Program, control method, information processing apparatus, and printing system

Abstract

To provide a program, a control method, an information processor and a printing system for suppressing the display of a confirmation screen when installing a driver.SOLUTION: A program for installing a driver for controlling a peripheral device in an information processing apparatus, the program causing the information processing apparatus to, when a certificate of the driver is set to be automatically installed in the information processing apparatus, acquire the certificate without notifying a user, install the acquired certificate in the information processing apparatus, and install the driver in response to installation of the certificate.SELECTED DRAWING: Figure 8

Description

[Technical Field]

[0001] The present invention relates to a driver installation program, a control method, an information processing apparatus, and a printing system. [Background technology]

[0002] A typical print control program that controls a printer is a Windows (registered trademark) printer driver. The driver set of a Windows (registered trademark) printer driver includes a CAT file (catalog file). A digital signature can be added to the catalog file to prevent driver tampering (see, for example, Patent Document 1).

[0003] A digital signature is a hash value of the files that make up a driver set, encrypted with a private key. The hash value can be extracted by decrypting the digital signature with a public key, and by comparing it with the hash value of the actual driver set, it is possible to verify that the contents of each file in the driver set have not been altered.

[0004] The catalog file also contains a certificate, and the certificate of the issuer of the trusted electronic signature (digital signature) is stored in the certificate store of the information processing device.

[0005] When installing a printer driver on an information processing device, some operating systems (OSs) display a screen to ask the user whether to install the driver, depending on the issuer of the digital signature attached to the CAT file. For example, the confirmation screen is displayed if the certificate corresponding to the digital signature is not stored in the certificate store.

[0006] Printer drivers also come with an installation method that does not display a UI screen during installation. This method is called silent installation. Silent installation is used in office environments when terminal management services distribute and install printer drivers to terminals (specifically, PCs). In office environments using this method, printer drivers can be made available without burdening terminal users.

[0007] However, when a printer driver is distributed and installed using the above-described conventional technology, a confirmation screen is displayed during silent installation, requiring operation by the terminal user, which reduces convenience. [Prior art documents] [Patent documents]

[0008] [Patent Document 1] Japanese Patent Application Laid-Open No. 2014-48956 Summary of the Invention [Problem to be solved by the invention]

[0009] SUMMARY OF THE INVENTION It is therefore an object of the present invention to provide a program that can prevent a confirmation screen from being displayed when installing a driver. [Means for solving the problem]

[0010] A program for installing a driver for controlling a peripheral device in an information processing device, the program causing the information processing device to acquire the certificate without notifying a user when the information processing device is set to automatically install a certificate for the driver in the information processing device, causing the information processing device to install the acquired certificate, and causing the driver to be installed in response to the installation of the certificate. [Effects of the Invention]

[0011] According to the present invention, by installing the certificate before installing the driver, the confirmation screen is not displayed, so the driver can be made available without any burden on the terminal user. [Brief explanation of the drawings]

[0012] [Figure 1] 1 is a diagram illustrating a system configuration. [Figure 2] FIG. 1 is a diagram illustrating a hardware configuration of a computer. [Figure 3] FIG. 2 is a diagram illustrating the software configuration of a computer. [Figure 4] FIG. 2 is a diagram illustrating a file configuration of a driver installation set according to the first embodiment. [Figure 5] FIG. 10 is a diagram showing transitions of screens displayed by the installer. [Figure 6] 10A and 10B are diagrams illustrating files and a UI screen set by a system administrator. [Figure 7] FIG. 10 is a diagram showing a security warning screen displayed by the OS. [Figure 8] FIG. 10 is a diagram illustrating a processing flow of an installer according to the first embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0013] [Example 1] Hereinafter, embodiments of the present invention will be described with reference to the drawings.

[0014] 1 is a diagram showing the connection configuration of a computer 1000 as an example of an information processing device in a printing system of this embodiment, a printer 2000 as an example of a peripheral device, and a terminal management service 4000 as an example of a server device. Examples of the computer 1000 include a PC (personal computer), a smartphone, and a tablet terminal.

