Mobile Printer

Abstract

To restrict access from the outside to improve security in a mobile printer that can be carried to the outside, thereby preventing alteration of the details of various settings of the printer.SOLUTION: A mobile printer 2 stores setting information. A control circuit 21 executes a procedure of ST125 for printing, by a printing unit 24, a two-dimensional code image when the control circuit receives an access request from a portable terminal 3 and is connected with a cradle 4, a procedure of ST160 for allowing the portable terminal 3 to edit the setting information on condition that connection information and an access password obtained from the printed two-dimensional code image are received from the portable terminal 3 from which the access request is received, and a procedure of ST165 for rejecting the editing of the setting information performed by the portable terminal 3 when the control circuit receives the access request from the portable terminal 3 and is not connected with the cradle 4.SELECTED DRAWING: Figure 5

Description

[Technical field]

[0001] The present invention relates to a mobile printer that forms an image by means of a printing unit. [Background technology]

[0002] Conventionally, for example, Patent Document 1 discloses a technique in which a CPU in a printer checks various settings of the printer and transmits the contents to a host via a network, thereby enabling the host to configure various settings of the printer. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 10-136142 Summary of the Invention [Problem to be solved by the invention]

[0004] For example, if the above-mentioned conventional technology configuration is adopted in a mobile printer that can be carried outside, it will be easily accessible from outside via an open wireless network, etc. Therefore, security will be weaker than in a printer that is used as a stationary device in an office, etc., and there is a risk that various printer settings will be tampered with without permission.

[0005] An object of the present invention is to provide a technique for improving security by restricting external access to a portable printer that can be carried around outside, and for preventing tampering with various settings of the printer. [Means for solving the problem]

[0006] In order to achieve the above-mentioned object, the present invention provides a mobile printer comprising a communication interface that receives an access request from a terminal device connected via a network, a connection unit capable of electrically connecting to an external device, a printing unit that prints images, a memory unit, and a control unit, wherein the memory unit stores setting information of the mobile printer, and the control unit executes the following: a printing process that prints a specified image using the printing unit when the access request from the terminal device is received via the communication interface and the control unit is connected to the external device via the connection unit; an access permission process that allows the terminal device to edit the setting information, on condition that specified information including information obtained from the specified image printed by the printing unit is received from the terminal device that made the access request; and an access refusal process that refuses the terminal device from editing the setting information when the access request from the terminal device is received via the communication interface and the control unit is not connected to the external device via the connection unit.

[0007] In the present invention, when an access request is received from a terminal device, access is permitted only when the following conditions are met: the mobile printer is connected to an external device, and predetermined information including information obtained from a predetermined image printed by the mobile printer is received from the terminal device. According to the present invention, security is improved by restricting external access to the mobile printer, and tampering with various printer settings can be suppressed.

[0008] The present invention is not limited to mobile printers, but can also be appropriately applied to, for example, a communication system including a mobile printer and at least one of an external device and a terminal device, and a communication method between these devices. Effect of the Invention

[0009] According to the present invention, in a mobile printer that can be carried around outside, security can be improved by restricting external access, and tampering with various settings of the printer can be suppressed. [Brief description of the drawings]

[0010] [Figure 1] 1 is a system configuration diagram illustrating a schematic overall configuration of a printer network system according to an embodiment of the present invention; [Diagram 2] FIG. 2 is a functional block diagram showing the functional configuration of a mobile terminal, a mobile printer, and a cradle. [Diagram 3] FIG. 2 is a diagram showing an operation process in a first stage of a security function in the first embodiment. [Figure 4] FIG. 11 is a diagram showing an operation process in a second stage of the security function in the first embodiment. [Diagram 5] 4 is a sequence chart illustrating an example of a control procedure for implementing a security function according to the first embodiment. [Figure 6] FIG. 11 is a diagram showing an operation process in a first stage of a security function in a second embodiment. [Figure 7] FIG. 11 is a diagram showing an operation process in a second stage of the security function of the second embodiment. [Figure 8] 10 is a sequence chart illustrating an example of a control procedure for implementing a security function according to a second embodiment. [Figure 9] 13 is a sequence chart illustrating an example of a control procedure for implementing a security function according to the third embodiment. [Figure 10] 1 is a system configuration diagram illustrating a schematic overall configuration of a printer network system in which an external device other than a cradle is connected to a mobile printer. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

[0012] First Embodiment First, a first embodiment of the present invention will be described.

[0013] <Overall system configuration> The overall configuration of a printer network system according to this embodiment is shown in FIG. 1. In FIG. 1, the printer network system 1 includes, for example, a mobile printer 2, a mobile terminal 3, and a cradle 4 that is detachable from the mobile printer 2. The mobile terminal 3 is assumed to be a smartphone or tablet terminal as shown in the figure. In the example shown in the figure, the mobile terminal 3 is network-connected to the mobile printer 2 via wireless communication (wireless LAN) such as Wi-Fi (registered trademark) so that information can be transmitted and received between them. The mobile printer 2 creates a printed matter by printing predetermined characters and images based on a user's operation on the mobile terminal 3. Note that the mobile terminal 3 in the above is an example of a terminal device, and the cradle 4 is an example of an external device.

