Program, method for controlling information processing device, and information processing device

Abstract

To improve convenience in making security settings.SOLUTION: A program causes a computer of an information processing device to function as; first acquisition means for acquiring first information on security settings which are set for the information processing device and are used in access to an external device different from the information processing device and a communication device; second acquisition means for acquiring second information on security setting supported by the communication device; comparison means for comparing the first information acquired by the first acquisition means with the second information acquired by the second acquisition means; and transmission control means for performing control to transmit a first security setting value included in the first information to the communication device on the basis of a result of comparison between the first information and the second information by the comparison means.SELECTED DRAWING: Figure 3

Description

[Technical Field]

[0001] The present invention relates to a program, a control method for an information processing device, and an information processing device. [Background technology]

[0002] Nowadays, various services are provided by connecting communication devices to the Internet. However, depending on the network environment, additional security settings may be required for communication devices to access the Internet. For example, security settings that comply with the IEEE802.1X standard must be performed.

[0003] One method of setting security is to input information related to security settings, such as a user name and password for security authentication, from an operation panel of a communication device. Patent Document 1 discloses a technology in which, between paired devices that require security settings, security settings made in one device are transmitted to the other device to set the settings. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2006-293971 Summary of the Invention [Problem to be solved by the invention]

[0005] However, when a user manually inputs information related to security settings, such as a user name and password for security authentication, into the operation panel of a communication device, an incorrect operation can prevent proper security settings from being configured. Furthermore, the technology disclosed in Patent Document 1 has a limitation in that information related to security settings can only be exchanged between paired devices that communicate over a network. Therefore, there is a need for innovations to improve the convenience of configuring security settings.

[0006] An object of the present invention is to provide a program, a control method for an information processing device, and an information processing device that improve convenience when configuring security settings. [Means for solving the problem]

[0007] In order to solve the above problem, the program of the present invention is characterized in that it causes a computer of an information processing device to function as a first acquisition means for acquiring first information regarding security settings set in the information processing device and used for accessing an external device other than the information processing device and a communication device, a second acquisition means for acquiring second information regarding security settings supported by the communication device, a comparison means for comparing the first information acquired by the first acquisition means with the second information acquired by the second acquisition means, and a transmission control means for controlling the transmission of a first security setting value included in the first information to the communication device based on the comparison result of the first information and the second information by the comparison means. [Effects of the Invention]

[0008] According to the present invention, it is possible to improve convenience when making security settings. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 illustrates an example of a system configuration. [Figure 2] FIG. 10 is a sequence diagram illustrating a process related to security settings. [Figure 3] 10 is a flowchart showing a process executed by a setup program. [Figure 4] FIG. 10 is a diagram illustrating information related to security settings. [Figure 5] FIG. 10 is a diagram illustrating information related to security settings. [Figure 6] FIG. 10 is a diagram illustrating the correspondence between information related to security settings. [Figure 7] FIG. 10 is a diagram showing a screen displayed by a setup program. [Figure 8] FIG. 10 is a sequence diagram illustrating a process related to security settings. [Figure 9] FIG. 10 is a diagram showing a screen displayed by a setup program. [Figure 10] FIG. 10 is a sequence diagram illustrating a process related to security settings. [Figure 11] FIG. 10 is a sequence diagram illustrating a process related to security settings. [Figure 12] FIG. 2 is a diagram illustrating a function flag. [Figure 13] FIG. 1 illustrates an example of a system configuration. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, embodiments will be described in detail with reference to the accompanying drawings. Note that the following embodiments do not limit the scope of the invention claimed. Although multiple features are described in the embodiments, not all of these multiple features are necessarily essential to the invention, and multiple features may be combined arbitrarily. Furthermore, in the accompanying drawings, the same reference numerals are used to designate the same or similar components, and redundant explanations will be omitted.

[0011] First Embodiment FIG. 1 shows an example of the configuration of a system according to this embodiment. In one example, this system is a communication system in which multiple communication devices can communicate via wireless communication. In this system, the multiple communication devices also include devices that can communicate via wired communication. In the example of FIG. 1, the communication devices include an information processing device 101, a printing device 121, a router 151 that is an access point, and a wireless LAN access point 152.

[0012] The information processing device 101 is a device having communication functions such as wireless communication via a wireless LAN or the like, and wired communication via a wired LAN, USB connection, etc. The information processing device 101 can be, for example, a personal information terminal such as a PDA (Personal Digital Assistant), a mobile phone (smartphone), a digital camera, a personal computer, etc.

[0013] The printing device 121 is a device that has a printing function, and may also have a reading function (scanner), a fax function, a telephone function, etc. Similarly to the information processing device 101, the printing device 121 of this embodiment has communication functions such as wireless communication and wired communication. In this embodiment, the printing device 121 is used as an example of a communication device, but this is not limiting. For example, a scanner device, a projector, a mobile terminal, a smartphone, a laptop PC, a tablet terminal, a PDA, a digital camera, a music playback device, a television, a smart speaker, etc., each having a communication function, may be used instead of the printing device 121.

[0014] The information processing device 101 includes a CPU 102 , an external storage device 103 , an input interface 104 , an output interface 105 , a ROM 106 , a RAM 107 , a wired LAN interface 108 , a wireless LAN interface 109 , and a USB interface 110 .

[0015] The CPU 102 is a system control unit that controls the entire information processing device 101. The CPU 102 reads out programs stored in storage media such as the external storage device 103 and the ROM 106 into the RAM 107 as a work area and executes the programs to perform various processes.

[0016] The external storage device 103 is, for example, a storage device such as a hard disk drive (HDD) or a solid state drive (SSD), and stores application programs, an operating system (OS), a driver for the printing device 121, and various other data.

[0017] A keyboard 111 and a mouse 112 are connected to the input interface 104. The input interface 104 acquires information about user operations received via input devices such as the keyboard 111 and the mouse 112, and transmits the information to the CPU 102. A display unit 113, which is a display device such as a display, is connected to the output interface 105.

[0018] The ROM 106 is, for example, a non-volatile storage, and stores fixed data such as programs and data tables executed by the CPU 102, an embedded operating system (hereinafter referred to as OS) program, etc. In this embodiment, the ROM 106 stores a setup program 202, which will be described later, and the like.

[0019] The setup program 202 is a program related to a device connected to the information processing device 101. In this embodiment, the device connected to the information processing device 101 is the printing device 121. The setup program 202 is a program for setting up the printing device 121 connected to the information processing device 101. In this embodiment, the CPU 102 loads the setup program 202 into the RAM 107 and executes it to perform various processes for configuring security settings for the printing device 121. In this embodiment, the setup program 202 has a function for setting up the printing device 121, but does not have a print job transmission function or a scan job transmission function; it is an application dedicated to setup. The print job transmission function is specifically a function for transmitting a print job to the printing device 121 to cause the printing device 121 to print image data selected by a user on the information processing device 101. The scan job transmission function is specifically a function for transmitting a scan job to the printing device 121 to cause the printing device 121 to perform a scan and transmit the image data obtained by the scan to the information processing device 101. However, the present invention is not limited to this configuration, and the setup program 202 may have, for example, a print job transmission function or a scan job transmission function.

[0020] The information processing device 101 may store a portal program different from the setup program 202 in a memory such as the ROM 106. The portal program may be an application that can instruct the execution of functions of the printing device 121 connected to the information processing device 101. For example, the portal program may start the setup program 202 and cause the setup program 202 to execute processing for setting security for the printing device 121. The portal program may be, for example, a program having a print job transmission function and a scan job transmission function.

[0021] The wired LAN interface 108, the wireless LAN interface 109, and the USB interface 110 are communication interfaces that perform data communication with external devices. The wired LAN interface 108 is an interface that allows wired communication with external devices via a router 151 or the like. The wireless LAN interface 109 is an interface that allows wireless communication with external devices via a wireless LAN access point 152 or the like. The USB interface 110 is an interface that allows communication with external devices via a USB connection.

[0022] The configuration of the information processing device 101 is not limited to the above-described configuration, and the device applied as the information processing device 101 may have any configuration appropriate for the functions that can be executed.

[0023] Next, the printing device 121 will be described. The printing device 121 has a CPU 122, a ROM 123, a RAM 124, an input interface 125, an output interface 126, a wired LAN interface 127, a wireless LAN interface 128, a USB interface 129, and a print engine 130. Furthermore, an operation unit 131 is connected to the input interface 125, and a display unit 132 is connected to the output interface 126. Description of the same components as those in the information processing device 101 will be omitted.

