Information processing device, control method, control program

Abstract

The present invention provides an information processing device, control method, control program, and recording medium that appropriately display hints or the authentication information itself according to the authentication operation method requested by the user. [Solution] The information processing device comprises an authentication information management unit for managing authentication information and a UI content management unit. The UI content management unit displays a screen to the user, and the UI content, which is an HTML file, is the source data for the screen to be displayed. When the information processing device displays the authentication screen, it displays the HTML obtained from the UI content management unit, checks if the set authentication information is the default, and if it is the default, it displays the default authentication information; otherwise, the information processing device does not display the default authentication information.

Description

Technical Field

[0008] , ,

[0001] The present invention relates to authentication management of an information processing apparatus.

Background Art

[0002] Administrator authority of an information processing apparatus is given by authenticating as an administrator user. Authentication is generally performed by inputting authentication information consisting of a username and a password.

[0003] This authentication information has a default value set at the time of shipment of the information processing apparatus, and that value is often described in a manual or the like and is well known.

[0004] Since it is vulnerable as it is, it is recommended to reset and use the authentication information, but users often forget the reset authentication information.

[0005] Therefore, a method (Patent Document 1) of setting a hint for remembering when the authentication information is forgotten has been devised.

Prior Art Documents

Patent Documents

[0006]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0007] However, in the above prior art, an operation is required to display the set hint, and a user unaccustomed to the operation cannot display the hint. Also, for unaccustomed users, it may be considered to always display the default authentication information on the apparatus so that the authentication information can be input without referring to the manual.

[0008] However, even after resetting the authentication credentials, the system continues to display these old default credentials, which can confuse users.

[0009] Therefore, it is necessary to appropriately display hints or the authentication information itself, depending on the authentication method requested by the user. [Means for solving the problem]

[0010] In the present invention, an information processing device having an authentication function based on authentication information, It has a display means for displaying the authentication information being set, It is characterized by the following: [Effects of the Invention]

[0011] According to the present invention, hints of authentication information or the authentication information itself can be displayed appropriately. [Brief explanation of the drawing]

[0012] [Figure 1] This is a schematic diagram showing an example of the hardware configuration of an information processing device. [Figure 2] This is a schematic diagram of the software configuration on an information processing device. [Figure 3] This is a schematic diagram showing the functional configuration of an information processing device. [Figure 4] This is an example of a settings screen displayed by the information processing device according to Example 1. [Figure 5] This is an example of an authentication screen displayed by the information processing device according to Example 1. [Figure 6] This is an example of the authentication information setting screen displayed by the information processing device according to Example 1. [Figure 7] This is an example of the authentication information setting screen displayed by the information processing device according to Example 6. [Figure 8] Examples of authentication information held by the information processing devices according to Example 1 and Example 6. [Figure 9] This is a flowchart of the process by which the information processing device according to Example 2 displays an authentication screen. [Figure 10] This is a flowchart of the process in which the information processing apparatus according to Example 5 displays an authentication screen. [Figure 11] This is a flowchart of the process in which the information processing apparatus according to Example 6 displays an authentication screen. [Figure 12] This is a flowchart of the process in which the information processing apparatus according to Example 7 displays an authentication screen. [Figure 13] This is a flowchart of the process in which the information processing apparatus according to Example 2 checks whether it is the default authentication setting. [Figure 14] This is a flowchart of the process in which the information processing apparatus according to Example 3 checks whether it is the default authentication setting. [Figure 15] This is a flowchart of the process in which the information processing apparatus according to Example 4 checks whether it is the default authentication setting. [Figure 16] This is a flowchart of the process in which the information processing apparatuses according to Example 1, Example 2, and Example 4 update authentication information. [Figure 17] This is an example of a screen displayed when the information processing apparatus according to Example 8 receives an instruction to update authentication information. [Figure 18] This is a flowchart of the process in which the information processing apparatus according to Example 1 displays an authentication screen. [Figure 19] This is a flowchart of the process in which the information processing apparatus according to Example 9 reflects the updated input of authentication information on the screen.

Embodiments for Carrying Out the Invention

[0013] Hereinafter, embodiments for carrying out the present invention will be described with reference to the drawings.