[0015] The computer 1000 and the printer 2000 are connected via a network or USB, etc., and are capable of communicating with each other. The computer 1000 and the terminal management service 4000 are also capable of communicating with each other, and various controls can be performed on the computer 1000, which is a terminal, based on instructions from the terminal management service 4000. For example, it is possible to control the applications installed on the terminal and the security access level of the terminal.

[0016] In this embodiment, an environment is assumed in which the terminal management service 4000 distributes printer drivers (or outputs instructions to install) to multiple computers 1000, enabling each computer 1000 to print to the printer 2000.

[0017] 2 is a block diagram showing the hardware configuration of computer 1000. Computer 1000 is entirely controlled by a control unit 1040 made up of a CPU 1041 and memory 1042. Display unit 1010 is an output device such as a display, and operation unit 1020 is an input device such as a mouse, keyboard, or touch panel.

[0018] The storage unit 1030 is a storage medium such as a hard disk or SSD, and stores various software necessary for the computer 1000 to operate. The OS 1110 and drivers described below are also stored in the storage unit 1030. The network communication unit 1050 connects to a network and inputs and outputs data to and from external devices. The USB communication unit 1060 inputs and outputs data to and from external devices via a USB connection. The computer 1000 and printer 2000 are connected via the network communication unit 1050 or the USB communication unit 1060.

[0019] All software processing in this embodiment is realized by loading software stored in storage unit 1030 into memory 1042 in control unit 1040 and executing it with CPU 1041. CPU is an abbreviation for Central Processing Unit.

[0020] 3 is a block diagram showing the software configuration of the computer 1000, particularly with regard to the driver installation process of this embodiment. All of this software is stored in the storage unit 1030. The application 1100 refers to any software such as word processing software or spreadsheet software, and the driver installer 1210, which will be described later, is one of the applications 1100.

[0021] OS1110 is an abbreviation for Operating System, and is software that controls the basic operations of the computer 1000. The OS1110 has a driver installation control unit 1111 and a certificate management unit 1113, and further has data areas called a driver store 1112 and a certificate store 1114.

[0022] The driver installation control unit 1111 controls the installation of a driver prepared outside the OS 1110 into the OS 1110. Here, a driver is software for controlling the peripheral device 2000 from the computer 1000, and is generally provided by the vendor that produces the peripheral device 2000. Installing a driver in the OS 1110 means adding a driver provided by the vendor to the OS 1110 so that the peripheral device can be used from the computer 1000 under the management of the OS 1110.

[0023] A driver installation control unit 1111 verifies the driver to be installed and stores it in a driver store 1112. Therefore, drivers for a wide variety of peripheral devices are stored in the driver store 1112. A certificate management unit 1113 manages certificates registered in the OS 1110. A certificate store 1114 is managed by the certificate management unit 1113 and stores various certificates used by the OS 1110.

[0024] Here, a certificate certifies the validity of a digital signature, and the relationship between a digital signature and a certificate can be likened to the relationship between a seal and a seal certificate. Certificates of issuers trusted by the administrator of computer 1000 or the terminal user are stored in certificate store 1114.

[0025] 4 is a diagram showing the file configuration of a driver installation set 1200 in this embodiment. The installation set 1200 is a group of files provided by the vendor, and includes the files described below.

[0026] The installer (EXE) 1210 is an application 1100 for installing a driver, and installs a driver file 1250 into the OS 1110 when executed by a terminal user with administrator privileges.

[0027] The installer (EXE) 1210 has a means for performing installation according to the UI flow shown in Fig. 5, and a means for performing silent installation without displaying a UI. These processes will be described later.

[0028] The driver set 1220 indicates a group of driver-related files before installation, and includes a setup information file (INF) 1230, a catalog file (CAT) 1240, and a driver file (CAB) 1250.

[0029] The setup information file (INF) 1230 describes information necessary for installing the driver file 1250. Specifically, the information describes the type and version of the driver, the file name of the catalog file 1240, the file name and installation destination of the driver file 1250, etc.

[0030] The catalog file (CAT) 1240 is a file used when installing the driver file 1250, and is used to verify the driver set 1220. The catalog file (CAT) 1240 includes the digital signature 1241 and certificate of the driver file 1250, and is used to check whether the signed driver file 1250 has been tampered with.

