COMMUNICATION DEVICE, COMPUTER PROGRAM FOR A COMMUNICATION DEVICE, AND METHOD PERFORMED BY A COMMUNICATION DEVICE - Patent application

Abstract

To provide a technique that allows a user to easily switch between the validity and invalidity of a port number.SOLUTION: In a communication system, a communication device comprises: a receiving unit that receives a specific request including a specific port number as a destination port number; a processing execution unit that, when the state of the communication device for the specific port number is an authorized state, executes specific processing according to the specific request; a notification unit that, when the state of the communication device for the specific port number is an unauthorized state, notifies the outside of notification information indicating that the execution of the specific processing is not authorized; and a first changing unit that, when a change instruction is acquired, changes the state of the communication device for the specific port number from the unauthorized state to the authorized state. In addition, after the state of the communication device for the specific port number is changed from the unauthorized state to the authorized state, when the specific request is received again, the processing execution unit executes the specific processing.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The technology disclosed in this specification relates to a communication device that executes processing in response to a request received from a terminal device. [Background technology]

[0002] Patent Document 1 discloses a multifunction device. The multifunction device receives information from a server indicating whether each of a plurality of port numbers available to the multifunction device is safe or dangerous. If any of the port numbers is dangerous, the multifunction device notifies the user of warning information indicating that fact. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2019-129427 A Summary of the Invention [Problem to be solved by the invention]

[0004] The above-mentioned Patent Document 1 does not disclose anything about switching between valid and invalid port numbers available to a multifunction device. Here, a valid port number means a state in which execution of a process in response to a request that includes that port number as a destination port number is permitted, and an invalid port number means a state in which execution of a process in response to a request that includes that port number as a destination port number is not permitted. This specification discloses a technology that allows a user to easily switch between valid and invalid port numbers. [Means for solving the problem]

[0005] The communication device disclosed in this specification may include a receiving unit that receives a specific request including a specific port number as a destination port number from a terminal device, a processing execution unit that executes a specific process in response to the specific request when the state of the communication device for the specific port number is a permitted state in which execution of a process in response to a request including the corresponding port number as a destination port number is permitted, a notification unit that notifies an external device of notification information indicating that execution of the specific process is not permitted when the state of the communication device for the specific port number is a non-permitted state in which execution of a process in response to a request including the corresponding port number as a destination port number is not permitted, and a first change unit that changes the state of the communication device for the specific port number from the non-permitted state to the permitted state when a change instruction is obtained from a user in response to the notification. The processing execution unit may further execute the specific process when the specific request is received again from the terminal device after the state of the communication device for the specific port number is changed from the non-permitted state to the permitted state.

[0006] According to the above configuration, the communication device notifies notification information when the state of the communication device for a specific port number included in a specific request is a disallowed state. Therefore, the user can easily know that execution of a specific process is not permitted. Then, in response to the above notification, when the communication device obtains a change instruction from the user, it changes the state of the communication device for the specific port number from a disallowed state to a permitted state. That is, the communication device switches the specific port number from disabled to enabled. Therefore, the user can easily switch the specific port number from disabled to enabled.

[0007] A computer program for the above-mentioned communication device, a computer-readable recording medium storing the computer program, and a method executed by the communication device are also novel and useful. [Brief description of the drawings]

[0008] [Figure 1] 1 shows the configuration of a communication system. [Diagram 2] 1 shows a sequence diagram of case A of the first embodiment. [Diagram 3] 13 shows a sequence diagram of case B of the first embodiment. [Figure 4] 13 shows a sequence diagram of case C of the first embodiment. [Diagram 5] 13 shows a sequence diagram of case D of the second embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] (First Example) (Communication system configuration; Figure 1) 1, the communication system 2 includes a printer 10 and a plurality of terminals 100 and 200. The printer 10 and the terminals 100 and 200 are connected to a LAN (abbreviation of Local Area Network) and can communicate with each other via the LAN.

[0010] (Printer 10 Configuration) The printer 10 is a peripheral device (for example, a peripheral device of the terminal 100) capable of executing a printing function. In a modified example, the printer 10 may be a multi-function device capable of executing a scanning function, a FAX function, etc. in addition to a printing function. The printer 10 can also function as a web server. The printer 10 has a serial number SN, which is information for identifying the printer. The printer 10 comprises an operation unit 12, a display unit 14, a communication interface 16, a print execution unit 18, and a control unit 30. Each unit 12 to 30 is connected to a bus line (reference numerals omitted). In the following, the interface is referred to as "I / F".

[0011] The operation unit 12 has a plurality of keys. A user can input various instructions to the printer 10 by operating the operation unit 12. The display unit 14 is a display for displaying various information. The communication I / F 16 is connected to a LAN. The print execution unit 18 has a printing mechanism such as an inkjet type or a laser type.

[0012] The control unit 30 includes a CPU 32 and a memory 34. The CPU 32 executes various processes in accordance with a program 36 stored in the memory 34. The memory 34 is composed of a volatile memory, a non-volatile memory, etc. The memory 34 stores a setting table 38.

