Information processing system and information processing program

Abstract

To specify a security method of an information processing device without repeatedly sending request information to the information processing device from an operation terminal while changing the security method even if the security method of the information processing device is unknown when sending the request information to the information processing device from the operation terminal according to a common security method.SOLUTION: An information processing system includes a processor. The processor sends request information from an operation terminal of an information processing device to the information processing device according to a predetermined security method, and when receiving response information according to another security method different from the security method from the information processing device, sends the request information to the information processing device according to a security method being same as the other security method.SELECTED DRAWING: Figure 4

Description

[Technical Field]

[0001] The present invention relates to an information processing system and an information processing program. [Background technology]

[0002] Patent document 1 discloses a client device that is capable of communicating with an external image processing device via a network, characterized in that it is provided with a negotiation means that negotiates with the image processing device regarding an authentication method when requesting image processing from the image processing device, and an authentication information transmission means that, if it is decided in the negotiation that authentication should be performed outside the image processing device, encrypts authentication information to be used for authentication in a method that can be processed by the basic functions of the image processing device and transmits it to the image processing device, and, if it is decided in the negotiation that authentication should be performed inside the image processing device, transmits the authentication information to the image processing device in a format suitable for digest authentication.

[0003] Patent document 2 discloses a network management device that communicates with peripheral devices using a version of SNMP (Simple Network Management Protocol) that requires key information during communication, and that is characterized by having: means for acquiring device-specific information from the peripheral device; means for generating multiple key information candidates using the device-specific information before communicating via SNMP; means for acquiring an SNMP engine ID of the peripheral device; judgment means for determining whether the SNMP engine ID corresponds to the device-specific information; and communication means for retaining the SNMP engine ID and communicating via SNMP using key information selected from the key information candidates and corresponding to the device-specific information when the judgment means determines that the SNMP engine ID corresponds to the device-specific information.

[0004] Patent document 3 discloses a network device management device characterized by having a searching means for searching for network devices compatible with a first communication protocol, an authentication information input means for inputting authentication information for communicating with the network device using the first communication protocol, an authentication execution means for executing authentication for the network device using the authentication information, a first confirmation means for confirming whether a second communication protocol different from the first communication protocol is valid in the network device if authentication by the authentication execution means is successful, and a setting change means for changing the settings of the second communication protocol depending on the confirmation result of the first confirmation means. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Japanese Patent Application Laid-Open No. 2006-251996 [Patent Document 2] Japanese Patent Application Laid-Open No. 2009-110261 [Patent Document 3] Japanese Patent Application Laid-Open No. 2009-301111 Summary of the Invention [Problem to be solved by the invention]

[0006] To identify the security method of an image processing device without repeatedly transmitting request information from an operation terminal to the image processing device while changing the security method, even if the security method of the image processing device is unknown, when request information is transmitted from an operation terminal to the image processing device according to a common security method. [Means for solving the problem]

[0007] The information processing system according to the first aspect includes: a processor; The processor: transmitting request information from an operation terminal of the information processing device in accordance with a predetermined security method to the information processing device; When response information conforming to a security method different from the security method is received from the information processing device, the request information is transmitted to the information processing device in accordance with the same security method as the other security method.

[0008] An information processing system according to a second aspect is the information processing system according to the first aspect, The processor: The security method that has succeeded in decrypting the response information is set as the same security method as the other security method.

[0009] An information processing system according to a third aspect is the information processing system according to the second aspect, The processor: The response information is decrypted in sequence while changing the security method until the response information is successfully decrypted.

[0010] An information processing system according to a fourth aspect is the information processing system according to the third aspect, The processor: The response information is decrypted in order of the security system having the lowest security level among the plurality of security systems.

[0011] An information processing system according to a fifth aspect is the information processing system according to the second aspect, The security method is a combination of an authentication method and an encryption method.

[0012] An information processing system according to a sixth aspect is the information processing system according to the fifth aspect, The processor: The response information is decrypted in sequence while changing the combination of authentication method and encryption method.

[0013] An information processing system according to a seventh aspect is the information processing system according to any one of the first to sixth aspects, The processor: transmitting the request information to the information processing device as an information request in SNMPv3; The response information from the information processing device is received as a trap of SNMPv3.

[0014] An information processing program according to an eighth aspect includes: On the computer, transmitting request information from an operation terminal of the information processing device in accordance with a predetermined security method to the information processing device; when receiving response information according to a security method different from the security method from the information processing device, transmitting the request information to the information processing device according to the same security method as the other security method; Execute the process.

