also, in the above-described embodiment, when no operation is performed on the password change screen 820 even after a predetermined time has elapsed, the display of the screen may be stopped or the screen may be automatically returned to the screen before the display of the said screen. By doing so, when a password change request is issued remotely when the user is not near the printer 200, it is possible to prevent the password change screen 820 from being left displayed on the operation panel 215. The display time may be made different between the case of being displayed due to a password change request and the case of being displayed by pressing the password change button 813 from the setting menu, or whether to automatically return to the screen before the display of the password change screen 820 may be made different.

[0079] Also, a random character string may be set as the initial password. Alternatively, the printer 200 in the initial state may not have a password set.

[0080] Furthermore, when multiple users authenticate using different accounts respectively, it is also possible to apply the present disclosure to each account.

[0081] The present disclosure can also be realized by supplying a program that realizes one or more functions of the above-described embodiment to a system or device via a network or a storage medium, and having one or more processors in the computer of the system or device read and execute the program. It can also be realized by a circuit (for example, ASIC) that realizes one or more functions.

[0082] The disclosure of the present embodiment includes configurations typified by the following information processing apparatus examples, control method examples, and program examples.

[0083] <Configuration 1> An information processing apparatus capable of communicating with an external device, a receiving means for receiving a request from the external device to the information processing apparatus, When the request received by the receiving means in the initial state of the password set in the information processing apparatus is a request to display a password change screen for changing the password, a display means for displaying the password change screen and An information processing apparatus characterized by comprising.

[0084] <Configuration 2> Further comprising a transmitting means for transmitting a screen to be displayed on the external device, When the request received by the receiving means in the initial state of the password is a page request, the transmitting means transmits a password change warning screen prompting the change of the password to the external device. The information processing apparatus according to Configuration 1, characterized by the above.

[0085] <Configuration 3> When the page request is a request for access to a remote UI provided by the information processing apparatus to the external device and enabling an operation from the external device to the information processing apparatus, the transmitting means transmits the password change warning screen to the external device. The information processing apparatus according to Configuration 2, characterized by the above.

[0086] <Configuration 4> The password change warning screen transmitted by the transmitting means is provided with a predetermined element for receiving a request to display the password change screen, When the receiving means receives from the external device a request to display the password change screen based on an operation on the predetermined element provided on the password change warning screen, the display means displays the password change screen. The information processing apparatus according to Configuration 2 or 3, characterized by the above.

[0087] <Configuration 5> When the password change screen is displayed by the display means, the transmission means is capable of making a page request for a screen for checking the state of the information processing apparatus and is unable to make a page request for a screen related to the settings of the information processing apparatus, and transmits a restricted screen to the external apparatus. The information processing apparatus according to any one of Configurations 2 to 4.

[0088] <Configuration 6> The screen related to the settings of the information processing apparatus includes a screen for setting parameters of the information processing apparatus and a setting screen for connecting the information processing apparatus to a network. The information processing apparatus according to Configuration 5.

[0089] <Configuration 7> When the password change screen is displayed by the display means, it further includes activation means for activating a timer. Even if a request to display the password change screen is received by the receiving means while the timer is operating, the display means does not display the password change screen corresponding to the request received while the timer is operating. The information processing apparatus according to any one of Configurations 4 to 6.

[0090] <Configuration 8> The transmission means When the timer is activated by the activation means, it transmits a password change warning screen configured not to display the predetermined element to the external apparatus. When the timer activated by the activation means stops, it transmits a password change warning screen configured to display the predetermined element to the external apparatus. The information processing apparatus according to Configuration 7.

[0091] <Configuration 9> After a predetermined time has elapsed since the password change screen was displayed, if no predetermined operation is performed on the password change screen, the display means stops displaying the password change screen. The information processing apparatus according to any one of Configurations 1 to 8.

[0092] <Configuration 10> A control method for an information processing apparatus capable of communicating with an external device, a receiving step of receiving a request from the external device to the information processing apparatus, a display step of displaying a password change screen when the password set in the information processing apparatus is, in an initial state, a request received in the receiving step and is a request to display a password change screen for changing the password A control method for an information processing apparatus, characterized by comprising the above.

[0093] <Configuration 11> A program for causing a computer to execute the control method for the information processing apparatus according to Configuration 10.

Description of Signs

[0094] 200 Printer 500 Smartphone

Claims

1. An information processing apparatus capable of communicating with an external device, comprising receiving means for receiving a request from the external device to the information processing apparatus, and display means for displaying a password change screen for changing the password when the request received by the receiving means in the initial state of the password set in the information processing apparatus is a request for displaying the password change screen. An information processing apparatus characterized by comprising the same.

2. further comprising transmitting means for transmitting a screen to be displayed on the external device, wherein when the request received by the receiving means in the initial state of the password is a page request, the transmitting means transmits a password change warning screen prompting the change of the password to the external device. The information processing apparatus according to claim 1.

3. When the page request is a request for access to a remote UI provided by the information processing apparatus to the external device and enabling an operation on the external device to the information processing apparatus, the transmitting means transmits the password change warning screen to the external device. The information processing apparatus according to claim 2.

4. The password change warning screen transmitted by the transmitting means is provided with a predetermined element for receiving a request for displaying the password change screen, and when the receiving means receives from the external device a request for displaying the password change screen based on an operation on the predetermined element provided on the password change warning screen, the display means displays the password change screen. The information processing apparatus according to claim 2.

5. When the password change screen is displayed by the display means, the transmission means is capable of making a page request for a screen for checking the state of the information processing apparatus and is unable to make a page request for a screen related to the settings of the information processing apparatus, and transmits a restricted screen to the external apparatus. The information processing apparatus according to claim 2, characterized in that.

6. The screen related to the settings of the information processing apparatus includes a screen for setting parameters of the information processing apparatus and a setting screen for connecting the information processing apparatus to a network. The information processing apparatus according to claim 5, characterized in that.

7. When the password change screen is displayed by the display means, it further comprises activation means for activating a timer. Even if a request to display the password change screen is received by the receiving means while the timer is operating, the display means does not display the password change screen corresponding to the request received while the timer is operating. The information processing apparatus according to claim 4, characterized in that.

8. The transmission means When the timer is activated by the activation means, it transmits a password change warning screen configured not to display the predetermined element to the external apparatus. When the timer activated by the activation means stops, it transmits a password change warning screen configured to display the predetermined element to the external apparatus. The information processing apparatus according to claim 7, characterized in that.

9. After a predetermined time has elapsed since the password change screen was displayed, if no predetermined operation is performed on the password change screen, the display means stops displaying the password change screen. The information processing apparatus according to any one of claims 1 to 8, characterized in that.

10. A control method for an information processing apparatus capable of communicating with an external apparatus, comprising: A receiving step of receiving a request from the external apparatus to the information processing apparatus; When the request received in the receiving step is a request to display a password change screen for changing the password, where the password set in the information processing apparatus is in the initial state, a display step of displaying the password change screen and A control method for an information processing apparatus, characterized by comprising:

11. A program for causing a computer to execute the control method of the information processing apparatus according to claim 10.

Images