Information processing system and program

Abstract

To improve responsiveness and security of communication.SOLUTION: In the information processing system, the processor controls the terminal to request the device to execute a job indicating communication using first network setting information set in the device when the terminal is attached to the device and the device and the terminal are in a connected state in a case where the terminal requests the device to which the terminal is attachable and detachable to execute the job, when the terminal is detached from the device and the device and the terminal are in a non-connected state, the terminal is controlled to request the device to execute a job indicating communication using second network setting information which is stored in the memory, is different from the first network setting information, and includes a network setting related to communication corresponding to a security level of each of a plurality of networks having different security levels, based on the job.SELECTED DRAWING: Figure 6

Description

[Technical Field]

[0001] The present disclosure relates to an information processing system and a program. [Background technology]

[0002] A technology is known in which, when a terminal transmits a request to a device connectable to multiple networks, the terminal connects to an appropriate network among the multiple networks (see, for example, Patent Document 1). In this technology, an information processing device that requests processing via one of the multiple networks to a device connectable from the multiple networks determines whether to request the processing from the device via a first network based on user identification information and communication information of the multiple networks, and if it determines to request the processing from the device via the first network, causes an information processing device that communicates via a third network different from the first network to switch communication from the third network to the first network and make the request to the device.

[0003] Also, a technology is known for providing a network-compatible image processing device that can remotely edit an operation screen, etc. (see, for example, Patent Document 2). This technology includes an image processing function, a Web server function that provides Web services to other terminals via a network, an operation screen display means that displays an operation screen for device operation to a local user, an operation screen editing means that adds, edits, or updates the content of the operation screen for the Web service provided by the Web server function or the operation screen displayed by the operation screen display means, a request interpretation means that interprets a request received from another terminal, and if the received request instructs adding, editing, or updating the operation screen, outputs screen editing information included in the received request to the operation screen editing means, and generates response information corresponding to the received request interpreted by the request interpretation means.

[0004] Furthermore, a technology for transmitting data while protecting security via a network is known (see, for example, Patent Document 3). In this technology, an information processing device is connected to a network, performs data communication with an external device, and includes a security setting management means for retaining security settings for secure data communication in association with communication data attributes, a communication data attribute determination means for determining communication data attributes (indicators of data confidentiality and importance) from communication data with the external device, and an application execution means for determining security settings for secure data communication with the external device in association with the communication data attributes and executing communication with appropriate security strength. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Japanese Patent Application Laid-Open No. 2016-167803 [Patent Document 2] Japanese Patent Application Laid-Open No. 2009-130493 [Patent Document 3] Japanese Patent Application Laid-Open No. 2008-90731 Summary of the Invention [Problem to be solved by the invention]

[0006] Incidentally, devices such as multifunction peripherals have a communication function for communicating over a network, and may also include a terminal such as a tablet that can be attached or detached. When a terminal is attached to the device, the device and the terminal are connected, and the device can be operated from the terminal through communication between the device and the terminal. On the other hand, when the terminal is detached from the device, the device and the terminal are disconnected, and the device can be operated from the terminal through communication between the device and the terminal via the network. To improve the security of the terminal attached to the device, security measures such as applying encrypted communication or concealing the connection destination using an encrypted DNS (Domain Name System) are applied.

[0007] However, when a terminal is detached from a device and the device is operated, a separate communication path is established for communication of operation-related information between the device and the terminal and for communication of information between devices other than the terminal on the device. Therefore, when communication is performed according to the network settings set on the terminal, the communication may not go through a communication path that takes security into account when set on the device. On the other hand, when a terminal is attached to a device and the device is operated, if the network setting information set on the device differs from the network setting information set on the terminal, communication may occur via a different communication path, resulting in discrepancies. Furthermore, constantly maintaining security while communicating can result in server access with a high processing load and communication via an external cryptographic DNS server, reducing communication responsiveness on the terminal. Therefore, when a device is operated by attaching and detaching a terminal to a device, there is room for improvement in improving communication responsiveness while maintaining security between the two.

[0008] The present disclosure aims to provide an information processing system and program that can improve communication responsiveness and security compared to when communication is performed using network setting information set in a terminal. [Means for solving the problem]

[0009] The present disclosure includes the following aspects.

[0010] A first aspect of the present disclosure is A processor and a memory, The processor: When a terminal requests execution of a job to a device that can be attached and detached to the terminal, When a terminal is attached to the device and the device and the terminal are in a connected state, controlling the terminal to request the device to execute the job indicating that communication will be performed using first network setting information set in the device; When the terminal is removed from the device and the device and the terminal are in a disconnected state, the device controls the terminal to request the device to execute the job based on the job, which indicates that communication will be performed using second network setting information that is stored in the memory and different from the first network setting information, the second network setting information including network settings related to communication corresponding to each security level of a plurality of networks with different security levels. It is an information processing system.

[0011] A second aspect of the present disclosure provides the information processing system of the first aspect, The processor sets, as the second network setting information, network setting information according to a security level of a communication path used for communication in executing the job.

[0012] A third aspect of the present disclosure is the information processing system of the second aspect, The processor includes setting, as the second network setting information, network setting information including network settings corresponding to a security level for the communication path to the communication destination based on information indicating the communication path to the communication destination in the job.

[0013] A fourth aspect of the present disclosure is the information processing system according to the third aspect, When the security level of the information indicating the communication path to the communication destination is lower than a predetermined security level, the processor sets information indicating that communication will be performed using a predetermined encryption process as the second network setting information.

[0014] A fifth aspect of the present disclosure provides an information processing system according to any one of the first to fourth aspects, The method includes pre-storing location information indicating the location on the network of a predetermined device in the memory, and the processor determining whether the state between the device and the terminal is the connected state or the non-connected state based on the communication result when communication is performed using the location information.

[0015] A sixth aspect of the present disclosure is the information processing system of the fifth aspect, The processor stores the location information in the memory when the terminal is removed from the device.

[0016] A seventh aspect of the present disclosure is the information processing system of the sixth aspect, The processor stores location information indicating the location of the device on the network obtained from the device in the memory when in the connected state, and determines whether the state between the device and the terminal is the connected state or the non-connected state based on the stored location information.

[0017] An eighth aspect of the present disclosure is the information processing system of the seventh aspect, The processor determines whether the state of the device and the terminal is the connected state or the non-connected state based on a communication result of direct communication between the terminal and the device.

[0018] A ninth aspect of the present disclosure is the information processing system of the eighth aspect, If the direct communication is successful, the state is determined to be the connected state, and if the direct communication is unsuccessful, the state is determined to be the unconnected state.