[0013] The setting table 38 is a table indicating whether or not execution of a process according to a request including a port number is permitted for each of a plurality of port numbers available to the printer 10. Specifically, the setting table 38 stores an IP address, a port number, a protocol, a state, and a period in association with each other. The IP address is either an IP address (e.g., IP1) of a specific device (e.g., the terminal 100) or Any, which means an IP address of any device. Note that a plurality of specific IP addresses may be stored as one item of the IP address in the setting table 38. In this case, a plurality of IP addresses may be listed, or a range of IP addresses (i.e., a network address) may be stored. The port number is a port number used for communication executed by the printer 10. The protocol indicates a protocol in which the corresponding port number is used. For example, in the example of FIG. 1, port number PN1 is used in communication using HTTPS (short for Hypertext Transfer Protocol Secure). The state is either "permitted" indicating that the corresponding port number is valid, or "not permitted" indicating that the corresponding port number is invalid. Here, a valid port number means that execution of a process in response to a request that includes the port number as a destination port number is permitted. An invalid port number means that execution of a process in response to a request that includes the port number as a destination port number is not permitted. The period is either "permanent," which indicates that the corresponding port number should be maintained valid without time limit (i.e., in the "permitted" state), or time information indicating the remaining time that the corresponding port number should be maintained valid. As will be described in more detail later, when the printer 10 receives a request that includes a port number stored in the setting table 38, it can execute a process in response to the request or display a notification screen SC1.

[0014] At the time of shipment of the printer 10, the setting table 38 stores the following information in advance. That is, the setting table 38 stores the IP address Any, the port number, and the protocol in association with each of all port numbers. The setting table 38 stores the state "permitted" and the period "permanent" in association with each of the three port numbers PN1 to PN3. The setting table 38 stores the state "not permitted" in association with each of the two port numbers PN4 and PN5 other than the three port numbers PN1 to PN3. Here, the port numbers PN1 to PN3 corresponding to the state "permitted" are port numbers used by a protocol having a relatively high security compared to other port numbers. Therefore, when the printer 10 receives a request according to a protocol having a relatively high security in the initial state, it can execute a process according to the request. In this embodiment, the setting table 38 stores the above five port numbers, but in a modified example, the setting table 38 may store port numbers other than the above five.

[0015] (Configuration of terminals 100 and 200) The terminals 100 and 200 are portable terminal devices such as smartphones, PDAs, tablet PCs, etc. In a modified example, the terminals 100 and 200 may be stationary PCs, notebook PCs, etc. The terminal 100 is assigned an IP address IP1, and the terminal 200 is assigned an IP address IP2.

[0016] (Processing performed by each device 10, 100, 200: Figures 2 to 4) Next, the processing executed by each device will be described with reference to Figures 2 to 4. In the following, for ease of understanding, the operations executed by the CPU of each device (such as the CPU 32) will be described with the focus on each device (such as the printer 10) rather than the CPU.

[0017] (Case A; Figure 2) Case A will be described with reference to Fig. 2. At T5, the terminal 100 acquires an access instruction from the user to access the web server of the printer 10. In this case, the terminal 100 transmits an access request to the printer 10 at T10. In this case, the access request is a command conforming to HTTPS. The access request includes the IP address IP1 of the source of the access request (i.e., the terminal 100), and includes the port number PN1 corresponding to HTTPS as the destination port number.

[0018] When the printer 10 receives an access request from the terminal 100 via the communication I / F 16 in T10, the printer 10 determines in T11 whether execution of a process corresponding to the access request is permitted. Specifically, the printer 10 identifies the IP address "Any" and the status "Allowed" associated with the port number PN1 included in the received access request from the setting table 38 (see FIG. 1). In this case, the printer 10 determines in T11 that execution of a process corresponding to the access request (i.e., transmission of the top screen data) is permitted, and transmits the top screen data to the terminal 100 via the communication I / F 16 in T12. In this way, when the printer 10 receives a request including a port number corresponding to the status "Allowed", it can execute a process corresponding to the request.

[0019] When the terminal 100 receives the top screen data from the printer 10 in T12, the terminal 100 displays the top screen SC0 in T14. The top screen SC0 includes, for example, the status of the printer 10 (e.g., Idle) and various buttons for changing various settings of the printer 100.

[0020] Thereafter, terminal 100 acquires a search instruction from the user in T20. The search instruction is not acquired by selecting a button in top screen SC0, but is acquired in response to starting a search application (not shown in FIG. 1) installed in terminal 100. The search application is an application for searching for printers present around terminal 100. When terminal 100 acquires a search instruction from the user in T20, terminal 100 transmits a search request by broadcast to the LAN in T22. The search request is a command for searching for printers present around terminal 100. In this case, the search request is a command conforming to SNMPv1 (Simple Network Management Protocol version 1). The search request includes the IP address IP1 of terminal 100 as the sender, and includes port number PN4 corresponding to SNMPv1 as the destination port number.

[0021] When the printer 10 receives a search request from the terminal 100 via the communication I / F 16 in T22, the printer 10 determines in T23 whether execution of processing in response to the search request is permitted. Specifically, the printer 10 identifies the IP address "Any" and the status "not permitted" associated with the port number PN4 included in the received search request from the setting table 38. In this case, the printer 10 determines in T23 that execution of processing in response to the search request (i.e., sending a search response) is not permitted, and displays a notification screen SC1 on the display unit 14 in T24 without sending a search response.

[0022] The notification screen SC1 includes the IP address IP1 included in the search request, the port number PN4 included in the search request, and SNMPv1, which is a protocol corresponding to the port number PN4. The notification screen SC1 further includes a message "The above communication has been blocked." This message indicates that a request including the port number PN4 as a destination port number has been received, and indicates that execution of processing in response to the search request is not permitted. Thus, the user can know that a request including an invalid port number has been received by the printer 10. The notification screen SC1 further includes a message for inquiring of the user as to whether or not to permit execution of processing in response to the request when the request is received again.

[0023] The notification screen SC1 further includes a button "permanent permission" for instructing that the execution of the process in response to the request is permitted without time restrictions, and a button "temporary permission" for instructing that the execution of the process in response to the request is permitted only for a predetermined time. Therefore, when enabling the port number SN4, the user can appropriately select one of the buttons "permanent permission" and "temporary permission". The notification screen SC1 further includes a button "do not permit" for instructing that the execution of the process in response to the request is not permitted, and a button "settings" for displaying a setting screen described later.

