Image forming apparatus, control method for image forming apparatus, and program

Abstract

To provide an image formation apparatus which can notify a user of an error due to a ZT mode.SOLUTION: An MFP 101 includes a plurality of network ports that can receive job data and shifts to a ZT mode that limits a communicable network port to a communication-permitted network port among the plurality of network ports. In the ZT mode, other network ports than the communication-permitted network port among the plurality of network ports are shut down. The MFP 101 opens the communication-limited network ports that have been shut down, issues a job termination code indicating the error termination due to the ZT mode according to the state that the opened communication-limited network ports received the job data, and notifies a user of the job termination code.SELECTED DRAWING: Figure 13

Description

[Technical field]

[0001] The present invention relates to an image forming apparatus, a control method for an image forming apparatus, and a program. [Background technology]

[0002] Conventionally, the mainstream security was boundary defense, such as monitoring the boundary between the internal network and the external network with a firewall or the like. However, in recent years, as telework has spread and working environments have become distributed, it has become difficult to monitor the boundary, and boundary defense security is no longer sufficient. For this reason, zero trust has been attracting attention as a new security measure. In zero trust, all access, not only from the outside but also from the inside, is suspected and controlled, and image forming devices are also required to support the user environment of zero trust defense. As a related technology, the technology of Patent Document 1 has been proposed. The technology of Patent Document 1 predefines a security policy and verifies whether an input job conforms to the security policy. If the input job does not conform to the security policy, the execution of the job is restricted. In such a configuration that verifies whether an input job conforms to the security policy, even if the job data for executing the job is transmitted via an insecure path, the image forming device needs to once import the job data into the image forming device, which involves a security risk. In response to this, image forming devices have been developed that have a function (hereinafter referred to as "ZT mode") that forcibly blocks communications with the outside world that may be exposed to threats due to the absence of a firewall. In the ZT mode, in an image forming device that has multiple network ports, the network ports that can communicate are limited to only the predetermined network ports that have been permitted to be used in advance, and the other network ports are blocked. This makes it possible to suppress communications with the outside world that may be exposed to threats due to the absence of a firewall. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2015-3407 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, when a user operates a communication device to send job data to an image forming device set to the ZT mode, inconveniences may occur. For example, if a user who does not know that the image forming device is set to the ZT mode sets a network port that is not permitted to be used as the destination of the job data, the image forming device cannot receive the job data because the network port is blocked. In this case, the image forming device cannot execute the job, and cannot output an error notification, so the user cannot identify the reason why the job is not executed.

[0005] An object of the present invention is to provide an image forming apparatus, a control method for an image forming apparatus, and a program that can notify a user of an error caused by the ZT mode. [Means for solving the problem]

[0006] In order to achieve the above-mentioned object, the image forming apparatus of the present invention is an image forming apparatus having a plurality of network ports capable of receiving job data, and is characterized in that it comprises a receiving means for receiving a request to transition to a predetermined operating mode that limits the network ports capable of communication to a predetermined network port among the plurality of network ports, a blocking control means for blocking other network ports among the plurality of network ports other than the predetermined network port in accordance with the reception of the request to transition to the predetermined operating mode, an opening control means for opening the other blocked network ports, an issuing means for issuing a code indicating that the termination is an error caused by the predetermined operating mode in accordance with the other opened network port receiving the job data, and a notification means for notifying the code. Effect of the Invention

[0007] According to the present invention, it is possible to inform the user that an error is caused by the ZT mode. [Brief description of the drawings]

[0008] [Figure 1] 1 is a network configuration diagram of an MFP as an image forming apparatus according to an embodiment of the present invention. [Diagram 2] 2 is a block diagram illustrating a schematic configuration of the MFP in FIG. [Diagram 3] 2 is a block diagram illustrating a schematic configuration of the communication device of FIG. 1. [Figure 4] 2 is a block diagram illustrating a schematic configuration of a control module included in the MFP of FIG. [Diagram 5] 2 is a block diagram illustrating a schematic configuration of a control module included in the communication device of FIG. 1. [Figure 6] 2 is a sequence diagram for explaining a process flow relating to the ZT mode by the MFP of FIG. 1. [Figure 7] FIG. 4 is a diagram showing an example of a setting screen displayed on the operation panel of FIG. 3. [Figure 8]2 is a table showing a list of print applications available for use with the MFP of FIG. 1. [Figure 9] 7 is a flowchart showing the procedure of the ZT mode transition process in step S602 of FIG. 6. [Figure 10] 10 is a flowchart showing the procedure of a user notification preparation process in step S903 of FIG. [Figure 11] 10 is a flowchart showing the procedure for opening and closing a network port in step S905 of FIG. [Figure 12] 7 is a flowchart showing the procedure of a job execution process in step S608 of FIG. 6. [Figure 13] FIG. 3 is a diagram showing an example of a job history screen displayed on the operation panel of FIG. 2. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings. Note that in this embodiment, a case where the present invention is applied to a multifunction peripheral (hereinafter referred to as "MFP") as an image forming apparatus having a network linkage function will be described, but the present invention is not limited to MFPs. For example, the present invention may be applied to an SFP or the like having a network linkage function. Note that MFP is an abbreviation for Multi Function Peripheral. SFP is an abbreviation for Single Function Peripheral.