[0015] An information processing system according to a ninth aspect includes: a processor; The processor: receiving request information from an operation terminal of the information processing device to the information processing device, the request information complying with a predetermined security method; If the received request information fails to be decrypted, response information to the request information is transmitted to the operation terminal in accordance with the security method used for decryption.

[0016] An information processing system according to a tenth aspect is the information processing system according to the ninth aspect, The processor: receiving the request information as an SNMPv3 information request; The response information is sent to the operation terminal as a trap of SNMPv3.

[0017] An information processing program according to an eleventh aspect includes: On the computer, receiving request information from an operation terminal of the information processing device to the information processing device, the request information complying with a predetermined security method; If the received request information fails to be decrypted, a response to the request information is transmitted to the operation terminal in accordance with the security method used for decryption. Execute the process. [Effects of the Invention]

[0018] According to the first aspect, even if the security method of the information processing device is unknown, it is possible to identify the security method of the information processing device without repeatedly transmitting request information from the operation terminal to the information processing device while changing the security method.

[0019] According to the second aspect, the security method of the information processing device can be identified without inquiring about the security method of the information processing device.

[0020] According to the third aspect, the success rate of decryption can be increased compared to when response information from an information processing device is decrypted based on only one security method.

[0021] According to the fourth aspect, it is possible to improve the efficiency of the decryption process compared to a case where response information from an information processing device is decrypted in descending order of security level among a plurality of security methods.

[0022] According to the fifth aspect, leakage of authentication information can be suppressed more effectively than when the security method is only an authentication method or only an encryption method.

[0023] According to the sixth aspect, the success rate of decryption can be increased compared to when the response information is decrypted in order without changing the combination of authentication method and encryption method.

[0024] According to the seventh aspect, the versatility of the information processing system can be improved.

[0025] According to the eighth aspect, even if the security method of the information processing device is unknown, the operating terminal can be authenticated without repeatedly transmitting request information from the operating terminal to the information processing device while changing the security method.

[0026] According to the ninth aspect, even if the security method of the information processing device is unknown, it is possible to identify the security method of the information processing device without repeatedly transmitting request information from the operation terminal to the information processing device while changing the security method.

[0027] According to the tenth aspect, the process of transmitting response information to request information from an operating terminal can be simplified compared to when response information is transmitted to the operating terminal as a notification separate from an SNMPv3 Trap.

[0028] According to the eleventh aspect, even if the security method of the information processing device is unknown, it is possible to identify the security method of the information processing device without repeatedly transmitting request information from the operation terminal to the information processing device while changing the security method. [Brief explanation of the drawings]

[0029] [Figure 1] 1 is a diagram illustrating a schematic configuration of an image processing system according to an embodiment. [Figure 2] FIG. 2 is a block diagram showing a hardware configuration of the image processing device shown in FIG. [Figure 3] 2 is a block diagram showing a hardware configuration of the operation terminal shown in FIG. 1. FIG. [Figure 4] FIG. 2 is a functional block diagram of the image processing device and the operation terminal shown in FIG. [Figure 5] 2 is a diagram showing an example of a setting information management table of the operating terminal shown in FIG. 1. FIG. [Figure 6] FIG. 2 is a diagram showing an example of a combination of security methods for the operation terminal shown in FIG. [Figure 7] 10 is a flowchart showing the flow of device information acquisition processing of the operating terminal shown in FIG. [Figure 8] 2 is a flowchart showing the flow of response processing of the image processing device shown in FIG. DETAILED DESCRIPTION OF THE INVENTION

[0030] An embodiment will be described below with reference to the drawings. In the drawings, identical or equivalent components and parts are designated by the same reference numerals. The dimensional proportions in the drawings may be exaggerated for the sake of clarity and may differ from the actual proportions.

[0031] (Image processing system overview) 1 shows an image processing system 10 according to this embodiment. The image processing system 10 includes an image processing device 20 as an example of an information processing device, and an operation terminal 30. The image processing device 20 and the operation terminal 30 are connected to a network 12.

[0032] The network 12 may be an internal network such as a LAN (Local Area Network) or a WAN (Wide Area Network), or an external network such as the Internet. Via this network 12, the image processing device 20 and the operation terminal 30 are connected to each other so as to be able to communicate with each other.

[0033] Furthermore, Simple Network Management Protocol version 3 (SNMPv3) is implemented in the image processing device 20 and the operation terminal 30. The operation terminal 30 is capable of acquiring various types of information from the Management Information Base (MIB) of the image processing device 20 in accordance with SNMPv3.