[0014] <Mobile device> As shown in FIG. 2, the mobile terminal 3 includes a CPU 31, a memory 32 such as a RAM or a ROM, a touch panel 33, a communication control unit , a large-capacity storage device 35, and a camera .

[0015] The touch panel 33 is configured by combining a liquid crystal display and a touch pad, and displays various information and messages, and also receives input from the user such as an operation position on the display screen. In this example, the communication control unit 34 controls the transmission and reception of signals with the mobile printer 2 via the wireless communication. The mass storage device 35 stores various programs and information. The camera 36 is an optical sensor that optically captures the appearance of an object to obtain image information. The CPU 31 performs various processes and transmits and receives various signals to and from the mobile printer 2 according to programs previously stored in the ROM and mass storage device 35 while utilizing the temporary storage function of the RAM.

[0016] <Mobile printer> As shown in FIG. 2, the mobile printer 2 has a control circuit 21, a memory 22 consisting of, for example, RAM or ROM, a large-capacity storage device 23, a printing unit 24, a communication control unit 25, a display unit 26, an operation unit 27, and an external interface 28 (abbreviated as "I / F" in the figure).

[0017] The printing unit 24 creates a printout by printing a predetermined character or image on a predetermined printing medium such as paper or tape. The mobile printer 2 is capable of transmitting and receiving information to and from the CPU 31 and communication control unit 34 of the mobile terminal 3 via the wireless communication through the control circuit 21 and communication control unit 25. In this example, the display unit 26 is a liquid crystal display capable of displaying various information, and the operation unit 27 is composed of hardware switches corresponding to various operations, but these may be replaced with a touch panel 33 equivalent to those provided in the mobile terminal 3. The mass storage device 23 stores various programs and information. The external interface 28 is a connector or control function part that complies with a predetermined standard for mechanically connecting with the cradle 4 described later, electrically conducting, and connecting so as to be able to transmit and receive information in a communication protocol. The control circuit 21 performs various processes in the mobile printer 2 and transmits and receives various signals between the mobile terminal 3 and the cradle 4 according to a program previously stored in the ROM or mass storage device 23 while utilizing the temporary storage function of the RAM.

[0018] In this embodiment, important information such as various settings within the mobile printer 2 is stored in the mass storage device 23 in the form of a Web page file that can be viewed and modified by accessing based on a specific URL. In other words, the mobile printer 2 has a Web server function that allows the publication and editing of various setting information of the mobile printer 2 in response to access from an external mobile terminal 3 or the like, and hereinafter this function is referred to as an EWS (Embedded Web Server) function.

[0019] <Cradle> As shown in Fig. 1, the cradle 4 is a stand that is detachably attached to the housing of the mobile printer 2 as a dedicated accessory of the mobile printer 2. The cradle 4 is not only configured as a charging stand that supplies power from a commercial power source (not shown) to the attached mobile printer 2 and charges it, but also includes a CPU 41, a memory 42 consisting of, for example, RAM and ROM, and an external interface 43 (abbreviated as "I / F" in the figure) as shown in Fig. 2. The external interface 43 is a connector and control function part that conforms to a predetermined standard for mechanically connecting with the mobile printer 2, electrically conducting, and connecting so as to be able to send and receive information according to a communication protocol. The CPU 41 performs various internal processes and sends and receives various signals to and from the mobile printer 2 according to a program previously stored in the ROM while utilizing the temporary storage function of the RAM.

[0020] In addition, the communication control unit 25 of the mobile printer 2 described above is an example of a communication interface, the external interface 28 of the mobile printer 2 is an example of a connection unit, the memory 22 and large-capacity storage device 23 of the mobile printer 2 are an example of a storage unit, and the control circuit 21 of the mobile printer 2 is an example of a control unit.

[0021] <The necessity of security functions in this embodiment and their basic methods> In the printer network system 1 configured as above, the basic function is a printing process in which information on command operations performed by the user on the mobile terminal 3 is sent to the mobile printer 2, and the mobile printer 2 that receives the information prints predetermined characters and images based on the command information. Unlike a stationary printer used in an office, the mobile printer 2 that is expected to be used outside the office often sends and receives information between the mobile printer 2 and the mobile terminal 3 via the wireless communication described above.

[0022] 1, the mobile printer 2 in this embodiment is also capable of disclosing and editing various setting information and the like in response to an access request from the mobile terminal 3 by using the EWS function described above. However, such internal information has a significant effect on the control of the mobile printer 2, and as important information that should be kept secret from anyone other than the authorized user, it is necessary to prevent unauthorized viewing and modification by other users. However, when used in a public space outside the office, for example, as shown in the figure, there is a possibility that in addition to the authorized user's mobile terminal 3, an unauthorized user's mobile terminal 100 may exist within the wireless communication range R of the mobile printer 2. Therefore, the mobile printer 2 needs to be provided with a security function that allows only EWS access requests from authorized users' mobile terminals 3 and can reject EWS access requests from unauthorized users' mobile terminals 100.

