Printing apparatus

Abstract

To provide a printing device that can reduce the likelihood of users being unaware that they are unable to print due to issues with their electronic certificates. [Solution] After updating the server certificate, if the control unit 15 does not receive a print job from the client terminal 3 even after sending the server certificate to the client terminal 3, and if there is a user registered as a user with a history of IPPS printing associated with the client terminal 3, the control unit 15 registers that user as a user with a history of printing using the old server certificate. When a user logs in, if the logged-in user is registered as a user with a history of printing using the old server certificate, the control unit 15 displays a message on the display unit 21 indicating that the receipt of the print job failed due to the electronic certificate.

Description

Technical Field

[0005]

[0001] The present invention relates to a printing apparatus.

Background Art

[0002] There is known a printing apparatus having an IPP printing function for performing printing using IPP (Internet Printing Protocol), which is a standard for performing printing via a network using HTTP (Hypertext Transfer Protocol). IPP can encrypt communication by TLS (Transport Layer Security), and in that case, it may be called IPPS.

[0003] When performing IPPS printing, the client terminal authenticates the printing apparatus using an electronic certificate. Specifically, the client terminal collates the server certificate transmitted from the printing apparatus with the root certificate corresponding to the server certificate to authenticate the printing apparatus. When the printing apparatus is authenticated, encrypted communication is established. Then, a print job is transmitted from the client terminal to the printing apparatus, and printing is performed in the printing apparatus.

[0004] By the way, the server certificate held by the printing apparatus may be updated due to expiration or the like. When the server certificate is updated, the root certificate held by the client terminal also needs to be updated to the one corresponding to the updated server certificate. If the root certificate has not been updated, the client terminal cannot authenticate the printing apparatus. As a result, the print job cannot be transmitted from the client terminal to the printing apparatus, and printing cannot be performed.

[0005] Regarding the renewal of electronic certificates such as server certificates, Patent Document 1 discloses a technology in which a certificate issuing device renews an electronic certificate that it has determined to be invalid, and sends the renewed electronic certificate via email to the owner of the device that requires that electronic certificate. With this technology, the owner can receive the renewed electronic certificate via email, reducing the effort involved in renewing electronic certificates. [Prior art documents] [Patent Documents]

[0006] [Patent Document 1] Patent No. 4835177 [Overview of the Initiative] [Problems that the invention aims to solve]

[0007] However, even if the root certificate corresponding to the updated server certificate is sent to the client terminal via email, similar to the technology described in Patent Document 1, there is a risk that the user may not notice the email, and the root certificate will not be updated. If the root certificate is not updated, as described above, the client terminal will not be able to authenticate the printer, and printing will not be possible.

[0008] In this case, it is difficult for the user to realize that printing is impossible due to the digital certificate. Therefore, it is difficult for the user to deal with the printing problem. Thus, there has been a demand for technology that can reduce the likelihood of users not realizing that printing is impossible due to the digital certificate.

[0009] The present invention has been made in view of the above, and aims to provide a printing device that can reduce the likelihood of users being unaware that they are unable to print due to an electronic certificate. [Means for solving the problem]

[0010] To achieve the above objective, the printing apparatus of the present invention comprises a display unit that displays information, and a control unit that transmits an electronic certificate to a client terminal, and when it receives a print job transmitted from the client terminal that has authenticated the apparatus using the electronic certificate, registers the user of the received print job in association with the client terminal. The control unit is characterized in that, after an electronic certificate is updated, if the electronic certificate is transmitted to the client terminal but no print job is received from the client terminal, and there is a user registered in association with the client terminal, it registers the user as a user with a printing record using the electronic certificate before the update, and when a user logs in, if the logged-in user is registered as a user with a printing record using the electronic certificate before the update, it causes the display unit to display a message indicating that the receipt of the print job failed due to the electronic certificate. [Effects of the Invention]

[0011] The printing apparatus of the present invention reduces the likelihood of users being unaware that printing is impossible due to an electronic certificate. [Brief explanation of the drawing]

[0012] [Figure 1] This is a block diagram showing the configuration of the printing system according to the embodiment. [Figure 2] This is a sequence diagram illustrating the normal IPPS communication flow in a printing system. [Figure 3] This sequence diagram illustrates the flow of IPPS communication in a printing system when the client terminal does not possess the root certificate corresponding to the updated server certificate. [Figure 4] This is a flowchart illustrating the user registration process on a printing device during IPPS communication. [Figure 5] This is a flowchart illustrating the operation of the printing device during server certificate renewal. [Figure 6] This is a flowchart illustrating the operation of the printer when a user logs in. [Figure 7] It is a diagram showing an example of the usage situation of the user's IPPS printing. [Figure 8] It is a diagram showing the response of the printing apparatus according to the usage situation of the user's IPPS printing shown in FIG. 7.