[0024] The print engine 130 is a module that controls a printing unit (not shown) that executes printing functions based on, for example, print data, print settings, print control information, etc. received from the information processing device 101, etc., to realize print processing. In this embodiment, the printing device 121 is an inkjet printer that prints using ink, but is not limited to this form. For example, the printing device 121 may be an electrophotographic printer that prints using toner. The operation unit 131 is, for example, an interface that accepts input of various settings and operation instructions from the user.

[0025] The information processing device 101 and the printing device 121 are connected to each other via their respective interfaces and are capable of communicating with each other. For example, the USB interface 110 of the information processing device 101 and the USB interface 129 of the printing device 121 may be connected by a USB cable. For example, they may be directly connected using a single USB cable, or they may be connected using two USB cables via a USB hub (not shown). When wired communication is performed between the wired LAN interface 108 of the information processing device 101 and the wired LAN interface 127 of the printing device 121, the information processing device 101 and the printing device 121 are connected via a router 151. When wireless communication is performed between the wireless LAN interface 109 of the information processing device 101 and the wireless LAN interface 128 of the printing device 121, the information processing device 101 and the printing device 121 are connected via a wireless LAN access point 152. When the router 151 and the wireless LAN access point 152 are on the same network, the information processing device 101 and the printing device 121 can communicate with each other via both a wired LAN and a wireless LAN. For this reason, the wired LAN interface 108 of the information processing device 101 may be connected to the wireless LAN interface 128 of the printing device 121. Alternatively, the wireless LAN interface 109 of the information processing device 101 may be connected to the wired LAN interface 127 of the printing device 121. The router 151 and the wireless LAN access point 152 are connected to the Internet, and the information processing device 101 and the printing device 121 can access the Internet using at least one of their respective wired LAN and wireless LAN interfaces. So far, three types of interfaces - wired LAN, wireless LAN, and USB - have been described as methods for mutual communication between the information processing device 101 and the printing device 121.

[0026] <Direct connection method> A direct connection refers to a wireless connection between devices directly (i.e., peer-to-peer) without going through an external device such as an access point 151. The printing device 121 can operate in a mode for communicating via a direct connection (direct connection mode) as one of its connection modes. In Wi-Fi communication, there are multiple modes for communicating via a direct connection, such as software AP mode and Wi-Fi Direct (registered trademark) mode. Wi-Fi Direct will be abbreviated as WFD below.

[0027] The mode in which a direct connection is established using WFD is called WFD mode. WFD is a standard established by the Wi-Fi Alliance and is included in the IEEE 802.11 series of communication standards. In WFD mode, after the device to be communicated with is discovered using device discovery information, the roles of P2P group owner (GO) and P2P client are determined, and the remaining wireless connection processing is carried out. The group owner corresponds to a Wi-Fi parent station (parent device), and the client corresponds to a Wi-Fi child station (child device). This role determination corresponds, for example, to GO Negotiation in P2P. Note that in WFD mode, before the role determination is made, the printing device 121 is neither a parent station nor a child station. Specifically, one device first issues device discovery information to search for a device to connect to in WFD mode with another device to communicate with. Once the other device to be communicated with is discovered, the two devices confirm information about the services and functions that each device can provide. Note that this device provisioning information confirmation is optional and not required. This device provisioning information confirmation phase corresponds to, for example, P2P Provision Discovery. Next, by mutually confirming this device provisioning information, they determine which will be the P2P client and which will be the P2P group owner. Next, once the client and group owner are determined, they exchange parameters for WFD communication. Based on the exchanged parameters, the remaining wireless connection processing and IP connection processing are performed between the P2P client and group owner. Note that in WFD mode, the printing device 121 may always operate as the GO without performing the above-mentioned GO Negotiation. In other words, the printing device 121 may operate in WFD mode, which is an autonomous GO mode. Furthermore, the state in which the printing device 121 operates in WFD mode refers to, for example, a state in which a WFD connection is not established but the printing device 121 operates as the GO, or a state in which a WFD connection is established and the printing device 121 operates as the GO.

[0028] In the software AP mode, between devices communicating with each other (for example, the information processing device 101 and the printing device 121), one device (for example, the information processing device 101) acts as a client that requests various services. The other device realizes the function of a Wi-Fi access point through software settings. The software AP corresponds to a Wi-Fi parent station, and the client corresponds to a Wi-Fi child station. In the software AP mode, the client searches for a device that will become the software AP using device discovery information. Once the software AP is discovered, the remaining wireless connection processing (establishing a wireless connection, etc.) between the client and the software AP is carried out, and then IP connection processing (assigning an IP address, etc.) is carried out. Note that commands and parameters transmitted and received when establishing a wireless connection between the client and the software AP may be those specified in the Wi-Fi standard, and therefore a description thereof will be omitted here.

[0029] In this embodiment, when the printing device 121 establishes and maintains a direct connection, it operates as a master station in the network to which the printing device 121 belongs. The master station is a device that builds a wireless network and provides parameters used for connecting to the wireless network to slave stations. The parameters used for connecting to the wireless network are, for example, parameters related to the channel used by the master station. By receiving the parameters, the slave stations connect to the wireless network built by the master station using the channel used by the master station. Because the printing device 121 operates as a master station in the direct connection mode, it can determine which frequency band and which channel to use for communication in the direct connection mode. In this embodiment, the printing device 121 is capable of using a channel corresponding to the 2.4 GHz frequency band and a channel corresponding to the 5 GHz frequency band for communication in the direct connection mode. The frequency band to use (i.e., which frequency band channel to use) can be arbitrarily set by the user through a screen displayed by the printing device 121. However, in this embodiment, even if 5 GHz is selected on the screen displayed by the printing device 121, the printing device 121 will not use channels in the 5 GHz frequency band that correspond to the DFS (Dynamic Frequency Selection) band for communication in the direct connection mode. In other words, the printing device 121 will only use channels in the 5 GHz frequency band that correspond to frequency bands other than the DFS band for communication in the direct connection mode. Note that if a channel corresponding to the DFS band is being used and radar waves in the frequency band corresponding to that channel are detected, the currently used channel must be changed. Such a frequency band that may cause a channel change due to the detection of radar waves is called the DFS band. Note that, for example, if a wireless chip supporting the DFS function is used, a channel in the 5 GHz frequency band that corresponds to the DFS (Dynamic Frequency Selection) band may be available for communication in the direct connection mode.

[0030] <About infrastructure connection methods> An infrastructure connection is a connection mode in which devices (e.g., the information processing device 101 and the printing device 121) connect to an access point (e.g., a wireless LAN access point 152) that manages a network of communicating devices, and the devices communicate with each other via the access point. The printing device 121 can also operate in a mode for communicating via an infrastructure connection (infrastructure connection mode) as one of its connection modes.

[0031] In an infrastructure connection, each device searches for an access point using device discovery information. Once an access point is found, the remaining wireless connection processing (establishing a wireless connection, etc.) is carried out between the device and the access point, and then IP connection processing (assigning an IP address, etc.) is carried out. Note that the commands and parameters sent and received when establishing a wireless connection between a device and an access point can be those specified in the Wi-Fi standard, and therefore will not be described here.

[0032] In this embodiment, when the printing device 121 operates in infrastructure connection mode, the wireless LAN access point 152 acts as a parent device, and the printing device 121 acts as a child device. In other words, in this embodiment, infrastructure connection refers to a connection between the printing device 121 operating as a child device and a device operating as a parent device. When the printing device 121 has established an infrastructure connection and the information processing device 101 has also established an infrastructure connection with the wireless LAN access point 152, communication between the printing device 121 and the information processing device 101 becomes possible via the wireless LAN access point 152. The channel used for communication in the infrastructure connection is determined by the wireless LAN access point 152, so the printing device 121 performs communication in the infrastructure connection using the channel determined by the wireless LAN access point 152. In this embodiment, the printing device 121 is capable of using a channel corresponding to the 2.4 GHz frequency band and a channel corresponding to the 5 GHz frequency band for communication in the infrastructure connection. Note that the printing device 121 can also use a channel corresponding to the DFS band in the 5 GHz frequency band for communication in the infrastructure connection. In order for the information processing device 101 to communicate with the printing device 121 via the wireless LAN access point 152, the information processing device 101 must recognize that the printing device 121 belongs to the network formed by the wireless LAN access point 152 and to which the information processing device 101 belongs. In addition, when the information processing device 101 and the printing device 121 are connected to the wireless LAN access point 152 via an infrastructure connection, the printing device 121 can be discovered by a broadcast executed by the information processing device 101.