[0034] SNMPv3 also allows authentication using authentication protocols, such as Message Digest Algorithm 5 (MD5), Secure Hash Algorithm (SHA)-1, and SHA-256. SNMPv3 also allows encrypted communication (message encryption), such as Data Encryption Standard (DES), Advanced Encryption Standard (AES)-128, and AES-256.

[0035] The image processing device 20 and the operation terminal 30 are an example of an information processing system. Here, the "system" in this embodiment is a concept that includes both a system configured with multiple devices and a system configured with a single device. Also, FIG. 1 shows one image processing device 20 and one operation terminal 30 as an example. However, there may be multiple image processing devices 20 and multiple operation terminals 30.

[0036] (Image processing device) As an example, the image processing device 20 is a printing device on the network 12 that has an image printing function of acquiring image data from the operation terminal 30 and printing the acquired image data on a recording medium such as paper. The image processing device 20 may be a multifunction peripheral that has at least one of a plurality of functions, such as an image reading (scanning) function, an image copying (copying) function, and an image transmission (facsimile) function, in addition to the image printing function described above.

[0037] (Operation terminal) The operation terminal 30 is, for example, an information processing terminal operated by a user who uses the image processing device 20. The operation terminal 30 is, for example, a personal computer, a notebook computer, a smartphone, or the like.

[0038] (Hardware configuration of image processing device) Next, the hardware configuration of the image processing device 20 will be described.

[0039] 2, the image processing device 20 includes a CPU (Central Processing Unit) 50, a ROM (Read Only Memory) 52, a RAM (Random Access Memory) 54, a storage 56, an input unit 58, a display unit 60, a communication interface (I / F) 62, an image reading unit 64, and an image forming unit 66. Each of the components is connected to each other via a bus 68 so as to be able to communicate with each other.

[0040] The CPU 50 is a central processing unit that executes various programs and controls each component. That is, the CPU 50 reads programs from the ROM 52 or storage 56 and executes the programs using the RAM 54 as a work area. The CPU 50 controls the above components and performs various arithmetic processing in accordance with the programs recorded in the ROM 52 or storage 56. The CPU 50 is an example of a processor.

[0041] The ROM 52 stores various information processing programs and various data. The RAM 54 serves as a work area for the CPU 50 and temporarily stores programs or data.

[0042] The storage 56 is configured by a hard disk drive (HDD) or a solid state drive (SSD), and stores various programs including an operating system and various data. The storage 56 also stores a response processing program.

[0043] The input unit 58 includes operation buttons and the like and is used to perform various inputs. The display unit 60 is, for example, a liquid crystal display and displays various information. The display unit 60 may employ a touch panel system and function as an input unit.

[0044] The communication I / F 62 is an interface for communicating with other devices, and uses standards such as Ethernet (registered trademark), FDDI, and Wi-Fi (registered trademark).

[0045] The image reading unit 64 optically reads image data from an original document, etc. The image forming unit 66 prints the image data read by the image reading unit 64 or the image data received from the operation terminal 30 onto a recording medium such as paper. The image reading unit 64 also functions as an input unit.

[0046] (Hardware configuration of the operation terminal) Next, the hardware configuration of the operation terminal 30 will be described.

[0047] 3, the operation terminal 30 includes a CPU 70, a ROM 72, a RAM 74, a storage 76, an input unit 78, a display unit 80, and a communication interface (I / F) 82. Each component is connected to each other via a bus 84 so as to be able to communicate with each other.

[0048] The CPU 70 is a central processing unit that executes various programs and controls each component. That is, the CPU 70 reads programs from the ROM 72 or storage 76 and executes the programs using the RAM 74 as a work area. The CPU 70 controls the above components and performs various arithmetic processing in accordance with the programs recorded in the ROM 72 or storage 76. The CPU 70 is an example of a processor.

[0049] The ROM 72 stores various information processing programs and various data. The RAM 74 serves as a work area for the CPU 70 and temporarily stores programs or data.

[0050] The storage 76 is configured with an HDD or SSD, and stores various programs including an operating system, and various data. The storage 76 also stores a device information acquisition processing program.

[0051] The input unit 78 includes a pointing device such as a mouse and a keyboard, and is used to perform various inputs. The display unit 80 is, for example, a liquid crystal display, and displays various types of information. The display unit 80 may also function as an input unit by employing a touch panel system.

[0052] The communication I / F 82 is an interface for communicating with other devices, and uses standards such as Ethernet (registered trademark), FDDI, and Wi-Fi (registered trademark).

[0053] (Image processing device functions) Next, the functions of the image processing device 20 will be described.