[0019] A tenth aspect of the present disclosure is A program that causes a processor to process information, the processor, When a terminal requests execution of a job to a device that can be attached and detached from the terminal, When a terminal is attached to the device and the device and the terminal are in a connected state, controlling the terminal to request the device to execute the job indicating that communication is to be performed using first network setting information set in the device; When the terminal is removed from the device and the device and the terminal are in a disconnected state, controlling the terminal to request the device to execute the job based on the job, the job indicating that communication will be performed using second network setting information stored in a memory and different from the first network setting information, the second network setting information including network settings related to communication corresponding to each security level of a plurality of networks with different security levels; The program is characterized by executing a process showing the above. [Effects of the Invention]

[0020] According to the first and tenth aspects of the present disclosure, it is possible to improve the responsiveness and security of communication compared to when communication is performed using network setting information set in a terminal. According to the second aspect of the present disclosure, it is possible to improve the responsiveness and security of communication for each job, compared to when the security level in communication during job execution is not taken into consideration. According to the third and fourth aspects of the present disclosure, it is possible to improve the responsiveness and security of communication compared to a case where the security level of the communication path to the communication destination in the job is not taken into consideration. According to the fifth aspect of the present disclosure, it is possible to identify the connection state of a device to which a terminal can be attached or detached, compared to when communication is performed without taking the device's location into consideration. According to the sixth aspect of the present disclosure, it is possible to store the position information fewer times than when the position information is stored multiple times while attached to the device. According to the seventh aspect of the present disclosure, the processing load related to the determination can be reduced compared to determining the states of the device and the terminal regardless of the location of the device on the network. According to the eighth and ninth aspects of the present disclosure, the processing load related to the determination can be reduced compared to when the determination is made without taking into account the type of communication between the terminal and the device. [Brief explanation of the drawings]

[0021] [Figure 1]1 is a block diagram illustrating an example of a configuration of a network system according to an embodiment. [Figure 2] FIG. 2 is a block diagram illustrating an example of a configuration of a device according to the embodiment. [Figure 3] FIG. 2 is a block diagram showing an example of the configuration of a tablet according to the embodiment. [Figure 4] FIG. 2 is a block diagram showing an example of the configuration of a normal DNS server according to the embodiment. [Figure 5] FIG. 2 is a diagram illustrating an example of a functional configuration of a tablet according to an embodiment. [Figure 6] 10 is a flowchart illustrating an example of a processing flow of a tablet according to an embodiment. [Figure 7] FIG. 10 is a conceptual diagram showing the flow of information when specifying printing from a tablet according to the embodiment. [Figure 8] FIG. 10 is a conceptual diagram showing the flow of information when specifying printing from a tablet according to the embodiment. [Figure 9] 10 is a conceptual diagram showing the flow of information when specifying printing on an adjacent device from a tablet according to an embodiment. FIG. [Figure 10] 10 is a conceptual diagram showing the flow of information when a print instruction is issued with the tablet according to the embodiment attached to a device. FIG. [Figure 11] FIG. 10 is a conceptual diagram showing the flow of information when printing is designated in a state where the tablet according to the embodiment is detached from the device and positioned outside the internal area. [Figure 12] FIG. 1 is a diagram illustrating an example of a configuration of a network system according to an embodiment. [Figure 13] 10 is a flowchart illustrating an example of a flow of a process for registering a user terminal in a device according to the embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0022] An example of an embodiment for implementing the technology of the present disclosure will be described in detail below with reference to the drawings. Note that components and processes that perform the same operations, actions, and functions are given the same reference numerals throughout the drawings, and duplicated descriptions may be omitted as appropriate. Each drawing is merely a schematic illustration to allow a sufficient understanding of the technology of the present disclosure. Therefore, the technology of the present disclosure is not limited to the illustrated examples. Furthermore, in this embodiment, descriptions of configurations that are not directly related to the present invention or well-known configurations may be omitted.

[0023] In this disclosure, the term "device" refers to a concept that includes an apparatus capable of executing predetermined processes, such as printing. For example, the term "device" refers to an apparatus and a multifunction peripheral that can execute at least one of image printing (printing), image scanning (scanning), and communication. In addition, in this disclosure, the term "terminal" refers to a concept that includes an apparatus that can independently execute various predetermined processes. For example, the term "terminal" refers to a user terminal such as a tablet. The relationship between a device and a terminal also includes a relationship in which the terminal can be attached to and detached from the device. The term "attachable and detachable" refers to a concept that includes a transition between a state in which direct communication between the device and the terminal is possible and a state in which such direct communication is impossible. In other words, a state in which the device and the terminal can communicate directly via a wired connection and a wireless connection is an example of an attached state, and a state in which such direct communication is impossible is an example of a detached state.

[0024] First Embodiment An example of the configuration of a network system 1 according to this embodiment is shown in Fig. 1. The example shown in Fig. 1 schematically shows an example of a system that executes print processing.

[0025] The network system 1 includes multiple devices, including internal devices operating within an internal area AR that is a managed area in an organization such as a company that maintains a predetermined security level, and external devices operating outside the internal area AR.

[0026] In detail, the network system 1 includes a device 3 inside the internal area AR. The device 3 is connected to the internal network 2 and operates based on network setting information related to the network environment, exchanging information with other devices and executing predetermined processes. In this embodiment, a case will be described in which the device 3 is a multifunction peripheral equipped with a specific mechanism for realizing an image processing function. Examples of the image processing function include an image forming function including an image copying function for copying an original and an image printing function for printing input original data, and an image reading function for reading an original as an image (scanning) and converting it into data.

[0027] An access point 7 is connected to the internal network 2 to enable wireless communication such as Wifi (registered trademark).

[0028] The device 3 is configured to allow the tablet 4 as a terminal to be attached and detached. For example, the device 3 and the tablet 4 are attached by a direct connection such as a wired connection between the device 3 and the tablet 4 or a connection between the two via near-field wireless communication, and are detached when the direct connection is terminated. In FIG. 1, the attachable and detachable states are indicated by dotted lines. When attached to the device 3, the tablet 4 operates as a user interface (UI) panel for operating the device 3. When detached from the device 3, the tablet 4 can operate both inside the internal area AR and outside the internal area AR.

[0029] The network system 1 also includes a data server 5 and a normal DNS (Domain Name System) server 6 as internal servers installed within the internal area AR. The data server 5 is a server device that stores data for printing. The normal DNS server 6 is a server that performs name resolution processing. That is, the normal DNS server 6 is a server that implements at least a name resolution function, i.e., a function for performing name resolution processing to obtain entities such as IP addresses (Internet Protocol Addresses) from names such as the names of electronic devices such as computers and names such as domain names included in email addresses. The normal DNS server 6 exchanges data in plain text without encrypting it.

[0030] Furthermore, the network system 1 includes a cryptographic DNS server 8 and a cloud server 9 as external servers installed outside the internal area AR. The cryptographic DNS server 8 and the cloud server 9 are provided on what is called a cloud. The cryptographic DNS server 8 is a server that executes a process of encrypting DNS queries and responses, such as requests, to enhance security. The cloud server 9 is a server device that stores data for printing, etc., on the cloud. The cryptographic DNS server 8 and the cloud server 9 are connected to the internal network 2 via a network such as the Internet (not shown), and are configured to enable communication between the devices.

[0031] Furthermore, from the viewpoint of maintaining security, the cryptographic DNS server 8 may be a server that performs encryption processing such as HTTPS connection and DoH (DNS over HTTPS) for name resolution.

[0032] The devices included in the network system 1 are not limited to the above devices. For example, the network system 1 may include various servers such as a DHCP (Dynamic Host Configuration Protocol) server and a mail server as examples of other devices. The DHCP server is a server that implements functions including a process for automatically assigning network setting information including an IP address used when an electronic device such as a computer connects to a network. The mail server is a server that implements functions including a process for delivering e-mail.

[0033] Each of the devices included in the network system 1 stores network setting information used for communication on the network, such as an IP address in the network environment, in order to identify each other and exchange information.

[0034] (Device 3) Next, an example of the configuration of the device 3 will be described with reference to Fig. 2. The device 3 is an electronic device such as a computer for performing various processes within the internal network 2.