[0031] The driver file (CAB) 1250 is the main body of the driver to be installed, and is a compressed file containing executable programs and data files for controlling peripheral devices.

[0032] The installation setting file (INI) 1260 contains information required for installation, flag settings, and the like. The installer (EXE) 1210 reads this file during installation and performs the installation process according to the contents. Therefore, by using this mechanism, system administrators can change the contents of the installation setting file (INI) 1260 and create an installation set 1200 that suits their environment. In some cases, a tool that uses this mechanism to generate a new installation set 1200 is provided to system administrators.

[0033] FIG. 5 shows the transition of screens displayed by the installer 1210 on the display unit of the computer 1000 when the terminal user executes the installer 1210. In FIG.

[0034] Screen 1 (1310) is the screen that the installer 1210 displays at startup. When the "Next" button is pressed, the installer 1210 displays screen 2 (1320). Screen 2 detects the printers currently connected to the computer 1000. When the detection is complete, the installer 1210 displays screen 3 (1330).

[0035] Screen 3 (1330) displays a list of printers detected on Screen 2 (1320) and allows the terminal user to select which printer driver to install. When the "Next" button is pressed, the installer 1210 displays Screen 4 (1340). Screen 4 (1340) is a screen for notifying the terminal user that driver installation will now begin. When the "Next" button is pressed, the installer 1210 displays Screen 5 (1350) and begins driver installation.

[0036] The driver is installed by the installer 1210 calling an API for driver installation provided by the driver installation control unit 1111 of the OS 1110. At this time, the installer 1210 specifies the setup information file 1230 in the driver set 1220.

[0037] At this time, depending on the driver set 1220 to be installed, the OS 1110 may display a security warning screen. The security warning screen will be described later with reference to Figure 6. When the driver installation is complete, the installer 1210 displays screen 6 (1360) to notify the terminal user that the installation is complete, and then ends.

[0038] On the other hand, the installer (EXE) 1210 has a silent installation as a means of installation without displaying a UI. This works when the installer (EXE) 1210 is started by executing a command. In this case, since there is no UI flow, the installation setting file (INI) 1260, which contains the information necessary for installation, is used.

[0039] Information 1500 in Figure 6 shows part of the contents written in the installation settings file (INI). Information 1510 lists, as examples, the queue name, PDL name, and port name of the printer to be installed. In the example in Figure 6, "Printer ABC" is the printer queue name, "PCL" is the PDL name, and "192.168.xx.xx" is the port name.

[0040] In the normal installation UI flow of the installer (EXE) 1210, the installation process is based on the printer information found in the search. However, as mentioned above, there is no UI during silent installation, so the installation process is based on the information written in the installation setting file (INI).

[0041] In this embodiment, this information is written in the installation setting file (INI) 1260, but similar information may be specified as an argument for command execution to perform silent installation.

[0042] In this embodiment, information on automatic certificate installation settings is written in this installation settings file (INI) 1260. For example, a setting called AutoCertificateInstall, which indicates the automatic certificate installation setting, is written as in information 1520, and a setting value is defined. This makes it possible to control the certificate installation process during the installation process performed by the installer (EXE) 1210.

[0043] In this embodiment, if the value of AutoCertificateInstall is 1, it indicates that the automatic certificate installation setting is on. If the value of AutoCertificateInstall is 0 or AutoCertificateInstall is not defined, it indicates that the automatic certificate installation setting is off.

[0044] This automatic certificate installation setting 1520 may be written by editing the text data of the installation setting file (INI) 1260, or may be set using the tool that generates the installation set 1200 described above.

[0045] For example, there is a tool that generates an installation set 1200 that has a UI that can change the automatic certificate installation setting 1520, such as the one shown as 1550 in Figure 6. A system administrator uses this tool to change the setting of the automatic certificate installation setting 1520. Specifically, the system administrator rewrites the AutoCertificateInstall setting, which indicates the automatic certificate installation setting, to 1, and generates a new installation set 1200 that includes an updated installation setting file (INI) 1260.

[0046] This newly created installation set 1200 has been set by the system administrator to automatically install certificates, and therefore it can be determined that the system administrator's approval has been obtained.