[0054] When executing the information processing program, the image processing device 20 uses the above hardware resources to realize various functions. Specifically, as shown in Fig. 4, the image processing device 20 functionally includes a user information storage unit 22, a device information storage unit 24, an SNMPv3 communication processing unit 26, and a Trap transmission unit 28.

[0055] (User information storage unit) The user information storage unit 22 stores a user management table that registers user IDs and passwords assigned to users of the image processing device 20. This user management table is configured as, for example, an SNMPv3 MIB, and is updated as needed.

[0056] (Device information storage) The device information storage unit 24 stores a device information management table that registers various information about the image processing device 20. The various information about the image processing device 20 includes, for example, basic information such as the printing method, the number of paper feed trays, the number of paper output trays, and status information that indicates the operating status of the image processing device 20, such as normal mode, power saving mode, etc. This device information management table is configured as, for example, an SNMPv3 MIB, and is updated as needed.

[0057] (SNMPv3 communication processing section) The SNMPv3 communication processing unit 26 is capable of transmitting and receiving various types of data to and from the operation terminal 30 in accordance with SNMPv3. Specifically, the SNMPv3 communication processing unit 26 receives request information from the operation terminal 30 as an SNMPv3 information request, and transmits response information to the request information to the operation terminal 30.

[0058] At this time, the SNMPv3 communications processing unit 26 authenticates the user of the operating terminal 30 based on the user's authentication information, i.e., the user ID and password of the user, included in the request information from the operating terminal 30. Specifically, the SNMPv3 communications processing unit 26 compares the user ID and password of the user received from the operating terminal 30 with the user ID and password registered in the user management table.

[0059] If the user ID and password of the user received from the operation terminal 30 exist in the user management table, the SNMPv3 communications processor 26 determines that the authentication is successful. Then, the SNMPv3 communications processor 26 reads out various pieces of information about the image processing device 20 included in the request information received from the operation terminal 30 from the device information management table, and transmits the information to the operation terminal 30 as response information.

[0060] On the other hand, if the user ID and password of the user received from the operation terminal 30 do not exist in the user management table, the SNMPv3 communication processing unit 26 determines that the authentication has failed and transmits response information to that effect to the operation terminal 30. At this time, the SNMPv3 communication processing unit 26 does not transmit various information of the image processing device 20 to the operation terminal 30.

[0061] The SNMPv3 communication processor 26 also transmits and receives various data to and from the operation terminal 30 in accordance with the SNMPv3 security method. At this time, the SNMPv3 communication processor 26 decrypts the request information received from the operation terminal 30 in accordance with the security method set in the image processing device 20. This security method is a combination of an authentication method and an encryption method.

[0062] As mentioned above, examples of authentication methods (authentication protocols) include MD5, SHA-1, and SHA-256. Examples of encryption methods (encrypted communication) include DES, AES-128, and AES-256.

[0063] The security method is set in advance in the image processing device 20 and is registered in, for example, the device information management table described above. In the image processing device 20 of this embodiment, SHA-1 and AES-128 are set as examples of the security method.

[0064] Here, only when the security method of the request information received from the operation terminal 30 matches the security method set in the image processing device 20, can the SNMPv3 communication processing unit 26 decrypt the authentication information received from the operation terminal 30 and read the user authentication information, etc. included in the request information.

[0065] In other words, if the security method of the request information received from the operation terminal 30 does not match the security method set in the image processing device 20, the SNMPv3 communication processing unit 26 cannot decode the request information received from the operation terminal 30 and cannot read the user authentication information, etc., included in the request information. In this case, the SNMPv3 standard (RFC) does not send response information to the operation terminal 30.

[0066] The SNMPv3 communication processor 26 implements the SNMPv3 standard. Therefore, if the security method of the request information received from the operation terminal 30 does not match the security method set in the image processing device 20, the SNMPv3 communication processor 26 does not transmit response information to the operation terminal 30.

[0067] Therefore, in this embodiment, if the security method of the request information received from the operation terminal 30 does not match the security method set in the image processing device 20, the trap sending unit 28 described later sends response information to the operation terminal 30 using an SNMPv3 trap.

[0068] (Trap transmission unit) The trap transmission unit 28 is capable of transmitting an SNMPv3 trap (event notification) to the operation terminal 30. In addition, the trap transmission unit 28 is capable of transmitting an SNMPv3 trap (event notification) to the operation terminal 30 in accordance with the security method set in the image processing device 20.

[0069] As described above, if the security method of the authentication information received from the operation terminal 30 does not match the security method set in the image processing device 20, the SNMPv3 communications processing unit 26 does not respond to the operation terminal 30. In this case, the trap transmission unit 28 transmits response information to the request information received from the operation terminal 30 to the operation terminal 30. At this time, the trap transmission unit 28 transmits the response information to the operation terminal 30 in accordance with the security methods set in the image processing device 20, i.e., SHA-1 and AES-128.