[0035] The device 3 includes a computer main unit 30, which includes a CPU (Central Processing Unit) 30A. The computer main unit 30 also includes a RAM (Random Access Memory) 30B, a ROM (Read-Only Memory) 30C, and an input / output port (I / O) 30D. The CPU 30A, RAM 30B, ROM 30C, and I / O 30D are connected to one another via a bus 30E. An auxiliary storage device 35, which may be implemented by an HDD (Hard Disk Drive) or a nonvolatile flash memory, is connected to the bus 30E. A communication unit 31, a UI unit 32, such as a touch panel capable of displaying images, and a unique mechanism 33 are connected to the I / O 30D.

[0036] The communication unit 31 is a part that executes communication between the device 3 and other devices, and includes at least a mechanism for communicating over the internal network 2, and a short-range communication unit 31A that communicates with the tablet 4. The short-range communication unit 31A includes a mechanism for a wired connection such as a USB (Universal Serial Bus, registered trademark) connection, and a short-range wireless connection such as Bluetooth (registered trademark), for connecting to the tablet 4.

[0037] In this embodiment, the tablet 4 is applied to the UI unit 32, and when attached to the device 3, the tablet 4 operates as the UI unit 32. Note that the device 3 may be provided with the UI unit 32 independent of the tablet 4, and may be configured so that the tablet 4 can be attached and detached.

[0038] The specific mechanism 33 is, for example, a mechanism that realizes an image processing function, such as the above-mentioned copying, printing, and scanning functions. These mechanisms are well-known technologies, and therefore detailed description thereof will be omitted.

[0039] The auxiliary storage device 35 stores a unique program 35P for causing the device 3 to function as a unique device. The CPU 30A reads the unique program 35P from the auxiliary storage device 35, expands it in the RAM 30B, and executes the process. As a result, the device 3 that has executed the unique program 35P operates as a unique device. The auxiliary storage device 35 also stores various device data 35D used by the device 3.

[0040] The device 3 has a function of connecting to an external network such as the Internet under device management in the internal area AR. For example, the device 3 may be provided with a network connection device (not shown) that controls the connection between the internal network 2 and the external network, and data communication may be performed between the internal network 2 and the external network via the network device (not shown). In this case, the device 3 may have a communication control function such as a known router or known gateway that controls data communication, and may function as a default gateway in the internal area AR.

[0041] The device 3 also includes a setting memory 34, which is connected to the I / O 30D. The setting memory 34 stores various information for communication in a network environment. Specifically, the setting memory 34 stores network setting information such as proxy settings and DNS settings. In this embodiment, the setting memory 34 includes an IP area 34A and a setting value area 34B, which store network setting information including at least an IP address and a setting value. The IP area 34A stores an IP address, which indicates the location of the device 3 on the internal network, and the setting value area 34B stores information typically used when communicating with servers such as the DNS server 6, the data server 5, and the DHCP server. The setting memory 34 does not necessarily have to be formed as an independent memory, but may be stored in a setting memory area provided in the auxiliary storage device 35.

[0042] (Tablet 4) Next, an example of the configuration of the tablet 4 will be described with reference to FIG.

[0043] The tablet 4 includes a computer main unit 40, which includes a CPU 40A, a RAM 40B, a ROM 40C, and an I / O 40D, which are connected to one another via a bus 40E. An auxiliary storage device 45 is connected to the bus 40E. A communication unit 41 that communicates with the device 3 and other devices, and a UI unit 42 for operating the tablet 4 are also connected to the I / O 40D. A setting memory 43 is also connected to the I / O 40D.

[0044] The communication unit 41 is a part that communicates with other devices including the device 3, and includes at least a mechanism for communicating with the internal network 2, and includes a short-range communication unit 41A that communicates with the device 3. The short-range communication unit 41A includes a mechanism for a wired connection such as a USB (registered trademark) connection, and a short-range wireless connection such as Bluetooth (registered trademark), for connecting to the device 3.

[0045] The UI unit 32 includes an operation input unit such as a touch panel, and is a part that acquires and displays information input by operation on the tablet 4.

[0046] The auxiliary storage device 45 stores a program 45P for causing the tablet 4 to function as a terminal. The CPU 40A reads the terminal program 45P from the auxiliary storage device 45, loads it into the RAM 40B, and executes the processing. As a result, the tablet 4 that has executed the program 45P operates as a terminal. The auxiliary storage device 45 also stores various types of data 45D used by the tablet 4.

[0047] The setting memory 43 of the tablet 4 is a memory that stores various information required for the tablet 4 to communicate in a network environment. The setting memory 43 has an IP area 43A and a setting value area 43B, and stores network setting information including at least an IP address and setting values ​​specific to the tablet 4. The IP area 43A stores information for identifying the tablet 4 on the internal network, i.e., information indicating the location of the tablet 4 on the internal network. The setting value area 43B stores information typically used when communicating with servers such as the DNS server 6, data server 5, and DHCP server. The setting memory 43 also includes a device IP area 43C for storing the IP address of the attached device 3. The setting memory 43 does not have to be formed as an independent memory, but may be stored in a setting memory area provided in the auxiliary storage device 45.

[0048] (Usually DNS Server 6) Next, an example of the configuration of the normal DNS server 6 will be described with reference to FIG.

[0049] The normal DNS server 6 comprises a computer main body 60, which comprises a CPU 62, RAM 63, ROM 64, and I / O 66, which are connected to one another via a bus. An auxiliary storage device 65 is connected to the bus. Also connected to the I / O 66 are a communication unit 67 for network communication, an operation input unit 68 for inputting operations to the normal DNS server 6, and a display unit 69 for displaying information.

[0050] The auxiliary storage device 65 stores a server program 65P and various server data 65D used by the normal DNS server 6. The CPU 62 reads the server program 65P from the auxiliary storage device 65, loads it into the RAM 63, and executes the processing. As a result, the normal DNS server 6 that has executed the server program 65P operates as a DNS server.

[0051] It should be noted that other servers such as the data server 5 have the same configuration as the normal DNS server 6, and therefore detailed explanations thereof will be omitted.

[0052] The tablet 4 described above is an example of a terminal of the present disclosure, and the device 3 is an example of a device of the present disclosure.

[0053] Meanwhile, devices 3, such as multifunction peripherals, may connect to a network and communicate with a cloud server 9. For this reason, network functions are equipped with mechanisms for wired and wireless connections, and security requirements include encrypted communications and DNS encryption for concealing the connection destination. However, communications from a tablet 4 detached from the device 3 may not follow the appropriate communication path. For example, even if network configuration information for maintaining security is configured in the device 3, if the tablet is missing the settings, the communication will not follow the security path that ensures security on the device 3. Furthermore, when performing independent processing on the device 3, such as accessing an unnecessary server via a security path, responsiveness may be reduced if the communication goes through a server with a high processing load, such as a cryptographic DNS server that performs encryption.

[0054] Therefore, in this embodiment, it is possible to improve communication responsiveness while maintaining the security set in the device when the tablet 4 is detached from the device 3 and the device 3 is operated remotely. The network system 1 of this embodiment improves communication responsiveness while maintaining security in communication with the tablet 4, whether the tablet 4 is attached to the device 3 (connected) or detached from the device 3 (disconnected). In this case, the tablet 4 determines a communication path according to a specified communication destination (e.g., a URL). Specifically, the tablet 4 identifies the specified communication destination (e.g., a URL) and uses a DNS and proxy set in the device 3 to automatically distinguish between wireless communication such as Wi-Fi (registered trademark) and other connections, and sets up a connection that improves communication responsiveness while maintaining security.