[0024] When the printer 10 accepts the user's selection of the "permanent permission" button in the notification screen SC1 in T26, the printer 10 updates the setting table 38 in T28. Specifically, the printer 10 changes the information corresponding to the port number PN4 as follows. That is, the printer 10 changes the IP address from "Any" to "IP1", the status from "not permitted" to "permitted", and the period to "permanent". In this way, the user can switch the port number PN4 from disabled to enabled by operating the printer 10 in accordance with the display of the notification screen SC1.

[0025] At T30, the terminal 100 displays the search result screen SC2. In this case, the terminal 100 does not receive a search response from any printer, including the printer 10. As a result, the terminal 100 displays the search result screen SC2 including a message indicating that no printer was found around the terminal 100.

[0026] Thereafter, the terminal 100 acquires a search instruction from the user again at T40, and transmits a search request to the LAN by broadcast at T42.

[0027] When the printer 10 receives a search request from the terminal 100 via the communication I / F 16 in T42, the printer 10 determines in T43 whether execution of processing in response to the search request is permitted. Specifically, the printer 10 identifies the IP address IP1 and status "permitted" that are associated with the port number PN4 included in the received search request (see T28). For this reason, the printer 10 determines in T43 that execution of processing in response to the search request (i.e., sending a search response) is permitted, and in T44 sends the search response to the terminal 100 via the communication I / F 16. The search response includes the serial number SN of the printer 10.

[0028] When the terminal 100 receives the search response from the printer 10 in T44, it displays a search result screen SC3 including the serial number SN included in the search response in T50.

[0029] If the button "Do not permit" in the notification screen SC1 is selected at T26, the printer 10 does not update the setting table 38, and maintains the status corresponding to the port number PN4 as "Not permitted." In this way, the printer 10 can switch between enabling the port number PN4 and maintaining the port number PN4 disabled, in response to an instruction from the user.

[0030] (Case B; Figure 3) Next, referring to FIG. 3, case B will be described. In case B, the same processes as those in T5 to T24 in FIG. 2 are executed. When the printer 10 accepts the selection of the button "temporary permission" in the notification screen SC1 from the user in T126, the printer 10 updates the setting table 38 in T128. Specifically, the printer 10 changes the IP address corresponding to the port number PN4 from "Any" to "IP1", changes the status from "not permitted" to "permitted", and changes the period to "30 minutes remaining". Thus, in this embodiment, when the button "temporary permission" is selected, the port number is enabled for 30 minutes. In a modified example, the time for which the port number is enabled may be less than 30 minutes or may be more than 30 minutes. In another modified example, the time for which the port number is enabled may be specified by the user.

[0031] After the process of T128 is executed, the same processes as T30 to T50 in Fig. 2 are executed. That is, when the printer 10 transmits a search request again from the terminal 100, for example, five minutes after the execution of T128, the printer 10 identifies the IP address "IP1" associated with the port number PN4 included in the received search request, the status "Allowed", and the period "25 minutes remaining". In this case, the printer 10 determines that the IP address IP1 included in the search request matches the identified IP address IP1, and furthermore, since the status is "Allowed", it executes the process according to the search request (i.e., transmitting a search response).

[0032] Thereafter, when the terminal 100 acquires a scan instruction from the user in T130, it transmits a scan request to the printer 10 in T132. The scan request includes the IP address IP1 of the terminal 100 that is the transmission source, and also includes port number PN6 as the destination port number.

[0033] When the printer 10 receives a scan request from the terminal 100 via the communication I / F 16 in T132, the printer 10 determines that the port number PN6 included in the scan request of T130 is not stored in the setting table 38. In this case, the printer 10 does not execute the process according to the scan request, and does not display the notification screen SC1.

[0034] In this way, when the printer 10 receives a request including a port number that is not stored in the setting table 38, the printer 10 does not execute a process corresponding to the request and does not display the notification screen SC1. A port number that is not stored in the setting table 38 is likely to be a port number corresponding to a port that the printer 10 does not normally use. Even if the printer 10 receives a request including such a port number and is permitted to execute a process corresponding to the request after the notification screen SC1 is displayed, the printer 10 cannot execute the process corresponding to the request. Therefore, when the printer 10 receives a request including such a port number, displaying the notification screen SC1 is a wasteful process. Therefore, when the printer 10 receives a request including a port number corresponding to a port that the printer 10 does not normally use, the printer 10 can suppress the wasteful process of displaying the notification screen SC1.

[0035] Thereafter, when terminal 200, which is different from terminal 100, receives a search instruction from the user in T140, it broadcasts a search request to the LAN in T142. The search request includes the IP address IP2 of terminal 200 as the sender, and also includes port number PN4 corresponding to SNMPv1 as the destination port number.

[0036] When the printer 10 receives a search request from the terminal 200 via the communication I / F 16 in T142, the printer 10 determines in T143 whether execution of a process in response to the search request is permitted. In the following, an example will be described in which a search request is transmitted from the terminal 200 to the printer 10 after 10 minutes have elapsed since T128 was executed. The printer 10 identifies the IP address "IP1" associated with the port number PN4 included in the received search request, the status "permitted," and the period "20 minutes remaining." In this case, the printer 10 determines that the IP address IP2 included in the search request does not match the identified IP address IP1, and determines in T143 that execution of a process in response to the search request (i.e., transmission of a search response) is not permitted. In this way, when the printer 10 receives a search request including the port number PN4 as a destination port number, it can switch whether or not to transmit a search response depending on the terminal that is the sender of the search request.