[0014] <Example 1> The configuration of the hardware and the system in the present invention will be described. FIG. 1 is a diagram showing an example of the hardware configuration of a general information processing apparatus 100. As shown in FIG. 1, the information processing apparatus 100 includes a CPU 11 as a hardware configuration.

[0015] The CPU 11 performs processing based on programs corresponding to applications, program execution environments, etc., which are stored in the memory means 13, thereby realizing the functions or flowcharts described later.

[0016] Furthermore, the CPU 11 is connected to an input means 12, a storage means 13, a display means 14, and an external connection IF 15 via a bus 10. The input means 12 is a keyboard and / or mouse for inputting information.

[0017] The storage means 13 includes, for example, ROM, RAM, hard disk drive, etc., and stores data used in processing based on the programs, in addition to the programs mentioned above. The display means 14 is a display (screen display means) that displays the screen, etc. The external connection IF 15 is a network interface and various connection interfaces to external devices.

[0018] Furthermore, the CPU 11 can function as various means by executing a program. Control circuits such as ASICs operating in cooperation with the CPU 11 may also function as these means. Alternatively, these means may be realized through the cooperation of the CPU 11 and a control circuit that controls the operation of the information processing device 100.

[0019] Furthermore, the CPU 11 does not need to be a single entity; there may be multiple CPUs. In this case, the multiple CPUs 11 can perform processing in a distributed manner. Also, the multiple CPUs 11 may be located in a single computer or in multiple physically different computers. The means by which the CPU 11 executes a program may also be implemented by a dedicated circuit.

[0020] Next, the system configuration to be built on the information processing device 100 will be explained using Figure 2. Figure 2 is a diagram showing an example of the system configuration of the information processing device 100. The operating system 201 (hereinafter referred to as OS201) is the software that forms the foundation of the entire system.

[0021] Program 202 is software that runs on OS201. This system configuration is similar to that of a typical computer.

[0022] Figure 3 shows the configuration of the functions provided by the information processing device 100. The information processing device 100 includes an authentication information management means 301 for managing authentication information.

[0023] While it is common to use a username and password string for authentication information, a four-digit number or gesture input on a touch panel is also acceptable.

[0024] From this point forward, these will be referred to as username and password strings.

[0025] As an example of the authentication function of the information processing device 100, if the authentication information entered by the user matches the pre-configured authentication information, authentication is successful and the information processing device (or some of its functions) becomes usable.

[0026] Furthermore, the information processing device 100 includes a UI content management means 302 for displaying a screen to the user. The UI content is the source data for the screen to be displayed, and in this embodiment it is an HTML (HyperText Markup Language) file, but there are no particular restrictions.

[0027] Figure 4 shows an example of a screen (UI screen) displayed by the information processing device 100. This screen may be displayed on the display screen of the information processing device 100, or it may be displayed when the information processing device 100 is accessed from a PC or smartphone via a web browser. In Figure 4, 401 is the frame of the entire display screen.

[0028] Areas 402, 403, and 404 in Figure 4 represent the operation menu of the information processing device 100. In the example in Figure 4, 403 is selected, and details of 403 are displayed in area 405 at the bottom of the screen. Operation instructions and hints (hint information) are also displayed in area 406. This Guide area 406 is always displayed together with 405, which displays the options and input fields for user operation, making it easily recognizable to the user.

[0029] If anyone could configure the various settings of the information processing device 100, there would be a risk of information leakage and problems; therefore, authentication is required before any configuration operations can be performed.

[0030] Figure 5 shows an example of an authentication screen displayed by the information processing device 100. This screen is displayed when the user selects menu item 403 or an item requiring authentication from menu item 405.

[0031] The 405 area displays a 501 field for entering the username of the authentication information, a 502 field for entering the password, and a 503 login button to perform authentication.

[0032] Information processing devices are typically configured with default authentication information at the time of shipment, and this default authentication information is usually documented in the product manual. This default authentication information is the initial setting (initial state) and is applied (set) during factory shipment or when the device is reset.

[0033] However, some users may contact the information processing device manufacturer's customer center by phone or other means without consulting the manual, which places a burden on the manufacturer. To prevent this burden, some products constantly display default authentication information in the 406 Guide area.

[0034] For example, as shown in Figure 5, the Guide area of ​​406 will always display that the default username is admin and the password is 123.