[0010] FIG. 1 is a network configuration diagram of an MFP 101 as an image forming apparatus according to an embodiment of the present invention. In FIG. 1, the MFP 101 is connected to a communication device 102 via a network 103. Note that, in the present embodiment, as an example, a configuration in which the MFP 101 is connected to one communication device 102 via the network 103 will be described, but the present invention is not limited to this configuration. For example, the MFP 101 may be connected to a plurality of communication devices or a plurality of MFPs via the network 103. The MFP 101 has a plurality of functions such as a printing function, a scanning function, a communication function, and a network linking function. For example, the MFP 101 transmits image data generated by reading an original to the communication device 102, and also receives print data for printing from the communication device 102.

[0011] Fig. 2 is a block diagram showing a schematic configuration of MFP 101 in Fig. 1. In Fig. 2, MFP 101 includes a control unit 200, a scanner 210, a printer 211, and an operation panel 212. Control unit 200 is connected to scanner 210, printer 211, and operation panel 212.

[0012] The control unit 200 includes a CPU 201, a ROM 202, a RAM 203, a HDD 204, a network I / F control unit 205, a scanner I / F control unit 206, a printer I / F control unit 207, and a panel control unit 208. The CPU 201, the ROM 202, the RAM 203, the HDD 204, the network I / F control unit 205, the scanner I / F control unit 206, the printer I / F control unit 207, and the panel control unit 208 are connected to each other via a bus 209.

[0013] The CPU 201 executes the software program of the MFP 101 to control the entire MFP 101. The ROM 202 is a read-only memory and stores the boot program, fixed parameters, etc. of the MFP 101. The RAM 203 is a random access memory and is used as a temporary storage area for programs and various data when the CPU 201 controls the MFP 101. The HDD 204 is a hard disk drive and stores system software, applications, and various data. The CPU 201 executes the boot program stored in the ROM 202, expands the program stored in the HDD 204 into the RAM 203, and controls the operation of the MFP 101 by executing the expanded program. The network I / F control unit 205 controls data communication with the communication device 102 and the like connected to the network 103. The scanner I / F control unit 206 controls the reading process of an original by the scanner 210. The printer I / F control unit 207 controls the printing process by the printer 211, etc. The panel control unit 208 controls the operation panel 212 of a touch panel type. For example, panel control unit 208 causes operation panel 212 to display various information, and also acquires from operation panel 212 instructions inputted to operation panel 212 by the user.

[0014] Fig. 3 is a block diagram showing a schematic configuration of the communication device 102 of Fig. 1. In Fig. 3, the communication device 102 includes a control unit 300 and an operation panel 307. The control unit 300 is connected to the operation panel 307. The control unit 300 also includes a CPU 301, a ROM 302, a RAM 303, a HDD 304, a network I / F control unit 305, and a panel control unit 306. The CPU 301, the ROM 302, the RAM 303, the HDD 304, the network I / F control unit 305, and the panel control unit 306 are connected to each other via a bus 308.

[0015] The CPU 301 executes the software program of the communication device 102 and controls the entire communication device 102. The ROM 302 is a read-only memory and stores a boot program, fixed parameters, etc. of the communication device 102. The RAM 303 is a random access memory and is used as a temporary storage area for programs and various data when the CPU 301 controls the communication device 102. The HDD 304 is a hard disk drive and stores system software, applications, and various data. The CPU 301 executes a boot program stored in the ROM 302, expands a program stored in the HDD 304 into the RAM 303, and controls the operation of the communication device 102 by executing the expanded program. The network I / F control unit 305 controls data communication with the MFP 101 and the like connected to the network 103. A touch panel type operation panel 307 is connected to the panel control unit 306. The panel control unit 306 controls the operation panel 307. For example, panel control unit 306 displays various information on operation panel 307, and acquires instructions and the like input by a user to operation panel 307 from operation panel 307. Note that in this embodiment, instead of operation panel 307, a keyboard, mouse, display, and the like may be connected to communication device 102. In such a configuration, in communication device 102, a user inputs instructions and the like to communication device 102 using a keyboard or mouse, and various information is displayed on the display.