[0070] (Operation terminal functions) Next, the functions of the operation terminal 30 will be described.

[0071] When executing the information processing program, the operation terminal 30 uses the above hardware resources to realize various functions. Specifically, as shown in Fig. 4, the operation terminal 30 functionally includes a setting information storage unit 32, an SNMPv3 communication processing unit 34, a trap receiving unit 36, and a security method decoding unit 38.

[0072] (Setting information storage unit) The setting information storage unit 32 stores a setting information management table that registers various setting values ​​for the operation terminal 30. An example of the setting information management table is shown in Fig. 5. The setting information management table has the following items: user ID, password, authentication method, and encryption method.

[0073] The user ID is identification information for identifying a user of the image processing device 20. The password is a character string for authenticating a user of the image processing device 20.

[0074] The authentication method is an authentication method set in the operation terminal 30. This authentication method is selected from a plurality of authentication methods available to the operation terminal 30. As an example, the operation terminal 30 of this embodiment uses the authentication methods MD5, SHA-1, and SHA-256. Also, in this embodiment, as an example, the initial authentication method is set to MD5.

[0075] The encryption method is an encryption method set in the operation terminal 30. This encryption method is selected from a plurality of encryption methods available to the operation terminal 30. For example, the operation terminal 30 of this embodiment is able to use the encryption methods DES, AES-128, and AES-256. In this embodiment, for example, the initial encryption method is set to DES.

[0076] (SNMPv3 communication processing section) The SNMPv3 communications processing unit 34 is capable of transmitting and receiving various types of data to and from the image processing device 20 in accordance with SNMPv3. Specifically, the SNMPv3 communications processing unit 34 transmits request information including request information to be made to the image processing device 20 as an SNMPv3 information request, and receives response information from the image processing device 20. As described above, this request information includes authentication information of the user who uses the image processing device 20, i.e., the user ID and password of the user.

[0077] The SNMPv3 communication processing unit 34 is also capable of transmitting and receiving various types of data to and from the image processing device 20 in accordance with the SNMPv3 security method. The security method used by the SNMPv3 communication processing unit 34 is set in advance in the operation terminal 30, and is registered, for example, in the setting information management table (see FIG. 5) described above. In this embodiment, as described above, MD5 is set as the authentication method in the operation terminal 30, and DES is set as the encryption method.

[0078] (Trap receiver) The trap receiving unit 36 ​​receives response information sent from the trap sending unit 28 of the image processing device 20 using a trap of SNMPv3.

[0079] (Security Method Decryption Unit) The security method decryption unit 38 decrypts the security method of the response information received as an SNMPv3 Trap from the image processing device 20. Specifically, the security method decryption unit 38 sequentially decrypts the response information while changing the security methods available on the operation terminal 30, i.e., the combination of authentication method and encryption method, until the decryption is successful.

[0080] The combination of authentication methods and encryption methods and the order in which decryption is performed are determined in advance. Figure 6 shows an example of the combination of authentication methods and encryption methods and the order in which they are performed. In the example shown in Figure 6, one authentication method selected from the multiple authentication methods is combined in order with multiple encryption methods. Next, another authentication method selected from the multiple authentication methods is combined in order with multiple encryption methods. By repeating this procedure, all of the multiple authentication methods and multiple encryption methods are combined.

[0081] Here, the higher the security level of the authentication method and encryption method, the longer it takes to decrypt the response information. Therefore, in this embodiment, when combining authentication methods and encryption methods, the authentication method with the lowest security level, that is, the authentication method with the shortest hash value (MD5, SHA-1, SHA-256, in that order) is selected from among multiple authentication methods.

[0082] Similarly, when combining authentication and encryption methods, the encryption method with the lowest security level, i.e., the encryption method with the shortest encryption key (DES, AES-128, AES-256) is selected from multiple encryption methods, thereby improving the efficiency of decrypting the response information.

[0083] The combination of authentication methods and encryption methods and the order in which decryption is performed can be changed as appropriate. For example, the response information may be decrypted first using a combination of authentication method and encryption method with the lowest security level, and then using a combination of authentication method and encryption method with the second lowest security level. Also, for example, the response information may be decrypted in order from the security method with the highest security level among multiple security methods.

[0084] (Information acquisition processing) Next, the device information acquisition process by the operation terminal 30 will be described.