[0037] The process of T144 is similar to the process of T24 in FIG. 2, except that the IP address included in the notification screen SC1 (see T24 in FIG. 2) is IP2. In T146, the printer 10 accepts the selection of the "Do not allow" button in the notification screen SC1 from the user. In this case, the printer 10 does not update the setting table 38. The process of T150 is similar to the process of T30 in FIG. 2, except that the process is executed by the terminal 200.

[0038] After that, when 30 minutes have passed since T128 was executed, the printer 10 updates the setting table 38 in T152. Specifically, the printer 10 changes the IP address corresponding to the port number PN4 from "IP1" to "Any" and changes the status from "Allowed" to "Not Allowed." This can improve the security of the printer 10.

[0039] (Case C; Figure 4) Next, case C will be described with reference to FIG. 4. In case C, the same processes as those in T5 to T24 in FIG. 2 are executed. When the printer 10 accepts the selection of the button "Settings" in the notification screen SC1 from the user in T226, it displays a setting screen SC4 on the display unit 14 in T228. The setting screen SC4 includes a message prompting the user to specify an IP address and a port number, an IP address input field, a port number input field, a button "Permanent permission", a button "Temporary permission", and a button "Cancel". At the stage when the setting screen SC4 is displayed, the IP address input field and the port number input field respectively describe the IP address IP1 and the port number PN4 included in the received search request (see T22 in FIG. 2 cited in FIG. 4).

[0040] In T230, the printer 10 accepts input of port number SN5 different from port number PN4 from the user, and then accepts selection of the button "permanent permission." The process of T232 is similar to the process of T28 in Fig. 2, except that the information corresponding to port number PN5 is changed. In this way, the user can easily switch port number PN5, which is different from port number PN4 included in a received request, from invalid to valid.

[0041] The process of T240 is the same as the process of T30 in Fig. 2. Thereafter, in T250, the terminal 100 acquires a search instruction from the user. Here, the terminal 100 accepts an instruction from the user to change the protocol used by the search application for the search from SNMPv1 to SNMPv2. In this case, in T252, the terminal 100 transmits a search request conforming to SNMPv2 to the LAN by broadcast. The search request includes the IP address IP1 of the terminal 100 that is the transmission source, and also includes the port number PN5 corresponding to SNMPv2 as the destination port number. The processes of T253 to T260 are the same as the processes of T43 to T50 in Fig. 2, except that the port number to be determined is PN5.

[0042] (Effects of the first embodiment) According to the above configuration, when the status corresponding to the port number PN4 included in the search request is "not permitted" (T23 in FIG. 2), the printer 10 displays the notification screen SC1 (T24). Therefore, the user can easily know by looking at the notification screen SC1 that the execution of the process corresponding to the search request (i.e., sending the search response) is not permitted. Then, when the printer 10 acquires an instruction from the user to select the button "permanent permission" in response to the display of the notification screen SC1 (T26), it changes the status corresponding to the port number PN4 from "not permitted" to "permitted". That is, the printer 10 switches the port number PN4 from disabled to enabled. Therefore, the user can easily switch the port number PN4 from disabled to enabled.

[0043] (Correspondence) The printer 10, the terminal 100, and the terminal 200 are examples of a "communication device", a "terminal device", and a "different terminal device", respectively. The IP address IP1 and the IP address IP2 are examples of a "specific identification information" and a "different identification information", respectively. The port numbers PN4 and PN5 are examples of a "specific port number" and a "different port number", respectively. The information indicating that the selection of the button "permanent permission" has been accepted, and the information indicating that the selection of the button "temporary permission" has been accepted are examples of "first information" and "second information", respectively. Accepting the selection of the button "do not permit" at T146 in FIG. 3 is an example of acquiring a "maintenance instruction". The state of the setting table 38 is an example of "state information", and the states "permit" and "not permitted" are examples of "permission information" and "not permitted information", respectively. The port numbers PN1 to PN3, the port numbers PN4 and PN5 are examples of "first type of port number" and "second type of port number", respectively.

[0044] The process of T10, the process of T22, the process of T42 in FIG. 2, the process of T132, the process of T142 in FIG. 3, and the process of T252 in FIG. 4 are examples of the process executed by the "receiving unit". The process of T11, the process of T23, the process of T43 in FIG. 2, the process of T143 in FIG. 3, and the process of T253 in FIG. 4 are examples of the process executed by the "determining unit". The process of T12, the process of T44 in FIG. 2, and the process of T254 in FIG. 4 are examples of the process executed by the "processing execution unit". The process of T24 in FIG. 2 is an example of the process executed by the "notification unit". The process of T28 in FIG. 2, the process of T128 in FIG. 3, and the process of T232 in FIG. 4 are examples of the process executed by the "first change unit". The process of T152 in FIG. 3 is an example of the process executed by the "second change unit".

[0045] (Second Example) The second embodiment differs from the first embodiment in that the printer 10 sends a notification email EM instead of displaying a notification screen SC1. The printer 10 stores a notification destination email address MA in the memory 34 (see FIG. 1). The notification destination email address MA is preset in the printer 10 by the user.

[0046] (Case D; Figure 5) Case D of the second embodiment will be described with reference to Fig. 5. In case D, the same processes as T5 to T23 in Fig. 2 are executed. After that, in T323 in Fig. 5, the printer 10 transmits a notification email EM to the terminal 100 via the communication I / F 16. The notification email EM includes the notification destination email address MA as the destination email address.