[0033] <About Access Point Mode> Printing device 121 can operate in access point mode. The trigger for printing device 121 to start operating in access point mode may be, for example, a user pressing an access point mode button, or printing device 121 starting up (powering on) for the first time after arrival. The access point mode button may be a hardware (physical) button provided on printing device 121, or may be a software button displayed on display unit 158 ​​by printing device 121.

[0034] When the printing device 121 starts operating in access point mode, it enables Wi-Fi communication. Specifically, as a process for enabling Wi-Fi communication, the printing device 121 enables an internal AP (connection setting AP) of the printing device 121 that is dedicated to the access point mode. This puts the printing device 121 in a state where it can establish a direct connection via Wi-Fi with the information processing device 101. Connection information (such as an SSID (Service Set Identifier) ​​and a password) for connecting to the connection setting AP is stored in advance in a setup program 202 installed in the information processing device 101, and the information processing device 101 is assumed to recognize the connection information for connecting to the connection setting AP in advance. Therefore, unlike the connection information of the AP enabled in direct connection mode, the connection information for connecting to the connection setting AP cannot be arbitrarily changed by the user. Note that in access point mode, the printing device 121 may connect to the information processing device 101 via Wi-Fi Direct (WFD) instead of regular Wi-Fi. That is, the printing device 121 may operate as a group owner and receive a setting command from the information processing device 101 through WFD communication. Also, in the access point mode, the printing device 121 may connect to the information processing device 101 through Bluetooth. Here, Bluetooth includes Bluetooth Classic and Bluetooth Low Energy (BLE). That is, for example, the printing device 121 may operate as a slave device in BLE in the access point mode and receive a setting command from the information processing device 101 through BLE communication. Also, in the access point mode, the printing device 121 may be capable of performing both network setup via Wi-Fi and network setup via BLE. That is, when the printing device 121 starts operating in the access point mode, it may enable both Wi-Fi communication and BLE communication.Specifically, when the printing device 121 starts operating in access point mode, it may perform both the activation of the connection setting AP and the activation of the advertising state, in which advertising information is sent via BLE and BLE connection is possible.

[0035] When operating in access point mode, the printing device 121 controls the wireless LAN interface 128 to operate as a network setup access point (connection setting AP, setup access point) that is valid only while operating in access point mode. This setup access point is different from the access point that is enabled in the soft AP mode described above. The SSID of this setup access point includes a predetermined character string that can be recognized by the setup program 202 of the information processing device 101.

[0036] Furthermore, the printing device 121 operating in the access point mode uses a predetermined communication protocol (setup communication protocol) in communication with the information processing device 101 connected to the setup access point. A specific example of the setup communication protocol is SNMP (Simple Network Management Protocol).

[0037] After starting operation in access point mode, the printing device 121 stops operation in access point mode and disables the setup access point after a predetermined time has elapsed. The printing device 121 also disables the setup access point if it receives connection information for connecting to the wireless LAN access point 152 and an instruction to change the wireless communication operation mode from the information processing device 101 while in access point mode. The setup access point is assumed to be an access point that does not require a password for connection. The setup access point may also require a password. In this case, the password used to connect to the setup access point is assumed to be a fixed password (that cannot be changed by the user) that is known in advance by the setup program 202.

[0038] <System configuration> Here, the present system will be further described with reference to Fig. 13. Fig. 13 shows an example of the configuration of a system according to this embodiment. In this system, communication devices may include, for example, an AP 160, an authentication server 170, and a management server 171.

[0039] The AP 160 is an access point that is provided separately (externally) from the information processing device 101 and the printing device 121 and operates as a base station device for a wireless LAN. The AP 160 may also be an access point that operates as a base station for a wired LAN. In other words, the AP 160 is a communication device that forms a network. The AP 160 may be, for example, the above-mentioned router 151 or wireless LAN access point 152.

[0040] AP 160 communicates with communication devices that have been authorized to connect to itself (have been authenticated), and relays wireless communications between those communication devices and other communication devices. AP 160 is also connected to a wired LAN communication network, and relays communications between communication devices connected to that network and other communication devices wirelessly connected to AP 160. If the authentication method of the network formed by AP 160 is a method using authentication server 170 (if AP 160 is compatible with the authentication method using authentication server 170), AP 160 cooperates with authentication server 170 to perform access control by authenticating communication devices connecting to the network. Communication devices connected to the network formed by AP 160 are restricted from communicating with devices other than authentication server 170 until they are authenticated.

[0041] The authentication server 170 is a communication device that is provided separately (externally) from the information processing device 101, the printing device 121, and the AP 160, and operates as an authentication server that collectively manages authentication information. The authentication server 170 works in conjunction with the AP 160 to authenticate devices that are the subject of authentication, and controls access to the devices based on the authentication results. The authentication server 170 is configured to be able to perform authentication processing that complies with, for example, the IEEE 802.1X standard.

[0042] The authentication server 170 can perform authentication using EAP (Extensible Authentication Protocol) in accordance with the IEEE 802.1X standard. Specific examples of EAP authentication include EAP-TLS authentication, EAP-TTLS authentication, and PEAP authentication. EAP-TLS (EAP-Transport Layer Security) is an authentication method that uses the TLS handshake protocol and performs authentication using a server certificate and a client certificate. EAP-TTLS (EAP-Tunneled TLS) is an authentication method that uses the TLS handshake protocol and performs authentication using a server certificate, a username, and a password. PEAP (Protected EAP) also performs authentication using a server certificate, a username, and a password. Information used for these IEEE 802.1X authentications is sometimes collectively referred to as "authentication information." In addition to the above, EAP authentication also includes EAP-SIM authentication, EAP-AKA authentication, EAP-AKA' authentication, and EAP-TEAP authentication. Note that authentication methods different from EAP authentication include PSK authentication using a pre-shared key and SAE (Simultaneous Authentication of Equals) authentication. EAP authentication is an authentication method that uses an authentication server 170, while authentication different from EAP authentication is an authentication method that does not use the authentication server 170. An authentication method that does not use the authentication server 170 is also called a personal method, and an authentication method that uses an authentication server is also called an enterprise method. In this embodiment, the information processing device 101 and the printing device 121 are also compatible with authentication methods that do not use an authentication server.

[0043] The management server 171 is a communication device that is provided separately (externally) from the information processing device 101, the printing device 121, the AP 160, and the authentication server 170, and operates as a server that manages the status of the printing device 121. In this embodiment, the management server 171 is a server that conforms to the IEEE802.1X standard. It is assumed that security settings for connecting to the network of the AP 160 have been completed and that the management server 171 belongs to the network formed by the AP 160.

[0044] The management server 171 is, for example, a server managed by the provider of the printing device 121. The management server 171 manages, for example, whether the printing device 121 is subscribed to a predetermined service. The predetermined service is, for example, a subscription service. The subscription service is, for example, a service that automatically delivers consumables to a user of the printing device 121 according to the usage status of the consumables in the printing device 121. The consumables are, for example, ink, paper, etc. used in the printing device 121. The printing device 121 may, for example, transmit data on the usage status of the consumables to the management server 171 at a predetermined timing. The management server 171 may then store the data transmitted from the printing device 121.

[0045] In this embodiment, a subscription service has been described as an example of the predetermined service, but the present invention is not limited to this. The predetermined service may also be a points service. For example, the management server 171 may manage whether the printing device 121 is subscribed to a points service. A points service is, for example, a service that awards points to a user based on the usage status of the printing device 121. For example, a user can receive points when performing printing using the printing device 121 or when replacing consumables of the printing device 121.

[0046] For a given service, such as a subscription service, it is necessary to determine whether the printing device 121 has subscribed to the given service. This determination is made through communication between the printing device 121 and a management server 171 that manages subscription status to the given service. However, depending on the network environment, additional security settings may be required for the printing device 121 to access the Internet established by the AP 160. For example, security settings that comply with the IEEE 802.1X standard may be required.

[0047] One method for setting security for the printing device 121 is to input information related to security settings, such as a username and password for security authentication, from the operation unit 131 of the printing device 121. Another method involves sending security settings configured on one pair of devices that require security settings to the other pair of devices. In this embodiment, the security setting method is, in other words, an authentication method using an authentication method (security method) conforming to the IEEE802.1X standard. Specifically, this is an EAP authentication method such as EAP-TLS authentication, EAP-TTLS authentication, and PEAP, which will be described later.