[0016] Fig. 4 is a block diagram showing a schematic configuration of a control module 400 included in the MFP 101 of Fig. 1. The control module 400 is a software module stored in the ROM 202 or the HDD 204. In Fig. 4, the control module 400 includes a network driver 401, a network control unit 402, a communication control unit 403, an encryption processing unit 404, a print / read processing unit 405, a device control unit 406, a UI control unit 407, and an authentication management unit 408. The control module 400 further includes a data acquisition unit 409, a request processing unit 410, a capability management unit 411, a state management unit 412, and a port control unit 413. The processing by the control module 400 is realized by the CPU 201 executing a program loaded from the ROM 202 or the HDD 204 to the RAM 203.

[0017] The network driver 401 controls the network I / F control unit 205 to transmit and receive data to and from the communication device 102 connected via the network 103. The network control unit 402 controls communication below the transport layer in a network communication protocol such as TCP / IP to transmit and receive data. The communication control unit 403 is a module for controlling a plurality of communication protocols supported by the MFP 101. The communication control unit 403 opens and closes a network port for using a predetermined network communication protocol for the port control unit 413. Note that in this embodiment, an HTTPS port is used as an example of the predetermined network communication, but encrypted communication such as TLS supported by the MFP 101 is also executed by the communication control unit 403. The communication control unit 403 also instructs the port control unit 413 to switch software control in accordance with the opening and closing of the network port.

[0018] The encryption processing unit 404 is a module for executing various encryption processes. The various encryption processes include, for example, encryption and decryption of data, generation and verification of digital signatures, and generation of hash values. In encrypted communication processes such as TLS executed by the communication control unit 403, the encryption processing unit 404 also performs encryption processes. The print / read processing unit 405 is a module for implementing functions such as printing by the printer 211 and reading of documents by the scanner 210. The device control unit 406 is a module for generating control commands and control data for the MFP 101 and for overall control of the MFP 101. The UI control unit 407 controls the operation panel 212 and the panel control unit 208.

[0019] The authentication management unit 408 is a module that performs authentication processing for the communication device 102 that communicates via the network 103. The authentication management unit 408 provides a data acquisition unit 409 with the type of job that the communication device 102 is requested to execute and connection destination information in accordance with a command (e.g., PDL printing) received from the communication device 102.

[0020] The data acquisition unit 409 is a module for acquiring data from the communication device 102 that communicates via the network 103. In this embodiment, when all ports except a predetermined network port are blocked, the data acquisition unit 409 accesses the communication device 102 based on information provided by the authentication management unit 408, acquires data necessary for control, and generates job data.

[0021] The request processing unit 410 is a module for interpreting and responding to a request received from the communication device 102. If the request is related to capabilities, the request processing unit 410 acquires necessary information from a capabilities management unit 411 and transmits the acquired information to the communication device 102. If the request is related to a device status, the request processing unit 410 acquires necessary information from a status management unit 412 and transmits the acquired information to the communication device 102.

[0022] The capability management unit 411 is a module for managing the capabilities of the MFP 101. Capabilities refer to both hardware and software functions, such as software functions (applications) available in the MFP 101 and connected accessories (not shown). In this embodiment, the capability management unit 411 plays a role of managing the usage permission status of each application, particularly in the ZT mode (predetermined operation mode). The ZT mode is a function that limits the network ports available for communication among a plurality of network ports that can receive job data to only the predetermined network ports used by the applications that are permitted to use, and forcibly blocks the other network ports. This makes it possible to accept only data from external devices whose safety is guaranteed in advance by SSL (TLS) certificates. In the MFP 101, the most secure configuration is when there are zero predetermined network ports, that is, when all network ports are blocked, and in this configuration of the MFP 101, only functions that do not require communication with external devices, such as a local copy function, are available. In this embodiment, the MFP 101 has a plurality of network ports, such as an HTTP port, a RAW port, an IPP port, an IPPS port, and an LPD port. In the MFP 101, among these multiple network ports, an HTTPS port is set as a predetermined network port that is capable of communication in ZT mode. In the following, among the multiple networks provided in the MFP 101, a predetermined network port used by an application that is permitted to use, that is, a predetermined network port that is capable of communication in ZT mode, is referred to as a "communication-permitted network port." In addition, other network ports are referred to as "communication-restricted network ports."

[0023] Furthermore, the capability management unit 411 acquires and manages capability information of other multifunction devices connected via the network 103. The capability information acquired from the other multifunction devices includes information indicating whether the other multifunction devices are equipped with a ZT mode and information indicating whether the ZT mode is set. As a method for acquiring the capability information of the other multifunction devices, the capability information may be periodically transmitted from the other multifunction devices at a preset time, or the request processing unit 410 may make an inquiry to the other multifunction devices.

[0024] The status management unit 412 is a module for managing the status of the MFP 101. The status includes warning status such as low paper remaining, error status such as jam, and their history. For example, when an inquiry is received from the request processing unit 410 upon receiving a print request, the status management unit 412 responds as to whether the MFP 101 is in a state in which printing is possible. In this embodiment, the status management unit 412 stores an error status resulting from an attempt to use a function restricted by the ZT mode together with an error code (job completion code). In addition, the status management unit 412 responds to the request processing unit 410 with a job completion code in response to a request for job status confirmation received from the communication device 102 after the job is completed.

