Information processing device and program

The information processing device enhances virtual network security by forming and disconnecting networks based on identification information, addressing security issues in continuous network connections.

JP7604820B2Active Publication Date: 2024-12-24FUJIFILM BUSINESS INNOVATION CORP
View PDF 5 Cites 0 Cited by

Patent Information

Application Number
JP2020156542
Authority / Receiving Office
JP · JP
Patent Type
Patents
Current Assignee / Owner
Filing Date
2020-09-17
Publication Date
2024-12-24
Estimated Expiration
2040-09-17

AI Technical Summary

Technical Problem

The security between multiple virtual networks connected continuously may deteriorate.

Method used

An information processing device that forms and disconnects virtual networks based on device, group, and network identification information, linking and registering these to enhance security.

Benefits of technology

Improves security between virtual networks by selectively connecting and disconnecting networks based on group affiliation and network identification, enhancing security compared to continuous connections.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure 0007604820000001
    Figure 0007604820000001
  • Figure 0007604820000002
    Figure 0007604820000002
  • Figure 0007604820000003
    Figure 0007604820000003
Patent Text Reader

Abstract

To improve the security between a plurality of virtual networks as compared with a case in which the plurality of virtual networks are always connected.SOLUTION: A processor of a multifunction device forms a first virtual network, connects the first virtual network and a second virtual network formed by another device when a specific function is executed, and releases the connection between the first virtual network and the second virtual network after the specific function is executed.SELECTED DRAWING: Figure 1
Need to check novelty before this filing date? Find Prior Art

Description

[Technical field]

[0001] The present invention relates to an information processing device and a program. [Background technology]

[0002] Techniques for connecting multiple virtual networks together are known.

[0003] Patent document 1 describes a method of configuring a virtual LAN distributed across multiple sites by using a Layer 2 switch to monitor first virtual LAN configuration frames sent from multiple sites, assigning a network virtual LAN identifier based on the monitored first virtual LAN configuration frames, and generating a second virtual LAN configuration frame based on the assigned network virtual LAN identifier at the Layer 2 switch that monitored the first virtual LAN configuration frame and propagating it to multiple Layer 2 switches in the network.

[0004] Patent Document 2 describes a method for predicting ingress and egress nodes with heavy traffic in a virtual LAN by measuring traffic at edge nodes, and increasing the bandwidth between the ingress and egress nodes by setting up optical paths. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Patent No. 3794496 [Patent Document 2] Patent No. 3746282 Summary of the Invention [Problem to be solved by the invention]

[0006] In order to utilize a specific function, it is conceivable to connect a plurality of virtual networks. In this case, if the plurality of virtual networks are always connected, security between the plurality of virtual networks may be reduced.

[0007] An object of the present invention is to improve security between a plurality of virtual networks, as compared to a case in which the plurality of virtual networks are always connected. [Means for solving the problem]

[0008] The invention according to claim 1 provides an information processing device having a processor, the processor forming a first virtual network, connecting the first virtual network to a second virtual network formed by another device when a specific function is executed, and disconnecting the first virtual network from the second virtual network after the specific function is executed. the specific function is a function executed by the information processing device and the other device, and device identification information for identifying a device that has formed a virtual network, group identification information for identifying a group, and network identification information for identifying the virtual network are associated and registered, and when the specific function is executed, if the second virtual network that belongs to the same group as the first virtual network and has the same network identification information as the first virtual network has been formed by the other device and registered, the processor connects the first virtual network and the second virtual network. It is.

[0011] Claim 2 In the present invention, when the specific function is executed, the processor further executes a process of deleting from registration device identification information of the device itself, group identification information of a group to which a user who has used the specific function belongs, and network identification information of a virtual network formed by the device itself and used by the user, which are linked to each other. 1 The present invention relates to an information processing device.

[0012] Claim 3 In the present invention, the processor further Niyuand when the user logs out of the device, a process is executed to delete from the registration the device identification information of the device itself, the group identification information of the group to which the user belongs, and the network identification information of the virtual network used by the user, which are all associated with each other. 1 The present invention relates to an information processing device.