[0055] Here, the functional configuration regarding the operation of the tablet 4 will be described. FIG. 5 is a diagram showing an example of a functionally classified electrical configuration resulting from the execution of a program by the CPU 40A in the tablet 4 according to this embodiment.

[0056] The tablet 4 includes an acquisition unit 400, a determination unit 410, a setting unit 420, and a control unit 430. The CPU 40A of the tablet 4 executes the program 45P, causing the tablet 4 to operate as the acquisition unit 400, the determination unit 410, the setting unit 420, and the control unit 430.

[0057] The acquisition unit 400 is a component that acquires information indicating a request for job execution. For example, the acquisition unit 400 acquires a file from the data server 5 and acquires information indicating an instruction to print on the device 3. The determination unit 410 determines whether the tablet 4 is attached to or detached from the device 3. The setting unit 420 determines a communication path depending on whether the tablet 4 is attached or detached. The control unit 430 controls the device 3 to instruct it to execute the job via the communication path set by the setting unit 420.

[0058] Next, the operation of the network system 1 according to this embodiment will be described, focusing on the information processing executed by the tablet 4.

[0059] In this embodiment, in the network system 1, the tablet 4 communicates directly with the device 3 via a wired connection such as a cable connection or a wireless connection such as short-range communication. Furthermore, when the tablet 4 is detached from the device 3, the tablet 4 performs network communication via wireless communication using the tablet 4's network settings. When detached from the device 3, the tablet 4 operates as a remote UI for the device 3 and connects to the device 3 wirelessly using HTTP (Hypertext Transfer Protocol) or the like. The protocol used may also be HTTPS (Hypertext Transfer Protocol Secure). In this case, when the tablet 4 is located within the internal area AR, name resolution is prioritized using a local DNS within the internal area AR, i.e., a normal DNS server. On the other hand, when the tablet 4 is not used to remotely operate the device 3 but is used, for example, to connect to a server outside the internal area AR and access data using a normal browser, DNS encryption is prioritized.

[0060] For example, if the tablet 4 is removed from the device 3 and the user goes out with the tablet 4 in his / her possession, and the tablet 4 cannot be connected to the device 3 and becomes disconnected, the communication path with DNS encryption is prioritized.

[0061] Note that the connection for direct communication between the device 3 and the tablet 4 is not limited to a wired connection such as a cable connection or a wireless connection such as short-range communication as a communication method that can connect the device 3 and the tablet 4. For example, communication between the device 3 and the tablet 4 may be performed via a device that relays communication between the device 3 and the tablet 4.

[0062] Fig. 6 is a flowchart showing an example of the flow of processing by the program 45P of the tablet 4. Figs. 7 to 11 are conceptual diagrams showing an example of the flow of information between devices in the network system 1.

[0063] Specifically, in the tablet 4, the CPU 40A executes the following steps in response to an instruction to start the program 45P.

[0064] 6, the CPU 40A acquires information indicating a request for job execution in the acquisition unit 400. Here, as the information indicating the job execution request, information indicating an instruction to acquire a file from the data server 5 and print it on the device 3 is acquired.

[0065] Next, in step S102, the CPU 40A determines in the determination unit 410 whether the tablet 4 is attached to the device 3. Specifically, it determines whether the tablet 4 is connected via a wired connection or a short-range wireless connection as described above. If the tablet 4 is not attached to the device 3 but is detached, the result in step S102 is negative, and the CPU 40A proceeds to step S106. On the other hand, if the tablet 4 is attached to the device 3, the result in step S102 is positive, and the CPU 40A stores the setting data of the device 3, which is a predetermined device, in step S104. Specifically, the IP address of the device 3 is copied to the tablet 4. That is, the IP address that indicates the location of the device 3 on the network, which is stored in the IP area 34A of the device 3, is obtained, and stored in the device IP area 43C of the tablet 4 as the IP address of the attached device 3.

[0066] The IP address of the device 3 may be stored in the tablet 4 when the tablet 4 is removed from the device 3 or immediately before that.

[0067] Next, in step S106, the CPU 40A determines in the determination unit 410 whether the tablet 4 is in a detached state in which it has been detached from the device 3, as in step S102. If the tablet 4 is in a detached state, the result in step S106 is affirmative, and the process proceeds to step S108 to execute processing corresponding to the detached state of the tablet 4. On the other hand, if the tablet 4 is not in a detached state (i.e., if it is in an attached state), processing is executed when the tablet 4 is attached to the device 3 as the tablet state SB in the network system 1 (details will be described later). If the result in step S106 is negative, the process proceeds to step S140 to execute processing corresponding to the attached state of the tablet 4.

[0068] In step S108, the CPU 40A performs processing identification for the detached state of the tablet 4 in the determination unit 410. The processing identification includes identification of the device that executes the job and identification of the communication path when the job is executed.

[0069] Next, in step S110, the CPU 40A executes a connection check in the determination unit 410 using the setting data of a predetermined device, which is the device 3 to which the tablet 4 is attached. That is, the connection check is executed using the IP address of the device 3 stored in the device IP area 43C of the tablet 4.

[0070] Next, in step S112, the CPU 40A uses the determination unit 410 to determine whether the tablet 4 is located within the internal area AR based on the confirmation result of step S110. Specifically, if the connection check to the IP address of the device 3 stored in the tablet 4 is successful, the tablet 4 is located within the internal area AR. On the other hand, if the check fails, the tablet 4 is not located within the internal area AR, for example, is located outside the internal area AR.

[0071] If the result in step S112 is affirmative, processing is executed in the case where the tablet 4 has been removed from the device and is located within the internal area AR, as the tablet state SA in the network system 1. On the other hand, if the result in step S112 is negative, processing is executed in the case where the tablet 4 has been removed from the device and is located outside the internal area AR, as the tablet state SC in the network system 1 (details will be described later).

[0072] Next, in step S114, CPU 40A determines in determining section 410 whether the process identified in step S108, ie, the execution of the job, is to be processed by a predetermined device.

[0073] If the result in step S114 is YES, CPU 40A advances the process to step S116. In step S116, CPU 40A uses determination section 410 to determine whether the server to be connected to for job execution is within internal area AR.

[0074] Next, in step S118, CPU 40A sets a communication path in setting unit 420, and instructs device 3, which is a predetermined device, to execute a job in control unit 430, and ends this processing routine.

[0075] FIG. 7 is a conceptual diagram showing the flow of information when tablet 4 issues a print instruction for data stored in data server 5. In FIG.

[0076] Here, we assume that a detachable tablet 4 is attached to a device 3 connected to a network within the internal area AR, and is then detached and used within the internal area AR. The device 3 connected to a network within the internal area AR has an area (settings memory 34) on the device side that stores network settings for DNS communication. These network settings include the IP address of the device 3, the FQDN name, the names, addresses, and domain names of the cryptographic DNS server and the normal DNS server. The tablet 4 also has a wireless connection function via Wifi (registered trademark), and when detached from the device 3, it obtains and uses an IP address unique to the tablet 4 from a DHCP server or the like. The tablet 4 also has an area (settings memory 43) that stores the settings of the cryptographic DNS server and the normal DNS server to be used when detached.