[0025] The port control unit 413 is a group of modules for controlling communication at the application layer in a network communication protocol such as TCP / IP to realize the functions of each application. The port control unit 413 is composed of an HTTPS control unit 414 that controls the HTTPS port, a RAW control unit 415 that controls the RAW port, an IPP control unit 416 that controls the IPP port, an IPPS control unit 417 that controls the IPPS port, and an LPD control unit 418 that controls the LPD port. Note that the configuration of the port control unit 413 described above is just an example, and the port control unit 413 may be provided with control units corresponding to network ports other than these.

[0026] Fig. 5 is a block diagram showing a schematic configuration of a control module 500 included in the communication device 102 of Fig. 1. The control module 500 is a software module stored in the ROM 302 or the HDD 304. In Fig. 5, the control module 500 includes a network driver 501, a network control unit 502, a communication control unit 503, an encryption processing unit 504, a UI control unit 505, and a job control unit 506. The processing by these modules is realized by the CPU 301 executing a program loaded from the ROM 302 or the HDD 304 to the RAM 303.

[0027] A network driver 501 controls the network I / F control unit 305 to transmit and receive data to and from the MFP 101 connected via the network 103. A network control unit 502 controls communication below the transport layer in a network communication protocol such as TCP / IP to transmit and receive data. A communication control unit 503 is a module for controlling a plurality of communication protocols supported by the communication device 102. Encrypted communication such as TLS supported by the communication device 102 is also executed by the communication control unit 503.

[0028] The encryption processing unit 504 is a module for executing various encryption processes. The various encryption processes include, for example, data encryption and decryption, digital signature generation and verification, and hash value generation. In encrypted communication processes such as TLS executed by the communication control unit 503, the encryption processing unit 504 also performs encryption processes. The UI control unit 505 controls the operation panel 307 and the panel control unit 306. The job control unit 506 generates job data for executing a job according to an instruction input by a user to the operation panel 307, and transmits the job data to the MFP 101 via the network 103.

[0029] FIG. 6 is a sequence diagram for explaining the flow of processing related to the ZT mode by MFP 101 in FIG.

[0030] 6, first, MFP 101 receives a ZT mode transition request from a user (step S601). In this embodiment, the user can instruct transition to the ZT mode by operating operation panel 212 of MFP 101. The user can also instruct transition to the ZT mode from setting screen 700 of FIG. 7 displayed on operation panel 307 of communication device 102.

[0031] 7 is a diagram showing an example of a setting screen 700 displayed on the operation panel 307 in FIG. 3. The setting screen 700 is a screen on a web browser 701 of the communication device 102, and is displayed based on HTML acquired from the MFP 101 when the user inputs the IP address of the MFP 101 into an address bar 702 of the web browser 701. The setting screen 700 is a screen for making settings related to the ZT mode as one of the security settings of the MFP 101, and is a screen exclusively for the administrator of the MFP 101. The setting screen 700 includes a ZT mode setting selection area 703, a user notification selection area 704, an allowed application selection area 705, an open network port display area 706, and an update button 707.

[0032] The ZT mode setting selection area 703 has two check boxes, "ON" and "OFF". The "ON" check box is a check box for setting the ZT mode to be enabled. The "OFF" check box is a check box for setting the ZT mode to be disabled. The user notification selection area 704 is an area that is operable only when the "ON" check box is selected in the ZT mode setting selection area 703. The user notification selection area 704 has one check box. When the user selects the update button 707 with this check box selected, the communication device 102 requests the MFP 101 to enable the ZT mode user notification function. The ZT mode user notification function is a function that notifies the user that the ZT mode is set in the MFP 101 and that the use of applications is restricted by the ZT mode.

[0033] The permitted application selection area 705 is an area for selecting an application to be permitted to be used in the ZT mode. In the permitted application selection area 705, a print application, a scan application, a box application, etc., which are functions that require network communication, can be selected to permit the use of each application. In addition, in the permitted application selection area 705, it is possible to permit use in stages depending on the type of communication protocol to be used, etc. For example, print applications that can be used in the MFP 101 are managed as shown in FIG. 8.

[0034] FIG. 8 is a table showing a list of print applications available on the MFP 101 in FIG. 1. In this embodiment, print applications available on the MFP 101 are classified into levels indicating categories according to the type of communication protocol used. A print application classified into level 1 is, for example, a cloud print application provided by the MFP 101 and an authenticated cloud. When this application is selected in the permitted application selection area 705, an HTTPS port is opened. Also, a print application classified into level 1 is, for example, an IPP(S) print application provided as a standard function by the operating system (OS) of an external device, or a print application based on the IPP-Infra specification based on IPP. When these applications are selected in the permitted application selection area 705, an IPP port or an IPPS port is opened in addition to an HTTPS port.