[0048] However, when a user manually inputs information about security settings, such as a user name and password for security authentication, into the operation panel of a communication device, an incorrect operation can prevent the security settings from being configured properly. Furthermore, the method of transmitting security settings between paired devices has a limitation in that information about security settings can only be exchanged between paired devices that communicate over a network. Therefore, there is a need for a method to improve the convenience of configuring security settings.

[0049] In this embodiment, the setup program 202 acquires information about security settings that are set in the information processing device 101 and that are used for accessing the AP 160. The setup program 202 also acquires information about security settings supported by the printing device 121, which is a communication device. The setup program 202 compares the acquired information. Based on the comparison result, the setup program 202 controls the transmission of security setting values ​​included in the information about the security settings set in the information processing device 101 to the printing device 121. This configuration improves convenience when using the information processing device 101 to provide the printing device 121 with information about security settings for accessing a network formed by the AP 160.

[0050] Fig. 2 is a sequence diagram according to this embodiment. Below, processing executed by the information processing device 101 and printing device 121 in this embodiment will be described using Fig. 2. Note that in this embodiment, processing for performing security settings on the printing device 121 when the communication form between the information processing device 101 and printing device 121 is the above-mentioned direct connection will be described. The processing executed by each device in this sequence is realized by the CPU of each device reading various programs stored in memory such as ROM of each device into RAM and executing them.

[0051] In S211, the user 201 operates the operation unit 131 of the printing device 121 to instruct the printing device 121 to start up in the access point mode. In S211, the printing device 121 accepts the instruction to start up in the access point mode.

[0052] In S212, the printing device 121 starts up in the access point mode based on the instruction to start up in the access point mode. In other words, the printing device 121 shifts its communication mode to the access point mode.

[0053] In S213, the user 201 issues an instruction to start the setup program 202 via the input interface 104. In S213, the setup program 202 receives the instruction to start the setup program 202.

[0054] In S214, the setup program 202 searches for a printing device 121 operating in access point mode. For example, the setup program 202 specifically searches for a printing device 121 operating in access point mode using the wireless LAN interface 109. The setup program 202 may also search for a printing device 121 in access point mode using a short-range wireless communication unit (not shown). For example, if the setup program 202 finds multiple printing devices 121 operating in access point mode, it may display information indicating the multiple printing devices 121 (product name, serial number, etc.) as an interface that can accept a selection instruction from the user. In other words, the setup program 202 may accept the selection of a printing device 121 to be connected from among the multiple printing devices 121 that have been found.

[0055] In S215, the setup program 202 connects to the printing device 121 operating in access point mode that was discovered in S214. That is, in S215, communication is established by direct connection between the information processing device 101 and the printing device 121. Note that, for example, if the setup program 202 discovered multiple printing devices 121 in S214 and received a selection instruction, it may connect to the printing device 121 that received the selection instruction in S215.

[0056] In S216, the setup program 202 queries the printing device 121 for information regarding security settings supported by the printing device 121. That is, the setup program 202 requests information regarding security settings supported by the printing device 121 from the printing device 121. In the following description, information regarding security settings supported by the printing device 121 is referred to as the security setting information of the printing device 121. The security setting information of the printing device 121 is information used for authentication when the printing device 121 accesses a network formed by an external device (e.g., AP 160). In other words, the security setting information of the printing device 121 is information regarding network security settings. More specifically, the security setting information of the printing device 121 includes information indicating which authentication methods the printing device 121 supports (or supports) as authentication methods used for authentication when accessing the network. The security setting information of the printing device 121 also includes information indicating which setting items the printing device 121 supports as setting items used for authentication using authentication methods supported by the printing device 121. The security setting information of the printing device 121 also includes information indicating which setting items are supported by the printing device 121 as setting items used for authentication by authentication methods supported by the printing device 121. Note that the security setting information of the printing device 121 may also include information on setting values ​​currently set in the printing device 121 for setting items used for authentication by authentication methods supported by the printing device 121.

[0057] In S217, the printing device 121 transmits the security setting information of the printing device 121 requested by the setup program 202 in S216 to the setup program 202. That is, the setup program 202 acquires the security setting information of the printing device 121 by requesting the information from the printing device 121. As described above, the security setting information of the printing device 121 includes, for example, security setting methods supported by the printing device 121, setting items included in the security setting methods, and security setting values ​​corresponding to the setting items. Furthermore, for example, the security setting information of the printing device 121 also includes information indicating whether the security setting methods supported by the printing device 121 are enabled or disabled. The printing device 121 can perform authentication using enabled security setting methods, but does not perform authentication using disabled security setting methods. That is, if a user wants to allow the printing device 121 to perform a certain authentication, the user must enable the security setting method corresponding to that authentication. Note that APs (access points) corresponding to security setting methods that are set to disabled are listed by a search performed by the printing device 121, and may be controlled so that they are not displayed in the list displayed by the printing device 121.

[0058] In this embodiment, the setup program 202 acquires the security setting information of the printing device 121 by requesting it from the printing device 121, but this is not limiting. In S217, for example, the setup program 202 may acquire the security setting information of the printing device 121 by requesting the information from an external server. The external server may be, for example, the management server 161. Also, for example, the setup program 202 may store the security setting information of the printing device 121 in advance. Then, in S217, the setup program 202 may acquire the security setting information of the printing device 121 that has been stored in advance. In S218, the setup program 202 acquires information about security settings that are supported by the information processing device 101 and that are currently enabled. In the following description, information about security settings that are supported by the information processing device 101 and that are currently enabled in the information processing device 101 is referred to as security setting information of the information processing device 101. Note that the security setting information of the information processing device 101 may be any security setting supported by the information processing device 101, and may also include information about security settings that are currently disabled. In S218, for example, the setup program 202 may acquire the security setting information of the information processing device 101 by requesting the information from the OS of the information processing device 101.

[0059] The security setting information of the information processing device 101 is, for example, information related to security settings of a network. Specifically, the security setting information of the information processing device 101 is information used for authentication when the information processing device 101 accesses a network formed by an external device (for example, AP 160).

[0060] The security setting information of the information processing device 101 includes, for example, security setting methods supported by the information processing device 101, individual setting items included in the security setting methods, and security setting values ​​corresponding to the individual setting items. More specifically, the security setting information of the information processing device 101 includes information indicating which authentication methods the information processing device 101 supports (or supports) as authentication methods used for authentication to access a network. The security setting information of the information processing device 101 also includes information indicating which setting items the information processing device 101 supports as setting items used for authentication using the authentication methods supported by the information processing device 101. The security setting information of the information processing device 101 also includes information on setting values ​​currently set in the information processing device 101 for the setting items used for authentication using the authentication methods supported by the information processing device 101.

[0061] In S219, the setup program 202 compares the security setting information of the information processing apparatus 101 acquired in S218 with the security setting information of the printing apparatus 121 acquired in S217.

[0062] In S220, the setup program 202 transmits the security setting values ​​included in the security setting information for the information processing device 101 to the printing device 121 based on the comparison result of S219. The information transmitted to the printing device 121 in S220 specifically includes, for example, information indicating an authentication method supported by both the information processing device 101 and the printing device 121. The information transmitted to the printing device 121 in S220 is a setting item used for authentication using an authentication method supported by both the information processing device 101 and the printing device 121, and includes information indicating the setting item supported by both the information processing device 101 and the printing device 121. The information transmitted to the printing device 121 in S220 also includes information on the setting values ​​currently set in the information processing device 101 for the setting item supported by both the information processing device 101 and the printing device 121. Note that in S220, the setup program 202 may further transmit to the printing device 121 an instruction to enable the security setting method corresponding to the security setting value transmitted to the printing device 121.

[0063] In S221, when the printing device 121 receives the security setting values ​​from the setup program 202, it ends the access point mode and transitions to an idle state. Note that in S221, for example, the printing device 121 sets the received security setting values ​​in its own device based on the security setting values ​​received from the setup program 202. Then, in the future, when the printing device 121 connects to an AP (access point) that supports EAP authentication and attempts such authentication, it attempts authentication using the setting values ​​set here.