[0085] In the device information acquisition process by the operation terminal 30, various pieces of information are acquired from the MIB of the image processing device 20 in accordance with SNMPv3. This device information acquisition process is executed by the operation terminal 30, for example, when a user of the image processing device 20 logs in to the operation terminal 30 or when a connection request to the image processing device 20 is generated from the operation terminal 30. The device information acquisition process is an example of a device information acquisition processing method.

[0086] An example of the device information acquisition process is shown in Fig. 7. As shown in Fig. 7, first, in step S10, the CPU 70 transmits request information to the image processing device 20 in accordance with SNMPv3. The request information includes authentication information such as a user ID and password, and request information for various information to be requested from the image processing device 20. At this time, the CPU 70 transmits the request information to the image processing device 20 in accordance with the security method set in the operation terminal 30, i.e., with MD5 as the authentication method and DES as the encryption method.

[0087] Next, in step S12, the CPU 70 waits until it receives a response from the image processing device 20, and proceeds to the next step depending on the received response information. Specifically, if the response information received from the image processing device 20 is normal, that is, if the response information is received from the SNMPv3 communication processing unit 26 of the image processing device 20, the CPU 70 proceeds to step S14.

[0088] In step S14, the CPU 70 decodes the response information received from the SNMPv3 communication processing unit 26 of the image processing device 20 in accordance with the security method set in the operation terminal 30, and acquires various pieces of information about the image processing device 20 from the decoded response information. The CPU 70 then displays the acquired various pieces of information about the image processing device 20 on, for example, the display unit 60 of the operation terminal 30, and ends the process.

[0089] On the other hand, if the response information received from the image processing device 20 is abnormal in step S12, that is, if the response information received from the image processing device 20 uses a trap of SNMPv3, the CPU 70 proceeds to step S16. In other words, if the CPU 70 receives response information from the image processing device 20 that complies with a security method different from the security method used when request information is transmitted from the operation terminal 30 to the image processing device 20, the CPU 70 proceeds to step S16.

[0090] Next, in step S16, the CPU 70 determines whether or not there is a candidate for changing the security scheme. If the CPU 70 determines that there is a candidate for changing the security scheme, the process proceeds to step S18.

[0091] Next, in step S18, the CPU 70 changes the security method set in the operation terminal 30. Specifically, as shown in Fig. 6, for example, the combination of the authentication method and the encryption method is changed, and the security method in the device information management table (see Fig. 5) is updated.

[0092] Next, in step S20, the CPU 70 decrypts the response information received from the image processing device 20 based on the changed security method.

[0093] Next, in step S22, the CPU 70 determines whether or not the response information has been successfully decoded. If the CPU 70 determines that the response information has not been successfully decoded, the process returns to step S16.

[0094] If the CPU 70 determines in step S16 that there is no candidate for changing the security scheme, the process proceeds to step S24.

[0095] In step S24, the CPU 70 displays an error message on the display unit 80 of the operation terminal 30, for example, to the effect that acquisition of various information about the image processing device 20 has failed, and ends the process.

[0096] On the other hand, if the CPU 70 determines in step S22 that the response information has been successfully decoded, the process returns to step S10. Then, in step S10, the CPU 70 retransmits the request information to the image processing device 20 in accordance with the security method that successfully decoded the response information, i.e., the same security method as the response information received from the image processing device 20 as an SNMPv3 Trap.

[0097] (Response processing) Next, the response process by the image processing device 20 will be described.

[0098] When the image processing device 20 receives request information from the operation terminal 30, the response process shown in Fig. 8 is executed in the image processing device 20. Note that the response process is an example of a response processing method.

[0099] First, in step S40, the CPU 50 decrypts the request information received from the operation terminal 30 in accordance with the security method set in the image processing device 20, that is, SHA-1 and AES-128.

[0100] Next, in step S42, the CPU 50 determines whether or not the request information has been successfully decoded. If the CPU 50 determines that the request information has been successfully decoded, the process proceeds to step S44.

[0101] Next, in step S44, the CPU 50 authenticates the user using the user ID and password of the user included in the request information. Then, the CPU 50 transmits response information according to the user authentication result to the operation terminal 30 and ends the process. In other words, if the user authentication is successful, the CPU 50 transmits response information including various information of the image processing device 20 requested by the operation terminal 30 to the operation terminal 30 and ends the process.

[0102] On the other hand, if the authentication of the user fails, the CPU 50 transmits response information including information indicating that the authentication failed to the operation terminal 30 and ends the process. At this time, the CPU 50 does not transmit to the operation terminal 30 various pieces of information of the image processing device 20 requested by the operation terminal 30.

[0103] On the other hand, if the CPU 50 determines in step S42 that the decoding of the request information has failed, the process proceeds to step S46.