[0013] Claim 4 The present invention relates to a program for causing a computer to operate in such a manner that, when a specific function is executed, the computer forms a first virtual network, connects the first virtual network to a second virtual network formed by another device, and, after the specific function is executed, disconnects the first virtual network from the second virtual network. the specific function is a function executed by the computer and the other device, and device identification information for identifying a device that has formed a virtual network, group identification information for identifying a group, and network identification information for identifying the virtual network are associated and registered, and when the specific function is executed by the computer, if the second virtual network that belongs to the same group as the first virtual network and has the same network identification information as the first virtual network has been formed by the other device and registered, the computer connects the first virtual network and the second virtual network. It is. Effect of the Invention

[0014] Claim 1, 4 According to the present invention, security between a plurality of virtual networks is improved compared to a case where the plurality of virtual networks are always connected.

[0015] Furthermore This can improve security between the multiple virtual networks compared to when multiple virtual networks that belong to different groups are connected.

[0016] Claim 2 According to the present invention, the security of the virtual network can be improved compared to a case where the device identification information, group identification information, and network identification information are registered without being deleted even after a specific function is executed.

[0017] Claim 3According to the present invention, the security of the virtual network can be improved compared to a case where the device identification information, group identification information, and network identification information are registered without being deleted even after a user logs out. [Brief description of the drawings]

[0018] [Figure 1] 1 is a block diagram showing a configuration of an information processing system according to an embodiment of the present invention. [Diagram 2] FIG. 2 is a block diagram showing a configuration of a multifunction peripheral; [Diagram 3] FIG. 13 is a diagram illustrating a management database. [Figure 4] FIG. 13 is a block diagram showing a configuration of an information processing system according to a modified example. [Diagram 5] FIG. 13 is a diagram showing a device list. [Figure 6] FIG. 13 is a diagram showing a device list. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0019] An information processing system according to this embodiment will be described with reference to FIG.

[0020] In the information processing system according to this embodiment, one or more virtual networks are formed at each of the multiple sites, and the multiple virtual networks are connected between the multiple sites. For example, a virtual network is formed by an information processing device provided at the site. In this embodiment, the multiple virtual networks are connected when a specific condition is satisfied. The specific condition is, for example, when a user logs in to an information processing device, when the information processing device is powered on, or when a specific function is executed in the information processing device.

[0021] 1 shows an example of the configuration of an information processing system according to this embodiment. The information processing system includes, for example, multifunction peripherals 10A and 10B and a server 12. The multifunction peripherals 10A and 10B and the server 12 can communicate with other devices via a communication path N. The communication path N is, for example, the Internet or another network.

[0022] The multifunction peripherals 10A and 10B are examples of information processing devices according to the present embodiment. The multifunction peripherals 10A and 10B include, for example, a printer and a scanner, and function as image forming devices. For example, the multifunction peripherals 10A and 10B have a print function, a scan function, a copy function, and the like. The multifunction peripherals 10A and 10B may also have a facsimile function. One or more virtual networks are formed by each of the multifunction peripherals 10A and 10B.

[0023] The multifunction peripherals 10A and 10B are merely examples of information processing devices according to the present embodiment. The information processing system may not include a multifunction peripheral, or may include a multifunction peripheral and a device other than a multifunction peripheral that has a function of forming a virtual network, as an example of an information processing device. Such a device may be any device as long as it has a function of forming a virtual network. For example, a device having an image processing function (e.g., an image processing device such as a scanner), a personal computer (hereinafter referred to as a "PC"), or a device that does not have an image processing or image forming function may be included in the information processing system as an example of an information processing device.

[0024] The multifunction peripherals 10A and 10B can communicate with other devices via, for example, a gateway (GW) and a communication path N.

[0025] For example, the multifunction peripheral 10A, PC(A), PC(B), PC(C), and PC(D) are connected to the same network (e.g., a LAN (Local Area Network)). Furthermore, PC(A), PC(B), and PC(C) belong to group A, and PC(D) belongs to group B. A group is, for example, a company, a department within a company, or another organization (e.g., a circle or club).

[0026] The multifunction peripheral 10A forms a VLAN (Virtual Local Area Network), which is an example of a virtual network, within the LAN in which the multifunction peripheral 10A exists. To explain in more detail, the VLAN is formed by cooperation between the multifunction peripheral 10A, which is compatible with the VLAN, and a switch or router, which is compatible with the VLAN. In the example shown in FIG. 1, VLAN-001, which is a VLAN provided for group A, and VLAN-002, which is a VLAN provided for group B, are formed. PCs belonging to group A can use VLAN-001 provided by the multifunction peripheral 10A. PCs belonging to group B can use VLAN-002 provided by the multifunction peripheral 10B.

