Communication device, computer program for communication device, and method for executed by communication device
The communication device manages function execution based on location changes by using stored location information to restrict functions and lift restrictions with terminal device information or passwords, preventing unauthorized access and information leakage.
Patent Information
- Application Number
- JP2024040251
- Authority / Receiving Office
- JP · JP
- Patent Type
- Applications
- Current Assignee / Owner
- Filing Date
- 2024-03-14
- Publication Date
- 2025-09-29
AI Technical Summary
Existing communication devices lack effective mechanisms to restrict and manage the execution of functions based on location changes, potentially leading to unauthorized access and leakage of sensitive information.
A communication device that includes a memory for storing location information, an acquisition unit to determine location changes, and a restriction unit to limit functions when a predetermined distance is exceeded, with the ability to lift restrictions using terminal device information or an administrator password.
Effectively prevents unauthorized access and leakage of personal information by restricting device functions when location changes occur, ensuring secure access for authorized users.
Smart Images

Figure 2025140704000001_ABST
Abstract
Description
[Technical Field]
[0001] This specification discloses a technique related to a communication device. [Background technology]
[0002] Patent Document 1 discloses a mobile phone. The mobile phone determines whether the current location information of the mobile phone satisfies an operating condition. If the location information does not satisfy the operating condition, access to the memory is prohibited. When access to the memory is prohibited, if a password is entered, the prohibited state of access to the memory is released. [Prior art documents] [Patent documents]
[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2003-125444 Summary of the Invention [Problem to be solved by the invention]
[0004] This specification provides a novel technique for restricting and removing restrictions on the execution of predetermined functions of a communication device. [Means for solving the problem]
[0005] A communication device disclosed in this specification may include a memory that stores first location information related to a location where the communication device is installed; an acquisition unit that acquires second location information related to a location where the communication device is installed after the first location information is stored in the memory; a first determination unit that determines whether a distance between a first location indicated by the first location information stored in the memory and a second location indicated by the second location information is greater than or equal to a predetermined distance; a restriction unit that restricts execution of a predetermined function of the communication device when it is determined that the distance is greater than or equal to the predetermined distance; a first receiving unit that receives predetermined information from a terminal device when execution of the predetermined function is restricted; a second determination unit that, when the predetermined information is received from the terminal device, uses the predetermined information to determine whether a predetermined condition for lifting the restriction is met; and a release unit that lifts the restriction when it is determined that the predetermined condition is met.
[0006] According to the above configuration, the communication device determines whether the distance between the first location indicated by the first location information stored in the memory and the second location indicated by the second location information is equal to or greater than a predetermined distance. That is, the communication device determines whether the location of the communication device has changed. Then, when the communication device determines that the distance is equal to or greater than the predetermined distance, that is, when the communication device determines that the location of the communication device has changed, the communication device restricts the execution of a predetermined function. Furthermore, when the communication device receives predetermined information from a terminal device in a situation where the execution of a predetermined function is restricted, the communication device lifts the restriction if it determines that a predetermined condition is satisfied using the predetermined information. In this way, a new technology for restricting and lifting the restriction on the execution of a predetermined function of a communication device is realized.
[0007] A computer program for implementing the above-described communication device, a computer-readable recording medium storing the computer program, and a method executed by the communication device are also novel and useful. [Brief explanation of the drawings]
[0008] [Figure 1] FIG. 1 is a diagram illustrating a configuration of a communication system. [Figure 2] FIG. 10 is a sequence diagram of processing executed between devices. [Figure 3] This is a continuation of the sequence diagram of FIG. [Figure 4] This is a sequence diagram for case A. [Figure 5] FIG. 10 is a sequence diagram of case B. [Figure 6] Sequence diagram for Case C DETAILED DESCRIPTION OF THE INVENTION
[0009] (Configuration of communication system 2; Figure 1) 1, the communication system 2 includes a plurality of terminals 10A and 10B and a multi-function device 100. Hereinafter, the multi-function device will be referred to as "MFP (short for Multi-Function Peripheral)." In this embodiment, it is assumed that the MFP 100 is installed in a certain location (for example, a predetermined location in an office), and then the MFP 100 is installed in another location (for example, a predetermined location in a new office after moving).
[0010] (Configuration of terminal 10A) In this embodiment, the terminal 10A is a mobile phone, a smartphone, a PDA, a tablet PC, or a portable terminal device. In a modified example, the terminal 10A may be a desktop PC, a laptop PC, or the like. A MAC address MAC1 is assigned to the terminal 10A. The terminal 10A includes an operation unit 12, a display unit 14, a Wi-Fi interface 16, and a control unit 30. Each unit 12 to 30 is connected to a bus line. Hereinafter, the interface will be referred to as "I / F."
[0011] The operation unit 12 is an I / F that allows the user to input various information to the terminal 10A, and includes, for example, a touch screen and buttons. The user can input various information to the terminal 10A via the operation unit 12. The display unit 14 is a display for displaying various information.
[0012] The Wi-Fi I / F 16 is a wireless I / F for performing Wi-Fi communication in accordance with the Wi-Fi standard. The Wi-Fi standard is a wireless communication standard for performing wireless communication in accordance with, for example, the 802.11 standard of the Institute of Electrical and Electronics Engineers, Inc. (IEEE) and its equivalent standards, such as 802.11a, 11b, 11g, 11n, and 11ac. In particular, the Wi-Fi I / F 16 supports the Wi-Fi Aware method established by the Wi-Fi Alliance. Details of Wi-Fi Aware are described in the specification "Wi-Fi Aware Specification Version 4.0" created by the Wi-Fi Alliance. Hereinafter, a Wi-Fi connection established in accordance with the Wi-Fi Aware method will be referred to as a "Wi-Fi Aware connection."