[0077] In addition, the following information is to be set: Device 3: (IP address) 192.168.0.10 Device 3: (Domain) MF1.CORP.INTERNAL Tablet 4: (IP address) 192.168.128.1 Tablet 4: (Domain) MF1-UI.CORP.INTERNAL Data Server 5: (IP address) 192.168.64.100 Data Server 5: (Domain) NAS.CORP.INTERNAL Print file:\\NAS.CORP.INTERNAL\BROCHURE001 Regular DNS Server 6: (IP address) 192.168.0.1 Regular DNS Server 6: (Domain) CORP.INTERNAL

[0078] When specifying data stored in the data server 5 to be printed from the tablet 4, the destination is determined to be a server within the internal area AR based on the domain or private IP address, and the tablet 4 is set to perform name resolution using normal DNS.

[0079] In detail, as indicated by the two-dot chain line in the figure, tablet 4 stores device 3's IP address (192.168.0.10) in the device IP area 43C in the state before it was removed from device 3 (S104). With tablet 4 removed from device 3, the user selects the file to be printed from the data on data server 5, enters the file as "\\NAS.CORP.INTERNAL\BROCHURE001," and specifies printing of one copy. The user also specifies device 3 to perform the printing (IP address: 192.168.0.10). Tablet 4 acquires the specified information (S100). Tablet 4 checks the connection to device 3's IP address and determines whether it is located within the internal area AR (S112). Then, as shown by the dotted line in the figure, if the connection confirmation with device 3 is successful, it is determined that the connection destination is within the internal area AR (affirmative in S116), and address resolution is performed (S118) by setting the tablet's network information to use the normal DNS server 6, as shown by the solid line in the figure. After the address resolution, tablet 4 obtains the print file and issues a print instruction to the address 192.168.0.10 of device 3, a predetermined device, via network communication.

[0080] In the above, the determination was made based on the IP address, but the determination can also be made based on the domain. For example, by comparing the domain MF1-UI.CORP.INTERNAL of the tablet 4 with the domain NAS.CORP.INTERNAL of the data server 5 specified as the print file, if the domains match, it can be determined to be a local domain, and the network information settings of the tablet 4 can be configured to use the normal DNS server 6 for address resolution.

[0081] Next, a print instruction from the device 3 specifying a print file in the cloud server 9 outside the internal area AR will be described. In step S100 shown in FIG. 6, if a print instruction is acquired from device 3 specifying a print file on cloud server 9 as a job request, CPU 40A determines No in step S116 and advances the process to step S130.

[0082] In step S130, the CPU 40A sets a communication path using the encryption DNS server 8 in the setting unit 420, and instructs the device 3, which is a predetermined device, to execute the job in the control unit 430, and ends this processing routine.

[0083] FIG. 8 is a conceptual diagram showing the flow of information when tablet 4 issues a print instruction for data stored in cloud server 9. In FIG.

[0084] Here, the following information is set: Cloud Server 9: (Domain)FILES.CONTOSO.COM Print file: \\FILES.CONTOSO.COM\CATALOG100 Encrypted DNS Server 8: (IP address) xxx.xxx.xxx.xxx <global IP address> Crypto DNS Server 8: (Domain) ANGO.COM

[0085] When a service such as a cloud printing service is applied from the tablet 4 to specify printing of data stored in the data server 5, it is determined from the domain or global IP address of the cloud server 9 to which the connection is made that the connection destination is the cloud and not a server within the internal area AR, and the tablet 4 is set to perform name resolution using encrypted DNS.

[0086] In detail, the user selects the file "\\FILES.CONTOSO.COM\CATALOG100" from the data on the cloud server 9 and specifies that one copy should be printed. The user also specifies the device 3 on which the printing will be performed. The tablet 4 acquires the specified information (S100), determines that the server to be used is a server on the cloud outside the internal area AR (negated in S116), and performs address resolution by setting the tablet's network information to use the cryptographic DNS server 8, as shown by the solid line in the figure (S130). After the address resolution, the tablet 4 acquires the print file and issues a print instruction to the device 3, a predetermined device, via network communication.

[0087] Note that network information can be set in the same way when displaying site information on the World Wide Web (Web) outside the internal area AR from the tablet 4 and printing the displayed content. That is, the tablet 4 connects to a server located in a cloud outside the internal area AR. For this reason, the network settings of the tablet 4 are set to use the encrypted DNS server 8. Furthermore, printing print data is a separate connection, and the connection for issuing a print instruction from the tablet 4 to the device 3 can be achieved by directly specifying an IP address or by including a setting to use the normal DNS server 6 in the network settings of the tablet 4.

[0088] Next, we will explain a print instruction from a device other than a predetermined device, such as an instruction to print from an adjacent device. Here, we will explain a case where an instruction to print data stored in device 3 is executed by device 3-1 adjacent to device 3.

[0089] In step S100 shown in FIG. 6, if a print instruction for an adjacent device other than device 3, which is a device predetermined as a job request, is acquired, CPU 40A determines No in step S114 and advances the process to step S120.

[0090] If the result of step S114 is negative, then in step S120, similar to step S116, the CPU 40A determines in the determination unit 410 whether the server to be connected to for job execution is within the internal area AR. If the server is within the internal area AR, the CPU 40A determines in step S120 in the affirmative, and in step S122, similar to step S118 above, the setting unit 420 sets a communication path, the control unit 430 instructs the device 3, which is a predetermined device, to execute the job, and ends this processing routine. On the other hand, if the server is not within the internal area AR, then in step S130 above, the CPU 40A sets in the setting unit 420 a communication path using the cryptographic DNS server 8, and the control unit 430 instructs the device 3, which is a predetermined device, to execute the job, and ends this processing routine.

[0091] 9 is a conceptual diagram showing the flow of information when tablet 4 specifies printing by device 3-1 adjacent to device 3. That is, tablet 4 executes an instruction to print data stored in device 3 (MF1.CORP.INTERNAL / BOX1:FILE1) by device 3-1 adjacent to device 3.

[0092] Here, the following information is set: Device 3: (IP address) 192.168.0.10 Device 3: (Domain) MF1.CORP.INTERNAL Accumulated data: MF1.CORP.INTERNAL / BOX1:FILE1 Device 3-1: (IP address) 192.168.0.11 Device 3-1: (Domain) MF2.CORP.INTERNAL Tablet 4: (IP address) 192.168.128.1 Tablet 4: (Domain) MF1-UI.CORP.INTERNAL Print instructions: Print data / stored data, print destination / device 3-1

[0093] When the tablet 4 issues an instruction to print from a device adjacent to a predetermined device, the tablet 4 first identifies the adjacent device 3-1. Specifically, as shown by the solid line in Fig. 9, the tablet 4 identifies the adjacent device 3-1 by reading a two-dimensional code formed so that the IP address (i.e., stored in the IP area 34-1A) of the adjacent device 3-1 can be obtained, or by obtaining the address through short-range communication.

[0094] Next, the tablet 4 determines whether the predetermined device 3, which is the connection destination, and the identified adjacent device 3-1 are located within the internal area AR. Here, since communication with the predetermined device 3 is successful and short-range communication with the adjacent device 3-1 is also successful, it is determined that both are located within the internal area AR. Next, since the connection destination is within the internal area AR, the tablet 4 sets the network information settings of the tablet 4 to information that performs address resolution using the normal DNS server 6. In other words, the device settings use normal DNS.

[0095] Specifically, as shown by the solid line in the figure, tablet 4 identifies adjacent device 3-1 and determines that both are located within the internal area AR. Then, as shown by the dotted line in the figure, tablet 4 issues an instruction to device 3 to print the stored print file at adjacent device 3-1 through address resolution by the normal DNS server 6. Upon receiving the instruction from device 3, adjacent device 3-1 prints the print file.