[0047] FIG. 7 shows a security warning screen 1500 that the OS 1110 displays when installing a driver while the installer 1210 is displaying the above-mentioned screen 5 (1350).

[0048] When an API for driver installation is called, the OS 1110 obtains the file name of the catalog file 1240 described in the specified setup information file 1230. The OS 1110 then references the catalog file 1240 with the obtained file name and identifies the certificate corresponding to the digital signature 1241 included in the catalog file 1240.

[0049] If the identified certificate does not exist in the certificate store 1114 of the OS 1110, the OS 1110 displays a security warning screen 1500. The security warning screen 1500 contains information about the issuer of the digital signature 1241, and the terminal user is prompted to decide whether or not to install the driver bearing the digital signature 1241 of this issuer. When the "Install" button is pressed, the OS 1110 begins installing the specified driver. When the "Do not install" button is pressed, the OS 1110 cancels the installation of the driver.

[0050] The security warning screen 1500 also has a checkbox for whether to always trust drivers with the same publisher's digital signature 1241. If this setting is on and the "Install" button is pressed, the OS 1110 installs the corresponding certificate in the certificate store 1114. Therefore, from the next time onwards, the installation can be performed without the security warning screen 1500 appearing the next time a driver with the same digital signature is installed.

[0051] On the other hand, if this setting is off and the "Install" button is pressed, the next time OS 1110 installs a driver with the same digital signature, it will again display security warning screen 1500. In this way, by OS 1110 displaying security warning screen 1500 to the terminal user, it is possible to prevent drivers signed by suspicious publishers from being installed without the terminal user's knowledge.

[0052] Next, the distribution and installation of the printer driver in this embodiment will be described.

[0053] When a system administrator uses the terminal management service 4000 to distribute and install a driver, this is achieved by distributing and executing the installation set 1200 and a program that performs the installation, such as a batch file, to the computer 1000.

[0054] Therefore, in this embodiment, the installer (EXE) 1210 runs on the computer 1000 side, and the silent installation process is also performed by the computer 1000. The installation set 1200 delivered at this time is packaged with an installation setting file (INI) 1260 in which the system administrator has set up automatic certificate installation.

[0055] At this time, the means of distribution can also be set in detail in the terminal management service 4000. For example, the system administrator can set up a configuration in which drivers with the above-mentioned automatic certificate installation setting turned on and drivers with the automatic certificate installation setting not turned on are distributed to each terminal user.

[0056] Next, the flow of installing a driver in OS 1110 by installer 1210, which is an embodiment of the present invention, will be described with reference to Figure 8, focusing on the characteristic parts of the invention. All of the processing described here is executed by CPU 1041 after installer 1210 stored in storage unit 1030 in computer 1000 is loaded into memory 1042.

[0057] In step S100, the installer 1210 is started upon receiving a start instruction from the terminal user or the terminal management service 4000.

[0058] Next, in step S110, the installer 1210 determines whether the startup instruction has been issued to start the program as a silent installation (S110). If the startup instruction has not been issued as a silent installation, the process proceeds to S170.

[0059] Then, in step S170, the installer 1210 installs the driver. If the certificate does not exist in the certificate store at this stage, a security warning screen 1500 is displayed during the processing of S170.

[0060] If it is determined in step S110 that the installation has been started as a silent installation, the process proceeds to S120.

[0061] In step S120, the installer 1210 determines whether the automatic certificate installation setting described in the installation setting file (INI) 1260 is on. If the automatic certificate installation setting is off, the process proceeds to step S170. The processing from step S170 onwards has been described above and will not be repeated here.

[0062] If the automatic certificate installation setting is on, the process proceeds to step S130.

[0063] In step S 130 , the installer 1210 obtains the digital signature 1241 from the catalog file 1240 in the driver set 1220 .

[0064] Then, in step S140, the installer 1210 identifies the certificate from the acquired digital signature 1241 and checks whether the certificate is in the certificate store 1114. Specifically, the installer 1210 acquires the serial number of the certificate included in the digital signature 1241 and checks whether a certificate with the same serial number exists in the certificate store 1114. If a corresponding certificate exists in the certificate store 1114, the process proceeds to step S170. The processing from step S170 onwards has been described above and will not be repeated here.