Embodiments for Carrying Out the Invention

[0013] Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the drawings, the same or equivalent parts and components are denoted by the same or equivalent reference numerals, and the description thereof will be omitted or simplified.

[0014] FIG. 1 is a block diagram showing the configuration of a printing system including a printing apparatus according to an embodiment of the present invention.

[0015] As shown in FIG. 1, the printing system 1 according to the present embodiment includes a printing apparatus 2 and a client terminal ٣. The printing apparatus 2 and the client terminal 3 are communicably connected via a network 4 such as the Internet. The client terminal 3 may be one or plural.

[0016] The printing apparatus 2 performs printing based on a print job transmitted from the client terminal 3. The printing apparatus 2 includes a printing unit 11, an operation panel unit 12, a storage unit 13, a communication unit 14, and a control unit 15.

[0017] The printing unit 11 performs printing on a printing medium such as paper. The printing unit 11 has, for example, an inkjet printing mechanism.

[0018] ​​​​​The storage unit 13 stores various programs. The storage unit 13 also stores a server certificate and a root certificate corresponding to the server certificate. Here, the IP address of the printing device 2 is recorded in the server certificate.

[0020] In addition, the storage unit 13 stores user information and the like of users with IPPS printing records to be described later. The storage unit 13 also stores user information of users with printing records using the old server certificate (server certificate before update) to be described later. The storage unit 13 is composed of a hard disk or the like.

[0021] The communication unit 14 performs communication processing with the client terminal 3 via the network 4. The communication unit 14 includes an IPP port 31 which is a port used for IPPS communication.

[0022] The control unit 15 controls the operation of the entire printing device 2. The control unit 15 is configured to include a CPU, a ROM, a RAM, and the like.

[0023] When performing IPPS printing, the control unit 15 transmits the server certificate to the client terminal 3, and when receiving a print job transmitted from the client terminal 3 that has authenticated the printing device 2 using the server certificate, the control unit 15 registers the user of the received print job as a user with an IPPS printing record in association with the client terminal 3.

[0024] In addition, after the update of the server certificate, when the control unit 15 transmits the server certificate to the client terminal 3 but does not receive a print job from the client terminal 3, and there exists a user registered in association with the client terminal 3 as a user with an IPPS printing record, the control unit 15 registers the user as a user with a printing record using the old server certificate.

[0025] Furthermore, when a user logs in, if the logged-in user is registered as a user with a history of printing using the old server certificate, the control unit 15 displays a message on the display unit 21 indicating that the receipt of the print job failed due to the electronic certificate (server certificate and root certificate).

[0026] Client terminal 3 sends print jobs to printing device 2 in response to user operations. Client terminal 3 stores the root certificate corresponding to the server certificate. Client terminal 3 is composed of a computer equipped with a CPU, ROM, RAM, hard disk, etc.

[0027] Next, the normal IPPS communication flow in printing system 1 will be explained with reference to the sequence diagram in Figure 2.

[0028] In this case, client terminal 3 possesses the root certificate corresponding to the server certificate held by printing device 2.

[0029] When a user initiates a print command on client terminal 3, in step S1 of Figure 2, client terminal 3 sends a message to printer 2 to initiate the TLS handshake.

[0030] When the printing device 2 receives the above message via the IPP port 31, in step S2, the control unit 15 sends the server certificate to the client terminal 3.

[0031] Next, in step S3, the client terminal 3 verifies the received server certificate. Specifically, the client terminal 3 compares the server certificate with the root certificate to verify the legitimacy of the printing device 2.

[0032] When client terminal 3 confirms that printer 2 is a legitimate device, in step S4, it sends a message to printer 2 indicating that authentication of printer 2 is OK.

[0033] This initiates a TLS session (step S5) and establishes encrypted communication (step S6).