[0035] Print applications classified as level 2 are print applications that are implemented within office security, such as an office, an in-house cloud, or an on-premise server. These print applications are, for example, a forced reservation print application that reserves print data in the communication device 102 or an in-house cloud and prints it, or an on-premise print application that operates in cooperation with an on-premise server by the MFP 101. When these applications are selected in the permitted application selection area 705, the RAW port is opened in addition to the HTTPS port. Generally, the RAW protocol is a non-secure print protocol, but its security is guaranteed by office security.

[0036] A print application classified as level 3 is a print application that is realized by the MFP 101 and the communication device 102 directly via the network 103. This print application is, for example, a PDL driver print in which the communication device 102 inputs binary data generated by the printer driver of the communication device 102 to the MFP 101, or a direct print in which PDF or XPS is input by an LPR command. Note that PDF is an abbreviation for Portable Document Format. XPS is an abbreviation for XML Paper Specification. When PDL driver print is selected in the permitted application selection area 705, the RAW port is opened. Also, when direct print is selected in the permitted application selection area 705, the HTTPS port and the LPD port are opened. The LPD protocol is also a non-secure print protocol like the RAW protocol, but its security depends on the environment in which the MFP 101 is installed.

[0037] A print application classified as level 4 is a print application that is performed by directly connecting the MFP 101 to a device such as a USB device or USB-HOST. Since these applications are in a printing form in which a user directly connects a USB flash memory or the like to the MFP 101 to perform printing, the administrator of the MFP 101 determines whether to permit use of the application depending on the purpose. In this embodiment, it is assumed that a check box corresponding to a cloud print application that uses an HTTPS port is selected by default in the permitted application selection area 705. The open network port display area 706 displays the communication permitted network port. When the update button 707 is pressed in a state in which the "ON" check box in the ZT mode setting selection area 703 is selected in the setting screen 700, the communication device 102 notifies the MFP 101 of a ZT mode transition request including the setting value set in the setting screen 700.

[0038] Returning to FIG. 6, upon receiving the ZT mode transition request, MFP 101 executes the ZT mode transition process of FIG. 9 (step S602).

[0039] Fig. 9 is a flowchart showing the procedure of the ZT mode transition process in step S602 in Fig. 6. The ZT mode transition process in Fig. 9 is realized by CPU 201 executing a program loaded in RAM 203. Note that in the ZT mode transition process in Fig. 9, it is assumed that the HTTPS port, RAW port, IPP port, IPPS port, and LPD port of MFP 101 are all open. It is also assumed that the HTTPS control unit 414, the RAW control unit 415, the IPP control unit 416, the IPPS control unit 417, and the LPD control unit 418 that control these are running in normal mode. The control units running in normal mode establish a connection with the communication device 102, and then analyze the data transmitted from the communication device 102.

[0040] 9, CPU 201 instructs port control unit 413 to block network ports other than a predetermined network port, specifically, network ports other than the HTTPS port (step S901) (blocking control means). Next, CPU 201 determines whether or not the received ZT mode transition request includes a request to enable the ZT mode user notification function (step S902). In this embodiment, as described above, when the user selects the check box in the user notification selection area 704 on the setting screen 700, the ZT mode transition request includes a request to enable the ZT mode user notification function.

[0041] If the result of the determination in step S902 is that the received ZT mode transition request does not include a request to enable the ZT mode user notification function, the ZT mode transition process proceeds to step S904, which will be described later. If the result of the determination in step S902 is that the received ZT mode transition request includes a request to enable the ZT mode user notification function, the CPU 201 enables the ZT mode user notification function and performs the user notification preparation process of FIG. 10 (step S903).

[0042] FIG. 10 is a flowchart showing the procedure of the user notification preparation process in step S903 of FIG.

[0043] 10, the CPU 201 acquires information about applications available for use in the MFP 101 from the capability management unit 411 (step S1001). This information includes information indicating network ports used by each application available for use in the MFP 101, specifically, information indicating an HTTPS port, a RAW port, an IPP port, an IPPS port, and an LPD port.

[0044] Next, CPU 201 identifies one network port from among a plurality of network ports (e.g., RAW port, IPP port, IPPS port, and LPD port) excluding a predetermined network port (e.g., HTTP port) in the information acquired in step S1001. Next, CPU 201 opens the identified network port (step S1002) (open control means). Next, CPU 201 starts up a control unit that controls the identified network port in a forced error termination mode (step S1003). The forced error termination mode is a mode in which the control unit establishes a connection with communication device 102, which is the request source, and then forcibly terminates in an error without performing analysis processing of data transmitted from communication device 102. As a result, job data transmitted from communication device 102 to a network port controlled by the control unit is read and discarded by MFP 101 without being interpreted by MFP 101, and a job termination code, which will be described later, is saved in MFP 101 as a record of an error termination.