[0027] For example, a user can select VLAN-001 on multifunction device 10A and send image data generated by scanning with multifunction device 10A to a PC connected to VLAN-001. A user can also select VLAN-001 on multifunction device 10A and send image data from a PC connected to VLAN-001 to multifunction device 10A and print the image data on multifunction device 10A. The same applies when using multifunction device 10B or other virtual networks.

[0028] Moreover, the multifunction peripheral 10B, PC(E), PC(F), PC(G) and PC(H) are connected to the same network (e.g., LAN). Moreover, PC(E) belongs to group A, and PC(F), PC(G) and PC(H) belong to group B.

[0029] Similar to the multifunction peripheral 10A, the multifunction peripheral 10B forms a VLAN, which is an example of a virtual network, within the LAN in which the multifunction peripheral 10B exists. In the example shown in Fig. 1, a VLAN-001 provided for group A and a VLAN-002 provided for group B are formed. PCs belonging to group A can use the VLAN-001 provided by the multifunction peripheral 10B. PCs belonging to group B can use the VLAN-002 provided by the multifunction peripheral 10B.

[0030] The configuration of the multifunction peripherals 10A and 10B will be described below with reference to Fig. 2. Hereinafter, when there is no need to distinguish between the multifunction peripherals 10A and 10B, they will be referred to as "multifunction peripheral 10." Fig. 2 shows an example of the configuration of the multifunction peripheral 10.

[0031] The multifunction device 10 includes, for example, a printer 14, a scanner 16, a communication device 18, a UI 20, a memory 22, and a processor 24.

[0032] The printer 14 is a device that prints an image on a recording medium such as paper. The scanner 16 is a device that generates image data by reading a recording medium such as paper.

[0033] The communication device 18 is a communication interface having a communication chip, a communication circuit, etc., and has a function of transmitting information to other devices and a function of receiving information transmitted from other devices. The communication by the communication device 18 may be wired communication or wireless communication.

[0034] The UI 20 is a user interface and includes a display and an operation device. The display is a liquid crystal display, an EL display, etc. The operation device is a keyboard, input keys, an operation panel, etc. The UI 20 may be a UI such as a touch panel that combines a display and an operation device.

[0035] The memory 22 is a device constituting one or more storage areas for storing various types of information. The memory 22 is, for example, a hard disk drive, various types of memory (e.g., RAM, DRAM, ROM, etc.), other storage devices (e.g., optical disks, etc.), or a combination thereof. One or more memories 22 are included in the multifunction device 10.

[0036] The processor 24 is configured to control the operation of each unit of the multifunction device 10. The processor 24 may have a memory. For example, the processor 24 forms a virtual network such as a VLAN. The processor 24 also connects a virtual network formed by the processor 24 to a virtual network formed by another device. For example, the processor 24 connects a plurality of virtual networks when a specific condition is satisfied.

[0037] The server 12 includes a communication device, a UI, a memory, and a processor. A management database for managing a virtual network is formed in the memory of the server 12. In the management database, for example, network identification information (e.g., VLAN-ID) for identifying a formed virtual network, device identification information (e.g., IP address or MAC address) for identifying a device that formed the virtual network, and group identification information (e.g., group ID) for identifying a group are registered in association with each other, and these pieces of information are stored in the memory of the server 12.

[0038] An example of the management database is shown in Fig. 3. For example, a VLAN provided to group A is formed by multifunction device 10A, and device identification information of multifunction device 10A (e.g., MFP-A IP-Adr (IP address of multifunction device 10A)), a group ID indicating group A, and a VLAN-ID of the VLAN formed by multifunction device 10A are associated with each other and registered.

[0039] Similarly, a VLAN provided to group A is formed by multifunction device 10B, and device identification information of multifunction device 10B (e.g., MFP-B IP-Adr (IP address of multifunction device 10B)), a group ID indicating group A, and the VLAN-ID of the VLAN formed by multifunction device 10B are linked to each other and registered.

[0040] Each embodiment will be described below.

[0041] Example 1 Hereinafter, a description will be given of a first embodiment. In the first embodiment, when a user logs in to a multifunction device 10, a virtual network formed by the multifunction device 10 is connected to a virtual network formed by another device. Hereinafter, a process flow according to the first embodiment will be described in detail.