[0034] Then, in step S7, the client terminal 3 sends the print job to the printing device 2.

[0035] In the printing device 2, which receives a print job, the control unit 15 controls the printing unit 11 to perform printing based on the print job.

[0036] Next, the flow of IPPS communication in the printing system 1 when client terminal 3 does not possess the root certificate corresponding to the updated server certificate will be explained with reference to the sequence diagram in Figure 3.

[0037] In this case, printer 2 possesses a new server certificate, which is a server certificate that has been renewed due to expiration or other reasons. Client terminal 3 does not possess a new root certificate, which is the root certificate corresponding to the new server certificate, but possesses an old root certificate, which is the root certificate corresponding to the old server certificate.

[0038] The process in step S11 of Figure 3 is the same as the process in step S1 of Figure 2 described above.

[0039] In step S12, the control unit 15 of the printing device 2 sends the new server certificate to the client terminal 3.

[0040] Next, in step S13, client terminal 3 verifies the received new server certificate. Specifically, client terminal 3 compares the new server certificate with the old root certificate.

[0041] In this case, the old root certificate is not compatible with the new server certificate, resulting in authentication failure for printer 2. As a result, encrypted communication cannot be established, and client terminal 3 cannot send the print job. In other words, IPPS communication fails, and printer 2 does not receive the print job.

[0042] Next, the process of registering a user in the printing device 2 during IPPS communication will be explained with reference to the flowchart in Figure 4.

[0043] The control unit 15 of the printing device 2 monitors the IPP port 31 and, in step S21 of Figure 4, determines whether it has received the message sent by the client terminal 3 to initiate the handshake via the IPP port 31. If it determines that it has not received the message (step S21: NO), the control unit 15 repeats step S21.

[0044] If the control unit determines that it has received the above message (step S21: YES), in step S22, the control unit 15 records the IP address of the client terminal 3 that sent the message.

[0045] Next, in step S23, the control unit 15 determines whether the IPPS communication was successful. Here, the control unit 15 sends the server certificate to the client terminal 3, and if the client terminal 3 authenticates the printer 2 and encrypted communication is established between the printer 2 and the client terminal 3, the control unit 15 determines that the IPPS communication was successful.

[0046] If the control unit 15 determines that the IPPS communication was successful (step S23: YES), in step S24, it determines whether or not it received a print job from the client terminal 3 via IPPS communication. If it determines that it did not receive a print job (step S24: NO), the control unit 15 repeats step S24.

[0047] If the control unit determines that a print job has been received (step S24: YES), in step S25, the control unit 15 determines whether or not the print job was sent from the client terminal 3 with the IP address recorded in step S22. If the control unit 15 determines that the received print job was not sent from the client terminal 3 with the IP address recorded in step S22 (step S25: NO), the series of processes ends.

[0048] If the control unit 15 determines that the received print job was sent from the client terminal 3 with the IP address recorded in step S22 (step S25: YES), in step S26, the control unit 15 registers the user of the received print job as a user with a history of IPPS printing and associates it with the client terminal 3.

[0049] Specifically, the control unit 15 retrieves user information from the print job and stores this user information in the storage unit 13, associating it with the IP address of the client terminal 3, as user information for a user with a history of IPPS printing. The control unit 15 also stores the IP address of the printing device 2 in the storage unit 13, associating it with the user information and the IP address of the client terminal 3. This completes the series of processes.

[0050] Note that the IP address of printer 2 remains the same before and after the server certificate renewal. Also, the IP address of client terminal 3 remains the same before and after the root certificate renewal.

[0051] If step S23 determines that IPPS communication has failed (step S23: NO), then in step S27, the control unit 15 determines whether the user of the client terminal 3 with the IP address recorded in step S22 is registered as a user with a history of IPPS printing.

[0052] Here, the control unit 15 determines that if there is a user whose user information is stored in association with the IP address recorded in step S22, the user of the client terminal 3 with the IP address recorded in step S22 is registered as a user with IPPS printing experience. If the control unit 15 determines that the user is not registered as a user with IPPS printing experience (step S27: NO), the series of processes ends.

[0053] If it is determined that the user has a history of printing with IPPS (step S27: YES), in step S28, the control unit 15 registers the user of client terminal 3 with the IP address recorded in step S22 as a user with a history of printing using the old server certificate. Specifically, the control unit 15 stores the user information of the user in the storage unit 13 as the user information of a user with a history of printing using the old server certificate. This completes the series of processes.