[0045] Next, the CPU 201 identifies the next network port from among the multiple network ports excluding the predetermined network port in the information acquired in step S1001, and returns to the process of step S1002. In this manner, in this embodiment, the processes of steps S1002 and S1003 are performed for all network ports excluding the predetermined network port in the information acquired in step S1001. As a result, the RAW port, the IPP port, the IPPS port, and the LPD port, excluding the HTTP port which is the predetermined network port, are opened. In addition, the RAW control unit 415, the IPP control unit 416, the IPPS control unit 417, and the LPD control unit 418 which control the opened network ports, are started in the forced error termination mode. Thereafter, the user notification preparation process ends, and the CPU 201 performs the process of step S904.

[0046] In step S904, the CPU 201 determines whether the setting of the permitted application selection area 705 has been changed. In this embodiment, as described above, a check box corresponding to a cloud print application that uses an HTTPS port is selected by default. For example, when a check box other than the check box selected by default is newly selected in the permitted application selection area 705, or when a check box selected by default is changed to unselected, the CPU 201 determines that the setting of the permitted application selection area 705 has been changed. On the other hand, when none of the above cases apply, the CPU 201 determines that the setting of the permitted application selection area 705 has not been changed.

[0047] If the result of the determination in step S904 is that the setting in the permitted application selection area 705 has not been changed, the ZT mode transition process proceeds to step S906, which will be described later. If the result of the determination in step S904 is that the setting in the permitted application selection area 705 has been changed, the CPU 201 executes the network port opening / closing process in FIG. 11 (step S905).

[0048] FIG. 11 is a flow chart showing the procedure of the network port opening and closing process in step S905 of FIG.

[0049] 11, CPU 201 determines whether or not the ZT mode user notification function is enabled (step S1101). If the result of the determination in step S1101 is that the ZT mode user notification function is enabled, the network port opening / closing process proceeds to step S1102. In step S1102, CPU 201 determines whether or not a checkbox other than the checkbox selected by default in allowed application selection area 705 has been newly selected.

[0050] If it is determined in step S1102 that a check box other than the check box selected by default in the permitted application selection area 705 is newly selected, the network port opening / closing process proceeds to step S1103. In step S1103, CPU 201 starts up in normal mode the control unit that controls the network port used by the application corresponding to the selected check box. Thus, in this embodiment, the control unit that controls the network port used by the application selected in the permitted application selection area 705 starts up in normal mode, and network communication is enabled through the network port. Thereafter, the network port opening / closing process ends.

[0051] If the result of the determination in step S1102 is that no checkboxes other than the checkboxes selected by default in the permitted application selection area 705 are newly selected, the checkboxes selected by default are changed to unselected. In this case, CPU 201 starts up a control unit that controls a network port used by an application corresponding to the checkbox that has been changed to unselected, specifically HTTPS control unit 414, in a forced error termination mode (step S1104). Then, the process of opening and closing the network port ends.

[0052] If it is determined in step S1101 that the ZT mode user notification function is not enabled, the network port opening / closing process proceeds to step S1105. In step S1105, CPU 201 determines whether a check box other than the check box selected by default in allowed application selection area 705 has been newly selected.

[0053] If it is determined in step S1105 that a check box other than the check box selected by default in the permitted application selection area 705 has been newly selected, the network port opening / closing process proceeds to step S1106. In step S1106, CPU 201 opens the network port used by the application corresponding to the selected check box (step S1106). Thereafter, the network port opening / closing process ends.

[0054] If the result of the determination in step S1102 is that no checkboxes other than the checkboxes selected by default in the permitted application selection area 705 are newly selected, the checkboxes selected by default are changed to unselected. In this case, CPU 201 blocks the network port, specifically the HTTPS port, used by the application corresponding to the checkbox changed to unselected (step S1104). After that, the process of opening and closing the network port ends, and CPU 201 performs the process of step S906 in FIG. 9.

[0055] In step S906, CPU 201 makes a request to communication device 102 to update open network port display area 706 (step S906). Specifically, CPU 201 makes the update request to instruct MFP 101 to display communication-permitted network ports in open network port display area 706 among a plurality of network ports included in MFP 101. A communication-permitted network port is an open network port whose control unit is activated in normal mode. Upon receiving the update request, communication device 102 updates the display contents of open network port display area 706. As a result, among a plurality of network ports included in MFP 101, a network port that is capable of network communication with communication device 102 is displayed in open network port display area 706. Thereafter, ZT mode transition processing is terminated. Thus, in the present embodiment, among a plurality of network ports included in MFP 101, only communication-permitted network ports are capable of network communication with an external device.