[0064] In the above description, the printer 121 is configured based on information transmitted from the information processing device 101 as pre-settings before connecting to an access point. However, this is not limiting. A configuration may be adopted in which not only security setting values ​​but also connection information for connecting the printer 121 to the access point is transmitted via the direct connection established in S215. In this configuration, before processing S215, the setup program 202 saves information indicating the access point to which the information processing device 101 is currently connected. Then, in S215, the setup program 202 disconnects the connection between the information processing device 101 and the access point, and then establishes a direct connection between the information processing device 101 and the printer 121. After processing S215, the setup program 202 obtains, from the printer 121, information indicating a list of access points located around the printer 121 that the printer 121 has discovered through a search. The setup program 202 then determines whether the list includes an access point that corresponds to the information saved before the processing of S215 and to which the information processing device 101 was connected. If it is determined that the access point is included, the setup program 202 specifies the access point that corresponds to the information saved before the processing of S215 and to which the information processing device 101 was connected as the access point to which the printing device 121 is to be connected. On the other hand, if it is determined that the access point is not included, the setup program 202 displays the list and accepts the user's selection of an access point from the list. The setup program 202 then specifies the access point selected from the list as the access point to which the printing device 121 is to be connected. Then, the processing of S215 to S220 is executed. Then, the setup program 202 transmits to the printing device 121 the connection information (SSID, password, etc.) of the access point specified as the access point to which the printing device 121 is to be connected. The printing device 121 executes the process of S221 to end the access point mode, and then connects to a new access point using the received connection information.At this time, if the access point to be connected supports EAP authentication, authentication is performed using the setting values ​​set in S220.

[0065] In this embodiment, the setup program 202 may determine whether the access point identified as the access point to be connected to the printing device 121 supports non-EAP authentication or EAP authentication. If it is determined that the access point supports non-EAP authentication, steps S216 to S220 may be omitted, and only the connection information of the access point may be transmitted. If it is determined that the access point supports EAP authentication, steps S216 to S220 may be performed, and the connection information of the access point may be transmitted. If it is determined that the access point supports EAP authentication, the setup program 202 may determine which authentication method is supported by the access point for EAP authentication. In step S220, control may be performed so that only the setting values ​​related to the authentication method supported by the access point are transmitted, out of the setting values ​​related to the authentication methods supported by both the information processing device 101 and the printing device 121.

[0066] The details of the processing of S219 and S220 will be described with reference to Fig. 3. Fig. 3 is a flowchart showing an example of the processing of S220 and S221 in Fig. 2 executed by the setup program 202. The processing of Fig. 3 is realized, for example, by the CPU 102 reading a program stored in the ROM 106, which is a computer-readable recording medium, into the RAM 107 and executing the program.

[0067] In S301, the setup program 202 compares the security setting methods supported by the information processing apparatus 101 with the security setting methods supported by the printing apparatus 121.

[0068] Here, with reference to FIG. 4, the security setting methods supported by the information processing device 101 will be described. FIG. 4 is a diagram illustrating an example of the security setting information of the information processing device 101 acquired by the setup program 202 in S217. FIG. 4 shows, as a table 401, the security setting information of the information processing device 101, including the security setting methods supported by the information processing device 101, information indicating whether the security setting methods supported by the information processing device 101 are enabled, and individual setting items. The information processing device 101 can perform authentication using a security setting method that is enabled, but does not perform authentication using a security setting method that is disabled. In other words, if the user wants the information processing device 101 to perform an authentication, the user must enable the security setting method corresponding to that authentication. Note that APs (access points) corresponding to disabled security setting methods are a list discovered by a search by the information processing device 101, and may be controlled so as not to be displayed in the list displayed by the information processing device 101.

[0069] As shown in table 401, the security setting method currently enabled in the information processing device 101 is, for example, "(1) Smart card or other certificate." Note that the security setting method currently enabled in the information processing device 101 is a security setting method selected by the user. For example, the information processing device 101 may receive an instruction to select the security setting method to be enabled from a security setting screen (not shown) or the like.

[0070] Further, the security settings supported by the printing device 121 will be described with reference to Fig. 5. Fig. 5 is a diagram corresponding to an example of the security setting information of the printing device 121 acquired by the setup program 202 in S217. Fig. 5 shows, as a table 501, the security setting methods supported by the printing device 121, information on whether the security setting methods supported by the printing device 121 are valid, and individual setting items.

[0071] As shown in table 501, in this example, the security setting methods supported by the printing device 121 are "(a) EAP-TLS," "(b) PEAP," and "(c) EAP-TTLS." Furthermore, a security setting method supported by the printing device 121 is considered invalid, for example, if a setting value has not been set by the user for the corresponding individual setting item. Items A and B, which are individual setting items corresponding to EAP-TLS, are items for a client certificate and a private key. The setting value set for item A is a client certificate file, and the setting value set for item B is a character string indicating the private key. Items D and E, which are individual setting items corresponding to PEAP, are items for a username and a password. The setting value set for item D is a character string indicating the username, and the setting value set for item E is a character string indicating the password. Items F and G, which are individual setting items corresponding to EAP-TTLS, are items for a username and a password. The setting value set for item F is a character string indicating the username, and the setting value set for item G is a character string indicating the password. Items A, B, and C, which are individual setting items corresponding to a smart card or other certificate, are items for specifying whether to use a client certificate, a private key, and a different user name for this connection. The setting value set for item A is the client certificate file, the setting value set for item B is a character string indicating the private key, and the setting value set for item C is TRUE or FALSE. Items N and O, which are individual setting items corresponding to EAP-TEAP, are the server name and the root certification authority that verifies the server certificate. The setting value set for item N is a character string indicating the server name, and the setting value set for item O is a value indicating which certification authority is selected from among the certification authorities that issue root certificates installed in the information processing device 101.

[0072] For example, even if the information processing device 101 and the printing device 121 use the same network security setting method, the name indicating the network security setting method on the information processing device 101 side may differ from the name indicating the network security setting method on the printing device 121 side.

[0073] Therefore, in S301, the setup program 202 acquires a table showing the correspondence relationship between the security setting methods of the information processing apparatus 101 and the printing apparatus 121, and compares the security setting methods of each apparatus.

[0074] Now, reference will be made to Fig. 6. Fig. 6 is a diagram showing an example of a table 601 indicating the correspondence between the names of security setting methods on the printing device 121 side and the names of security setting methods on the information processing device 101 side. As shown in Fig. 6, in table 601, the security setting methods on the printing device 121 side are linked to the corresponding security setting methods on the information processing device 101. In other words, table 601 can also be said to be linking information that links the security setting methods on the printing device 121 with the security setting methods on the information processing device 101.

[0075] The setup program 202 may store the table 601 in advance. In S301, the setup program 202 may refer to the pre-stored table 601 and compare the security setting methods of each device. The setup program 202 may acquire the table 601 by requesting it from the printing device 121, or may acquire the table 601 by requesting it from an external server (for example, the management server 171).

[0076] In S302, the setup program 202 determines whether the setting values ​​of the security setting method supported by the information processing device 101 match the security setting method supported by the printing device 121. If the setup program 202 determines that they match, it proceeds to S303. On the other hand, if the setup program 202 determines that they do not match, it proceeds to S306.

[0077] In S303, the setup program 202 determines whether the individual setting items of the information processing device 101 and the individual setting items of the printing device 121 corresponding to the security setting method determined to match in S302 match. If the setup program 202 determines that they match, it proceeds to S304. On the other hand, if the setup program 202 determines that they do not match, it proceeds to S306.

[0078] In S303, for example, the setup program 202 compares the individual setting items of the information processing device 101 with the individual setting items of the printing device 121 for the security setting method determined to match in S302. The setup program 202 then determines whether any setting values ​​for the individual setting items of the security setting method of the information processing device 101 are missing for the individual setting items of the security setting method of the printing device 121. The setup program 202 determines that there is a match if there are no missing setting values, and determines that there is a mismatch if there are missing setting values. For example, even if the information processing device 101 and the printing device 121 have the same security setting method, this does not necessarily mean that the individual setting items corresponding to the security setting method match between the information processing device 101 and the printing device 121. Therefore, the setup program 202 executes the determination in S303.

[0079] In S304, the setup program 202 determines whether manual configuration is required as network security configuration for the printing device 121. If the setup program 202 determines that manual configuration is required, the program proceeds to S306. On the other hand, if the setup program 202 determines that manual configuration is not required, the program proceeds to S305.

[0080] In S304, for example, the setup program 202 determines whether manual configuration is required for the network security configuration of the printing device 121 based on the security configuration information of the printing device 121 acquired in S217. Manual configuration, for example, refers to the user inputting configuration values. As shown in table 501 in FIG. 5, the security configuration information of the printing device 121 includes information indicating whether the security configuration methods supported by the printing device 121 are methods that must be configured manually. For example, the printing device 121 may be configured in advance with security configurations that must be configured manually among the security configuration methods supported by the printing device 121. If security configurations that must be configured manually have been configured in advance on the printing device 121, the setup program 202 proceeds to S306. This allows configuration values ​​different from the configuration values ​​of the security configuration methods valid on the information processing device 101 to be configured in the printing device 121.