[0013] As will be described in detail later, each of the devices 10A and 100 participates in a Wi-Fi Aware Neighbor Awareness Network (NAN) cluster. The discovery windows, which are periods during which signals are transmitted and received, are synchronized among the devices participating in the same NAN cluster.
[0014] Each device participating in a NAN cluster is assigned one of three roles: Master, Anchor Master, or Non-Master. A Master can share timer information, search for services, and invite other devices to the NAN cluster. An Anchoring Master can set timer information for synchronization in addition to the functions that a Master can perform. A Non-Master can share timer information and search for services, but cannot invite other devices to the cluster.
[0015] Each device participating in a NAN cluster can search for other devices in the NAN cluster (more specifically, for services provided by the other devices). A signal for searching for a service is called a Subscribe. A device that receives a Subscribe transmits a response signal called a Publish. In this embodiment, terminals 10A and 10B transmit a Subscribe to search for other devices that can provide a configuration service. Since MFP 100 is capable of providing a configuration service, it transmits a Publish to terminal 10 indicating that it can provide the configuration service. Furthermore, MFP 100 transmits a Subscribe to search for other devices that can provide services related to location information. Since terminals 10A and 10B are capable of providing services related to location information, they transmit a Publish to MFP 100 indicating that they can provide services related to location information. Terminals 10A and 10B can establish a Wi-Fi Aware connection with MFP 100 by using the configuration service provided by MFP 100. In other words, an MFP 100 that can provide a configuration service can also be said to be a device that can establish a Wi-Fi Aware connection. Furthermore, terminal 10A etc. is equipped with a GPS module (not shown), and MFP 100 can acquire location information indicating the location of terminal 10A etc. from terminal 10A etc. by using a service related to location information provided by terminal 10A etc. When terminal 10A and MFP 100 are participating in the same NAN cluster, terminal 10A and MFP 100 are located relatively close to each other. For this reason, MFP 100 uses the location information of terminal 10A acquired from terminal 10A by the service related to location information as its own location information.
[0016] The control unit 30 includes a CPU 32 and a memory 34. The memory 34 includes a main storage device and an auxiliary storage device. The main storage device includes, for example, RAM and cache memory. The auxiliary storage device may be, for example, a flash memory, a solid state drive (SSD), or a ROM, or a combination thereof. An OS program 36 and application programs 38 are stored in the auxiliary storage device. The CPU 32 performs various processes in accordance with the programs 36 and 38 loaded from the auxiliary storage device to the main storage device. Hereinafter, the OS program will be referred to as "OS." Furthermore, application programs will be referred to as "apps."
[0017] The OS 36 controls the basic operations of the terminal 10. The application 38 causes the OS 36 to execute processing in accordance with the Wi-Fi Aware method, thereby establishing a Wi-Fi Aware connection between the terminal 10 and the MFP 100. The application 38 is, for example, downloaded from a server on the Internet and installed on the terminal 10A.
[0018] (Configuration of terminal 10B) The terminal 10B has the same configuration as the terminal 10A, except that the terminal 10B is assigned a MAC address MAC2.
[0019] (MFP100 configuration) The MFP 100 is a peripheral device capable of executing functions such as printing, scanning, and facsimile, for example, a peripheral device for terminals 10A and 10B. In a modified example, the MFP 100 may be a single-function device capable of executing only one of the functions such as printing or scanning. A serial number SN1 is assigned to the MFP 100 for identifying the MFP 100. The MFP 100 includes an operation unit 112, a display unit 114, a Wi-Fi I / F 116, a print execution unit 118, a scan execution unit 120, and a control unit 130. Each of the units 112 to 130 is connected to a bus line.
[0020] The operation unit 112 is an I / F that allows the user to input various information to the MFP 100, and includes, for example, a touch screen and buttons. The user can input various information to the MFP 100 via the operation unit 112. The display unit 114 is a display for displaying various information. The Wi-Fi I / F 116 is similar to the Wi-Fi I / F 16 of the terminal 10, and supports the Wi-Fi Aware system. The print execution unit 118 includes, for example, an inkjet or laser printing mechanism. The scan execution unit 120 includes, for example, a CIS or CCD scanning mechanism.
[0021] The control unit 130 includes a CPU 132 and a memory 134. The memory 134 includes a main storage device and an auxiliary storage device. A program 136 is stored in the auxiliary storage device. The CPU 132 performs various processes in accordance with the program 136 loaded from the auxiliary storage device to the main storage device.
[0022] Memory 134 further stores an administrator password and destination information. The administrator password is a password set by an administrator of MFP 100. The destination information is, for example, information about a folder in a device to which scan data is to be sent. In a modified example, the destination information may be, for example, information about a facsimile destination (for example, a phone book that stores facsimile numbers).
[0023] In this embodiment, a situation is assumed in which the location where the MFP 100 is installed is changed, for example, due to moving. Another situation in which the location where the MFP 100 is installed is assumed to be when a first user transfers the MFP 100 to a second user. If personal information (e.g., the above-mentioned destination information) stored in memory 134 is not deleted when transferring the MFP 100, the personal information will be obtained by another person (i.e., the second user). In this embodiment, in order to prevent such an event, when the location where the MFP 100 is installed is changed, viewing of the personal information is restricted.