[0056] Next, a sequence when the MFP 101 receives a capability acquisition request from the communication device 102 will be described. As shown in FIG. 6, when the MFP 101 receives a capability acquisition request from the communication device 102 (step S603), the MFP 101 acquires capability information from the capability management unit 411 (step S604). The capability information includes, for example, applications available in the MFP 101, information about applications permitted to be used in step S602, information indicating whether the MFP 101 is in ZT mode, and information indicating whether other MFPs connected to the network 103 are in ZT mode. Next, the MFP 101 transmits a capability response to the communication device 102 based on the acquired capability information (step S605). For example, when the MFP 101 in ZT mode permits the use of an IPP print application and a cloud print application in the process of step S602, the MFP 101 is capable of network communication only through the HTTPS port and the IPPS port used by these applications. In other words, since network communication via any other network port is not possible, MFP 101 transmits a capabilities response to communication device 102 that includes, for example, information indicating that MFP 101 is in ZT mode and information indicating that printing via a printer driver is not possible.

[0057] The communication device 102 displays an error on the operation panel 307 based on the received capability response (step S606). In step S606, the communication device 102 displays, for example, on the operation panel 307, a message indicating that printing by the printer driver is not possible due to the ZT mode. In the present embodiment, the error message may not be displayed in step S606, and the MFP 101 may not be displayed as a device capable of printing by the printer driver. The communication device 102 may also obtain information on the application permitted to be used in step S602 from the capability response, and display a notification on the operation panel 307 encouraging the use of another print application based on this information. The communication device 102 may also obtain information indicating whether another MFP connected to the network 103 is in the ZT mode from the capability response, and display information indicating an MFP capable of printing by the printer driver based on this information on the operation panel 307, and display a notification on the operation panel 307 encouraging a change in the input destination of the print job.

[0058] Next, a sequence will be described when the MFP 101 in the ZT mode receives a job from the communication device 102. As shown in Fig. 6, when the MFP 101 receives a job from the communication device 102 (step S607), the MFP 101 performs the job execution process in Fig. 12 (step S608).

[0059] Fig. 12 is a flowchart showing the procedure of the job execution process in step S608 in Fig. 6. The job execution process in Fig. 12 is realized by the CPU 201 executing a program loaded in the RAM 203. Note that in the job execution process in Fig. 12, it is assumed that the above-mentioned ZT mode transition process has already been executed.

[0060] In FIG. 12, the CPU 201 waits until it receives job data from an external device. When the job data is received from an external device, for example, the communication device 102 (YES in step S1201), the CPU 201 requests the port control unit 413 to process the received job data through the request processing unit 410 (step S1202). The port control unit 413 processes the job data. In this embodiment, the content of the process differs depending on the destination of the job data. In the following, as an example, a case will be described in which, among the multiple control units constituting the port control unit 413, only the HTTPS control unit 414 is started in the normal mode by the above-mentioned ZT mode transition process, and the other control units are started in the forced error termination mode. For example, when the destination of the job is a print application that uses an HTTPS port, the HTTPS control unit 414 of the port control unit 413 executes an analysis process of the received job data to extract print data. The print / read processing unit 405 and the device control unit 406 execute a print process based on the extracted print data. When the job ends normally, the print / read processing unit 405 issues a job end code indicating normal termination.

[0061] On the other hand, if the job is submitted to a print application that uses a RAW port, the RAW control unit 415 of the port control unit 413 discards the received job data without performing analysis of the job data, ends the job in an error, and issues a job completion code indicating that the error occurred due to the ZT mode. Next, the CPU 201 stores the issued job completion code in the ROM 202 or HDD 204 in association with the job history that is the execution history of the executed job (step S1203), and ends this process. After the job execution process ends, the user can view the job history by operating the operation panel 212.

[0062] Fig. 13 is a diagram showing an example of a job history screen 1300 displayed on the operation panel 212 in Fig. 2. The job history screen 1300 includes a reception number 1301, a result 1302, a start time 1303, an end time 1304, a job type 1305, a file name 1306, and an end code 1307.

[0063] The reception number 1301 displays the serial number when the job is received. The result 1302 displays whether the job has been normally completed with OK or NG. The start time 1303 and end time 1304 display the start time and end time of the job. The job type 1305 displays the type of the submitted job. In the example of FIG. 13, "PDL Print (LPD)" is displayed, indicating that the job was a print job for an LPD port. The file name 1306 displays the job name. The end code 1307 displays the job end code issued after an error has occurred. In the example of FIG. 13, "#Z001", which is a job end code indicating that the job has been ended in an error due to the ZT mode, is displayed, and the content of the error indicated by the job end code is displayed below that. In addition, as a means of avoiding the error, a message is displayed that prompts the administrator to set the application as an allowed application, or a message is displayed that prompts the user to use an application that has already been allowed. In addition, an object for displaying a user manual on how to use an application that has already been allowed, such as a hyperlink or a QR code (registered trademark) 1308, is displayed. In this embodiment, information related to the job history including the job completion code is managed by the status management unit 412. The MFP 101 transmits the information related to the job history to the communication device 102 in response to a status acquisition request received from the communication device 102. The communication device 102 can display the received information related to the job history on the operation panel 307. This enables the user to understand the job execution status, the cause of an error, and the like from the communication device 102.