[0047] In T323, the terminal 100 receives the notification mail EM from the printer 10. After that, in response to receiving a mail display operation (for example, starting a mailer and selecting the notification mail EM) from the user in T324, the terminal 100 displays the notification mail EM in T325. The text of the notification mail EM includes the IP address IP1 included in the search request (T22 in FIG. 2 cited in FIG. 5), the port number PN4 included in the search request, and the protocol SNMPv1 corresponding to the port number PN4. The text further includes each message similar to that of the notification screen SC1 (see T24 in FIG. 2), an IP address input field, a port number input field, a button "permanent permission", a button "temporary permission", and a button "not permitted". At the stage when the notification mail EM is displayed, the IP address IP1 and the port number PN4 are written in the IP address input field and the port number input field, respectively.

[0048] When terminal 100 accepts, in T326, selection of the "Permanent Allow" button in the notification email EM from the user, it sends a change instruction to printer 10 in T327. The change instruction is a command that instructs printer 10 to change the setting table 38. The change instruction includes the IP address IP1 of terminal 100 that sent the change instruction. The change instruction is a command that complies with SMNPv3. Therefore, the change instruction includes port number PN3 as the destination port number. The change instruction further includes change information. The change information includes the IP address IP1 of terminal 100 entered in the notification email EM, the port number PN4 entered in the notification email EM, and information indicating that the "Permanent Allow" button was selected.

[0049] When the printer 10 receives a change instruction from the terminal 100 via the communication I / F 16 in T327, the printer 10 determines in T328 whether execution of processing according to the change instruction is permitted. Specifically, the printer 10 identifies the IP address "Any" and the status "Permitted" associated with the port number PN3 included in the received change instruction from the setting table 38 (see FIG. 1). In this case, the printer 10 determines in T328 that execution of processing according to the change instruction (i.e., updating the setting table 38) is permitted, and updates the setting table 38 in T329. The specific processing in T329 is the same as the processing in T28 in FIG. 2. The subsequent processing is the same as the processing in T30 to T50 in FIG. 2.

[0050] (Effects of the second embodiment) Thus, in this embodiment, when the printer 10 determines that execution of the requested process is not permitted (T23 in FIG. 2 cited in FIG. 5), it sends a notification email EM to the terminal 100 (T323). The user can update the setting table 38 by using the terminal 100 that received the notification email EM. That is, the user can switch the port number from disabled to enabled without operating the printer 10. This improves user convenience.

[0051] (Correspondence) The terminal 100 is an example of an "external device." The notification email EM is an example of an "email containing notification information." The processes of T323, T327, and T328 in Fig. 5 are examples of processes executed by a "notification unit," a "reception unit," and a "determination unit," respectively. The process of T329 is an example of a process executed by a "process execution unit" and a "first change unit."

[0052] Although specific examples of the technology disclosed in this specification have been described in detail above, these are merely examples and do not limit the scope of the claims. The technology described in the claims includes various modifications and variations of the specific examples exemplified above. Modifications of the above embodiments are listed below.

[0053] (Modification 1) The printer 10 may store an allow list in the memory 34 instead of the setting table 38. The allow list includes a port number. In this case, when the printer 10 receives a request including a port number included in the allow list, the printer 10 may execute a process according to the request, and when the printer 10 receives a request including a port number not included in the allow list, the printer 10 may not execute a process according to the request and may display a notification screen SC1. That is, in this modification, the port number included in the allow list is valid, and the port number not included in the allow list is invalid. In this modification, the "determination unit" can be omitted. In another modification, the printer 10 may store a non-allow list in the memory 34 instead of the setting table 38. The non-allow list includes a port number. In this case, when the printer 10 receives a request including a port number not included in the non-allow list, the printer 10 may execute a process according to the request, and when the printer 10 receives a request including a port number included in the non-allow list, the printer 10 may not execute a process according to the request and may display a notification screen SC1. That is, in this modification, the port number not included in the non-allow list is valid, and the port number included in the non-allow list is invalid. In this modification, the "determination unit" can be omitted. Generally speaking, the "memory" does not need to store the "port number" in association with the "status information."

[0054] (Variation 2) When the printer 10 receives a request including a port number not stored in the setting table 38 (T132 in FIG. 3), the printer 10 may display the notification screen SC1.

[0055] (Variation 3) The notification screen SC1 displayed at T24 in Fig. 2 may not include the button "Do not permit." Also, the notification email EM displayed at T325 in Fig. 5 may not include the button "Do not permit." Generally speaking, the "communication device" does not need to obtain a maintenance instruction from the user.

[0056] (Modification 4) The setting table 38 may not have a period column. In this case, the notification screen SC1 displayed at T24 in FIG. 2 may include only one button "Allow" instead of the two buttons "Permanent Allow" and "Temporary Allow". In response to the button "Allow" being selected at 26 in FIG. 2, the printer 10 may change the information corresponding to the port number PN4 as follows. That is, the printer 10 changes the IP address from "Any" to "IP1" and changes the status from "Not Allowed" to "Allowed". Here, the status "Allowed" may mean the permanent permission in the above embodiment. In this modification, the "second change unit" can be omitted. Also, in another modification, the status "Allowed" may mean the temporary permission in the above embodiment.

[0057] (Modification 5) The setting table 38 does not have to have a column for IP addresses. In this case, the status "permitted" corresponding to a port number means that the port number is valid for any IP address, and the status "not permitted" corresponding to a port number means that the port number is invalid for any IP address.

[0058] (Variation 6) In each of the above embodiments, either the display of the notification screen SC1 (T24 in FIG. 2) or the transmission of the notification email EM (T323 in FIG. 5) was executed by the printer 10. Alternatively, the printer 10 may execute both the display of the notification screen SC1 and the transmission of the notification email EM. In this variation, the display of the notification screen SC1 and the transmission of the notification email EM are an example of processing executed by the "notification unit."