[0054] As mentioned above, if client terminal 3 does not possess the root certificate corresponding to the updated server certificate, IPPS communication will fail and the printer 2 will not receive the print job. Therefore, if, after updating the server certificate, the server certificate is sent to client terminal 3 but no print job is received from that client terminal 3, and there is a user registered as an IPPS print user associated with that client terminal 3, then step S27 will determine "YES" and the process in step S28 will be carried out.

[0055] Next, the operation of the printer 2 during server certificate renewal will be explained with reference to the flowchart in Figure 5.

[0056] In step S31 of Figure 5, the control unit 15 installs the new server certificate into the storage unit 13. At this time, the control unit 15 deletes the existing server certificate (old server certificate) and records the IP address recorded in the existing server certificate.

[0057] Next, in step S32, the control unit 15 determines whether the same server certificate as the previous time was installed in step S31. If the control unit 15 determines that the same server certificate as the previous time was installed (step S32: YES), the series of processes ends.

[0058] If the control unit 15 determines in step S31 that the installed server certificate is not the same as the previous one (step S32: NO), then in step S33, the control unit 15 determines whether the IP addresses contained in the new server certificate installed in step S31 and the old server certificate deleted match each other. If the control unit 15 determines that the IP addresses match each other (step S33: YES), the series of processes ends.

[0059] If it is determined that the IP addresses do not match (step S33: NO), in step S34, the control unit 15 deletes the user who has a history of IPPS printing. Specifically, the control unit 15 deletes the user information of the user who has a history of IPPS printing, as well as the IP address of the client terminal 3 and the IP address of the printing device 2 that are stored in the storage unit 13 in association with it. This completes the series of processes.

[0060] Next, the operation of the printer 2 when a user logs in will be explained with reference to the flowchart in Figure 6.

[0061] In step S41 of Figure 6, the control unit 15 performs login processing for the user in response to the user's operation to log in to the printing device 2.

[0062] Next, in step S42, the control unit 15 determines whether the user logged into the printer 2 is a user who has previously printed using the old server certificate. Here, the control unit 15 can determine whether the logged-in user is a user registered as a user who has previously printed using the old server certificate, based on the information entered at the time of login. If the control unit 15 determines that the logged-in user is not a user who has previously printed using the old server certificate (step S42: NO), the series of processes ends.

[0063] If the system determines that the logged-in user is a user who has previously printed using the old server certificate (step S42: YES), in step S43, the control unit 15 displays a pop-up message on the display unit 21 indicating that the print job could not be received due to the electronic certificate. This informs the user that the print job could not be received due to the electronic certificate, and the series of processes ends.

[0064] The message displayed in the aforementioned pop-up includes a prompt for the user to install the new root certificate corresponding to the new server certificate. The new root certificate is then delivered to the user's client terminal 3, for example, via email or USB memory.

[0065] Next, we will explain how the printer 2 responds to the user's IPPS printing usage.

[0066] Figure 7 shows an example of how users utilize IPPS printing. Figure 8 shows how the printing device 2 responds to the IPPS printing usage of the users shown in Figure 7.

[0067] In the example in Figure 7, users A and C each possess root certificates on their respective client terminals 3 and were users who used IPPS printing before the server certificate on the printer 2 was updated. In other words, as shown in Figure 8, users A and C are users who have performed IPPS printing using the old root certificate corresponding to the old server certificate.

[0068] Furthermore, in the example in Figure 7, User B is a user who does not currently use IPPS printing but would like to use it. User D is a user who neither uses IPPS printing nor would like to use it.

[0069] Then, as shown in Figure 8, for users A and B, we assume that there was communication via IPPS but no response was received, meaning that the IPPS communication failed. Specifically, for users A and B, the printer 2 received messages from their respective client terminals 3 to initiate the handshake, but even after sending the server certificate to the client terminals 3, the printer 2 did not receive a message indicating authentication OK or a print job.

[0070] Here, user A was registered as a user with a history of IPPS printing when performing IPPS printing using the old root certificate on printing device 2 (step S26 in Figure 4), and then, due to the failure of IPPS communication, was registered as a user with a history of printing using the old server certificate (step S28 in Figure 4).