[0023] In contrast, the mobile printer 2 of this embodiment prints and outputs a two-dimensional code image that can only be obtained from the attached cradle 4, and assumes that the mobile terminal 3 that connects based on the connection information obtained by decoding the two-dimensional code image belongs to a legitimate user, and only allows EWS access requests received from such a mobile terminal. In other words, it is assumed that a user who owns and can use the cradle 4, a dedicated accessory that is not normally used in public spaces outside the office, and a user who can handle a printed matter printed out by the mobile printer 2 are highly likely to be a legitimate user, and an appropriate security level is ensured by allowing EWS access requests from a mobile terminal 3 operated by such a user.

[0024] In this embodiment, the EWS access request from the mobile terminal 3 is processed in two stages. Specifically, the first stage is to obtain connection information required to directly access the WEB server in the mobile printer 2 via wireless communication, and the second stage is to obtain permission to view and modify the data using the EWS function after establishing access to the WEB server. The connection information in the first stage is specifically identification information such as the IP address and URL of the WEB server, and the specific process for obtaining permission in the second stage is authentication processing based on authentication information of a preset access password. Thus, in the printer network system 1 of this embodiment, in addition to the basic print processing function described above, the mobile terminal 3 and the mobile printer 2 are equipped with a security function that allows them to send and receive information to each other via wireless communication.

[0025] In the above, the two-dimensional code image is an example of a specified image, the connection information is an example of information obtained from the specified image, the connection information and the access password are examples of specified information, decrypting the two-dimensional code is an example of decoding, the printing data of the two-dimensional code image is an example of information received from an external device, and the access password is an example of a first password.

[0026] <Specific Operation Process of Security Function in First Embodiment> The specific operation steps of the security function in this first embodiment will be described below with reference to Figures 3 and 4. Note that the following is based on the premise that the mobile printer 2 is attached to the cradle 4 in advance and that information can be sent and received between them via the external interfaces 28, 43.

[0027] First, in FIG. 3 corresponding to the first stage described above, an authorized user who wishes to access the EWS performs a predetermined operation to request access to the WEB server (EWS) of the mobile printer 2 from the web browser of the mobile terminal 3 ("1: Information transmission / reception connection request operation" in the figure). When the access request from the mobile terminal 3 is received, the mobile printer 2 requests the cradle 4 to generate a two-dimensional code image. In response to the request from the mobile printer 2, the CPU 41 of the cradle 4 generates a two-dimensional code image and returns it to the mobile printer 2. As described above, this two-dimensional code image is a two-dimensional code image in which connection information such as a URL for accessing the WEB server of the mobile printer 2 is encoded, but it may also be encoded with a code image of another standard that can be image-recognized. The mobile printer 2 prints the received two-dimensional code image on a print medium and outputs it ("2: Encoded connection information printing" in the figure).

[0028] The authorized user captures the two-dimensional code image printed on the printed matter P output by the mobile printer 2 with the camera 36 of the mobile terminal 3 and reads the image ("3: Image reading" in the figure). The CPU 31 of the mobile terminal 3 then analyzes the read two-dimensional code image and decodes it into a URL, which is connection information to a WEB server ("4: Connection information decode" in the figure). This URL, which is the decoded connection information, is information for displaying an input screen for inputting an access password requested in the second stage, which will be described later. Based on this connection information, the mobile terminal 3 again makes an access request to the WEB server in the mobile printer 2 ("5: Information transmission / reception connection establishment, access request" in the figure).

[0029] The mobile printer 2, which has received an access request for the EWS function based on the connection information, requests an access password from the mobile terminal 3 that sent the access request, as shown in Fig. 4, which corresponds to the next second stage ("6: Password request" in the figure). In response, the mobile terminal 3 displays an input screen for the access password for EWS access, and when the authorized user inputs a preset access password ("7: Password input" in the figure), the mobile terminal 3 returns the access password to the WEB server of the mobile printer 2 ("8: Password transmission" in the figure). Then, the WEB server of the mobile printer 2, which has received the correct access password, grants the access request to the mobile terminal 3 of the authorized user that sent it, requesting that the EWS be viewed and modified ("9: Access permission" in the figure).

[0030] <Control procedure> An example of the control procedures executed by the CPU 41 of the cradle 4, the control circuit 21 of the mobile printer 2, and the CPU 31 (or an authorized user) of the portable terminal 3 to realize the above-mentioned security function method in this embodiment will be described with reference to the sequence chart in Fig. 5. It is assumed that the authorized users who own the mobile printer 2 and the portable terminal 3 each have the same preset access password stored in their memory.

[0031] First, a case will be described where the mobile printer 2 and the cradle 4 are not mechanically attached, for example, where the mobile printer 2 is taken outside. In ST101, the mobile terminal 3 transmits a predetermined operation (information transmission / reception connection request operation) from the WEB browser, which is an access request to the WEB server of the mobile printer 2. At this time, since the mobile printer 2 and the cradle 4 are not electrically connected, the mobile printer 2 returns to the mobile terminal 3 a URL for displaying an error screen.