[0096] Next, a case where a print instruction is given in a state where the tablet 4 is attached to a predetermined device (that is, the device 3) will be described. In step S106 shown in FIG. 6, if the tablet 4 is attached to the device 3, the CPU 40A makes a negative determination, sets the tablet state in the network system 1 to SB, and advances the process to step S140.

[0097] In step S140, similarly to step S108, the CPU 40A performs processing identification of the attachment state of the tablet 4 in the determination unit 410. The processing identification includes identification of the device that executes the job and identification of the communication path when the job is executed.

[0098] Next, in step S142, CPU 40A executes processing in accordance with the settings of device 3, which is a predetermined device. That is, tablet 4 instructs device 3 to execute the job, and ends this processing routine.

[0099] FIG. 10 is a conceptual diagram showing the flow of information when a print instruction is issued with the tablet 4 attached to the device 3. As shown by the solid line in Figure 10, when the tablet 4 is connected to the device 3 without being removed, the communication between the tablet 4 and the device 3 does not use DNS, so encryption between the tablet 4 and the device 3 does not need to be considered. In other words, the tablet 4 only communicates with the device 3, and communication between the device 3 and the tablet 4 and the outside originates from the device, so the network settings of the device 3 can be followed. For example, if the domain is within the internal area AR, the device settings can use the normal DNS server 6. On the other hand, if a cloud server 9 or the like outside the internal area AR is used, the device settings can use the encrypted DNS server 8.

[0100] Next, a case where a print instruction is given when the tablet 4 is detached from the device 3 and positioned outside the internal area AR will be described. In this case, since the determination of communication paths outside the internal area AR is included, it is assumed that the DNS is located outside the internal area AR, for example, on the cloud side, and that it can resolve the device's FQDN (Fully Qualified Domain Name).It is also assumed that a service is built that uses a domain outside the internal area AR, allocates it with a CNAME (Canonical Name), and can resolve addresses via encrypted DNS.

[0101] As shown in FIG. 6, when the tablet 4 is detached from the device 3 and located outside the internal area AR, the CPU 40A makes a negative determination in step S112, sets the tablet state in the network system 1 to SC, and proceeds to step S150.

[0102] In step S150, the CPU 40A executes address resolution. Specifically, the tablet 4 checks whether connection is possible using the IP address of the device 3 before removal, and if the attempt fails, the tablet 4 is deemed to be located outside the internal area AR. Also, when the normal DNS server 6 is specified by a private address, it requests the IP address of the device 3, and if the IP address in response includes both a private address and a global address, it attempts connection using the private address. If the attempt fails, the tablet 4 is deemed to be located outside the internal area AR. Next, if the tablet 4 is located outside the internal area AR, address resolution is performed using the cryptographic DNS server 8 as the network settings for the tablet 4 to connect to the device 3.

[0103] In step S152, the CPU 40A requests the device 3 to execute processing. Specifically, the tablet 4 connects to the normal DNS server 6, which is capable of address resolution, via the cryptographic DNS server 8, and acquires the IP address of the device 3, which is capable of external communication. The tablet 4 instructs the device 3 to obtain and print the file. That is, it instructs the device 3 to execute the job, and ends this processing routine. As a result, the device 3 can use the received IP address and instruction to resolve the address of the connection destination using the normal DNS server 6 as a device setting, and can obtain and print the file.

[0104] FIG. 11 is a conceptual diagram showing the flow of information when a tablet 4 that has been removed from the device 3 and is located outside the internal area AR instructs the device 3 to print.

[0105] Here, we will explain a case where data stored in the data server 5 within the internal area AR is specified to be printed from a tablet 4 taken outside the internal area AR to a device 3 from which the tablet 4 has been removed. In this case, based on the determination of the internal area AR, the tablet 4 connects to the device 3 using address resolution in its network settings that uses the encrypted DNS server 8, and the device 3 connects to the data server 5 within the internal area AR using address resolution in its device settings that uses a normal DNS server.

[0106] Here, the following information is set: Device 3: (IP address) 192.168.0.10 Device 3: (Domain) MF1.CORP.LOCAL Device 3: (External domain) MF1.CORP.CONTOSO.COM Tablet 4: (IP address) 192.168.128.1 Tablet 4: (Domain) MF1-UI.CORP.LOCAL Data Server 5: (IP address) 192.168.64.100 Data Server 5: (Domain) NAS.CORP.LOCAL Print file:\\NAS.CORP.LOCAL\BROCHURE001 Regular DNS Server 6: (IP address) 192.168.0.1 Regular DNS Server 6: (Domain) CORP. LOCAL Encrypted DNS Server 8: (IP address) xxx.xxx.xxx.xxx <global IP address> Crypto DNS Server 8: (Domain) ANGO.COM Print instructions: Print file, print destination / device 3

[0107] When a user removes the tablet 4 attached to the device 3 and takes it outside the internal area AR of a company, etc., network settings are made on the tablet 4 so that the tablet 4 can be used on a network outside the internal area AR. The network settings are set in the setting value area 43B of the setting memory 43. That is, when the user wishes to print outside the internal area AR, network information such as wireless settings for network connection is set on the tablet 4 so that the tablet 4 can be used on a network outside the internal area AR. In addition, the tablet 4 obtains information (¥¥NAS.CORP.LOCAL¥BROCHURE001) that is stored in the data server 5 and indicates the print file specified by the user in order to issue a print instruction (S100).

[0108] As shown by the dotted line between device 3 and tablet 4 in Figure 11, tablet 4 determines whether tablet 4 is located within the internal area AR by performing a connection check using the IP address of device 3 stored in device IP area 43C (S112). If tablet 4 is located outside the internal area AR, the connection check fails. Therefore, tablet 4 sets the cryptographic DNS server 8 as a network setting and performs address resolution to connect to device 3 using the cryptographic DNS server 8 (S150).

[0109] Specifically, to obtain the network settings for tablet 4, the cryptographic DNS server 8 queries the cryptographic DNS server 8 for the address of device 3 using data (MF1.CORP.CONSOTO.COM) as the external domain of device 3 for access from outside the internal area AR, thereby resolving the address of device 3. In response to the query for domain (CORP.CONSOTO.COM), the cryptographic DNS server 6 connects to the normal DNS server 6 that can resolve the address of the domain (CORP.CONSOTO.COM) and obtains an address that allows device 3 to communicate with the outside world. Because tablet 4 is outside the internal area AR, the cryptographic DNS server 6 instructs device 3 to obtain and print the print file (\\NAS.CORP.LOCAL\BROCHURE001). Based on the address and print instruction received from tablet 4, device 3 resolves the address of the domain (NAS.CORP.LOCAL) using the normal DNS server 6 as the device settings, obtains the print file, and prints it.

[0110] 11, data stored in the data server 5 is used as a print file, but similar processing is also possible when data stored in the device 3 is stored in the cloud server 9 by the tablet 4 from outside the internal area AR. That is, the network settings of the tablet 4 can be set to use the cryptographic DNS server 8 for address resolution and connection, and the connection from the tablet 4 to the cloud server 9 can also be set to use the cryptographic DNS server 8 as the network settings of the tablet 4.

[0111] For example, suppose a user displays a list of files in a data storage box BOX provided in device 3, displays the contents of a specified file on tablet 4, and saves the selected file on cloud server 9. In this case, address resolution for device 3 is performed, similar to the process shown in FIG. 8 , to obtain a list of files in the box BOX within device 3. Next, the contents of the obtained files are displayed on tablet 4 so that they can be selected. Then, to save the selected file on cloud server 9, tablet 4 can be configured to use the cryptographic DNS server 8 as part of its network settings to perform address resolution for cloud server 9 and save the file.