[0024] (Processing performed between each device; Figure 2) Next, the processing executed by each of the devices 10A, 10B, and 100 will be described with reference to FIG. 2. In the following, for ease of understanding, the processing executed by the CPU (e.g., 32, 132) of each device (e.g., terminals 10A, 10B, MFP 100) will be described as the processing subject, rather than each CPU being described as the processing subject. Furthermore, communication between each device is performed via a Wi-Fi I / F (e.g., 16, 116). Therefore, in the following description, when describing communication, the phrase "via a Wi-Fi I / F" will be omitted.
[0025] 2, terminal 10A and MFP 100 belong to the same NAN cluster. In this case, MFP 100 operates as an anchor master of the NAN cluster, and terminal 10A operates as a non-master of the NAN cluster.
[0026] Terminal 10 accepts a registration operation from a user at T10. The registration operation is an operation for registering information for a Wi-Fi Aware connection with MFP 100 (hereinafter referred to as "account information") in MFP 100. In other words, the registration operation is an operation for establishing a Wi-Fi Aware connection between terminal 10 and MFP 100.
[0027] At T12, terminal 10A broadcasts a Subscribe to the NAN cluster to search for devices that provide a configuration service (i.e., devices that can establish a Wi-Fi Aware connection). In this case, the Subscribe is sent from terminal 10A to MFP 100. The Subscribe includes the MAC address MAC1 of terminal 10A.
[0028] When the MFP 100 receives a Subscribe from the terminal 10A at T12, it uses the MAC address MAC1 included in the Subscribe to determine whether a Wi-Fi Aware connection has been established in the past with the terminal 10A identified by the MAC address MAC1. Specifically, the MFP 100 determines whether account information including the MAC address MAC1 has been stored. At the stage of T12, the MFP 100 does not store any account information. Therefore, the MFP 100 determines that a Wi-Fi Aware connection has not been established in the past with the terminal 10A. In this case, the MFP 100 sends a Publish to the terminal 10A at T14. The Publish includes the serial number SN1 of the MFP 100 and information indicating that a Wi-Fi Aware connection has not been established in the past.
[0029] At T14, terminal 10A receives a Publish from MFP 100. Although not shown, if there is another device in the NAN cluster that can provide the configuration service, terminal 10A sends a Subscribe to that other device and receives a Publish from that other device, including the serial number of that other device. In this case, at T20, terminal 10A displays selection screen SC1 on display 14. Selection screen SC1 includes a message prompting the user to select a device and each serial number included in each received Publish. By selecting one serial number from the serial numbers included in selection screen SC1, the user can establish a Wi-Fi Aware connection between terminal 10A and the device identified by the selected serial number.
[0030] At T22, the user of terminal 10A selects serial number SN1 on selection screen SC1. In this case, at T30, various types of pairing bootstrapping communications are executed between terminal 10A and MFP 100. These communications include communications for determining a method for sharing key information to be used to establish a Wi-Fi Aware connection. In this embodiment, it is determined that key information will be shared using a QR code. QR code is a registered trademark of Denso Wave Inc.
[0031] At T32, MFP 100 causes display unit 114 to display a QR code obtained by encoding the key information.
[0032] At T34, the user uses a camera (not shown) of terminal 10A to capture an image of the QR code displayed on display unit 114 of MFP 100. In this case, terminal 10A decodes the QR code and acquires the key information.
[0033] Thereafter, in T40, various communications for pairing setup are executed using the key information shared between terminal 10A and MFP 100. In this communication, pairing information for a Wi-Fi Aware connection (for example, a NAN Pairing Key (NPK) and a NAN Identifying Key (NIK)) is shared between terminal 10A and MFP 100. As a result, in T50, a Wi-Fi Aware connection is established between terminal 10A and MFP 100 using the pairing information.
[0034] Thereafter, at T52, the terminal 10A displays the input screen SC2 on the display unit 14. The input screen SC2 includes a message prompting the user to input the administrator password of the MFP 100, a password input field, and an OK button.
[0035] In T54, terminal 10A accepts the user's entry of an administrator password in the password entry field, and then accepts selection of the OK button. In this case, terminal 10A acquires location information L1 indicating the current location of terminal 10A using a GPS module of terminal 10A (not shown). Then, in T60, terminal 10A transmits a registration request to MFP 100 using the established Wi-Fi Aware connection. The registration request includes the MAC address MAC1 of terminal 10A, the acquired location information L1, and the entered administrator password.
[0036] When MFP 100 receives a registration request from terminal 10A in T60, it authenticates the administrator password included in the registration request. In this case, because authentication of the administrator password is successful, MFP 100 stores, in T62, MAC address MAC1 included in the registration request, location information L1 included in the registration request, and pairing information (see T40) in memory 134 as account information. In this way, MFP 100 can receive location information L1 from terminal 10A and store account information including that location information L1. In particular, because account information is registered when authentication of the administrator password is successful, an incident in which account information is registered when a registration operation is performed by an unauthorized user of MFP 100 is prevented.
[0037] Furthermore, at T64, the terminal 10A stores the location information L1 and the pairing information in the memory 34 as account information.
[0038] In T70, the power of the MFP 100 is turned off in order to change the position where the MFP 100 is installed.