[0032] Next, a case where the mobile printer 2 and the cradle 4 are mechanically attached will be described. As shown in ST105, by mechanically attaching the mobile printer 2 to the cradle 4, the external interfaces 28 and 43 of both are electrically connected, and a connection for sending and receiving information between them is established. Then, in ST110, the authorized user performs a predetermined operation from the WEB browser of the mobile terminal 3 to the mobile printer 2, which is a request for access to a WEB server, and as shown in ST119, the mobile printer 2 requests the cradle 4 to generate a two-dimensional code image in which connection information is encoded. Specifically, the request transmits a character string indicating a URL for access when the mobile terminal 3 requests connection again based on the two-dimensional code image, and an instruction to generate a two-dimensional code image of this character string. The cradle 4, which has received this request, returns the two-dimensional code image generated in ST120 to the mobile printer 2 in the form of print data.

[0033] After that, in ST125, the WEB server in the mobile printer 2 processes to permit information transmission and reception connection from outside based on the connection information encoded in the two-dimensional code for a certain period of time (for example, 10 minutes). Next, in ST130, the mobile printer 2 prints and outputs a two-dimensional code image on a print medium. Furthermore, the mobile printer 2 transmits a message screen to read the printed two-dimensional code image as a reply to the access request in ST110. In ST135, the authorized user photographs and reads the two-dimensional code image of the printed matter P that has been printed out with the camera 36 of the mobile terminal 3, and the CPU 31 of the mobile terminal 3 analyzes the image and decodes the two-dimensional code into a URL, which is connection information. Then, in ST140, the mobile terminal 3 transmits an access request again to the WEB server of the mobile printer 2 based on the decoded connection information. The connection information at this time is a URL different from the URL when the access request was made in ST110, and is a screen for inputting an access password to the EWS. These URLs may be the same, and in that case, the mobile printer 2 will switch the screen that is displayed in response to the access request on the condition that the two-dimensional code is printed.

[0034] In response to this EWS access request, the WEB server of the mobile printer 2 requests an access password from the portable terminal 3 that made the access request in ST145. In response, the authorized user enters the access password into the portable terminal 3, and the portable terminal 3 transmits the access password to the mobile printer 2 in ST150. Then, in ST155, the mobile printer 2 determines whether the access password it has stored in advance matches the received access password. If the access passwords match, the determination is YES, and in ST160, the mobile printer 2 permits the portable terminal 3 that sent the access password access so that it can view and modify the EWS. On the other hand, if the access passwords do not match in ST155, the determination is NO, and in ST165, an error screen is transmitted to the portable terminal 3 indicating that an access error or unauthorized access has occurred.

[0035] In the above, the steps ST110 and ST140 are an example of an access request, the step ST119 is an example of an image request processing, the step ST130 is an example of a printing processing, the steps ST125 and ST160 are an example of an access permission processing, and the step ST102 is an example of an access denial processing.

[0036] <Effects of this embodiment> As described above, the mobile printer 2 of this embodiment includes the communication control unit 25, the external interface 28, the printing unit 24, the memory 22, the large-capacity storage device 23, and the control circuit 21. The memory 22 and the large-capacity storage device 23 store their own setting information. The external interface 28 can be connected to an external device such as the cradle 4 so as to communicate with the external device to send and receive information. The communication control unit 34 can be connected to a mobile terminal 3 such as a smartphone via a network.

[0037] In the control circuit 21, when a specified operation from a legitimate user on the mobile printer 2 or an access request from the mobile terminal 3 is received via the communication control unit 25, the processing is divided depending on whether or not the mobile printer 2 is connected to the cradle 4 via the external interface 28.

[0038] When connected to the cradle 4, the procedure of ST130 is executed, and a two-dimensional code image is printed by the printing unit 24. Only when predetermined information including connection information obtained from the printed two-dimensional code image is received from the portable terminal 3, the procedure of ST160 is executed, and access from the portable terminal 3 that has made the access request is permitted.

[0039] If the cradle 4 is not connected, the procedure of ST102 is executed, and the access from the mobile terminal 3 that has made the access request is denied.

[0040] In this embodiment, access is permitted only when two conditions are met: the mobile printer 2 is connected to the cradle 4; the mobile printer 2 prints a two-dimensional code image and receives predetermined information including connection information corresponding to the printed two-dimensional code image from the mobile terminal 3. An environment in which these conditions are met is considered to be when the mobile printer 2 is in an environment where it is connected to the cradle 4, which is a dedicated accessory that is likely to be installed in an office or the like that is different from a public space, and the owner of the mobile terminal 3 is in a place where the printed matter of the mobile printer 2 can be obtained. According to this embodiment, only when the environment is highly likely to be one in which the owner of the mobile printer 2 and the mobile terminal 3 are present in a space different from a public space, external access to the mobile printer 2 is restricted, thereby improving security for the setting information and preventing the setting contents of the mobile printer 2 from being tampered with without the user's knowledge. Furthermore, when a two-dimensional code image is printed by the printing unit 24, the procedure of ST125 is executed, and predetermined information including connection information obtained from the printed two-dimensional code image is received from the mobile terminal 3, and connection from the outside is permitted within a certain period of time. In other words, if a certain time has elapsed, connection is not permitted even if predetermined information including connection information obtained from the printed two-dimensional code image is received from outside. This makes it possible to prevent the settings of the mobile printer 2 from being tampered with when an unauthorized user who at some point obtained a printed material including a two-dimensional code image printed in the past requests access.