[0042] First, a user logs in to a certain device (here, multifunction device 10A is used as an example). For example, authentication of the user is performed by a device such as multifunction device 10A or an authentication server, and if the authentication is successful, the user is permitted to log in to multifunction device 10A. Hereinafter, a user who has logged in to multifunction device 10 is referred to as a "logged-in user."

[0043] When a user logs in to the multifunction peripheral 10A, the VLAN to be used by that user is determined.

[0044] For example, a list of VLAN-IDs of the VLANs formed by the multifunction device 10A may be displayed on the display of the multifunction device 10A, and the logged-in user may select the VLAN-ID of the VLAN to be used by the logged-in user from the list. As another example, the logged-in user may input the VLAN-ID of the VLAN to be used by the logged-in user into the multifunction device 10A.

[0045] As another example, a VLAN that the user can use may be determined in advance for each user, and the user's identification information may be associated in advance with the VLAN-ID of the VLAN that the user can use, and stored in the multifunction device 10, the server 12, etc. In this case, the processor 24 of the multifunction device 10A identifies a VLAN having a VLAN-ID associated with a logged-in user as a VLAN used by the logged-in user.

[0046] As yet another example, a user may belong to a group, and a VLAN may be pre-assigned to the group, and the processor 24 of the multifunction device 10A may identify the VLAN associated with the group to which the logged-in user belongs as the VLAN to be used by the logged-in user.

[0047] When a user logs in to the multifunction peripheral 10A, the processor 24 of the multifunction peripheral 10A transmits virtual network information to the server 12. The virtual network information includes device identification information (e.g., the IP address of the multifunction peripheral 10A) of the multifunction peripheral 10A into which the user has logged in, group identification information (e.g., a group ID) of the group to which the logged-in user belongs, and the VLAN-ID of the VLAN used by the logged-in user. As an example, it is assumed here that the logged-in user belongs to group A, and that the VLAN used by the logged-in user is VLAN-001 which belongs to group A.

[0048] The virtual network information is registered in the server 12. As shown in Fig. 3, the device identification information (MFP-A IP-Adr, etc.) of the multifunction peripheral 10A, the group ID of the group A to which the logged-in user belongs, and the VLAN-ID of the VLAN used by the logged-in user (e.g., VLAN-001) are registered in the server 12.

[0049] When a user logs in to multifunction peripheral 10B, the virtual network information is registered in server 12 in the same manner as when the user logs in to multifunction peripheral 10A. As an example, as shown in Fig. 3, device identification information of multifunction peripheral 10A (MFP-B IP-Adr, etc.), the group ID of group A to which the logged-in user belongs, and the VLAN-ID of the VLAN used by the logged-in user (e.g. VLAN-001) are registered in server 12.

[0050] When a user logs in to the multifunction device 10, the processor 24 of the multifunction device 10 searches for a VLAN associated with the same group ID registered in the server 12. For example, the processor 24 of the multifunction device 10 searches for a VLAN associated with the same group ID as the VLAN registered in the server 12 when the user logs in to the multifunction device 10. If a VLAN associated with the same group ID is registered in the server 12, the processor 24 of the multifunction device 10 connects multiple VLANs associated with the same group ID. More specifically, the processor 24 of the multifunction device 10 connects multiple VLANs associated with the same group ID and having the same network identification information. The processor 24 may inquire of the user as to whether or not the VLANs are connected, and may connect multiple VLANs when the user instructs connection.

[0051] For example, the processor 24 may configure multiple VLANs on the same network (e.g., layer 2 bridge connection) and route IP packets between VLANs. This enables IP communication between multiple connected VLANs. For example, it becomes possible to access devices (e.g., PCs, etc.) connected to the VLANs and to execute discovery protocols, print protocols, etc.

[0052] For example, the server 12 may hold the virtual network information registered at the time of login while the user is logged in to the multifunction device 10, and delete the virtual network information when the user logs out from the multifunction device 10. As another example, the server 12 may delete the virtual network information after a predetermined time has elapsed since the user logged out from the multifunction device 10. For example, the processor 24 of the multifunction device 10 transmits information indicating that the user has logged out from the multifunction device 10 to the server 12, and instructs the server 12 to delete the virtual network information registered at the time of login to the multifunction device 10. The server 12 deletes the virtual network information in accordance with the instruction.