[0039] (Continuation of Figure 2; Figure 3) When the user moves, the location where MFP 100 is installed changes. That is, the location where MFP 100 is installed in the initial state of FIG. 3 is different from the location where MFP 100 is set in the initial state of FIG. 2. Thereafter, at T100, MFP 100 is powered on. In this case, when MFP 100 is powered on, terminal 10A and MFP 100 are located relatively close to each other. Therefore, when MFP 100 is powered on, terminal 10A and MFP 100 belong to the same NAN cluster.
[0040] When the power is turned on at T100, the MFP 100 broadcasts a Subscribe to the NAN cluster at T110 to search for devices that provide services related to location information. In this case, the Subscribe is transmitted from the MFP 100 to the terminal 10A. The Subscribe is a signal requesting the transmission of location information.
[0041] In T110, when terminal 10A receives Subscribe from MFP 100, terminal 10A uses the GPS module to acquire location information L2 indicating the current location of terminal 10A. Then, in T112, terminal 10A transmits Publish including the acquired location information to MFP 100.
[0042] When MFP 100 receives Publish including location information L2 from terminal 10A in T112, MFP 100 determines whether the location where MFP 100 is installed has changed. Specifically, first, MFP 100 identifies location information L1 included in the stored account information (see T62 in FIG. 2). Note that if MFP 100 stores multiple pieces of account information, MFP 100 identifies the location information included in the most recently stored account information. Next, MFP 100 determines whether the distance between the location indicated by the identified location information L1 and the location indicated by the received location information L2 is equal to or greater than a predetermined distance (e.g., 1 km). In this case, the distance is equal to or greater than the predetermined distance. That is, MFP 100 determines in T120 that the location of MFP 100 has changed. In this case, MFP 100 stores information indicating that the location of MFP 100 has changed in memory 134.
[0043] Thereafter, in T122, MFP 100 accepts an operation from the user to view destination information (for example, an operation to view a scan folder stored in MFP 100). In this case, MFP 100 has already stored information indicating that the location of MFP 100 has been changed (T120), and therefore in T124, MFP 100 displays lock screen SC3 on display unit 114 without displaying the destination information, in other words, without allowing access to the storage area of memory 134 in which the destination information is stored. Lock screen SC3 includes a message indicating that the display of the destination information has been locked in response to a change in the location of MFP 100, a message for allowing the user to select whether to reset or unlock MFP 100, a "Reset" button, and an "Unlock" button.
[0044] In T130, MFP 100 accepts selection of the unlock button on lock screen SC3 from the user. In this case, in T132, MFP 100 displays selection screen SC4 on display unit 114. Selection screen SC4 includes a message prompting the user to select an unlock method, a "Connect Aware" button, and an "Enter Administrator Password" button. Note that when the reset button is selected on lock screen SC3, MFP 100 is reset (i.e., initialized).
[0045] (Case A; Figure 4) First, with reference to Figure 4, we will explain Case A, in which the "Connect Aware" button is selected. The MFP 100 accepts selection of the "Connect Aware" button in selection screen SC4 from the user at T200. In this case, the MFP 100 broadcasts a Publish for unlocking to the NAN cluster at T210. In Case A, the Publish of T210 is received by terminal 10A in the NAN cluster.
[0046] In T210, terminal 10A receives Publish from MFP 100. In this case, in T212, terminal 10A displays inquiry screen SC5 on display unit 14. Inquiry screen SC5 includes a message inquiring the user as to whether or not to unlock MFP 100, a YES button, and a NO button.
[0047] In T214, terminal 10A accepts selection of the YES button in inquiry screen SC5 from the user. In this case, in T216, terminal 10A transmits a Subscribe to the NAN cluster by broadcast. The Subscribe in T216 is the same as the Subscribe in T12 in FIG. 2.
[0048] In T216, when the MFP 100 receives a Subscribe from the terminal 10A, the MFP 100 uses the MAC address MAC1 included in the Subscribe to determine whether a Wi-Fi Aware connection has been established with the terminal 10A identified by the MAC address MAC1 in the past. Specifically, the MFP 100 determines whether account information including the MAC address MAC1 has been stored. At the stage of T216, the MFP 100 has already stored account information including the MAC address MAC1 (see T62 in FIG. 2). Therefore, the MFP 100 determines that such a connection has been established in the past. In this case, in T218, the MFP 100 sends a Publish to the terminal 10A. The Publish includes the serial number SN1 of the MFP 100 and information indicating that such a connection has been established in the past. The processes of T220 and T222 are the same as the processes of T20 and T22 in FIG. 2, respectively.
[0049] Thereafter, in T230, various communications for pairing verification are executed between the terminal 10A and the MFP 100. The various communications for pairing verification include communications for authenticating pairing information. A Wi-Fi Aware connection has been established between the terminal 10A and the MFP 100 in the past, and the terminal 10A and the MFP 100 have already stored the pairing information to be shared (see T62 and T64 in FIG. 2). Therefore, authentication of the pairing information is successful in pairing verification in T230. As a result, in T240, a Wi-Fi Aware connection is established between the terminal 10A and the MFP 100.
[0050] At T250, terminal 10A uses the established Wi-Fi Aware connection to transmit to MFP 100 the MAC address MAC1 of terminal 10A and location information L1 included in the account information stored in terminal 10A (see T64 in Figure 2).