[0041] In this embodiment, the access request is an EWS access request to a web server (EWS) included in the mobile printer 2. This limits external access to the web server included in the mobile printer 2, improving security.

[0042] In particular, in this embodiment, the control circuit 21 denies connection to the WEB server in the procedure of ST102. This makes it possible to prevent the setting contents of the mobile printer 2 from being tampered with by refusing the connection itself to the WEB server from outside.

[0043] Furthermore, particularly in this embodiment, the control circuit 21 denies access to the setting information after connection to the WEB server in the procedure ST165. This makes it possible to prevent tampering with the setting contents of the mobile printer 2 by refusing access to the setting information after connection to the WEB server from the outside. Note that when EWS access is denied in the procedure ST165, the internal WEB server itself (the EWS function itself) may be disabled in anticipation of a case in which the mobile printer 2 has been stolen by an unauthorized user.

[0044] Furthermore, particularly in this embodiment, in the procedure of ST135, the connection information obtained from the printed two-dimensional code image is information obtained by capturing an image with the camera 36 of the mobile terminal 3. This allows the connection information to be easily obtained from the two-dimensional code image in the mobile terminal 3 by simply capturing an image with the camera 36.

[0045] Particularly in this embodiment, in the procedure of ST130, the predetermined image printed by the printing unit 24 is a two-dimensional code image, and the connection information obtained from the two-dimensional code image is information obtained by decoding the two-dimensional code image. As a result, by simply capturing the two-dimensional code image printed by the mobile printer 2 with the camera 36 of the mobile terminal 3, the two-dimensional code image can be decoded in the mobile terminal 3 to easily obtain the connection information.

[0046] Particularly in this embodiment, in the procedure of ST120, the two-dimensional code image includes the print data of the two-dimensional code image received from the cradle 4. As a result, by printing the two-dimensional code image based on the print data received from the cradle 4, the mobile printer 2 does not need to generate the print data that is the source of the two-dimensional code image by itself.

[0047] Particularly in this embodiment, when an information transmission / reception connection request operation is performed, the control circuit 21 further executes the procedure of ST119 to request a two-dimensional code image from the cradle 4, and in the procedure of ST130, prints the two-dimensional code image received from the cradle 4 in ST120 in response to the request of ST119. This allows the cradle 4 to smoothly transmit the connection information that is the source of the two-dimensional code image to the mobile printer 2 in response to the request for the two-dimensional code image from the mobile printer 2.

[0048] Particularly in this embodiment, the external device that generates the two-dimensional code image is the cradle 4 that is attached to charge the mobile printer 2. This improves security by using the cradle 4 for charging the mobile printer 2 and connecting the mobile printer 2 to the cradle 4 as one of the conditions.

[0049] In this embodiment, the information for confirming the match in the procedures of ST125 and ST160 includes the connection information obtained from the two-dimensional code image and the access password for accessing the setting information. By confirming the match of the access password, it is possible to restrict access from outside, taking into account the condition that a predetermined correct access password has been received from the mobile terminal 3, thereby improving security.

[0050] In this embodiment, in response to a request for an access password from the WEB server, the authorized user manually enters the password separately into the mobile terminal 3 and returns it. Alternatively, the access password stored in advance in the mobile terminal 3 may be automatically returned by processing a dedicated mobile application.

[0051] <Second embodiment> Next, a second embodiment of the present invention will be described. Note that the description of the same configuration and processing as the first embodiment will be omitted as appropriate.

[0052] In the first embodiment described above, after the first stage in which an information transmission / reception connection between the mobile terminal 3 and the WEB server is established, only the access password that has been set in advance and is commonly stored by both the mobile printer 2 and the authorized user who is the owner of the mobile terminal 3 is requested from the mobile terminal 3 as authentication information to be used in the second stage for permitting EWS access. In contrast, in the present embodiment, when the mobile printer 2 prints out a two-dimensional code image, it also prints out a one-time key that is generated from random numbers and is valid only once at that time, and requests this one-time key together with the access password as authentication information in the second stage.

[0053] 6 and 7 show specific steps of operating the security function in this second embodiment. Note that, in this embodiment as well, it is assumed that the mobile printer 2 is attached to the cradle 4 beforehand and that information can be exchanged between them via the external interfaces 28 and 43 before the security function can be realized.