[0059] (Variation 7) In the above embodiment, the notification email EM was sent to the terminal 100 as the destination (T323 in FIG. 5), but instead, the notification email EM may be sent to a device (e.g., an administrator terminal) different from the terminal 100 as the destination. In this variation, the different device is an example of an "external device."

[0060] (Variation 8) The notification screen SC1 does not have to include the "Settings" button. Furthermore, the notification email EM does not have to include a message prompting the user to specify an IP address and port number, an IP address input field, and a port number input field. In these variations, the printer 10 can change only the information contained in the settings table 38 that corresponds to the port number contained in the received request. Generally speaking, the "communication device" does not have to obtain a change instruction that includes the specification of a port number different from a specific port number.

[0061] (Variation 9) In the setting screen SC4 of T228 in FIG. 4, the user may not only specify a specific IP address, but also specify "Any" which means any IP address. Similarly, in the setting screen SC4, the user may not only specify a specific port number, but also specify "Any" which means any port number. Similarly, in the notification email EM of T325 in FIG. 5, the user may specify "Any" which means any IP address and "Any" which means any port number.

[0062] (Variation 10) At the time of shipment, printer 10 may not store a port number associated with the "Allowed" status. In this variation, there is no "first type of port number." In another variation, printer 10 may not store a port number associated with the "Not Allowed" status. In this variation, there is no "second type of port number."

[0063] 2 includes the message "Communication has been blocked" and various buttons, and may not include the port number PN4 included in the search request. In other words, the notification screen SC1 does not need to include a message indicating that a request has been received that includes, as a destination port number, a port number associated with the status "not permitted."

[0064] (Variation 12) In the above embodiments, the processes in FIGS. 2 to 5 are implemented by software (for example, program 36), but at least one of these processes may be implemented by hardware such as a logic circuit.

[0065] The technical elements described in this specification or drawings have technical utility either alone or in various combinations, and are not limited to the combinations described in the claims at the time of filing. In addition, the technologies illustrated in this specification or drawings can achieve multiple objectives simultaneously, and achieving one of these objectives is itself technically useful. The following items are elements of the claims as filed: (Item 1) A communication device, comprising: a receiving unit that receives a specific request including a specific port number as a destination port number from a terminal device; a process execution unit that executes a specific process in response to a specific request when a state of the communication device with respect to the specific port number is a permitted state in which execution of a process in response to a request including the corresponding port number as a destination port number is permitted; a notification unit that notifies an external device of notification information indicating that execution of the specific process is not permitted when the state of the communication device with respect to the specific port number is a disallowed state in which execution of a process according to a request including the corresponding port number as a destination port number is not permitted; a first change unit that changes the state of the communication device with respect to the specific port number from the unauthorized state to the authorized state when a change instruction is obtained from a user in response to the notification; Equipped with The processing execution unit further executes the specific processing when the specific request is received again from the terminal device after the state of the communication device for the specific port number is changed from the disallowed state to the allowed state. (Item 2) The communication device further comprises: a memory that stores, for each of a plurality of port numbers, a port number and state information in association with each other, the state information being either permission information indicating that the state of the communication device is the permission state or non-permission information indicating that the state of the communication device is the non-permission state; a determination unit that, when the specific request is received from the terminal device, determines whether the status information associated with the specific port number is the permission information or the non-permission information; Equipped with the process execution unit executes the specific process when it is determined that the state information associated with the specific port number is the permission information; the notification unit notifies an external device of the notification information when the status information associated with the specific port number is determined to be the non-permission information; 2. The communication device according to item 1, wherein the first change unit changes the status information associated with the specific port number from the non-permission information to the permission information. (Item 3) 3. The communication device according to item 2, wherein if the specific port number is not stored in the memory, the notification information is not notified. (Item 4) The communication device according to any one of items 1 to 3, wherein, when a maintenance instruction is obtained from a user in response to the notification, the state of the communication device for the specific port number is maintained in the unauthorized state. (Item 5) the change instruction includes either first information indicating that the state of the communication device for the specific port number should be maintained in the permitted state without time limit, or second information indicating that the state of the communication device for the specific port number should be maintained in the permitted state for only a predetermined time, The communication device further comprises: 5. The communication device according to any one of items 1 to 4, further comprising: a second change unit that changes the state of the communication device for the specific port number from the permitted state to the disallowed state when the change instruction including the second information is acquired to change the state of the communication device for the specific port number from the unpermitted state to the permitted state and when the predetermined time has elapsed since the state of the communication device for the specific port number was changed from the unpermitted state to the permitted state, wherein when the change instruction including the first information is acquired to change the state of the communication device for the specific port number from the unpermitted state to the permitted state, even if the predetermined time has elapsed since the state of the communication device for the specific port number was changed from the unpermitted state to the permitted state. (Item 6) The communication device further comprises a memory; The specific request further includes specific identification information for identifying the terminal device; the first change unit, when the change instruction is acquired, changes the state of the communication device for the specific port number from the unauthorized state to the authorized state, and stores the specific identification information in the memory; the process execution unit further executes the specific process when the specific request including the specific port number as a destination port number and including the specific identification information stored in the memory is received again from the terminal device after the state of the communication device for the specific port number is changed from the unpermitted state to the permitted state and the specific identification information is stored in the memory; The communication device according to any one of items 1 to 5, wherein, after the state of the communication device for the specific port number is changed from the disallowed state to the allowed state and the specific identification information is stored in the memory, when a request including the specific port number as a destination port number is received from a terminal device other than the terminal device, the request including identification information different from the specific identification information, the specific processing is not executed. (Item 7) The communication device further includes a display unit and an operation unit. The notification unit notifies the notification information to an outside by displaying the notification information on the display unit; 7. The communication device according to any one of items 1 to 6, wherein the first change unit acquires the change instruction via the operation unit after the notification information is displayed on the display unit. (Item 8) The communication device further includes a memory for storing a notification destination email address, the notification unit notifies an external party of the notification information by sending an e-mail including the notification information to the notification destination e-mail address stored in the memory; The communication device according to any one of items 1 to 7, wherein the first change unit receives the change instruction from an external device that has received the notification mail after the email is sent. (Item 9) The first change unit is when the change instruction including the designation of the specific port number is obtained from a user in response to the notification, the state of the communication device with respect to the specific port number is changed from the unpermitted state to the permitted state; The communication device according to any one of items 1 to 8, wherein when a change instruction including a specification of a port number different from the specific port number is obtained from a user in response to the notification, the state of the communication device for the different port number is changed from the disallowed state to the allowed state. (Item 10) At the shipping stage of the communication device, for each of one or more first-type port numbers among the plurality of port numbers, the state of the communication device for the first-type port number is the permitted state; 10. The communication device according to any one of items 1 to 9, wherein for each of one or more second type port numbers among the plurality of port numbers that are different from the one or more first type port numbers, the state of the communication device for the second type port number is the unauthorized state. (Item 11) The communication device according to any one of items 1 to 10, wherein the notification information includes information indicating that a request has been received that includes, as a destination port number, a port number whose status of the communication device is the unauthorized state. (Item 12) A computer program for a communication device, comprising: The computer program controls the computer of the communication device to include the following units: a receiving unit that receives a specific request including a specific port number as a destination port number from a terminal device; a process execution unit that executes a specific process in response to a specific request when a state of the communication device with respect to the specific port number is a permitted state in which execution of a process in response to a request including the corresponding port number as a destination port number is permitted; a notification unit that notifies an external device of notification information indicating that execution of the specific process is not permitted when the state of the communication device with respect to the specific port number is a disallowed state in which execution of a process according to a request including the corresponding port number as a destination port number is not permitted; a first change unit that changes the state of the communication device with respect to the specific port number from the unauthorized state to the authorized state when a change instruction is obtained from a user in response to the notification; Functioning as a The processing execution unit further executes the specific processing when the specific request is received again from the terminal device after the state of the communication device for the specific port number is changed from the disallowed state to the allowed state. (Item 13) 1. A method performed by a communication device, comprising: The method comprises: a receiving step of receiving a specific request including the specific port number as a destination port number from a terminal device; a process execution step of executing a specific process in response to the specific request when the state of the communication device with respect to the specific port number is a permitted state in which execution of a process in response to a request including the corresponding port number as a destination port number is permitted; a notification step of notifying an external device of notification information indicating that execution of the specific process is not permitted when the state of the communication device for the specific port number is a disallowed state in which execution of a process in response to a request including the corresponding port number as a destination port number is not permitted; a first change step of changing the state of the communication device for the specific port number from the unauthorized state to the authorized state when a change instruction is obtained from a user in response to the notification; Equipped with The processing execution step further includes executing the specific processing when the specific request is received again from the terminal device after the state of the communication device for the specific port number is changed from the disallowed state to the allowed state. [Explanation of symbols]