[0051] When the MFP 100 receives the MAC address MAC1 and the location information L1 from the terminal 10A in T250, the MFP 100 determines in T252 whether the connection in T240 is a Wi-Fi Aware connection with the terminal that has the above-mentioned history. In other words, the MFP 100 determines whether a Wi-Fi Aware connection with the same terminal has been re-established. Specifically, the MFP 100 determines whether the MAC address MAC1 and the location information L1 already received in T250 are stored in association with the pairing information used to establish the Wi-Fi Aware connection. In this case, the MFP 100 stores account information including this information (see T62 in FIG. 2), and therefore determines in T252 that the connection in T240 is a Wi-Fi Aware connection with the terminal 10A that has the above-mentioned history. In this case, the MFP 100 releases the lock and displays the destination information on the display unit 114 in T254. The fact that a Wi-Fi Aware connection with terminal 10A, which has the above-described history, has been re-established means that the MFP 100 will continue to be used by the user who used the MFP 100 before moving. In such a case, even if destination information including personal information is displayed, there is little chance that the personal information will be leaked. The user who used MFP 100 before moving can unlock MFP 100 after moving and check the destination information.
[0052] Furthermore, in T240, terminal 10A acquires location information L2 indicating the current location of terminal 10A using the GPS module after a Wi-Fi Aware connection is established with MFP 100. Then, in T260, terminal 10A transmits the acquired location information L2 to MFP 100 using the Wi-Fi Aware connection.
[0053] When the MFP 100 receives the location information L2 from the terminal 10A at T260, it updates the account information. Specifically, the MFP 100 first identifies the account information including the pairing information used to establish the Wi-Fi Aware connection of T240. Then, the MFP 100 stores the received location information L2 in place of the location information L1 stored in the identified account information. In this way, the account information is updated.
[0054] Furthermore, the terminal 10A updates the account information in T264. Specifically, the terminal 10A first identifies the account information including the pairing information used to establish the Wi-Fi Aware connection in T240. Then, the terminal 10A stores the acquired location information L2 in place of the location information L1 stored in the identified account information. In this manner, the account information is updated.
[0055] (Case B; Figure 5) Next, with reference to FIG. 5, a description will be given of Case B, which is another case in which the "Connect Aware" button is selected. Case B differs from Case A in that a Publish for unlocking is received by terminal 10B. In the initial state of FIG. 5, terminal 10B belongs to the same NAN cluster as MFP 100. Terminal 10B is a terminal that has never previously established a Wi-Fi Aware connection with MFP 100. The processing of T300 in FIG. 5 is the same as the processing of T200 in FIG. 4.
[0056] In T310, the MFP 100 broadcasts a Publish for unlocking to the NAN cluster. In Case B, the Publish of T310 is received by terminal 10B in the NAN cluster. The processes of T312 and T314 are the same as the processes of T212 and T214 in Fig. 4, except that the processing is performed by terminal 10B. Furthermore, the process of T316 is the same as the process of T216 in Fig. 2, except that the MAC address MAC2 of terminal 10B is used.
[0057] When the MFP 100 receives a Subscribe from terminal 10B in T316, it uses the MAC address MAC2 included in the Subscribe to determine whether a Wi-Fi Aware connection has been established with terminal 10B identified by MAC address MAC2 in the past. Specifically, the MFP 100 determines whether account information including MAC address MAC2 has been stored. The MFP 100 does not store account information including MAC address MAC2. Therefore, the MFP 100 determines that there has been no such connection. In this case, the MFP 100 sends a Publish to terminal 10B in T318. The Publish includes the serial number SN1 of the MFP 100 and information indicating that there has been no such connection. The processing of T320 to T350 is the same as the processing of T20 to T50 in FIG. 2, except that the processing is performed by terminal 10B.
[0058] In T352, the terminal 10B uses the established Wi-Fi Aware connection to transmit the MAC address MAC2 of the terminal 10A to the MFP 100. Since the terminal 10B does not store account information, the location information is not transmitted in T352.
[0059] When the MFP 100 receives MAC address MAC2 from terminal 10B in T352, it determines in T354 whether the connection in T350 is established with a terminal that has the above-mentioned history. The specific determination method is the same as T250 in FIG. 4. In this case, the MFP 100 does not store the pairing information used to establish the Wi-Fi Aware connection in memory 134. Furthermore, terminal 10B does not transmit location information in T352. Therefore, in T354, the MFP 100 determines that the connection in T350 is a Wi-Fi Aware connection with terminal 10B that does not have the above-mentioned history. In this case, the lock is not released. If a Wi-Fi Aware connection is established with terminal 10B that does not have the above-mentioned history, it does not necessarily mean that the MFP 100 will continue to be used by the user who used it before moving. In other words, the MFP 100 may have been transferred to a new user who is different from the previous user who used the MFP 100 in FIG. 2. In such a case, if the destination information including personal information is displayed, the personal information of the previous user may be leaked to the new user. In this embodiment, the lock is not released in such a situation, thereby improving security.
[0060] The subsequent processes of T356 to T364 are the same as the processes of T52 to T64 in Fig. 2, except that the MAC address and location information included in the registration request are different and the account information to be stored is different. Although not shown, MFP 100 may be unlocked in response to successful authentication of the administrator password in T362 (see Case C described below).