[0054] First, in Fig. 6, which corresponds to the first stage, in response to an information transmission / reception connection request operation from the mobile terminal 3, the mobile printer 2 itself generates a one-time key using random numbers, and the cradle 4 generates a two-dimensional code for the connection information, and the mobile printer 2 prints out these two pieces of information together ("2: Print encoded connection information and one-time key" in the figure). Then, in this first stage, the two-dimensional code image is only read ("3: Read image" in the figure), and based on the decrypted connection information ("4: Decrypt connection information" in the figure), an EWS access to the WEB server in the mobile printer 2 is requested ("5: Establish information transmission / reception connection, access request" in the figure).

[0055] In the next second stage, as shown in Fig. 7, the mobile printer 2 sends a screen to the mobile terminal 3 requesting both the access password and the one-time key ("6: Password and one-time key request" in the diagram). In response, the mobile terminal 3 displays a screen for inputting the access password and one-time key for EWS access, and the authorized user refers to and inputs both the access password stored in the mobile terminal 3 beforehand and the one-time key that has been printed out ("7: Password and one-time key input" in the diagram). As a result, the mobile terminal 3 correctly returns both the access password and the one-time key ("8: Password and one-time key transmission" in the diagram), and the WEB server of the mobile printer 2 permits the EWS access request ("9: Access permitted" in the diagram).

[0056] <Control procedure> An example of a control procedure for implementing the above security function method in this embodiment will be described with reference to the sequence chart in Fig. 8. Note that the description of the same contents as those in the sequence chart in Fig. 5 for the first embodiment will be omitted as appropriate. The case where the mobile printer 2 and the cradle 4 are not mechanically attached is the same as the first embodiment, so it will be omitted.

[0057] First, in ST105, the mobile printer 2 is connected to the cradle 4 and an information transmission / reception connection is established, and then in ST110, an authorized user requests the mobile printer 2 to transmit / receive the information, causing the mobile printer 2 to generate a one-time key using random numbers as shown in ST111. Then, in ST119, the mobile printer 2 requests the cradle 4 to generate a two-dimensional code image, and in ST120, the cradle 4 generates the two-dimensional code image and returns it to the mobile printer 2.

[0058] The mobile printer 2 then processes in ST125 to permit information transmission and reception connection based on the connection information of the two-dimensional code image, and then prints out the two-dimensional code image and the one-time key character string in ST130A. Also, as a reply to ST110, a message screen is sent to the mobile terminal 3 to read the printed two-dimensional code image with a camera. Then, in ST135, the authorized user reads the two-dimensional code image with the camera 36 of the mobile terminal 3, and the CPU 31 of the mobile terminal 3 analyzes the image and decodes it into a URL indicating the connection information. Then, in ST140, the mobile terminal 3 requests access to the web server of the mobile printer 2 based on the connection information.

[0059] Then, in ST145A, in response to the access request in ST140, the mobile printer 2 transmits an input screen for inputting two pieces of authentication information, an access password and a one-time key, to the portable terminal 3. In response, the authorized user inputs these two pieces of information into the portable terminal 3, which is then transmitted to the mobile printer 2 in ST150A. Then, in ST155A, the mobile printer 2 determines whether the received access password and one-time key both match, and based on the result of this determination, the process branches to access permission in ST160 or access denial in ST165.

[0060] In the above, the procedure in ST111 is an example of a one-time key generation process.

[0061] <Effects of this embodiment> As described above, the mobile printer 2 of this embodiment can further improve security by further including a one-time key in the information to be printed out, thereby restricting external access on the condition that the one-time key generated each time has been received from the portable terminal 3. As a result, even if the one-time password is leaked from the portable terminal 3 of an authorized user to another unauthorized user for some reason, only the authorized user who has access to the printed out printed matter P can know it, and a high level of security can be ensured by authentication of the one-time key that is valid only once.

[0062] <Third embodiment> Next, an example of the third embodiment of the present invention will be described. Note that the description of the configuration and processing equivalent to the above-mentioned first and second embodiments will be omitted as appropriate. The case where the mobile printer 2 and the cradle 4 are not mechanically attached is the same as the first embodiment, so it will be omitted.

[0063] In this embodiment, authentication is performed on the cradle 4 by a so-called challenge-and-response method using a nonce value and a hash function. Specifically, the nonce value is substituted as an argument into a hash function defined by a specific arithmetic expression to calculate a hash value, and in order to pass only a specific nonce value as a key (challenge) and always return a correct hash value (response), the exact calculation content of the hash function must be known. In other words, the mobile printer 2 and cradle 4 share the hash function itself, which has specific calculation content, with each other in advance as an authentication key, and when the mobile printer 2 passes a specific nonce value to the cradle 4 and returns a correct hash value, the cradle 4 can be authenticated as an individual owned by a legitimate user.

[0064] Furthermore, in this embodiment, the calculation content of the hash function is defined as a two-variable arithmetic expression using two nonce values, a fixed nonce value and a variable nonce value, and the same hash function and fixed nonce value are shared and stored in advance between the cradle 4 and the mobile printer 2. Then, only a one-time key generated by the mobile printer 2 using random numbers is passed to the cradle 4 as a variable nonce value, and authentication is performed based on whether or not a hash value calculated using the one-time key, the correct hash function, and the correct fixed nonce value is returned from the cradle 4, improving security.