[0053] The first embodiment will be described below with a specific example.

[0054] For example, it is assumed that a user belonging to group A logs in to the multifunction peripheral 10A and then logs in to the multifunction peripheral 10B. As a result, the virtual network information shown in FIG.

[0055] As shown in FIG. 3, a VLAN-001 belonging to group A is formed by the multifunction peripherals 10A and 10B and registered in the server 12. That is, a VLAN having the same VLAN-ID associated with the same group ID is formed by the multifunction peripherals 10A and 10B and registered in the server 12. In this case, the processor 24 of the multifunction peripheral 10B connects the VLAN-001 belonging to the same group A and having the same VLAN-ID. That is, the processor 24 of the multifunction peripheral 10B connects the VLAN-001 belonging to group A formed by the multifunction peripheral 10B, which is the multifunction peripheral itself, to the VLAN-001 belonging to the same group A formed by the multifunction peripheral 10A, which is another device. Here, the VLAN-001 formed by the multifunction peripheral 10B is an example of a first virtual network, and the VLAN-001 formed by the multifunction peripheral 10A is an example of a second virtual network.

[0056] Multifunction device 10A is able to access PC(E) connected to VLAN-001 formed by multifunction device 10B. Multifunction device 10B is able to access PC(A), PC(B), and PC(C) connected to VLAN-001 formed by multifunction device 10A.

[0057] The server 12 deletes the virtual network information registered when the user logs out of the multifunction device 10A or logs in to the multifunction device 10A after a predetermined time has elapsed since the user logged out. To explain this using the example shown in Fig. 3, the virtual network information including the device identification information of the multifunction device 10A is deleted. Similarly, when the user logs out of the multifunction device 10B, the virtual network information including the device identification information of the multifunction device 10B is deleted.

[0058] Example 2 A description will be given of a second embodiment below. In the second embodiment, when a specific function is executed in the multifunction device 10, a virtual network formed by the multifunction device 10 is connected to a virtual network formed by another device. A process flow according to the second embodiment will be described in detail below.

[0059] 3, it is assumed that virtual network information of a VLAN formed by the multifunction device 10A and virtual network information of a VLAN formed by the multifunction device 10B are registered in the server 12. For example, similarly to the first embodiment, when a user logs in to the multifunction device 10, the virtual network information is transmitted from the multifunction device 10 to the server 12 and registered in the server 12.

[0060] For example, when a user logs in to the multifunction device 10B and uses a specific function on the multifunction device 10B, the processor 24 of the multifunction device 10B searches for a VLAN that is registered in the server 12 and is associated with the same group ID.

[0061] When a VLAN associated with the same group ID is registered in the server 12, the processor 24 of the multifunction peripheral 10B connects multiple VLANs associated with the same group ID. More specifically, the processor 24 of the multifunction peripheral 10B connects multiple VLANs associated with the same group ID and having the same network identification information. The processor 24 may inquire of the user about the presence or absence of a VLAN connection, and may connect multiple VLANs when the user instructs connection. The processor 24 of the multifunction peripheral 10B may connect multiple VLANs when a usage condition of a specific function is met. The processor 24 may also permit communication between the multiple VLANs of only packets necessary for executing the specific function, and may disconnect the multiple VLANs after the execution of the specific function is completed.

[0062] The specific function is, for example, a function for printing image data stored in one multifunction device 10 by another multifunction device 10. By utilizing this function, for example, it is conceivable that image data stored in multifunction device 10A is printed by multifunction device 10B. Below, a more detailed explanation is given of the case where this specific function is executed.

[0063] For example, assume that a user belonging to group A logs in to multifunction device 10A and stores image data to be printed in multifunction device 10A. As in the above-described first embodiment, virtual network information including device identification information (e.g., MFP-A IP-Adr) of multifunction device 10A, the group ID of group A, and the VLAN-ID of the VLAN used by the user (e.g., VLAN-001) is transmitted from multifunction device 10A to server 12 and registered in server 12.

[0064] Next, a user belonging to group A logs in to multifunction peripheral 10B. As in the above-described first embodiment, virtual network information including device identification information of multifunction peripheral 10B (e.g., MFP-B IP-Adr), the group ID of group A, and the VLAN-ID of the VLAN used by the user (e.g., VLAN-001) is transmitted from multifunction peripheral 10B to server 12 and registered in server 12.