[0066] 2: communication system, 10: printer, 12: operation unit, 14: display unit, 16: communication I / F, 18: print execution unit, 30: control unit, 32: CPU, 34: memory, 36: program, 38: setting table, 100, 200: terminal

Claims

1. 1. A communication device, comprising: Memory, a receiving unit for receiving a specific request from a terminal device, the specific request including a specific port number as a destination port number and specific identification information for identifying the terminal device; a process execution unit that executes a specific process in response to a specific request when a state of the communication device with respect to the specific port number is a permitted state in which execution of a process in response to a request including the corresponding port number as a destination port number is permitted; a notification unit that notifies an external device of notification information indicating that execution of the specific process is not permitted when the state of the communication device with respect to the specific port number is a disallowed state in which execution of a process according to a request including the corresponding port number as a destination port number is not permitted; a first change unit that changes the state of the communication device for the specific port number from the unauthorized state to the authorized state when a change instruction is obtained from a user in response to the notification, and stores the specific identification information in the memory; Equipped with the process execution unit further executes the specific process when the specific request including the specific port number as a destination port number and including the specific identification information stored in the memory is received again from the terminal device after the state of the communication device for the specific port number is changed from the unpermitted state to the permitted state and the specific identification information is stored in the memory; when a request including the specific port number as a destination port number is received from a terminal device different from the terminal device after the state of the communication device for the specific port number is changed from the unpermitted state to the permitted state and the specific identification information is stored in the memory, the specific process is not executed. Communications equipment.

2. 1. A communication device, comprising: a receiving unit that receives a specific request including a specific port number as a destination port number from a terminal device; a process execution unit that executes a specific process in response to a specific request when a state of the communication device with respect to the specific port number is a permitted state in which execution of a process in response to a request including the corresponding port number as a destination port number is permitted; a notification unit that notifies an external device of notification information indicating that execution of the specific process is not permitted when the state of the communication device with respect to the specific port number is a disallowed state in which execution of a process according to a request including the corresponding port number as a destination port number is not permitted; a first change unit that changes the state of the communication device for the specific port number from the unpermitted state to the permitted state when a change instruction including a designation of the specific port number is obtained from a user in response to the notification, the first change unit changing the state of the communication device for the different port number from the unpermitted state to the permitted state when the change instruction including a designation of a port number different from the specific port number is obtained from a user in response to the notification; Equipped with The processing execution unit further executes the specific processing when the specific request is received again from the terminal device after the state of the communication device for the specific port number is changed from the disallowed state to the allowed state.