[0065] <Control procedure> An example of a control procedure for implementing the above-described security function in this embodiment will be described with reference to the sequence chart in Fig. 9. Note that the description of the same contents as those in the sequence chart in Fig. 8 in the second embodiment will be omitted as appropriate.

[0066] First, in ST105, the mobile printer 2 is connected to the cradle 4 and an information transmission / reception connection is established, and then in ST110, an authorized user requests an information transmission / reception connection to the mobile printer 2, causing the mobile printer 2 to generate a one-time key from random numbers as shown in ST111. Then, in ST112, the mobile printer 2 calculates a hash value using the variable nonce value generated from the one-time key, a pre-stored fixed nonce value, and a hash function, and in ST113 sends only the one-time key to the cradle 4 as the variable nonce value.

[0067] Then, in ST114, the cradle 4 uses the received one-time key as a variable nonce value, calculates a hash value using a fixed nonce value previously shared and stored with the mobile printer 2 and a hash function, and returns the result in ST115. In ST116, the mobile printer 2 determines whether the hash value it calculated matches the hash value returned by the cradle 4. If the hash values ​​do not match, the result is NO, and in ST117, the mobile printer 2 transmits screen information indicating authentication failure or the like to the mobile terminal 3 as a response to the access request in ST110. On the other hand, if the hash values ​​match in ST116, the result is YES, and in ST119, the cradle 4, which has been authenticated as the property of a legitimate user, is requested to generate a two-dimensional code. The procedures other than the cradle authentication process executed as described above are the same as those in the second embodiment, and therefore description thereof will be omitted.

[0068] In the above, the procedure ST111 is an example of a one-time key generation process, the fixed nonce value is an example of a second password, the procedure ST112 is an example of a response generation process, the hash value generated by the mobile printer 2 in procedure ST112 is an example of a first response, the procedure ST113 is an example of a challenge sending process, the hash value generated by the cradle 4 in procedure ST114 is an example of a second response, the procedure ST115 is an example of a response receiving process, and the procedure ST116 is an example of a response matching process.

[0069] <Effects of this embodiment> As described above, in this embodiment, the hash value generated by the mobile printer 2 using the fixed nonce value is compared with the hash value generated by the cradle 4 using the fixed nonce value, and a two-dimensional code image is printed when they match. For example, if an individual mobile printer 2 storing unique setting information is stolen, even if an unauthorized user has attached a standard cradle 4, this embodiment can authenticate whether the cradle 4 is genuine or not based on the so-called challenge and response method.

[0070] <Modification> The present invention is not limited to the above-described embodiments, and various modifications are possible without departing from the spirit and technical concept of the present invention. The following describes such modifications in order. The same reference numerals are used to designate parts equivalent to those in the above-described embodiments, and the description will be omitted or simplified as appropriate.

[0071] In the above embodiments, the cradle 4 mounted on the mobile printer 2 for charging is used as an external device for generating a two-dimensional code image, but this is not limited thereto. Alternatively, as shown in FIG. 10, the two-dimensional code image may be generated by an external device 4A that is electrically connected via a predetermined connection line 5 and can be connected to transmit and receive information in terms of a communication protocol. In this case, the external device 4A may be, for example, a general-purpose PC, an external server, or a dedicated device, as long as it has a CPU and memory similar to the cradle 4 and is equipped with an information processing function that can generate a two-dimensional code image in print data format. In addition, the connection line 5 may be, for example, a wired line such as a USB, as long as it can connect the external device 4A and the mobile printer 2 so as to ensure a certain level of security in terms of a communication protocol in accordance with the specifications of the external device 4A and the mobile printer 2 and can transmit and receive information.

[0072] The two-dimensional code image may be generated by the mobile printer 2 on condition that the mobile printer 2 is connected to an external device, rather than being generated by an external device such as the cradle 4. In this case, the external device may not be equipped with an information processing function capable of generating a two-dimensional code image in print data format. Also, the connection information to be printed may not be a two-dimensional code image, but may be another code image such as a barcode, and may be an image showing a predetermined character string indicating the connection information, rather than a predetermined code image. In this case, an image showing the predetermined character string may be photographed by a camera and image processed by, for example, OCR, or the owner of the mobile terminal 3 may input the predetermined character string formed on the printed matter onto the screen using the touch panel 33 of the mobile terminal 3.