[0061] According to the above configuration, MFP 100 determines whether the distance between the location indicated by location information L1 stored in memory 134 (see T62 in FIG. 2) and the location indicated by location information L2 received from terminal 10A at T112 in FIG. 3 is equal to or greater than a predetermined distance (T120). That is, MFP 100 determines whether the location of MFP 100 has changed. Then, when MFP 100 determines that the distance is equal to or greater than the predetermined distance, that is, when MFP 100 determines that the location of the communication device has changed (T120), it restricts the display of destination information in response to the destination information viewing operation (T122 and T124). Furthermore, when MFP 100 receives MAC address MAC1 (or MAC address MAC2) from terminal 10A (or terminal 10B) in a situation where display of destination information is restricted (T216 in FIG. 4, T316 in FIG. 5), MFP 100 uses MAC address MAC1 (or MAC address MAC2) to determine whether a Wi-Fi Aware connection with terminal 10A (or terminal 10B) has been established in the past (T252 in FIG. 4, T354 in FIG. 5). MFP 100 releases the above restriction in response to determining that a Wi-Fi Aware connection with terminal 10A has been established in the past (T254). MFP 100 does not release the above restriction in response to determining that a Wi-Fi Aware connection with terminal 10B has not been established in the past (see FIG. 5). As a result, MFP 100 can prevent personal information from leaking when the location of MFP 100 is changed, and can provide the personal information to users who are willing to receive the personal information.
[0062] (Case C; Figure 6) Next, with reference to Figure 6, we will explain Case C, in which the "Enter Administrator Password" button is selected on selection screen SC4 (see T132 in Figure 3). In T400, MFP 100 accepts selection of the "Enter Administrator Password" button on selection screen SC4 from the user. In this case, in T410, MFP 100 broadcasts a Publish to the NAN cluster, the Publish including information (i.e., a message) for prompting the user to enter the administrator password. In Case C, the Publish of T410 is received by terminal 10A in the NAN cluster.
[0063] When terminal 10A receives Publish in T410, it displays a pop-up containing the above message. The user who sees the pop-up performs an operation to select the pop-up, and causes input screen SC2 to be displayed on display unit 14 in T412. Note that in a modified example, MFP 100 may transmit Publish in T410, which includes input screen data representing input screen SC2. In this case, terminal 10A that receives the Publish may display input screen SC2 in T412.
[0064] In T414, the terminal 10A accepts the selection of the OK button after accepting input of the administrator password in the password entry field from the user. In this case, the terminal 10A transmits the entered administrator password to the MFP 100 in T420.
[0065] When MFP 100 receives the administrator password from terminal 10A in T420, it authenticates the administrator password. Specifically, MFP 100 determines whether the administrator password stored in memory 134 matches the received administrator password. In this case, authentication of the administrator password is successful in T422. In this case, MFP 100 releases the lock in T424. That is, MFP 100 displays the destination information on display unit 114. If authentication of the administrator password is successful, there is a high possibility that MFP 100 will continue to be used by the user who used MFP 100 before the move (i.e., the authorized user). The user who used MFP 100 before the move can release the lock on MFP 100 after the move and check the destination information.
[0066] According to the above configuration, when MFP 100 receives an administrator password from terminal 10A in a situation where display of destination information is restricted (T420 in FIG. 6), MFP 100 uses the administrator password to determine whether authentication of the administrator password will be successful (T422). When MFP 100 determines that authentication of the administrator password will be successful, MFP 100 removes the above restriction (T424). As a result, when the location of MFP 100 is changed, MFP 100 can prevent personal information from leaking and can provide the personal information to users who are willing to receive the personal information.
[0067] (Correspondence) The MFP 100 is an example of a "communication device." The location information L1 and location information L2 are examples of "first location information" and "second location information," respectively. The function of displaying destination information (i.e., the function of accessing the storage area of the memory 134 that stores the destination information) is an example of a "predetermined function." The Subscribe of T216 in FIG. 4 and the Subscribe of T316 in FIG. 5 are examples of a "search signal." In Case A, the MAC address MAC1 of the terminal 10A included in the Subscribe of T216 in FIG. 4 is an example of "predetermined information" and "terminal identification information." In Case B, the MAC address MAC2 of the terminal 10B included in the Subscribe of T316 in FIG. 5 is an example of "predetermined information" and "terminal identification information." In Case C, the administrator password is an example of "predetermined information" and "authentication information." The Publish of T218 in FIG. 4 and the Publishg of T318 in FIG. 5 are examples of a "response signal." The Wi-Fi Aware connection established at T240 in Fig. 4 and the Wi-Fi Aware connection established at T350 in Fig. 5 are examples of a "wireless connection." The serial number SN1 is an example of "device identification information."
[0068] The processes of T60 and T62 in FIG. 2 are examples of processes executed by a "second receiving unit" and a "storage control unit," respectively. The processes of T112, T120, and T124 in FIG. 3 are examples of processes executed by an "acquisition unit," a "first determination unit," and a "restriction unit," respectively. In Case A, the processes of T216, T218, T240, T252, and T254 in FIG. 4 are examples of processes executed by a "first receiving unit," a "transmission unit," an "establishment unit," a "second determination unit," and a "release unit," respectively. In Case B, the processes of T316, T318, T350, and T352 in FIG. 5 are examples of processes executed by a "first receiving unit," a "transmission unit," an "establishment unit," and a "second determination unit," respectively. In case C, the process of T420, the process of T422, and the process of T424 in FIG. 6 are examples of the process executed by the "first receiving unit," the "second determining unit," and the "release unit," respectively.
[0069] Although specific examples of the technology disclosed in this specification have been described in detail above, these are merely examples and do not limit the scope of the claims. The technology described in the claims includes various modifications and variations of the specific examples exemplified above. Modifications of the above examples are listed below.