[0071] For user C, we assume that communication via IPPS occurred and a response was received, meaning the IPPS communication was successful. Specifically, we assume that after printer 2 sent the server certificate to user C's client terminal 3, a message indicating that authentication by printer 2 was OK and a print job were received. In other words, the new root certificate has been installed on user C's client terminal 3. Furthermore, user C is registered as a user with a history of IPPS printing.

[0072] For user D, it is assumed that there is no communication via IPPS, that is, no message is received from client terminal 3 to initiate the handshake.

[0073] As described above, since User A is registered as a user with a history of printing using the old server certificate, when User A logs in, Printer 2 prompts User A to reinstall the root certificate, as shown in Figure 8. Specifically, Printer 2 prompts User A to install the new root certificate by displaying the aforementioned pop-up on the display unit 21 (step S43 in Figure 6).

[0074] As shown in Figure 8, User B is a new user and therefore will not be followed up on in this embodiment.

[0075] As User C has already installed the new root certificate as described above, Printer 2 does not prompt User C to reinstall the root certificate, as shown in Figure 8. Specifically, even if User C logs in, Printer 2 does not display the aforementioned pop-up because User C is not registered as a user with a history of printing using the old server certificate (step S42: NO in Figure 6).

[0076] As shown in Figure 8, printer 2 does not prompt user D to reinstall the root certificate. Specifically, even if user D logs in, printer 2 does not display the aforementioned pop-up because user D is not registered as a user with a history of printing using the old server certificate (step S42: NO in Figure 6).

[0077] As explained above, in the printing device 2, after the server certificate is updated, if the control unit 15 sends the server certificate to the client terminal 3 but does not receive a print job from the client terminal 3, and if there is a user registered as a user with a history of IPPS printing associated with the client terminal 3, the control unit 15 registers that user as a user with a history of printing using the old server certificate. Then, when a user logs in, if the logged-in user is registered as a user with a history of printing using the old server certificate, the control unit 15 displays a message on the display unit 21 indicating that the receipt of the print job failed due to the electronic certificate.

[0078] This reduces the likelihood that users may not realize they are unable to print due to issues with their digital certificates.

[0079] Furthermore, it will be possible to encourage users to install new digital certificates (new root certificates).

[0080] Furthermore, if the login function of printer 2 is turned off, the aforementioned pop-up may be displayed immediately if IPPS communication fails.

[0081] The present invention is not limited to the embodiments described above, and the components can be modified and implemented in practice without departing from the spirit of the invention. Furthermore, various inventions can be formed by appropriately combining the multiple components disclosed in the embodiments. For example, some components may be deleted from all the components shown in the embodiments.

[0082] [Note] This application discloses the following invention:

[0083] (Note 1) A display unit that presents information, The device includes a control unit that sends an electronic certificate to a client terminal, and upon receiving a print job sent from the client terminal that has authenticated the device using the electronic certificate, registers the user of the received print job in association with the client terminal. The control unit, After the renewal of the digital certificate, if the digital certificate is sent to the client terminal but no print jobs are received from that client terminal, and there is a user registered in association with that client terminal, that user will be registered as a user who has printed using the digital certificate before the renewal. A printing apparatus characterized in that, when a user logs in, if the logged-in user is registered as a user with a history of printing using an older digital certificate, the display unit displays a message indicating that the receipt of the print job failed due to the digital certificate. [Explanation of symbols]

[0084] 1. Printing System 2 Printing device 3. Client terminals 11 Printing Department 12. Control Panel 13 Storage section 14 Communications Department 15 Control Unit 21 Display section 22 Input section 31 IPP ports

Claims

[Claim 1] A display unit that presents information, The device includes a control unit that sends an electronic certificate to a client terminal, and upon receiving a print job sent from the client terminal that has authenticated the device using the electronic certificate, registers the user of the received print job in association with the client terminal. The control unit, After the renewal of the digital certificate, if the digital certificate is sent to the client terminal but no print jobs are received from that client terminal, and there is a user registered in association with that client terminal, that user will be registered as a user who has printed using the digital certificate before the renewal. A printing apparatus characterized in that, when a user logs in, if the logged-in user is registered as a user with a history of printing using an older digital certificate, the display unit displays a message indicating that the receipt of the print job failed due to the digital certificate.

Images