[0081] In the present embodiment, the setup program 202 proceeds to the process of S304 when it determines that there is a match in S303. However, this is not limiting. For example, the setup program 202 may skip the process of S304. In other words, the setup program 202 may proceed to S305 without performing the process of S304 when it determines that there is a match in S303.

[0082] In S305, the setup program 202 performs transmission control so as to transmit the individual setting values ​​of the security settings supported by the information processing device 101 to the printing device 121. Note that here, control may be performed so that only the individual setting values ​​of the security settings that are enabled among the security settings supported by the information processing device 101 are transmitted to the printing device 121. In S305, the setup program 202 associates the individual setting values ​​of the security settings supported by the information processing device 101 with the setting items of the security setting values ​​and the security setting methods of the setting items, and transmits them to the printing device 121. Note that in S305, the setup program 202 may instruct the printing device 121 to set the individual setting values ​​of the security settings supported by the information processing device 101.

[0083] In this way, the setup program 202 compares the security setting information of the information processing device 101 with the security setting information of the printing device 121. If the comparison result satisfies the conditions, the setup program 202 performs transmission control in S305 to transmit the security setting values ​​included in the security setting information of the information processing device 101 to the printing device 121. This allows the security setting of the printing device 121 to be configured without the user having to manually input setting values ​​for the printing device 121 to access an external device (for example, AP 160). This makes it possible to prevent incorrect setting values ​​from being input. This therefore improves convenience when configuring the security setting of the printing device 121.

[0084] The conditions include that the security setting method of the information processing device 101 and the security setting method of the printing device 121 match (S302). The conditions also include that the setting items of the information processing device 101 match the setting items of the printing device 121 (S303). The conditions also include that the security setting method of the printing device 121 is not a setting method that requires manual setting (S304).

[0085] In S306, the setup program 202 accepts setting values ​​corresponding to the security setting method supported by the printing device 121, and performs transmission control to transmit the accepted setting values ​​to the printing device 121. Note that in S306, the setup program 202 may instruct the printing device 121 to set the accepted setting values.

[0086] The processing of S306 will be described with reference to Figures 7(a) to 7(e), which are diagrams showing examples of screens that allow the user 201 to set the network security setting method for the printing device 121 in this embodiment.

[0087] In S306, the setup program 202 first displays a screen 701 shown in Fig. 7(a). The screen 701 displays a message indicating that security settings for the printing device 121 cannot be performed automatically. The screen 701 also displays options for performing security settings for the printing device 121 as an interface that can accept selections. The screen 701 also displays an interface (OK button) that can accept an instruction to confirm the selection.

[0088] In this example, three options are displayed for configuring security settings for the printing device 121: "Configure from this program," "Configure from the printer panel," and "Configure from the printer's remote UI (User Interface)."

[0089] "Set from this program" is an interface that can accept a selection for performing security settings for the printing device 121 using the setup program 202, for example.

[0090] "Set from printer panel" may be, for example, an interface that can accept a selection for configuring security settings for printing device 121 by a user operating display unit 131, operation unit 132, etc. of printing device 121. For example, when "Set from printer panel" is selected and an OK button is pressed, setup program 202 may display a guidance screen (not shown) that guides the user through operations on printing device 121 to configure security settings for printing device 121.

[0091] "Set from printer's remote UI" may be, for example, an interface that can accept a selection for making security settings for the printing device 121 via the remote UI of the printing device 121. For example, when "Set from printer's remote UI" is selected and an OK button is pressed, the setup program 202 may display a guidance screen (not shown) that guides the user through operations on the remote UI for making security settings for the printing device 121.

[0092] In this example, the process of the setup program 202 when the user selects "set from this program" on the screen 701 and presses the OK button will be described.

[0093] In S306, when the setup program 202 receives an instruction to confirm the selection of "Set from this program," it displays a screen 702 shown in FIG. 7B. The screen 702 displays a message prompting the user to select a security setting method for the printing device 121. The screen 702 also displays options for the security setting method for the printing device 121 as an interface that can accept a selection. The setup program 202 displays options for the security setting method supported by the printing device 121 on the screen 702, based on the security setting information for the printing device 121 acquired in S217. The screen 702 also displays an interface (OK button) that can accept an instruction to confirm the selection.

[0094] In S306, the setup program 202 displays a screen for inputting individual setting values ​​corresponding to the security setting method based on the security setting method of the printing apparatus 121 for which the selection confirmation instruction has been received.

[0095] Specifically, for example, when the setup program 202 receives an instruction to select EAP-TLS as the security setting method on screen 702 in Fig. 7(b), it displays screen 703 shown in Fig. 7(c). Also, for example, when the setup program 202 receives an instruction to select PEAP as the security setting method, it displays screen 704 shown in Fig. 7(d). Also, for example, when the setup program 202 receives an instruction to select EAP-TTLS as the security setting method, it displays screen 705 shown in Fig. 7(e).

[0096] 7(c) to 7(d), screens 703 to 705 display individual security setting items corresponding to the respective security setting methods and an interface capable of accepting input of setting values ​​for the individual setting items. Screens 703 to 705 also display a message prompting input of setting values ​​corresponding to each security setting method, and an interface capable of accepting an instruction to confirm the input of the setting values ​​(OK button).

[0097] In S306, when the setup program 202 receives an instruction to confirm the input of the setting values ​​corresponding to the security setting method on each of the screens 703 to 705, it controls the input setting values ​​to be sent to the printing device 121.

[0098] As described above, according to this embodiment, the setup program 202 acquires security setting information for the information processing device 101 and security setting information for the printing device 121. The setup program 202 compares the acquired security setting information for the information processing device 101 with the security setting information for the printing device 121. Based on the comparison result between the security setting information for the information processing device 101 and the security setting information for the printing device 121, the setup program 202 controls the transmission of security setting values ​​included in the security setting information for the information processing device 101 to the printing device 121. This configuration can improve convenience when configuring security settings for the printing device 121.

[0099] Second Embodiment The second embodiment will be described below, focusing on the differences from the first embodiment. In the first embodiment, the printing device 121 operated in access point mode. The process for performing security settings on the printing device 121 when the communication mode between the information processing device 101 and the printing device 121 is a direct connection was described. In this embodiment, the process for performing security settings on the printing device 121 when the communication mode between the information processing device 101 and the printing device 121 is the above-mentioned infrastructure connection will be described.

[0100] FIG. 8 is a sequence diagram according to this embodiment. Hereinafter, processing executed by the information processing device 101 and the printing device 121 according to this embodiment will be described with reference to FIG. 8. Note that this embodiment describes a case where the communication between the information processing device 101 and the printing device 121 is the above-described infrastructure connection. That is, this embodiment describes processing for configuring security settings for the printing device 121 when the information processing device 101 and the printing device 121 communicate via AP 161. Here, AP 161 is assumed to be an access point different from AP 160 described above. In this embodiment, it is assumed that, for example, the information processing device 101 and the printing device 121 are each connected to a network formed by AP 161, such as router 151.

[0101] The processes executed by each device in this sequence are realized by the CPU of each device reading out various programs stored in a memory such as a ROM of each device into a RAM and executing the programs.

[0102] The process of S811 is the same as the process of S211, and therefore the description thereof will be omitted.

[0103] In S812, the setup program 202 transmits a search packet for the printing device 121 on the network formed by the AP 161. The search packet for the printing device 121 is, in other words, a signal requesting a response from the printing device 121.

[0104] In S813, the printing device 121 returns a response packet to the setup program 202. In other words, the response packet is a signal that responds to a request from the setup program 202. In S813, the setup program 202 receives the response packet from the printing device 121 and thereby discovers the printing device 121 on the network formed by AP 161. In other words, the setup program 202 confirms communication with the printing device 121 via the network formed by AP 161.

[0105] In S814, the setup program 202 displays a screen for selecting the printing device 121 to be configured from all the printing devices 121 that responded in S813, since the number of printing devices 121 that responded in S813 is not necessarily one.

[0106] Now, reference will be made to Figure 9. Figure 9 is a diagram showing an example of a selection screen 901 displayed by the setup program 202 in S814. The selection screen 901 displays, for example, a message prompting the user to select the printing device 121 to be configured. The setting screen 901 also displays information indicating the printing device 121 discovered by the setup program 202 in S813, and an interface that can accept the selection of the printing device 121 to be configured. The information indicating the printing device 121 discovered by the setup program 202 is, for example, the product name, serial number, etc. The selection screen 901 also displays an interface (OK button) that can accept an instruction to confirm the selection.