[0065] Next, when the user who has logged in to the multifunction device 10B instructs the multifunction device 10B to execute the above-mentioned specific function, the processor 24 of the multifunction device 10B searches for VLANs associated with the same group A that are registered in the server 12.

[0066] 3, a VLAN (e.g., VLAN-001) belonging to the same group A and having the same VLAN-ID is formed by the multifunction peripherals 10A and 10B and registered in the server 12. In this case, the processor 24 of the multifunction peripheral 10B connects the VLAN-001 to each other. That is, the processor 24 of the multifunction peripheral 10B connects the VLAN-001 belonging to group A formed by the multifunction peripheral 10B, which is its own device, to the VLAN-001 belonging to the same group A formed by the multifunction peripheral 10A, which is another device. Here, the VLAN-001 formed by the multifunction peripheral 10B is an example of a first virtual network, and the VLAN-001 formed by the multifunction peripheral 10A is an example of a second virtual network.

[0067] When image data to be printed is stored in multifunction device 10A, processor 24 of multifunction device 10B may connect VLAN-001, which is formed by multifunction device 10B and belongs to group A, to VLAN-001, which is formed by multifunction device 10A and belongs to the same group A.

[0068] The processor 24 of the multifunction device 10B can obtain image data to be printed that is stored in the multifunction device 10A from the multifunction device 10A via the VLAN-001, and print the image data. In the second embodiment, communication of only packets necessary for printing the image data may be permitted between the VLAN-001. For example, only transmission and reception of image data to be printed and print jobs may be permitted.

[0069] When printing of the image data is completed in the multifunction device 10B, the processor 24 of the multifunction device 10B may release the connection between the VLAN-001.

[0070] Furthermore, when printing of the image data is completed on the multifunction device 10B, the processor 24 of the multifunction device 10B instructs the server 12 to delete the virtual network information registered at the time of logging in to the multifunction device 10B. The server 12 deletes the virtual network information in accordance with the instruction. As a result, the virtual network information including the device identification information (MFP-B IP-Adr) of the multifunction device 10B, the group ID of group A, and the VLAN-ID of VLAN-001 is deleted from the server 12.

[0071] As another example, similar to the first embodiment, when the user logs out from the multifunction device 10B, the processor 24 of the multifunction device 10B may instruct the server 12 to delete the virtual network information registered at the time of logging in to the multifunction device 10B. The server 12 deletes the virtual network information in accordance with the instruction.

[0072] Example 3 Hereinafter, a third embodiment will be described. Fig. 4 shows a configuration of an information processing system according to the third embodiment. In the third embodiment, the server 12 is not used, and a plurality of virtual networks are connected.

[0073] In the third embodiment, when a user logs in to a multifunction device 10, virtual network information is stored in the memory 22 of the multifunction device 10. For example, when a user logs in to a multifunction device 10A, a processor 24 of the multifunction device 10A stores the virtual network information in the memory of the multifunction device 10A. The virtual network information includes group identification information (e.g., a group ID) of a group to which the logged-in user belongs, and a VLAN-ID of a VLAN formed by the multifunction device 10A and used by the logged-in user. Similarly, when a user logs in to a multifunction device 10B, virtual network information including group identification information of a group to which the logged-in user belongs, and a VLAN-ID of a VLAN formed by the multifunction device 10B and used by the logged-in user is stored in the memory 22 of the multifunction device 10B.

[0074] In the third embodiment, a list of devices that can be partners for establishing a virtual network is stored in advance in the memory 22 of each multifunction device 10. Fig. 5 shows the device list stored in the memory 22 of the multifunction device 10A, and Fig. 6 shows the device list stored in the memory 22 of the multifunction device 10B.

[0075] For example, the device list stored in the memory 22 of the multifunction device 10A includes device identification information (eg, IP address, etc.) of the multifunction device 10B and device identification information (eg, IP address, etc.) of the multifunction device 10C.

[0076] In the device list stored in the memory 22 of the multifunction device 10B, device identification information (eg, IP address, etc.) of the multifunction device 10A and device identification information (eg, IP address, etc.) of the multifunction device 10C are registered.