[0035] Because the default authentication credentials pose a security risk, users can change their credentials. A typical screen for changing authentication credentials is shown in Figure 6. In Figure 6, the user enters a new username in 601, a new password in 602, and then presses button 603 to complete the change.

[0036] The modified data is saved to the database. Figure 8(a) shows an example of the data that the database saves.

[0037] Up to this point, we have explained the overview using an example of the screen displayed by the information processing device 100. Next, we will explain the process flow of updating authentication information using Figure 16(a).

[0038] The flowchart in Figure 16(a) begins when a user updates their authentication information.

[0039] First, the information processing device 100 displays the screen for updating the authentication information shown in Figure 6 (S1601). Then, it retrieves the content entered on the screen (S1602). Next, the information processing device 100 updates the HTML of the Guide, that is, the HTML of area 406 (S1603).

[0040] In step S1603, the natural method for updating is to delete the string containing the default authentication information. Then, the information processing device 100 updates the database that holds the authentication information (S1604). This concludes the explanation of the process flow in which the information processing device 100 updates the authentication information.

[0041] Next, using Figure 18, the process flow for the information processing device 100 to display the authentication screen will be explained. When an operation requiring user authentication is performed, the process in the flowchart of Figure 18 begins. When the information processing device 100 displays the authentication screen in Figure 5, it displays the HTML obtained from the UI content management means 302 (S1801). The HTML required for the authentication screen in Figure 5 consists of areas 405 and 406.

[0042] When the default authentication credentials are used, the HTML for area 406 includes information about the default credentials; however, if non-default credentials are set, this information is not included. Therefore, information about the default authentication credentials is only displayed in the Guide when necessary.

[0043] The above describes the process by which the information processing device 100 displays authentication information in the Guide only when the default authentication information is used.

[0044] <Example 2> In Example 1, a method was described for changing the HTML data itself, which is displayed in area 406 of Figure 5, in accordance with the update of authentication information. However, depending on the configuration of the information processing device 100, the disk area that holds the HTML may be read-only, making it impossible to change the HTML.

[0045] Therefore, a method for changing the content displayed in area 406 of Figure 5 without modifying the HTML will be described as Example 2. In Example 2, since the HTML cannot be updated, the default authentication information is always included in the HTML stored on the device.

[0046] Using Figure 9, the process flow of the information processing device 100 according to Embodiment 2 displaying the authentication screen will be explained. When a user performs an operation that requires authentication, the process in the flowchart of Figure 9 begins. When the information processing device 100 displays the authentication screen in Figure 5, it displays HTML obtained from the UI content management means 302 (S901). The HTML required for the authentication screen in Figure 5 includes areas 405 and 406.

[0047] In this embodiment, the HTML in area 406 contains a string of default authentication information. The information processing device 100 then checks whether the configured authentication information is the default (S902).

[0048] There are several possible methods for step S902, which will be described in detail later. The information processing device 100 then refers to the result of step S902 and checks whether the default settings remain (S903). If the default settings remain, the information processing device 100 displays the default authentication information in the Guide area 406 (S904).

[0049] If the default settings are not used, the information processing device 100 will not display the default authentication information in the Guide area 406 (S905). In step S905, the information processing device 100 will not display the HTML in area 406 as is, but will remove the HTML tags containing the default string and display it (it will modify the HTML by adding hints for the authentication information to a predetermined location within the HTML and respond. The part of the information processing device that performs this processing will be the HTML response means).

[0050] Through the above process, the information processing device 100 can display information about the default authentication information in the Guide only when the default authentication information is used.

[0051] Conversely to the above explanation, the HTML held by the information processing device 100 may always be free of default authentication information, and the default authentication information string may be added and displayed in step S904.

[0052] Next, the details of the process in step S902 will be explained using Figure 13. Figure 13 is a flowchart of the process that checks whether the information processing device has the default authentication settings. When the process in step S902 is executed in the flowchart of Figure 9, the process in the flowchart of Figure 13 begins.

[0053] First, the information processing device 100 uses the authentication information management means 301 to retrieve the configured authentication information from the database (S1301). Then, the information processing device 100 checks whether the configured username and password strings match the check string (S1302). The check string can be easily stored within the firmware of the information processing device 100.