[0107] In S815, the setup program 202 connects to the printing device 121 selected in S814 as the setting target. This process establishes communication between the information processing device 101 and the printing device 121 via the AP 161 via an infrastructure connection.

[0108] In S816, the setup program 202 queries the printing device 121 for its security setting information.

[0109] In S817, the printing device 121 transmits to the setup program 202 the security setting information of the printing device 121 requested by the setup program 202 in S816.

[0110] In step S818 , the setup program 202 acquires information about security settings supported by the information processing apparatus 101 .

[0111] In S819, the setup program 202 compares the security setting information of the information processing apparatus 101 acquired in S818 with the security setting information of the printing apparatus 121 acquired in S817.

[0112] In S820, the setup program 202 transmits the security setting values ​​included in the security setting information of the information processing apparatus 101 to the printing apparatus 121 based on the comparison result of S819.

[0113] The processes of S816 to S820 are the same as those of S216 to S220, and therefore detailed description thereof will be omitted. Note that in this embodiment, the processes of S816 to S817 and S820 are performed via a network formed by the AP 161 between the information processing device 101 and the printing device 121.

[0114] In S821, the setup program 202 performs processing to terminate communication with the printing device 121 that is the target of configuration.

[0115] As described above, according to this embodiment, even if the communication between the information processing device 101 and the printing device 121 is via infrastructure connection, it is possible to configure security settings for the printing device 121. Therefore, it is possible to improve the convenience of configuring security settings for the printing device 121.

[0116] <Third embodiment> The third embodiment will be described below, focusing on the differences from the first and second embodiments. In the first and second embodiments, the process for setting security for the printing device 121 when the communication mode between the information processing device 101 and the printing device 121 is a direct connection / infrastructure connection was described. In this embodiment, the process for setting security for the printing device 121 when the communication mode between the information processing device 101 and the printing device 121 is a USB connection will be described.

[0117] Fig. 10 is a sequence diagram according to this embodiment. The processing executed by the information processing device 101 and the printing device 121 according to this embodiment will be described below with reference to Fig. 10. The processing executed by each device in this sequence is realized by the CPU of each device reading various programs stored in memory such as ROM of each device into RAM and executing them.

[0118] The process of S1011 is the same as the process of S211, and therefore the description thereof will be omitted.

[0119] In S1012, the setup program 202 waits for the USB interface 110 of the information processing apparatus 101 to be connected to the USB interface 129 of the printing apparatus 121 to be set up.

[0120] In S1013, when the setup program 202 detects that the USB interface 110 of the information processing device 101 and the USB interface 129 of the printing device 121 to be configured have been connected, the setup program 202 starts a connection with the printing device 121. This process establishes communication between the information processing device 101 and the printing device 121 via a USB connection.

[0121] In S1014, the setup program 202 queries the printing device 121 for security setting information of the printing device 121.

[0122] In S1015, the printing device 121 transmits to the setup program 202 the security setting information of the printing device 121 requested by the setup program 202 in S1014.

[0123] In S1016, the setup program 202 acquires information about security settings supported by the information processing apparatus 101.

[0124] In S1017, the setup program 202 compares the security setting information of the information processing apparatus 101 acquired in S1016 with the security setting information of the printing apparatus 121 acquired in S1015.

[0125] In S1018, the setup program 202 transmits the security setting values ​​included in the security setting information of the information processing apparatus 101 to the printing apparatus 121 based on the comparison result of S1017.

[0126] The processes of S1014 to S1018 are the same as the processes of S216 to S220, and therefore detailed description thereof will be omitted. Note that in this embodiment, the processes of S1014 to S1015 and S1018 are performed by communication between the information processing device 101 and the printing device 121 via a USB connection.

[0127] In S1019, the setup program 202 performs processing to terminate communication with the printing device 121 that is the target of configuration.

[0128] As described above, according to this embodiment, even if the communication between the information processing device 101 and the printing device 121 is via a USB connection, it is possible to configure security settings for the printing device 121. Therefore, it is possible to improve the convenience of configuring security settings for the printing device 121.

[0129] <Fourth embodiment> The fourth embodiment will be described below, focusing on the differences from the first to third embodiments. In the first to third embodiments, the setup program 202 performs processing to set up security for the printing device 121 when the information processing device 101 and the printing device 121 are in a state where they can communicate. In this embodiment, processing to set up security for the printing device 121 is performed when the printing device 121 is a device that can use a predetermined service.

[0130] Fig. 11 is a sequence diagram according to this embodiment. Hereinafter, the processing executed by the information processing device 101 and the printing device 121 in this embodiment will be described with reference to Fig. 11. Note that, in this embodiment, the case where the communication between the information processing device 101 and the printing device 121 is the above-mentioned infrastructure connection will be described as an example, but the present invention is not limited to this. In this embodiment, the communication between the information processing device 101 and the printing device 121 may be a direct connection or a USB connection. The processing executed by each device in this sequence is realized by the CPU of each device reading various programs stored in a memory such as a ROM of each device into RAM and executing them.

[0131] The processing of S1111 to S1115 is the same as the processing of S211 to S215, and therefore a description thereof will be omitted.

[0132] In S1116, the setup program 1102 inquires about the function flag from the printing device 121. That is, the setup program 202 requests the function flag from the printing device 121.

[0133] In S1117, the printing device 121 transmits the function flags of the printing device 121 requested by the setup program 202 in S1116 to the setup program 202. That is, the setup program 202 obtains the function flags by requesting them from the printing device 121.

[0134] Now, reference is made to FIG. 12. FIG. 12 is a diagram illustrating an example of a function flag 1201. The function flag 1201 is information indicating whether the printing device 121 is a device that can use a predetermined service provided by an external server (e.g., management server 171). In this example, the predetermined service is the subscription service described above. FIG. 12 shows an example in which the function flag 1201 indicates whether the printing device 121 supports one type of service, but the function flag 1201 may be information indicating whether the printing device 121 supports two or more types of services.

[0135] In S1118, the setup program 1102 determines whether to continue processing based on the acquired function flags. Specifically, for example, the setup program 202 references the function flags, and if there is one or more items that are TRUE, it determines that security settings for the printing device 121 are necessary and continues the processing of Fig. 11. On the other hand, if there are no items that are TRUE, the setup program 202 determines that security settings for the printing device 121 are not necessary and ends the processing of Fig. 11.

[0136] The processing in steps S1119 to S1124 is the same as the processing in steps S216 to S221, and therefore a description thereof will be omitted.

[0137] As described above, according to this embodiment, if the printing device 121 is a device that can use services provided by an external server, the setup program 202 executes processing to perform security settings for the printing device 121. This improves convenience when performing security settings for the printing device 121.

[0138] <Other embodiments> The present invention can also be achieved by supplying a recording medium on which program code for software that realizes the functions of each of the above-described embodiments is recorded to a system or device, and having a computer (or CPU or MPU) of the system or device read and execute the program code stored on the recording medium. In this case, the program code read from the recording medium itself realizes the functions of each of the above-described embodiments, and the recording medium on which the program code is stored constitutes the present invention.

[0139] Examples of recording media that can be used to supply the program code include flexible disks, hard disks, optical disks, magneto-optical disks, CD-ROMs, CD-Rs, magnetic tapes, non-volatile memory cards, ROMs, and DVDs.

[0140] In addition, not only are the functions of each of the above-mentioned embodiments realized by the computer executing the program code it has read, but also cases are included in which the OS running on the computer performs some or all of the actual processing based on the instructions of the program code, and the functions of each of the above-mentioned embodiments are realized through that processing.

[0141] Furthermore, this also includes cases where the program code read from the recording medium is written into a memory provided on a function expansion board inserted into a computer or a function expansion unit connected to a computer, and then, based on the instructions of the program code, a CPU provided on the function expansion board or function expansion unit performs some or all of the actual processing, and the functions of each of the above-mentioned embodiments are realized through this processing.

[0142] The present invention can also be realized by supplying a program that realizes one or more functions of the above-described embodiments to a system or device via a network or a storage medium, and having one or more processors in the computer of the system or device read and execute the program.The present invention can also be realized by a circuit (e.g., ASIC) that realizes one or more functions.