[0065] If the corresponding certificate does not exist in the certificate store 1114, the process proceeds to step S150.

[0066] Then, in step S150, the installer 1210 obtains the certificate from the digital signature 1241, and proceeds to step S160.

[0067] Then, in step S160, the installer 1210 installs the certificate in the certificate store 1114. The installer 1210 installs the certificate by calling an API for certificate installation provided by the certificate management unit 1113 of the OS 1110.

[0068] Finally, in step S170, installer 1210 installs the driver into OS 1110. When silent installation and automatic certificate installation settings are on, the certificate for digital signature 1241 included in pre-installation driver set 1220 is installed in OS 1110 before driver installation, and then the driver is installed. Therefore, the driver can be installed without displaying security warning screen 1500 by OS 1110.

[0069] The processing of the installer 1210 in this embodiment has been described above. By operating the installer 1210 as in this embodiment, the security warning screen 1500 by the OS 1110 will not be displayed suddenly during installation. Therefore, even in an environment where drivers are distributed and installed, the driver can be made available without burdening the terminal user. [Explanation of symbols]

[0070] 1000 computers 1210 Installer 1240 Catalog File 1241 Digital Signature 1250 driver files 1260 Installation Configuration File 2000 Printer 4000 Device Management Service

Claims

1. A program for installing a driver for controlling a peripheral device in an information processing device, the program comprising: When the certificate of the driver is set to be automatically installed in the information processing device, the certificate is automatically installed without notifying the user. obtain said certificate; Installing the acquired certificate in the information processing device; In response to the installation of the certificate, the driver is installed. program.

2. 2. The program according to claim 1, wherein a server device capable of outputting an instruction to install the driver to a plurality of the information processing devices is configured to automatically install the certificate of the driver in the information processing devices.

3. the program is included in an installation set including a driver set for the driver and an installation setting file in which settings for an installation process of the driver are described; 3. The program according to claim 2, wherein the server device writes, into the installation setting file, a message indicating that the driver certificate is to be automatically installed in the information processing device.

4. The program according to claim 1 , wherein the certificate corresponds to a digital signature included in a driver set of the driver.

5. The program according to claim 1 , wherein installing the certificate causes the certificate to be stored in a certificate store of the information processing device.

6. 1. A control method for an information processing device for installing a driver for controlling a peripheral device in the information processing device, comprising: When the certificate of the driver is set to be automatically installed in the information processing device, the certificate is automatically installed without notifying the user. obtain said certificate; Installing the acquired certificate in the information processing device; In response to the installation of the certificate, the driver is installed. A control method comprising:

7. 7. The control method according to claim 6, wherein a server device capable of outputting instructions to install the driver to a plurality of the information processing devices is configured to automatically install the driver certificate in the information processing devices.

8. the program is included in an installation set including a driver set for the driver and an installation setting file in which settings for an installation process of the driver are described; 8. The control method according to claim 7, wherein the server device writes to the installation setting file a message indicating that the driver certificate is to be automatically installed in the information processing device.

9. 7. The control method according to claim 6, wherein the certificate corresponds to a digital signature included in a driver set of the driver.

10. 7. The control method according to claim 6, wherein the certificate is stored in a certificate store of the information processing device by installing the certificate.

11. When the certificate for the driver for controlling a peripheral device is set to be automatically installed on the information processing device, the certificate may be automatically installed without notifying the user. obtain said certificate; Installing the acquired certificate in the information processing device; In response to the installation of the certificate, the driver is installed.

1. An information processing device comprising:

12. A printing system including an information processing device, a peripheral device capable of communicating with the information processing device, and a server device capable of communicating with the information processing device, the server device is capable of outputting an instruction to install the driver to the plurality of information processing devices; When the server device is set to automatically install a certificate of a driver for controlling the peripheral device in the information processing device, The information processing device, without notifying the user, Obtain said certificate, Installing the acquired certificate in the information processing device; The driver is installed in response to the installation of the certificate. A printing system characterized by:

Images