[0112] Furthermore, when the tablet 4 only displays data and instructs the device 3 to transmit the data to the cloud server 9, the same processing can be performed. That is, since this is external communication from the device 3 to the cloud server 9, it is sufficient to set the network settings of the device 3 to use a cryptographic DNS server. Specifically, when saving a file to the cloud server 9, instead of executing file transmission from the tablet 4, the device 3 may instruct the cloud server 9 to transmit the file.

[0113] The CPU 40A may communicate with a DHCP server (not shown) to acquire the address of a server such as the normal DNS server 6.

[0114] As described above, the response and security of communication can be improved compared to when the communication path is specified and switched depending on the information to be communicated.

[0115] Second Embodiment Next, a second embodiment of the present disclosure will be described. In the second embodiment, the technology of the present disclosure is applied to a user terminal such as a mobile phone or tablet terminal that can be used individually, instead of the tablet 4 that can be attached to and detached from a device 3 such as a multifunction peripheral, which is applied in the first embodiment. Since the second embodiment has the same configuration as the twelfth embodiment, the same parts are assigned the same reference numerals and detailed description will be omitted.

[0116] Individually available user terminals such as mobile phones and tablet terminals do not operate device 3, but are equipped with mechanisms that enable communication via telephone lines and network communication via wireless or wired connections. Therefore, when applying the technology of the present disclosure to a user terminal, it is sufficient to set it in advance so that it operates in the same way as the tablet 4 described above.

[0117] In the second embodiment, the user terminal according to the second embodiment will be described as the user terminal 4-UI. Note that the user terminal 4-UI has the same configuration as the tablet 4 shown in FIG. 3, and therefore a detailed description of the user terminal 4-UI will be omitted. Hereinafter, each component of the tablet 4 will be described as the configuration of the user terminal 4-UI, with the symbol "-UI" attached. Furthermore, even when each of the above-described components is described as a configuration to which the user terminal 4-UI is applied, the component will be described with the symbol "-UI" attached.

[0118] The user terminal 4-UI according to this embodiment is an example of a terminal of the present disclosure.

[0119] Fig. 12 is a diagram showing an example of the configuration of a network system 1-UI according to this embodiment, which has the same configuration as the network system 1 shown in Fig. 1. The network system 1-UI shown in Fig. 12 differs from Fig. 1 in that the tablet 4 shown in Fig. 1 is replaced with a user terminal 4-UI.

[0120] As shown in FIG. 12, in the network system 1-UI, the user terminal 4-UI is configured to be attachable to and detachable from the device 3. For example, the device 3 and the user terminal 4-UI are configured to be in an attached state by a direct connection between them, such as a wired connection or a connection between them via short-range wireless communication, and to be in a detached state when the direct connection is terminated. In FIG. 12, the attachable and detachable states are indicated by dotted lines. When attached to the device 3, the user terminal 4-UI operates as a UI panel for operating the device 3.

[0121] The user terminal 4-UI is configured in the same manner as in the above embodiment, with a memory area set up to store network setting information used when communicating on the network, such as IP addresses in the network environment, so that each device included in the network system 1-UI can identify the other device and exchange information with the other device.

[0122] Specifically, the user terminal 4-UI is allocated a setting memory 43-UI in a memory or auxiliary storage device 45 (not shown). The setting memory 43-UI is provided with an IP area 43A-UI and a setting value area 43B-UI, and stores network setting information including at least an IP address and setting values ​​unique to the user terminal 4-UI. The setting memory 43-UI is also allocated a device IP area 43C-UI for storing the IP address of the attached device 3.

[0123] In this embodiment, a memory area 43D-UI is also allocated to the setting memory 43-UI. The memory area 43D-UI is a memory area that stores information indicating that the user terminal 4-UI is registered as the UI unit 32 of the device 3. For example, identification information unique to the device 3 is stored in the memory area 43D-UI. Furthermore, it is assumed that a memory area 34D-UI is set in the setting memory 43 of the device 3. Similar to the memory area 43D-UI, the memory area 34D-UI is a memory area on the device 3 side that stores information indicating that the user terminal 4-UI is registered as the UI unit 32 of the device 3. For example, identification information unique to the user terminal 4-UI, such as a MAC address, is stored in the memory area 34D-UI.

[0124] 13 is a flowchart showing an example of the flow of a process for registering the user terminal 4-UI as the tablet 4 in the device 3. The process shown in FIG. 13 is executed by the CPU 40A of the user terminal 4-UI.

[0125] In the user terminal 4-UI, when the CPU 40A receives a request to register the user terminal 4-UI as the UI unit 32 of the device 3 in response to a user instruction, the CPU 40A executes the following steps.

[0126] In step S200, the CPU 40A determines whether the user terminal 4-UI is not yet registered in the device 3 as a predetermined device by determining whether identification information is not yet stored in the memory area 34D-UI. That is, in step S200, it determines whether the user terminal 4-UI is registered as a device with the same configuration as the tablet 4. If it is registered, the result in step S200 is negative, and this processing routine is terminated. On the other hand, if it is not yet registered, the result in step S200 is affirmative, and the processing proceeds to step S202.

[0127] In step S202, the CPU 40A transmits information to the device 3 indicating a request to register the user terminal 4-UI as the UI unit 32. The transmitted information includes, for example, identification information unique to the user terminal 4-UI, such as a MAC address. The device 3 receives the request from the user terminal 4-UI, stores the identification information of the user terminal 4-UI in the memory area 34D-UI, and returns information indicating registration approval, indicating that registration has been completed, to the user terminal 4-UI. The information indicating registration approval returned from the device 3 to the user terminal 4-UI includes identification information unique to the device 3.

[0128] In step S204, the CPU 40A receives information indicating registration approval from the device 3, and stores identification information unique to the device 3 in the storage area 43D-UI. This enables direct communication between the device 3 and the user terminal 4-UI. Next, in step S206, the CPU 40A sets the state of the user terminal 4-UI as being attached to the device 3, and ends this processing routine.

[0129] As described above, by registering the user terminal 4-UI in the device 3, the user terminal 4-UI can be used as a terminal that operates in the same manner as the tablet 4 described above.

[0130] [Other forms] In the above-described embodiment, a case where printing is performed using print data as job execution has been described, but the technology disclosed herein is not limited to the execution of a process related to printing as job execution. For example, the technology disclosed herein may of course be applied to a scan process that reads and stores an image.

[0131] Although the technology of the present disclosure has been described in detail above with respect to a specific embodiment, the technology of the present disclosure is not limited to such an embodiment, and various other embodiments are possible within the scope of the technology of the present disclosure.

[0132] In the above embodiment, the processing performed by executing a program has been described, but the processing of the program may be realized by hardware. For example, part of the processing of the program may be realized by a hardware configuration, or may be realized by a configuration that combines hardware and software configurations. The embodiment may also be in the form of a storage medium, such as an optical disk, that stores the above-described program and is readable by a computer.

[0133] In addition, the system configuration described in the above embodiment is an example, and may be changed depending on the situation without departing from the scope of the invention. Furthermore, the processing flow of the program described in the above embodiment is also an example, and unnecessary steps may be deleted, new steps may be added, or the processing order may be changed without departing from the scope of the invention.