[0070] (Variation 1) MFP 100 may include a GPS module. In this case, MFP 100 may receive a registration request that does not include location information L1 from terminal 10A at T60. When MFP 100 receives the registration request, it may use the GPS module to acquire location information L1. In this variation, the "second receiving unit" and the "storage control unit" can be omitted. Also, when MFP 100 includes a GPS module, MFP 100 may use the GPS module to acquire location information L2 when power is turned on at T100 in FIG. 3. That is, in this variation, the processes of T110 and T112 in FIG. 3 are possible.
[0071] (Variant 2) The "predetermined function" is not limited to the function of displaying destination information, but may be, for example, a function of accessing a storage area in memory 134 that contains other personal information, or a function that does not contain personal information (for example, a printing function, a scanning function, a facsimile function, etc.).
[0072] (Variation 3) Terminal 10A may transmit only MAC address MAC1 to MFP 100 at T250 in FIG. 4, without transmitting location information L1 to MFP 100. In this case, MFP 100 may determine whether the received MAC address MAC1 is stored in association with the pairing information used to establish the Wi-Fi Aware connection and whether the location information is stored in association with the pairing information. In this variation, when the received MAC address MAC1 is stored in association with the pairing information and the location information is stored in association with the pairing information, MFP 100 may determine that the established Wi-Fi Aware connection is a Wi-Fi Aware connection with a terminal with which a Wi-Fi Aware connection has been established in the past, without determining whether the location information matches. In another variation, MFP 100 may not determine whether the location information is stored in association with the pairing information in the above variation. That is, in this modified example, if the received MAC address MAC1 is stored in association with the pairing information, the MFP100 may determine that the established Wi-Fi Aware connection is a Wi-Fi Aware connection with a terminal that has the above-mentioned track record.
[0073] (Variation 4) When terminal 10A receives Publish from MFP 100 at T14 in Fig. 2, it may omit the processes of T20 and T22 and execute the processes from T30 onwards. In this variation, the "communication device" does not have to "establish a wireless connection between the communication device and the terminal device when device identification information identifying the communication device is selected from a plurality of device identification information identifying a plurality of communication devices in the terminal device."
[0074] (Variation 5) In the above embodiment, a Wi-Fi Aware connection (i.e., a Wi-Fi connection according to the Wi-Fi Aware method) is established between terminal 10A and MFP 100 at T50 in FIG. 2, T240 in FIG. 4, etc. Alternatively, in a variation, a Wi-Fi connection according to a method other than the Wi-Fi Aware method may be established between terminal 10A and MFP 100. For example, a Wi-Fi connection via an access point, a Wi-Fi connection according to the WFD (abbreviation for Wi-Fi Direct) method, a Wi-Fi connection according to the SoftAP method, etc. may be established between terminal 10A and MFP 100. Wi-Fi Direct is a registered trademark of the Wi-Fi Alliance. Generally speaking, the "wireless connection" does not have to be a wireless connection established according to the Wi-Fi Aware method.
[0075] (Variant 6) In the above embodiment, the processing of each step in Figures 2 to 6 is realized by software (e.g., OS 36, application 38, program 136), but at least one of these processes may be realized by hardware such as a logic circuit.
[0076] The technical elements described in this specification or drawings may exhibit technical utility either alone or in various combinations, and are not limited to the combinations described in the claims at the time of filing. Furthermore, the technologies illustrated in this specification or drawings may achieve multiple objectives simultaneously, and achieving one of those objectives alone is technically useful.
[0077] In the scope of the claims at the time of filing, even if each claim depends on only some of the claims, it is not limited to the fact that each claim can depend on only those some of the claims. To the extent that there is no technical contradiction, each claim can also depend on other claims that were not dependent at the time of filing. In other words, the technology of each claim can be combined in various ways as follows: (Item 1) A communication device, a memory that stores first location information related to a location where the communication device is installed; an acquisition unit that acquires second location information related to a location where the communication device is installed after the first location information is stored in the memory; a first determination unit that determines whether or not a distance between a first position indicated by the first position information stored in the memory and a second position indicated by the second position information is equal to or greater than a predetermined distance; a limiting unit that limits execution of a predetermined function of the communication device when it is determined that the distance is equal to or greater than the predetermined distance; a first receiving unit that receives predetermined information from a terminal device in a situation where execution of the predetermined function is restricted; a second determination unit that, when the predetermined information is received from the terminal device, determines whether or not a predetermined condition for removing the restriction is satisfied by using the predetermined information; a release unit that releases the restriction when it is determined that the predetermined condition is satisfied; A communication device comprising: (Item 2) the first receiving unit receives a search signal including the predetermined information from the terminal device; The second determination unit Using the predetermined information, it is determined whether a wireless connection has been established between the communication device and the terminal device in the past; determining that the predetermined condition is satisfied when it is determined that the wireless connection has been established in the past; 2. The communication device according to item 1, wherein the communication device determines that the predetermined condition is not satisfied if it determines that the wireless connection has not been established in the past. (Item 3) the predetermined information includes terminal identification information for identifying the terminal device, The second determination unit If the terminal identification information is stored in the memory, it is determined that the wireless connection has been established in the past; 3. The communication device according to item 2, wherein if the terminal identification information is not stored in the memory, it is determined that the wireless connection has not been established in the past. (Item 4) The communication device further comprises: a transmitting unit that transmits a response signal to the terminal device when the search signal is received from the terminal device; an establishment unit that establishes a wireless connection between the communication device and the terminal device when, after the response signal is transmitted to the terminal device, device identification information that identifies the communication device is selected from a plurality of device identification information that identifies a plurality of communication devices in the terminal device; 4. The communication device according to item 2 or 3, comprising: (Item 5) Item 5. The communication device according to item 4, wherein the wireless connection is established in accordance with the Wi-Fi Aware method of the Wi-Fi standard. (Item 6) the predetermined information includes authentication information of an administrator of the communication device; The second determination unit determining whether the authentication information is stored in the memory; determining that the predetermined condition is satisfied when it is determined that the authentication information is stored in the memory; 2. The communication device according to item 1, wherein the communication device determines that the predetermined condition is not satisfied if it determines that the authentication information is not stored in the memory. (Item 7) The communication device further comprises: a second receiving unit that receives the first location information from the terminal device; a storage control unit that stores the first location information in the memory when the first location information is received from the terminal device; 7. The communication device according to any one of items 1 to 6, comprising: [Explanation of symbols]