[0143] The disclosure of the present embodiment includes the following program, control method for an information processing device, and information processing device. (Item 1) The computer of the information processing device, a first acquiring means for acquiring first information relating to security settings set in the information processing device and used for accessing an external device different from the information processing device and a communication device; a second acquiring means for acquiring second information regarding security settings supported by the communication device; a comparison means for comparing the first information acquired by the first acquisition means with the second information acquired by the second acquisition means; a transmission control means for controlling transmission of a first security setting value included in the first information to the communication device based on a comparison result between the first information and the second information by the comparison means; A program characterized by functioning as (Item 2) The first information is The information processing device includes a first security setting method that is valid in the information processing device, a first setting item included in the first security setting method, and the first security setting value corresponding to the first setting item; 2. The program according to item 1, (Item 3) The second information is a second security setting method supported by the communication device, a second setting item included in the second security setting method, and a second security setting value corresponding to the second setting item; 3. The program according to item 2, (Item 4) The transmission control means If the comparison result satisfies a condition, a first security setting value included in the first information is transmitted to the communication device. 4. The program according to item 3, (Item 5) The condition is: The first security setting method and the second security setting method are the same. 5. The program according to item 4, (Item 6) a first storage means for storing association information that associates the second security setting method with the first security setting method; The comparison means comparing the first security setting method with the second security setting method based on the linking information; 6. The program according to item 5, (Item 7) The condition is: The first setting item and the second setting item are identical to each other. 7. The program according to any one of items 4 to 6, (Item 8) The condition is: The second security setting method includes not requiring manual setting. 8. The program according to any one of items 4 to 7, (Item 9) a receiving means for receiving a setting value corresponding to the second information when the comparison result does not satisfy the condition; The transmission control means controlling the communication device to transmit a setting value corresponding to the second information received by the receiving means; 9. The program according to any one of items 4 to 8, (Item 10) and further functioning as a first communication means for directly communicating with the communication device without going through a network formed by an external access point; The first acquisition means When directly communicating with the communication device by the first communication means, the first information is acquired. 10. The program according to any one of items 1 to 9, (Item 11) and further functioning as a second communication means for communicating with the communication device via a network formed by an external access point; When communication between the information processing device and the communication device is confirmed via the network by the second communication means, the first information is acquired. 10. The program according to any one of items 1 to 9, (Item 12) a third acquiring means for acquiring information indicating whether the communication device is a device that can use a predetermined service provided by an external server; The first acquisition means If the communication device is a device that can use the predetermined service, the communication device acquires the first information. 10. The program according to any one of items 1 to 9, (Item 13) The predetermined service is a subscription service for consumables used in the communication device; 13. The program according to item 12, (Item 14) The second acquisition means acquires the second information from the communication device by requesting the second information from the communication device. 13. The program according to any one of items 1 to 12, (Item 15) The second acquisition means obtaining the second information from the external server by requesting the second information from the external server; 13. The program according to any one of items 1 to 12, (Item 16) and further functioning as a second storage means for storing the second information; The second acquisition means acquiring the second information stored by the second storage means; 13. The program according to any one of items 1 to 12, (Item 17) The external device is The access point requires a security method conforming to the IEEE802.1X standard for access to the external device. 17. The program according to any one of items 1 to 16, (Item 18) the communication device is a printing device, 18. The program according to any one of items 1 to 17, (Item 19) A control method for an information processing device, comprising: a first acquisition step of acquiring first information regarding security settings set in the information processing device and used for accessing an external device different from the information processing device and a communication device; a second acquisition step of acquiring second information regarding security settings supported by the communication device; a comparison step of comparing the first information acquired in the first acquisition step with the second information acquired in the second acquisition step; a transmission control step of controlling transmission of a first security setting value included in the first information to the communication device based on a comparison result between the first information and the second information in the comparison step, A program characterized by: (Item 20) An information processing device, a first acquiring means for acquiring first information relating to security settings set in the information processing device and used for accessing an external device different from the information processing device and a communication device; a second acquiring means for acquiring second information regarding security settings supported by the communication device; a comparison means for comparing the first information acquired by the first acquisition means with the second information acquired by the second acquisition means; and a transmission control means for controlling transmission of a first security setting value included in the first information to the communication device based on a comparison result between the first information and the second information by the comparison means. 1. An information processing device comprising:

[0144] The invention is not limited to the above-described embodiments, and various changes and modifications can be made without departing from the spirit and scope of the invention. Accordingly, the following claims are appended to apprise the public of the scope of the invention. [Explanation of symbols]

[0145] 101 Information processing device: 102 CPU: 106 ROM: 107 RAM: 121 Printing device: 151 Router: 152 Wireless LAN access point: 160 AP: 161 AP: 170 Authentication server: 171 Management server:

Claims

1. The computer of the information processing device, a first acquiring means for acquiring first information relating to security settings set in the information processing device and used for accessing an external device different from the information processing device and a communication device; second acquiring means for acquiring second information regarding security settings supported by the communication device; a comparison means for comparing the first information acquired by the first acquisition means with the second information acquired by the second acquisition means; a transmission control means for controlling transmission of a first security setting value included in the first information to the communication device based on a comparison result between the first information and the second information by the comparison means; A program characterized by functioning as

2. The first information is The information processing device includes a first security setting method that is valid in the information processing device, a first setting item included in the first security setting method, and the first security setting value corresponding to the first setting item.

2. The program according to claim 1 .

3. The second information is a second security setting method supported by the communication device, a second setting item included in the second security setting method, and a second security setting value corresponding to the second setting item; 3. The program according to claim 2.

4. The transmission control means If the comparison result satisfies a condition, a first security setting value included in the first information is transmitted to the communication device.

4. The program according to claim 3.

5. The condition is: the first security setting method and the second security setting method are the same; 5. The program according to claim 4.

6. a first storage unit that stores association information that associates the second security setting method with the first security setting method; The comparison means comparing the first security setting method with the second security setting method based on the linking information; 6. The program according to claim 5.

7. The condition is: The first setting item and the second setting item are identical to each other.

5. The program according to claim 4.

8. The condition is: the second security setting method does not require manual setting; 5. The program according to claim 4.

9. a receiving means for receiving a setting value corresponding to the second information when the comparison result does not satisfy the condition; The transmission control means controlling the communication device to transmit a setting value corresponding to the second information received by the receiving means; 5. The program according to claim 4.

10. and further functioning as a first communication means for directly communicating with the communication device without going through a network formed by an external access point; The first acquisition means When directly communicating with the communication device by the first communication means, the first information is acquired.

2. The program according to claim 1 .

11. a second communication means for communicating with the communication device via a network formed by an external access point; acquiring the first information when communication between the information processing device and the communication device is confirmed via the network by the second communication means; 2. The program according to claim 1 .

12. a third acquiring means for acquiring information indicating whether the communication device is a device that can use a predetermined service provided by an external server; The first acquisition means If the communication device is a device that can use the predetermined service, the communication device acquires the first information.

2. The program according to claim 1 .

13. The predetermined service is a subscription service for consumables used in the communication device; 13. The program according to claim 12.

14. The second acquisition means acquires the second information from the communication device by requesting the second information from the communication device.

2. The program according to claim 1 .

15. The second acquisition means obtaining the second information from the external server by requesting the second information from the external server; 2. The program according to claim 1 .

16. a second storage means for storing the second information; The second acquisition means acquiring the second information stored by the second storage means; 2. The program according to claim 1 .

17. The external device is The access point requires a security method conforming to the IEEE 802.1X standard for access by the external device.

2. The program according to claim 1 .

18. the communication device is a printing device; 2. The program according to claim 1 .

19. A control method for an information processing device, comprising: a first acquisition step of acquiring first information regarding security settings set in the information processing device and used for accessing an external device different from the information processing device and a communication device; a second obtaining step of obtaining second information regarding security settings supported by the communication device; a comparison step of comparing the first information acquired in the first acquisition step with the second information acquired in the second acquisition step; a transmission control step of controlling transmission of a first security setting value included in the first information to the communication device based on a comparison result between the first information and the second information in the comparison step, A program characterized by:

20. An information processing device, a first acquiring means for acquiring first information relating to security settings set in the information processing device and used for accessing an external device different from the information processing device and a communication device; second acquiring means for acquiring second information regarding security settings supported by the communication device; a comparison means for comparing the first information acquired by the first acquisition means with the second information acquired by the second acquisition means; a transmission control means for controlling transmission of a first security setting value included in the first information to the communication device based on a comparison result between the first information and the second information by the comparison means, 1. An information processing device comprising:

Images