[0134] In this disclosure, the term "processor" refers to a processor in a broad sense, and includes general-purpose processors (e.g., CPUs, etc.) and dedicated processors (e.g., GPUs: Graphics Processing Units, ASICs: Application Specific Integrated Circuits, FPGAs: Field Programmable Gate Arrays, programmable logic devices, etc.). Furthermore, the operations of the processors in the above embodiments may not only be performed by a single processor, but may also be performed by multiple processors located at physically separate locations working together. Furthermore, the order of the operations of the processors is not limited to the order described in the above embodiments, and may be changed as appropriate.

[0135] The above embodiment includes the following techniques. (((1))) A processor and a memory, The processor: When a terminal requests execution of a job to a device that can be attached and detached to the terminal, When a terminal is attached to the device and the device and the terminal are in a connected state, controlling the terminal to request the device to execute the job indicating that communication will be performed using first network setting information set in the device; When a terminal is removed from the device and the device and the terminal are in a disconnected state, the information processing system controls the terminal to request the device to execute the job based on the job, which indicates communication using second network setting information stored in the memory and different from the first network setting information, the second network setting information including network settings related to communication corresponding to each security level of a plurality of networks with different security levels. (((2))) The information processing system described in (((1))) includes the processor setting, as the second network setting information, network setting information corresponding to the security level of the communication path when communicating during execution of the job. (((3))) The information processing system described in (((2))) includes setting, as the second network setting information, network setting information including network settings corresponding to a security level regarding the communication path to the communication destination based on information indicating the communication path to the communication destination in the job. (((4))) The information processing system described in (((3))), wherein the processor sets information indicating that communication will be performed using a predetermined encryption process as the second network setting information when the security level of the information indicating the communication path to the communication destination is lower than a predetermined security level. (((5))) storing in advance in the memory location information indicating a location on the network of a predetermined device; the processor determines whether the state between the device and the terminal is the connected state or the non-connected state based on a communication result when communication is performed using the location information. An information processing system according to any one of (((1))) to (((4))). (((6))) The information processing system according to (((5))), wherein the processor stores the location information in the memory when the terminal is detached from the device. (((7))) The information processing system described in (((6))) includes the processor storing location information (IP) indicating the location of the device on the network obtained from the device in the memory when the device is in the connected state, and determining whether the state between the device and the terminal is the connected state or the non-connected state based on the stored location information. (((8))) The information processing system described in (((7))) includes the processor determining whether the state between the device and the terminal is the connected state or the non-connected state based on a communication result from direct communication between the terminal and the device. (((9))) If the direct communication is successful, the state is determined to be the connected state; If the direct communication is unsuccessful, the non-connection state is determined. The information processing system according to (((8))). (((10))) A program that causes a processor to process information, the processor, When a terminal requests execution of a job to a device that can be attached and detached from the terminal, When a terminal is attached to the device and the device and the terminal are in a connected state, controlling the terminal to request the device to execute the job indicating that communication is to be performed using first network setting information set in the device; When the terminal is removed from the device and the device and the terminal are in a disconnected state, controlling the terminal to request the device to execute the job based on the job, the job indicating that communication will be performed using second network setting information stored in a memory and different from the first network setting information, the second network setting information including network settings related to communication corresponding to each security level of a plurality of networks with different security levels; A program characterized by executing a process indicating that:

[0136] The effects of the above technology are as follows. According to the techniques (((1))) and (((10))), it is possible to improve the responsiveness and security of communication compared to when communication is performed using network setting information set in the terminal. According to the technology of (((2))), it is possible to improve the responsiveness and security of communication for each job, compared to when the security level in communication during job execution is not taken into consideration. According to the techniques (((3))) and (((4))), it is possible to improve the responsiveness and security of communication compared to when the security level of the communication path to the communication destination in the job is not taken into consideration. According to the technology in (((5))), the connection state of a terminal to a detachable device can be identified, compared to when communication is performed without taking the device's location into consideration. According to the technology of (((6))), it is possible to store the location information fewer times than when the location information is stored multiple times while attached to the device. According to the technology of (((7))), the processing load related to the determination can be reduced compared to determining the status of the device and the terminal regardless of the location of the device on the network. According to the techniques (((8))) and (((9))), the processing load related to the determination can be reduced compared to when the determination is made without taking into account the type of communication between the terminal and the device. [Explanation of symbols]

[0137] 1 Network System 2 Internal Network 3 Devices 4 tablets 5 Data Server 6 Server 7 Access Points 8. Cryptographic DNS Server 9. Cloud Server 31 Communications Department 31A Near field communication section 34 Setting memory 34A IP area 34B Setting value area 34D storage space 35P Program 41 Communications Department 41A Near field communication section 43 Setting memory 43A IP area 43B Setting value area 43C Device IP Area 43D storage space 45P Program 400 Acquisition Department 410 Judgment section 420 Settings 430 Control Unit AR Internal Area

Claims

1. A processor and a memory, The processor: When a terminal requests execution of a job to a device that can be attached and detached to the terminal, When a terminal is attached to the device and the device and the terminal are in a connected state, controlling the terminal to request the device to execute the job indicating that communication will be performed using first network setting information set in the device; When the terminal is detached from the device and the device and the terminal are in a disconnected state, the terminal is controlled based on the job to request the device to execute the job indicating that communication will be performed using second network setting information that is stored in the memory and different from the first network setting information, the second network setting information including network settings related to communication corresponding to each security level of a plurality of networks with different security levels. Information processing system.

2. the processor sets, as the second network setting information, network setting information corresponding to a security level of a communication path used for communication in executing the job; The information processing system according to claim 1 .

3. the processor sets, as the second network setting information, network setting information including a network setting corresponding to a security level related to a communication path to the communication destination based on information indicating the communication path to the communication destination in the job; The information processing system according to claim 2 .

4. the processor sets, as the second network setting information, information indicating that communication is to be performed after performing a predetermined encryption process when a security level of information indicating the communication path to the communication destination is lower than a predetermined security level. The information processing system according to claim 3 .

5. storing in advance in the memory location information indicating a location on the network of a predetermined device; the processor determines whether the state between the device and the terminal is the connected state or the non-connected state based on a communication result when communication is performed using the location information. The information processing system according to claim 1 .

6. the processor stores the location information in the memory when the terminal is removed from the device; The information processing system according to claim 5 .

7. the processor stores, in the memory, location information indicating a location of the device on the network, acquired from the device, when in the connected state, and determines whether the state between the device and the terminal is the connected state or the non-connected state based on the stored location information; The information processing system according to claim 6.

8. The processor determines whether a state between the device and the terminal is the connected state or the non-connected state based on a communication result of direct communication between the terminal and the device. The information processing system according to claim 7 .

9. If the direct communication is successful, the state is determined to be the connected state; If the direct communication is unsuccessful, the non-connection state is determined. The information processing system according to claim 8 .

10. A program that causes a processor to process information, the processor, When a terminal requests execution of a job to a device that can be attached and detached from the terminal, When a terminal is attached to the device and the device and the terminal are in a connected state, controlling the terminal to request the device to execute the job indicating that communication is to be performed using first network setting information set in the device; When the terminal is removed from the device and the device and the terminal are in a disconnected state, controlling the terminal to request the device to execute the job based on the job, the job indicating that communication will be performed using second network setting information stored in a memory and different from the first network setting information, the second network setting information including network settings related to communication corresponding to each security level of a plurality of networks with different security levels; A program characterized by executing a process indicating that:

Images