[0078] 2: Communication system, 10A, 10B: Terminal, 12, 112: Operation unit, 14, 114: Display unit, 16, 116: Wi-Fi I / F, 30, 130: Control unit, 32, 132: CPU, 34, 134: Memory, 36: OS program, 38: Application program, 100: MFP, 118: Print engine, 120: Scan execution unit, 136: Program
Claims
1. A communication device, a memory that stores first location information related to a location where the communication device is installed; an acquisition unit that acquires second location information related to a location where the communication device is installed after the first location information is stored in the memory; a first determination unit that determines whether or not a distance between a first position indicated by the first position information stored in the memory and a second position indicated by the second position information is equal to or greater than a predetermined distance; a limiting unit that limits execution of a predetermined function of the communication device when it is determined that the distance is equal to or greater than the predetermined distance; a first receiving unit that receives predetermined information from a terminal device in a situation where execution of the predetermined function is restricted; a second determination unit that, when the predetermined information is received from the terminal device, determines whether a predetermined condition for removing the restriction is satisfied by using the predetermined information; a release unit that releases the restriction when it is determined that the predetermined condition is satisfied; A communication device comprising:
2. the first receiving unit receives a search signal including the predetermined information from the terminal device; The second determination unit Using the predetermined information, it is determined whether a wireless connection has been established between the communication device and the terminal device in the past; determining that the predetermined condition is satisfied when it is determined that the wireless connection has been established in the past; The communication device according to claim 1 , wherein the communication device determines that the predetermined condition is not satisfied when it is determined that the wireless connection has not been established in the past.
3. the predetermined information includes terminal identification information for identifying the terminal device, The second determination unit If the terminal identification information is stored in the memory, it is determined that the wireless connection has been established in the past; The communication device according to claim 2 , wherein if the terminal identification information is not stored in the memory, it is determined that the wireless connection has not been established in the past.
4. The communication device further comprises: a transmitting unit that transmits a response signal to the terminal device when the search signal is received from the terminal device; an establishment unit that establishes a wireless connection between the communication device and the terminal device when, after the response signal is transmitted to the terminal device, device identification information that identifies the communication device is selected from a plurality of device identification information that identifies a plurality of communication devices in the terminal device; The communication device of claim 2 , comprising:
5. The communication device according to claim 4 , wherein the wireless connection is established in accordance with the Wi-Fi Aware method of the Wi-Fi standard.
6. the predetermined information includes authentication information of an administrator of the communication device; The second determination unit determining whether the authentication information is stored in the memory; determining that the predetermined condition is satisfied when it is determined that the authentication information is stored in the memory; The communication device according to claim 1 , wherein the communication device determines that the predetermined condition is not satisfied when it determines that the authentication information is not stored in the memory.
7. The communication device further comprises: a second receiving unit that receives the first location information from the terminal device; a storage control unit that stores the first location information in the memory when the first location information is received from the terminal device; The communication device of claim 1 , comprising:
8. 1. A computer program for a communication device, comprising: The communication device a memory that stores first location information related to a location where the communication device is installed; A computer, Equipped with The computer program controls the computer to operate as follows: an acquisition unit that acquires second location information related to a location where the communication device is installed after the first location information is stored in the memory; a first determination unit that determines whether or not a distance between a first position indicated by the first position information stored in the memory and a second position indicated by the second position information is equal to or greater than a predetermined distance; a limiting unit that limits execution of a predetermined function of the communication device when it is determined that the distance is equal to or greater than the predetermined distance; a first receiving unit that receives predetermined information from a terminal device in a situation where execution of the predetermined function is restricted; a second determination unit that, when the predetermined information is received from the terminal device, determines whether a predetermined condition for removing the restriction is satisfied by using the predetermined information; a release unit that releases the restriction when it is determined that the predetermined condition is satisfied; A computer program that functions as a
9. 1. A method performed by a communication device, comprising: The communication device a memory configured to store first location information associated with a location where the communication device is installed; The method comprises: acquiring second location information associated with a location where the communication device is installed after the first location information is stored in the memory; a first determination step of determining whether or not a distance between a first position indicated by the first position information stored in the memory and a second position indicated by the second position information is equal to or greater than a predetermined distance; a limiting step of limiting execution of a predetermined function of the communication device when it is determined that the distance is equal to or greater than the predetermined distance; a first receiving step of receiving predetermined information from a terminal device in a situation where execution of the predetermined function is restricted; a second determination step of determining, when the predetermined information is received from the terminal device, whether or not a predetermined condition for removing the restriction is satisfied using the predetermined information; a release step of releasing the restriction when it is determined that the predetermined condition is satisfied; A method comprising:
Citation Information
Patent Citations
Terminal, operation control system thereof, and operation control method
JP2003125444A