[0064] According to the embodiment described above, when a blocked communication-restricted network port is opened and the opened communication-restricted network port receives job data, a job completion code is issued indicating that the job has ended due to an error caused by the ZT mode, and the job completion code is notified to the user, thereby making it possible to inform the user that an error has occurred due to the ZT mode.

[0065] In the above-described embodiment, the control unit that controls the communication-restricted network port that receives the job data issues the job completion code, which makes it possible to easily issue the job completion code when the communication-restricted network port receives the job data.

[0066] Furthermore, in the above-described embodiment, the control unit that controls the communication-restricted network port that receives the job data issues the job end code without analyzing the received job data, thereby making it possible to notify the user that an error is caused by the ZT mode, while reducing the risk of virus infection or the like caused by reading job data transmitted via an insecure path.

[0067] In the embodiment described above, the job completion code is displayed on operation panel 212 of MFP 101. This makes it possible to inform a user who is waiting for a printed matter to be output from MFP 101 that an error caused by the ZT mode has occurred.

[0068] Furthermore, in the above-described embodiment, the error content indicated by the job completion code is displayed on operation panel 212 of MFP 101. This makes it possible to notify a user who is waiting for a printed matter to be output from MFP 101 of the specific error content.

[0069] In the embodiment described above, a message that prompts the user to use an application that uses a communication-permitted network port is displayed on operation panel 212 of MFP 101. This makes it possible to inform the user of applications that can be used in ZT mode.

[0070] In the above-described embodiment, a user manual on how to use applications that use communication-permitted network ports is displayed on operation panel 212 of MFP 101. This makes it possible to inform the user of how to use applications that can be used in ZT mode.

[0071] In the embodiment described above, the job completion code is transmitted to the communication device 102 that transmitted the request to obtain the job completion code. This makes it possible to notify the user operating the communication device 102 that transmitted the job data that an error due to the ZT mode has occurred.

[0072] The present invention can also be realized by supplying a program that realizes one or more functions of the above-mentioned embodiments to a system or device via a network or a storage medium, and having one or more processors in a computer of the system or device read and execute the program. The present invention can also be realized by a circuit (e.g., ASIC) that realizes one or more functions. [Explanation of symbols]

[0073] 101 MFP 102 Communication equipment 201 CPU 212 Operation Panel 414 HTTPS control section 415 RAW control section 416 IPP Control Unit 417 IPPS control section 418 LPD control unit 1307 Exit Code 1308 QR Code

Claims

1. An image forming apparatus having a plurality of network ports capable of receiving job data, a receiving means for receiving a request to transition to a predetermined operation mode in which a communication-enabled network port is limited to a predetermined network port among the plurality of network ports; a shutoff control means for shutting off network ports other than the predetermined network port among the plurality of network ports in response to receiving a request to transition to the predetermined operation mode; an opening control means for opening the other blocked network port; an issuing means for issuing a code indicating that the job data has been received by the other opened network port and that the job data has ended due to an error caused by the predetermined operation mode; An image forming apparatus comprising: a notification unit that notifies the user of the code.

2. A plurality of control means for controlling the plurality of network ports, 2. The image forming apparatus according to claim 1, wherein the issuing unit is a control unit that controls another network port that receives the job data.

3. 3. The image forming apparatus according to claim 2, wherein the issuing unit issues the code without analyzing the received job data.

4. Further comprising a display means, 4. The image forming apparatus according to claim 1, wherein the notification unit displays the code on the display unit.

5. 5. The image forming apparatus according to claim 4, wherein the notification means displays the error content indicated by the code on the display means.

6. 6. The image forming apparatus according to claim 4, wherein the notification unit displays, on the display unit, a message that prompts the user to use an application that uses the predetermined network port.

7. 7. The image forming apparatus according to claim 6, wherein the notification unit displays, on the display unit, an object for displaying a user's manual on how to use an application that uses the predetermined network port.

8. 8. The image forming apparatus according to claim 1, wherein the notification unit transmits the code to a communication device that has transmitted a request to obtain the code.

9. A method for controlling an image forming apparatus having a plurality of network ports capable of receiving job data, comprising the steps of: a receiving step of receiving a request for transition to a predetermined operation mode in which communication-enabled network ports are limited to a predetermined network port among the plurality of network ports; a shutdown control step of shutting off network ports other than the predetermined network port among the plurality of network ports in response to receiving a request to transition to the predetermined operation mode; an opening control step of opening the other blocked network ports; an issuing step of issuing a code indicating that the job data has been terminated due to an error caused by the predetermined operation mode in response to the other opened network port receiving the job data; a notification step of notifying said code.

10. 9. A program for causing a computer to execute each unit of the image forming apparatus according to claim 1.

Images