[0104] Next, in step S46, the CPU 50 uses an SNMPv3 Trap to transmit response information to the operation terminal 30, and ends the process. At this time, the CPU 50 transmits the response information to the operation terminal 30 in accordance with the security method set in the image processing device 20, i.e., the security method used to decrypt the request information received from the operation terminal 30.

[0105] (Variation) Next, a modification of the above embodiment will be described.

[0106] In the above embodiment, the SNMPv3 security method used in the image processing device 20 and the operation terminal 30 is a combination of an authentication method and an encryption method. However, the SNMPv3 security method used in the image processing device 20 and the operation terminal 30 is not limited to a combination of an authentication method and an encryption method, and may be, for example, only an authentication method or only an encryption method.

[0107] Furthermore, the operation terminal 30 in the above embodiment identifies the security method of the image processing device 20 by decoding the response information received as an SNMPv3 Trap from the image processing device 20. However, the operation terminal 30 may identify the security method of the image processing device 20 by, for example, inquiring about the security method from the image processing device 20.

[0108] In the above embodiment, the image processing device 20 and the operation terminal 30 transmit and receive various data in accordance with SNMPv3. However, the image processing device 20 and the operation terminal 30 may transmit and receive various data in accordance with any communication protocol other than SNMPv3 that can use a security method.

[0109] In the above embodiment, the information processing device is an image processing device as an example. However, the information processing device is not limited to an image processing device, and may be, for example, a server device or a network-compatible device that is communicably connected to an operation terminal via a network and that can use a security method such as SNMPv3.

[0110] In addition, in the above embodiments, the term "processor" refers to a processor in a broad sense, and includes general-purpose processors (e.g., CPU: Central Processing Unit, etc.) and dedicated processors (e.g., GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic device, etc.).

[0111] Furthermore, the operations of the processors in the above embodiments may not only be performed by a single processor, but may also be performed by multiple processors located at physically separate locations working together. Furthermore, the order of the operations of the processors is not limited to the order described in the above embodiments, and may be changed as appropriate.

[0112] In the above embodiment, the programs are installed in a ROM or storage device, but this is not limiting. The programs according to the above embodiment may be provided in a form recorded on a computer-readable storage medium. For example, the programs according to the above embodiment may be provided in a form recorded on an optical disc such as a CD (Compact Disc)-ROM or a DVD (Digital Versatile Disc)-ROM, or in a form recorded on a semiconductor memory such as a USB (Universal Serial Bus) memory or a memory card. Furthermore, the programs according to the above embodiment may be acquired from an external device via a communication interface.

[0113] In the above embodiment, the processing in the image processing device 20 and the operation terminal 30 is described as being realized by a software configuration using a computer by executing a program, but the present disclosure is not limited to this. For example, the processing in the image processing device 20 and the operation terminal 30 may be realized by a hardware configuration or a combination of a hardware configuration and a software configuration.

[0114] In addition, the configurations of the image processing device 20 and the operation terminal 30 described in the above embodiment are merely examples, and it goes without saying that unnecessary parts may be deleted or new parts may be added within the scope of the present disclosure.

[0115] Furthermore, the processing flow in the image processing device 20 and the operation terminal 30 described in the above embodiment is also an example, and it goes without saying that unnecessary steps may be deleted, new steps may be added, or the processing order may be rearranged within the scope of the gist of this disclosure.

[0116] The following additional notes are provided regarding the above-described embodiments.

[0117] (((1))) a processor; The processor: transmitting request information from an operation terminal of the information processing device in accordance with a predetermined security method to the information processing device; when receiving response information according to a security method different from the security method from the information processing device, transmitting the request information to the information processing device according to the same security method as the other security method; Information processing system. (((2))) The processor: The security method that has succeeded in decrypting the response information is set to the same security method as the other security method. The information processing system according to (((1))). (((3))) The processor: decrypting the response information in succession while changing the security method until the response information is successfully decrypted; The information processing system according to (((2))). (((4))) The processor: decrypting the response information in order of the security method having the lowest security level among the plurality of security methods; The information processing system according to (((3))). (((5))) The security method is a combination of an authentication method and an encryption method. The information processing system according to any one of (((1))) to (((4))). (((6))) The processor: decrypting the response information in sequence while changing the combination of the authentication method and the encryption method; The information processing system according to (((5))). (((7))) The processor: transmitting the request information to the information processing device as an information request in SNMPv3; receiving the response information from the information processing device as an SNMPv3 Trap; The information processing system according to any one of (((1))) to (((6))). (((8))) On the computer, transmitting request information from an operation terminal of the information processing device in accordance with a predetermined security method to the information processing device; when receiving response information according to a security method different from the security method from the information processing device, transmitting the request information to the information processing device according to the same security method as the other security method; An information processing program for executing processing. (((9))) a processor; The processor: receiving request information from an operation terminal of the information processing device to the information processing device, the request information complying with a predetermined security method; If the received request information fails to be decrypted, a response to the request information is transmitted to the operation terminal in accordance with the security method used for decryption. Information processing system. (((10))) The processor: receiving the request information as an SNMPv3 information request; The response information is transmitted to the operation terminal as an SNMPv3 trap. The information processing system according to (((9))). (((11))) On the computer, receiving request information from an operation terminal of the information processing device to the information processing device, the request information complying with a predetermined security method; If the received request information fails to be decrypted, a response to the request information is transmitted to the operation terminal in accordance with the security method used for decryption. An information processing program for executing processing.