[0054] Then, if there is a match in step S1302, the information processing device 100 determines that the authentication information is the default (S1303), and if there is no match, it determines that it is not the default (S1304).

[0055] Next, the process for updating authentication information in Example 2 will be explained using Figure 16(b). The flowchart in Figure 16(b) starts when a user performs an operation to update their authentication information.

[0056] First, the information processing device 100 displays the screen for updating the authentication information shown in Figure 7 (S1605). Then, the information processing device 100 retrieves the information entered on the screen (S1606). Finally, the information processing device 100 updates the database that holds the authentication information (S1607).

[0057] The above describes how the information processing device 100 can change the content displayed in area 406 of Figure 5 without changing the HTML.

[0058] <Example 3> In Example 2, in step S902, the authentication information string stored in the database was compared with a check string. However, the database is empty at the time of factory shipment, and it is also common for the default authentication information to be applied when the database is empty.

[0059] Therefore, a method for omitting the verification using a check string will be described as Example 3.

[0060] The details of step S902 in Example 3 will be explained with reference to Figure 14.

[0061] Figure 14 is a flowchart of the process for checking whether the information processing device has the default authentication settings. The process in the flowchart of Figure 14 starts when the process in step S902 in the flowchart of Figure 9 is executed.

[0062] First, as in step S1301, the information processing device 100 obtains authentication information (S1401). If it cannot be obtained from the database, the information processing device 100 determines that the authentication information is the default, since the user has never changed their authentication information (S1403). If it can be obtained, the information processing device 100 determines that the authentication information is not the default (S1404).

[0063] The above describes how to omit verification using a check string when the information processing device 100 checks whether the configured authentication information is the default value.

[0064] <Example 4> In Example 2, the database string was compared with a check string in step S902. However, it is also possible to determine whether the configured authentication information is the default by creating a flag file when the user updates their authentication information, without using a check string. Therefore, the method using a flag file will be described in Example 4.

[0065] The details of step S902 in Example 4 will be explained using Figure 15. Figure 15 is a flowchart of the process for checking whether the information processing device has the default authentication settings. When the process of step S902 in the flowchart of Figure 9 is executed, the process in the flowchart of Figure 15 starts.

[0066] First, the information processing device 100 checks if a flag file exists (S1501). If it does not exist, the user has never changed their authentication information, and the information processing device 100 determines that the authentication information is the default (S1502). If it does exist, the information processing device 100 determines that the authentication information is not the default (S1503).

[0067] Next, the process for updating authentication information according to Example 4 will be explained using Figure 16(c). When a user performs an operation to update their authentication information, the flowchart in Figure 16(c) begins. First, the information processing device 100 displays the screen for updating authentication information shown in Figure 7 (S1608).

[0068] Then, the information processing device 100 acquires the content entered on the screen (S1609). Then, the information processing device 100 creates a flag file (S1610). Then, the information processing device 100 updates the database that holds the authentication information (S1607).

[0069] The above describes how the information processing device 100 refers to the flag file to check whether the configured authentication information is the default value.

[0070] <Example 5> Examples 1, 2, 3, and 4 describe how the information processing device 100 displays the default authentication information in the Guide area when the authentication information set in the information processing device 100 is the default.

[0071] Changing your default credentials can block attempts by viruses and bots to connect using those credentials. However, for users who prioritize convenience, there is a need to display the credentials in the Guide area in case they forget them, even while changing them to deter connections from viruses and bots.

[0072] Therefore, the process flow of the information processing device according to Example 5 that displays the authentication screen will be explained using Figure 10. When a user performs an operation that requires authentication, the process in the flowchart of Figure 10 begins.

[0073] When the information processing device 100 displays the authentication screen shown in Figure 5, it displays the HTML obtained from the UI content management means 302 (S1001). Then, the information processing device 100 obtains the configured authentication information (S1002).

[0074] Then, the information processing device 100 is in area 406 The authentication information string is inserted and displayed where the tag ID is "loginfo" (S1003).

[0075] The process flow for the information processing device 100 to change the authentication information may be the same as in Figure 16(b).

[0076] Through the above process, the information processing device 100 can always display the authentication information on the Guide in case the user forgets their authentication information.