[0073] In addition, the restriction on external access to the mobile printer 2 is not limited to the restriction on access to the WEB server included in the mobile printer 2, but may be, for example, the restriction on access using a predetermined application for accessing the setting information of the mobile printer 2. In addition, the restriction on access to the WEB server included in the mobile printer 2 has two stages, a restriction on viewing and a restriction on modification. As in this embodiment, the modification of the setting information may be permitted on the condition that the mobile printer 2 is connected to an external device and that the mobile printer 2 has received connection information corresponding to an image printed from the mobile terminal 3, and the viewing of the setting information may be permitted even if the above conditions are not met. By permitting viewing of the WEB server from the outside but refusing to change the setting information, it is possible to prevent the setting contents of the mobile printer 2 from being tampered with. In addition, the WEB server included in the mobile printer 2 allows viewing of not only the setting information of the mobile printer 2 but also other information (e.g., status information such as printing, waiting, etc.). The viewing and modification of the setting information may be permitted on the condition that the mobile printer 2 has received connection information corresponding to an image printed from the mobile terminal 3, and the viewing of information other than the setting information (status information) may be permitted even if the above conditions are not met. In addition, in this embodiment, input of an access password is also required, but as long as the mobile printer 2 is connected to an external device and connection information corresponding to an image printed by the mobile printer 2 is received from the mobile terminal 3, input of an access password is not required and access to the EWS function may be granted.

[0074] In addition, in the third embodiment, the processes from ST112 to ST116 and the processes from ST130A to ST155A are performed using the one-time key generated in ST111. However, separate one-time keys may be created for the processes from ST112 to ST116 and the processes from ST130A to ST155A.

[0075] Furthermore, the sequence charts shown in Figures 5, 8, 9, etc. do not limit the present invention to the procedures shown in the above sequences, and procedures may be added or deleted, or the order may be changed, etc., within the scope that does not deviate from the spirit and technical concept of the invention.

[0076] In addition to the above, the methods according to the above embodiments and their modifications may be used in appropriate combination.

[0077] Although not specifically illustrated, the present invention can be implemented with various modifications without departing from the spirit and scope of the present invention. [Explanation of symbols]

[0078] 1 Printer network system 2. Mobile Printer 3. Mobile terminal (an example of a terminal device) 4. Cradle (an example of an external device) 4A external device 5 Connection Line 21 Control circuit (an example of a control unit) 22 Memory (an example of a storage unit) 23 Large-capacity storage device (an example of a storage unit) 24 Printing Department 25 Communication control unit (an example of a communication interface) 26 Display section 27 Control section 28 External interface (example of connection part) 36 Camera P Printed matter

Claims

1. a communication interface for receiving an access request from a terminal device connected via a network; A connection portion capable of electrically connecting to an external device; A printing unit that prints an image; A storage unit; A control unit; A mobile printer comprising: The storage unit is storing setting information of the mobile printer; The control unit is a printing process of printing a predetermined image by the printing unit when the access request is received from the terminal device via the communication interface and when the terminal device is connected to the external device via the connection unit; an access permission process that permits the terminal device to edit the setting information on the condition that predetermined information including information obtained from the predetermined image printed by the printing unit is received from the terminal device that has made the access request; an access refusal process for refusing editing of the setting information by the terminal device when the access request is received from the terminal device via the communication interface and the terminal device is not connected to the external device by the connection unit; Runs a mobile printer.

2. The access request:

2. The mobile printer according to claim 1, wherein the request is an access request to a web server provided in the mobile printer.

3. The control unit is 3. The mobile printer according to claim 2, wherein said access denial process denies a connection to said web server.

4. The control unit is 3. The mobile printer according to claim 2, wherein said access denial process denies access to said setting information after connection to said web server.

5. In the access permission process, 5. The mobile printer according to claim 1, wherein the information obtained from the printed predetermined image is information obtained by capturing an image with a camera of the terminal device.

6. In the access permission process, 6. The mobile printer according to claim 5, wherein the predetermined image is a code image, and the information obtained from the predetermined image is information obtained by decoding the code image.

7. In the printing process, 7. The mobile printer according to claim 1, wherein the predetermined image includes information received from the external device.

8. The control unit further includes: When the access request is received, an image request process is executed to request the predetermined image from the external device; 8. The mobile printer according to claim 7, wherein said printing process includes printing said predetermined image received from said external device in response to said image request process.

9. The external device is 9. The mobile printer according to claim 1, wherein the mobile printer is a cradle to which the mobile printer is attached for charging.

10. In the access permission process, 10. The mobile printer according to claim 1, wherein the predetermined information includes information obtained from the predetermined image and a first password for accessing the setting information.

11. The control unit further includes: execute a one-time key generation process to generate a one-time key; In the printing process, the printing unit further prints the one-time key generated in the one-time key generation process; In the access permission process, 11. The mobile printer according to claim 10, wherein the predetermined information includes the information obtained from the predetermined image, the first password, and the one-time key.

12. The control unit further includes: A one-time key generation process for generating a one-time key; a response generation process for generating a first response by a hash function using the one-time key generated in the one-time key generation process and a predetermined second password; a challenge transmission process of transmitting the one-time key generated in the one-time key generation process to the external device as a challenge; a response receiving process for receiving a second response generated by a hash function using the second password in the external device based on the transmitted challenge; a response matching process for matching the first response generated in the response generating process with the second response received in the response receiving process; Run 12. A mobile printer according to claim 1, wherein, in the printing process, when the access request is received, when the mobile printer is connected to the external device, and when the first response and the second response match in the response comparison process, the specified image is printed by the printing unit.

Images