[0077] For example, assume that a user belonging to group A logs in to multifunction peripheral 10A and then logs in to multifunction peripheral 10B. As a result, virtual network information is stored in the memory 22 of each of multifunction peripherals 10A and 10B. For example, virtual network information including the group ID of group A and the VLAN-ID of VLAN-001 is stored in the memory 22 of multifunction peripheral 10A. Also, virtual network information including the group ID of group A and the VLAN-ID of VLAN-001 is stored in the memory 22 of multifunction peripheral 10B.

[0078] The processor 24 of the multifunction device 10B transmits information to other devices registered in the device list stored in the memory 22 of the multifunction device 10B to inquire whether or not a VLAN having the same VLAN-ID belonging to the same group is formed by other devices. In the example shown in Fig. 6, the processor 24 of the multifunction device 10B transmits the inquiry information to the multifunction devices 10A and 10B.

[0079] Then, the processor 24 of the multifunction device 10B connects VLANs having the same VLAN-IC that belong to the same group together. For example, a VLAN-001 that belongs to group A is formed by the multifunction device 10B, and a VLAN-001 that belongs to group A is formed by the multifunction device 10A. In this case, the processor 24 of the multifunction device 10B connects the VLANs-001 that belong to group A together. Here, the VLAN-001 formed by the multifunction device 10B is an example of a first virtual network, and the VLAN-001 formed by the multifunction device 10A is an example of a second virtual network.

[0080] In each of the above embodiments, the term "processor" refers to a processor in a broad sense, and includes general-purpose processors (e.g., CPU: Central Processing Unit, etc.) and dedicated processors (e.g., GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic device, etc.). Furthermore, the operation of the processor in each of the above embodiments may not only be performed by one processor, but may also be performed by multiple processors located at physically separate locations working together. Furthermore, the order of each operation of the processor is not limited to the order described in each of the above embodiments, and may be changed as appropriate. [Explanation of symbols]

[0081] 10A,10B MFPs, 12 servers, 22 memory, 24 processors.

Claims

1. A processor is included. The processor, forming a first virtual network; When a specific function is executed, the first virtual network is connected to a second virtual network formed by another device; After the specific function is executed, disconnecting the first virtual network from the second virtual network. An information processing device, the specific function is a function executed by the information processing device and the other device, device identification information for identifying devices that have formed a virtual network, group identification information for identifying a group, and network identification information for identifying the virtual network are associated with each other and registered; The processor, When the specific function is executed, if the second virtual network, which belongs to the same group as the first virtual network and has the same network identification information as the first virtual network, is formed and registered by the other device, connecting the first virtual network and the second virtual network.

23. An information processing apparatus comprising:

2. The processor further comprises: When the specific function is executed, a process is executed to delete from registration device identification information of the device itself, group identification information of a group to which a user who has utilized the specific function belongs, and network identification information of a virtual network formed by the device itself and utilized by the user, which are associated with each other.

2. The information processing apparatus according to claim 1,

3. The processor further comprises: When a user logs in to the device, device identification information of the device, group identification information of a group to which the user belongs, and network identification information of a virtual network used by the user are associated and registered; When the user logs out from the device, a process is executed to delete from registration device identification information of the device, group identification information of a group to which the user belongs, and network identification information of a virtual network used by the user, which are associated with each other.

2. The information processing apparatus according to claim 1,

4. The computer forming a first virtual network; When a specific function is executed, the first virtual network is connected to a second virtual network formed by another device; After the specific function is executed, disconnecting the first virtual network from the second virtual network. A program for operating in such a manner, the specific function is a function executed by the computer and the other device, device identification information for identifying devices that have formed a virtual network, group identification information for identifying a group, and network identification information for identifying the virtual network are associated with each other and registered; The computer includes: When the specific function is executed, if the second virtual network, which belongs to the same group as the first virtual network and has the same network identification information as the first virtual network, is formed and registered by the other device, connecting the first virtual network and the second virtual network. A program characterized by:

Citation Information

Patent Citations

  • Information processor, information processing method and system

    JP2007235455A

  • Image forming apparatus, control method thereof, system, program, and storage medium

    JP2007293813A

  • Image formation device, image formation device control program, and image formation system

    JP2017010317A

  • Network system, node device and network management device

    JP3746282B2

  • NETWORK CONNECTION METHOD AND NETWORK CONNECTION SYSTEM AND LAYER 2 SWITCH AND MANAGEMENT SERVER

    JP3794496B2