[0077] <Example 6> In Example 5, the authentication information was displayed directly in the Guide area. However, displaying the authentication information in a hint-like format that only those in the know can understand would enhance security. Therefore, Example 6 describes a method for editing the Guide area when changing the authentication information.

[0078] The process flow for the information processing device 100 to change authentication information is the same as in Figure 16(b). Figure 7 shows an example of the screen for changing the authentication information displayed in Embodiment 6. In addition to 701 for entering the username and 702 for entering the new password, 703 for editing the content to be displayed in the Guide area is also displayed.

[0079] In the Guide area, some users enter their new password directly, while others enter a hint that only they know. Pressing button 704 executes the change. The change is saved to the database as shown in Figure 8(b).

[0080] Next, the process flow of the information processing device according to Embodiment 6 that displays the authentication screen will be explained using Figure 11. The process in the flowchart of Figure 11 starts when the user performs an operation that requires authentication.

[0081] First, in order to display the authentication screen in Figure 5, the information processing device 100 displays HTML obtained from the UI content management means 302 (S1101). The HTML required for the authentication screen in Figure 5 consists of areas 405 and 406. The HTML in area 406 contains tags for inserting a hint string for authentication information. Specifically, the HTML is It is easy to set the id attribute to "loginHint" using tags.

[0082] The information processing device 100 then checks whether the configured authentication information is the default (step S902). Details of step S902 are shown in Figure 13 mentioned earlier.

[0083] The information processing device 100 then checks if the authentication information is the default (S1103). If it is the default, the information processing device 100 displays the default authentication information (S1104).

[0084] Specifically, the string "Factory settings, AccountName is "admin", password is "123"." in Figure 5 describes the default authentication information. Area 406 in Figure 5 The explanatory string is set in the place where the tag ID is "loginHint". If not the default in step S1103, the information processing device 100 sets the Guide_string data in Figure 8(b) (S1105).

[0085] The above explains how to edit the Guide area when changing authentication information.

[0086] <Example 7> In Example 6, if a user changes their authentication information and does not enter anything in area 703 in Figure 7, no information regarding the authentication information will be displayed in the Guide area 406 on the screen in Figure 5 that requests login. However, some users expect that even if area 703 in Figure 7 is left blank, the information will be displayed in the Guide area 406, just as it would be if the authentication information were at its default value.

[0087] Therefore, when area 703 in Figure 7 is empty, a method for displaying authentication information in the Guide area 406, similar to when the authentication information is set to the default, will be described as Example 7.

[0088] Figure 12 is a flowchart showing the process flow for displaying an authentication screen by the information processing device according to Embodiment 7. The process in the flowchart of Figure 12 begins when a user performs an operation that requires authentication.

[0089] First, the information processing device 100 displays the UI in the same way as in step S1101 (S1201), checks if the authentication information is the default (S902), and confirms if the authentication information remains at the default (S1203). If the authentication information is the default in step S1203, the information processing device 100 displays the default authentication information in the same way as in step S1104 (S1204).

[0090] If the authentication information in step S1203 is not the default, the information processing device 100 refers to the database in Figure 8(b) to check if there is data for Guide_string (S1205). If there is data, the information processing device 100 displays the Guide in the same way as in step S1105 (S1206).

[0091] If no data is available, the information processing device 100 displays authentication information on the Guide, similar to step S1003 (S1207).

[0092] The above describes how the information processing device 100 switches the display of the Guide area depending on whether or not Guide settings related to authentication information are present.

[0093] <Example 8> In Example 7, if the user did not enter anything in area 703 of Figure 7 when changing their authentication information, the changed authentication information was displayed on the login screen. While this reduces the burden on the user, some users may perceive this as unintended behavior.

[0094] Therefore, as Example 8, we will describe a method by which the information processing device 100 prompts the user for confirmation when attempting to update authentication information without entering anything in area 703.

[0095] Figure 17 shows an example of a screen displayed by the information processing device 100 when a user attempts to update authentication information without entering anything in area 703. The dialog box 1701 allows the user to choose whether to display the new authentication information in Guide when area 703 is empty.

[0096] If the user agrees by pressing button 1702, the operation will be the same as in Example 7. If the user rejects by pressing button 1703, the dialog will disappear and the user will return to the authentication information change screen. Alternatively, the information processing device 100 may store that the user rejected the request and the operation will be the same as in Example 6.