[0118] According to (((1))), even if the security method of the information processing device is unknown, it is possible to identify the security method of the information processing device without repeatedly sending request information from the operation terminal to the information processing device while changing the security method. According to (((2))), the security method of the information processing device can be identified without inquiring about the security method of the information processing device. According to (((3))), the success rate of decryption can be increased compared to when response information from an information processing device is decrypted based on only one security method. According to (((4))), the efficiency of the decryption process can be improved compared to when the response information from the information processing device is decrypted in descending order of security level among a plurality of security methods. According to (((5))), leakage of authentication information can be suppressed compared to when the security method is an authentication method only or an encryption method only. According to (((6))), the success rate of decryption can be increased compared to the case where the response information is decrypted in order without changing the combination of authentication method and encryption method. According to (((7))), the versatility of the information processing system can be improved. According to (((8))), even if the security method of the information processing device is unknown, the operating terminal can be authenticated without repeatedly sending request information from the operating terminal to the information processing device while changing the security method. According to (((9))), even if the security method of the information processing device is unknown, it is possible to identify the security method of the information processing device without repeatedly sending request information from the operation terminal to the information processing device while changing the security method. According to (((10))), the process of sending response information to request information from an operating terminal can be simplified compared to when the response information is sent to the operating terminal as a notification separate from the SNMPv3 Trap. According to (((11))), even if the security method of the information processing device is unknown, it is possible to identify the security method of the information processing device without repeatedly sending request information from the operation terminal to the information processing device while changing the security method. [Explanation of symbols]

[0119] 20 Image processing device (information processing system, information processing device) 30 Operation terminal (information processing system, information processing device) 50 CPUs (processors) 70 CPUs (processors)

Claims

1. a processor; The processor: transmitting request information from an operation terminal of the information processing device in accordance with a predetermined security method to the information processing device; when receiving response information according to a security method different from the security method from the information processing device, transmitting the request information to the information processing device according to the same security method as the other security method; Information processing system.

2. The processor: The security method that has succeeded in decrypting the response information is set to the same security method as the other security method. The information processing system according to claim 1 .

3. The processor: decrypting the response information in succession while changing the security method until the response information is successfully decrypted; The information processing system according to claim 2 .

4. The processor: decrypting the response information in order of the security method having the lowest security level among the plurality of security methods; The information processing system according to claim 3 .

5. The security method is a combination of an authentication method and an encryption method. The information processing system according to claim 2 .

6. The processor: decrypting the response information in sequence while changing the combination of the authentication method and the encryption method; The information processing system according to claim 5 .

7. The processor: transmitting the request information to the information processing device as an information request in SNMPv3; receiving the response information from the information processing device as a trap of SNMPv3; 7. The information processing system according to claim 1.

8. On the computer, transmitting request information from an operation terminal of the information processing device in accordance with a predetermined security method to the information processing device; when receiving response information according to a security method different from the security method from the information processing device, transmitting the request information to the information processing device according to the same security method as the other security method; An information processing program for executing processing.

9. a processor; The processor: receiving request information from an operation terminal of the information processing device to the information processing device, the request information complying with a predetermined security method; If the received request information fails to be decrypted, a response to the request information is transmitted to the operation terminal in accordance with the security method used for decryption. Information processing system.

10. The processor: receiving the request information as an SNMPv3 information request; transmitting the response information to the operation terminal as a trap of SNMPv3; The information processing system according to claim 9 .

11. On the computer, receiving request information from an operation terminal of the information processing device to the information processing device, the request information complying with a predetermined security method; If the received request information fails to be decrypted, a response to the request information is transmitted to the operation terminal in accordance with the security method used for decryption. An information processing program for executing processing.

Images