3. The communication device further comprises: a memory that stores, for each of a plurality of port numbers, a port number and state information in association with each other, the state information being either permission information indicating that the state of the communication device is the permission state or non-permission information indicating that the state of the communication device is the non-permission state; a determination unit that, when the specific request is received from the terminal device, determines whether the status information associated with the specific port number is the permission information or the non-permission information; Equipped with the process execution unit executes the specific process when it is determined that the state information associated with the specific port number is the permission information; the notification unit notifies an external device of the notification information when the status information associated with the specific port number is determined to be the non-permission information; The communication device according to claim 1 , wherein the first change unit changes the state information associated with the specific port number from the non-permission information to the permission information.

4. The communication device according to claim 3 , wherein if the specific port number is not stored in the memory, the notification information is not notified.

5. The communication device according to any one of claims 1 to 4, wherein when a maintenance instruction is obtained from a user in response to the notification, the state of the communication device for the specific port number is maintained in the unauthorized state.

6. the change instruction includes either first information indicating that the state of the communication device for the specific port number should be maintained in the permitted state without time limit, or second information indicating that the state of the communication device for the specific port number should be maintained in the permitted state only for a predetermined time, The communication device further comprises: The communication device of any one of claims 1 to 5, further comprising: a second change unit that changes the state of the communication device for the specific port number from the permitted state to the unpermitted state when the change instruction including the second information is obtained and the state of the communication device for the specific port number is changed from the unpermitted state to the permitted state and the predetermined time has elapsed since the state of the communication device for the specific port number was changed from the unpermitted state to the permitted state, wherein when the change instruction including the first information is obtained and the state of the communication device for the specific port number is changed from the unpermitted state to the permitted state, even if the predetermined time has elapsed since the state of the communication device for the specific port number was changed from the unpermitted state to the permitted state, the second change unit does not change the state of the communication device for the specific port number from the permitted state to the unpermitted state.

7. The communication device further includes a display unit and an operation unit. The notification unit notifies the notification information to an outside by displaying the notification information on the display unit; The communication device according to claim 1 , wherein the first change unit acquires the change instruction via the operation unit after the notification information is displayed on the display unit.

8. The communication device further includes a memory for storing a notification destination email address, the notification unit notifies an external party of the notification information by sending an e-mail including the notification information to the notification destination e-mail address stored in the memory; The communication device according to claim 1, wherein the first change unit receives the change instruction from an external device that received the email after the email is sent.

9. At the shipping stage of the communication device, for each of one or more first-type port numbers among a plurality of port numbers, the state of the communication device for the first-type port number is the permitted state; A communication device as described in any one of claims 1 to 8, wherein for each of one or more second type port numbers among the plurality of port numbers that are different from the one or more first type port numbers, the state of the communication device for the second type port number is the unauthorized state.

10. A communication device according to any one of claims 1 to 9, wherein the notification information includes information indicating that a request has been received that includes as a destination port number a port number whose status of the communication device is the unauthorized state.

11. A computer program for a communication device, comprising: The communication device includes: Memory, A computer, Equipped with The computer program causes the computer to operate in the following manner: a receiving unit for receiving a specific request from a terminal device, the specific request including a specific port number as a destination port number and specific identification information for identifying the terminal device; a process execution unit that executes a specific process in response to a specific request when a state of the communication device with respect to the specific port number is a permitted state in which execution of a process in response to a request including the corresponding port number as a destination port number is permitted; a notification unit that notifies an external device of notification information indicating that execution of the specific process is not permitted when the state of the communication device with respect to the specific port number is a disallowed state in which execution of a process according to a request including the corresponding port number as a destination port number is not permitted; a first change unit that changes the state of the communication device for the specific port number from the unauthorized state to the authorized state when a change instruction is obtained from a user in response to the notification, and stores the specific identification information in the memory; Function as a the process execution unit further executes the specific process when the specific request including the specific port number as a destination port number and including the specific identification information stored in the memory is received again from the terminal device after the state of the communication device for the specific port number is changed from the unpermitted state to the permitted state and the specific identification information is stored in the memory; when a request including the specific port number as a destination port number is received from a terminal device different from the terminal device after the state of the communication device for the specific port number is changed from the unpermitted state to the permitted state and the specific identification information is stored in the memory, the specific process is not executed. Computer program.

12. 1. A method performed by a communication device, comprising: the communication device comprises a memory; The method comprises: a receiving step of receiving a specific request from a terminal device, the specific request including a specific port number as a destination port number and specific identification information for identifying the terminal device; a process execution step of executing a specific process in response to the specific request when the state of the communication device with respect to the specific port number is a permitted state in which execution of a process in response to a request including the corresponding port number as a destination port number is permitted; a notification step of notifying an external device of notification information indicating that execution of the specific process is not permitted when the state of the communication device for the specific port number is a disallowed state in which execution of a process in response to a request including the corresponding port number as a destination port number is not permitted; a first change step of changing the state of the communication device for the specific port number from the unauthorized state to the authorized state when a change instruction is obtained from a user in response to the notification, and storing the specific identification information in the memory; Equipped with The process execution step further includes executing the specific process when the specific request including the specific port number as a destination port number and the specific identification information already stored in the memory is received again from the terminal device after the state of the communication device for the specific port number is changed from the unpermitted state to the permitted state and the specific identification information is stored in the memory; when a request including the specific port number as a destination port number is received from a terminal device different from the terminal device after the state of the communication device for the specific port number is changed from the unpermitted state to the permitted state and the specific identification information is stored in the memory, the specific process is not executed. method.

Images