[0097] The above explains how to prompt the user for confirmation when attempting to update authentication information without entering anything in area 703.

[0098] <Example 9> In Example 7, the screen shown in Figure 7 for changing authentication information has separate areas: area 703 for entering the information to be displayed after the change and area 406 for giving instructions to the user. This presents a challenge in that it is difficult to see that the information entered in 703 is reflected in 406. To solve this problem, one method is to synchronize the display of area 406 with the content being entered in area 703 (a method to synchronize the display of area 406 with the content being entered in area 703 in real time).

[0099] Therefore, a method for synchronizing the display in area 406 with the content being entered in area 703 will be described as Example 9.

[0100] Figure 19 is a flowchart showing the process by which the information processing device reflects the input in area 703, which is a hint for authentication information, on the screen when it displays the screen shown in Figure 7 and accepts input to area 703. The process in the flowchart of Figure 19 starts when the user performs an operation to update their authentication information.

[0101] First, the information processing device 100 displays the UI shown in Figure 7, which is the authentication information update screen (S1901). Then, the information processing device 100 begins monitoring input to area 703 (S1902). As a monitoring method, it is natural to register a listener for input events to area 703 using a web scripting language (for example, JavaScript®).

[0102] The information processing device 100 then checks if the user has finished inputting (S1903). Input is considered complete when button 704 is pressed. If input is not complete, the information processing device 100 overwrites the content displayed in the Guide area in Figure 7 with the content being entered in area 703 (S1904). The overwriting is implemented using JavaScript.

[0103] The above describes how the information processing device 100 can display information in an easy-to-understand manner for the user when the input area 703 for information to be displayed after the change and the instruction area 406 for the user are separate.

[0104] <Other examples> Although embodiments have been described in detail above, the present invention can take the form of, for example, a system, apparatus, method, program, or recording medium (storage medium).

[0105] Specifically, it may be applied to a system consisting of multiple devices (for example, a host computer, interface devices, imaging devices, web applications, etc.), or it may be applied to a device consisting of a single device.

[0106] Furthermore, it goes without saying that the object of the present invention is achieved as follows: a recording medium (or storage medium) containing control program code (computer program) for software that realizes the functions of the embodiments described above is supplied to a system or device. Such storage medium is, needless to say, a computer-readable storage medium.

[0107] Then, the computer (or CPU or MPU) of the system or device reads and executes the control program code stored in the recording medium. In this case, the control program code read from the recording medium itself realizes the function of the embodiment described above, and the recording medium on which the control program code is recorded constitutes the present invention. [Explanation of Symbols]

[0108] 100 Information Processing Devices

Claims

1. In an information processing device having an authentication function based on authentication information, It has a display means for displaying the authentication information being set, An information processing device characterized by the following:

2. The display means displays the authentication information only when the authentication information is in its initial state. The information processing apparatus according to claim 1, characterized in that

3. The system has means for registering hint information for the authentication information, and the display means displays the registered hint information for the authentication information. The information processing apparatus according to claim 1, characterized in that

4. If the hint information is not registered, the display means displays the authentication information. The information processing apparatus according to claim 3, characterized in that

5. If the hint information is not entered and an instruction to update the authentication information is received, the display means will display a message to confirm whether or not to display the authentication information after the instruction to update. The information processing apparatus according to claim 3, characterized in that

6. The information processing device has an HTML response means that modifies HTML, which is data for display by the display means, and the HTML response means modifies the HTML by adding hint information for the authentication information to a predetermined location in the HTML. The information processing apparatus according to claim 3, characterized in that

7. Based on the hint information registered in the means for registering the hint information of the authentication information, the display means updates and displays the hint information in real time. The information processing apparatus according to claim 3, characterized in that

8. The web script included in the HTML retrieves the information from the authentication information management means. The display means displays the acquired information. The information processing apparatus according to claim 6, characterized in that

9. In a control method for an information processing device having an authentication function based on authentication information, The system includes a display step that displays the authentication information being set, A control method for an information processing device characterized by the following features.

10. In a control program for an information processing device having an authentication function based on authentication information, The system includes a display step that displays the authentication information being set, A control program for an information processing device characterized by the following features.

11. A recording medium for storing the control program described in claim 10.

Images