COMPUTER PROGRAM FOR A SERVER, ... AND A METHOD PERFORMED BY A SERVER - Patent application

Abstract

To provide a technology for changing a password of a communication device securely.SOLUTION: A computer program for a server causes a computer of the server to function as the following units: a change instruction receiving unit which receives, from a terminal device, a change instruction for changing a password of a communication device different from the server and the terminal device; a first authentication information transmission unit which transmits, in a case where the change instruction is received from the terminal device, first authentication information to the terminal device, the first authentication information being input to the communication device by a user of the terminal device after the first authentication information is transmitted to the terminal device; an authentication information receiving unit which receives, in a case where the first authentication information is input to the communication device, the first authentication information from the communication device; and a notification transmission unit which transmits, in a case where the first authentication information is received from the communication device, a change permission notification to the communication device, the change permission notification being a notification to permit the communication device to change the password.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present specification relates to a technique for changing a password on a communication device. [Background technology]

[0002] Patent Literature 1 discloses a technique for changing a personal identification number (PIN) for use in an MFP (abbreviation of Multi-Function Peripheral). In this technique, when an incorrect personal identification number is input by a user, the MFP executes a process for changing the personal identification number. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2019-016834 A Summary of the Invention [Problem to be solved by the invention]

[0004] SUMMARY OF THE DISCLOSURE Techniques are provided herein that may securely change a password on a communication device. [Means for solving the problem]

[0005] This specification discloses a computer program for a server. The computer program may cause the server computer to function as the following units: a change instruction receiving unit that receives, from a terminal device, a change instruction to change passwords of the server and a communication device different from the terminal device, a first authentication information transmitting unit that transmits first authentication information to the terminal device when the change instruction is received from the terminal device, the first authentication information being input to the communication device by a user of the terminal device after being transmitted to the terminal device, an authentication information receiving unit that receives the first authentication information from the communication device when the first authentication information is input to the communication device, and a notification transmitting unit that transmits a change permission notification to the communication device when the first authentication information is received from the communication device, the change permission notification being a notification that permits the communication device to change the password.

[0006] According to the above configuration, when the server receives a change instruction from the terminal device, it transmits the first authentication information to the terminal device. After that, when the first authentication information is input to the communication device by the user of the terminal device, the server receives the first authentication information from the communication device and transmits a change permission notice to the communication device. As a result, the password change is permitted in the communication device. Therefore, the password of the communication device can be securely changed.

[0007] The computer-readable recording medium storing the computer program, the server itself, and a method executed by the server are also novel and useful. Also, a communication system including the server, a communication device, and a terminal device is novel and useful. [Brief description of the drawings]

[0008] [Figure 1] 1 shows the configuration of a communication system. [Diagram 2] 1 shows a sequence diagram for registering a printer. [Diagram 3] The sequence diagram continues from Figure 2. [Figure 4] FIG. 1 shows a sequence diagram of a first embodiment for changing a password. [Diagram 5] FIG. 11 shows a sequence diagram of a second embodiment for changing a password. [Figure 6] FIG. 13 shows a sequence diagram of a third embodiment for changing a password. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] (First Example) (Communication system configuration; Figure 1) As shown in Fig. 1, the communication system 2 includes a terminal 10, a printer 100, and an intermediary server 200. The terminal 10 and the printer 100 are connected to a LAN (abbreviation of Local Area Network) 4, and can communicate with each other via the LAN 4. The LAN 4 is connected to the Internet 6, and the intermediary server 200 is installed on the Internet 6. Therefore, the terminal 10 and the printer 100 can communicate with the intermediary server 200 via the Internet 6. Hereinafter, the intermediary server 200 will be referred to as "server 200". This specification provides a technology that enables an administrator of the printer 100 to change the printer password set in the printer 100 in a situation where the administrator of the printer 100 has forgotten the printer password set in the printer 100.

[0010] (Terminal 10 Configuration) The terminal 10 may be a portable terminal such as a smartphone, a notebook PC, or a tablet PC, or may be a stationary terminal such as a desktop PC. The terminal 10 is used by an administrator who manages the printer 100. The terminal 10 includes an operation unit 12, a display unit 14, a communication interface 20, and a control unit 30. In the following, the interface will be referred to as "I / F".

[0011] The operation unit 12 is a button, a touch panel, or the like that is operated by a user. The user can input various instructions to the terminal 10 by operating the operation unit 12. The display unit 14 is a display for displaying various information. The communication I / F 20 is connected to the LAN 4.

[0012] The control unit 30 includes a CPU 32 and a memory 34. The CPU 32 executes various processes in accordance with an OS (short for Operating System) program 40 stored in the memory 34. The memory 34 is composed of a volatile memory, a non-volatile memory, etc. The OS program 40 is a program for realizing basic operations of the terminal 10.

[0013] (Configuration of Printer 100) The printer 100 is a peripheral device (for example, a peripheral device of the terminal 10) capable of executing a printing function. In a modified example, the printer 100 may be a multi-function device capable of executing a scanning function, a FAX function, etc. in addition to the printing function. The printer 100 has a serial number SN1 that is information for identifying the printer 100. The printer 100 includes an operation unit 112, a display unit 114, a print execution unit 116, a communication I / F 120, and a control unit 130.

[0014] The operation unit 112 is a button, a touch panel, or the like that is operated by a user. The user can input various instructions to the printer 100 by operating the operation unit 112. The display unit 114 is a display for displaying various information. The print execution unit 116 has a printing mechanism such as an inkjet type or a laser type. The communication I / F 120 is connected to the LAN 4.

[0015] The control unit 130 includes a CPU 132, a volatile memory 134A, and a non-volatile memory 134B. The CPU 132 executes various processes in accordance with a program 140 stored in the non-volatile memory 134B.

[0016] (Configuration of Server 200) The server 200 is a server that mediates various communications for changing the password of the printer 100. The server 200 includes a communication I / F 220 and a control unit 230. The communication I / F 220 is connected to the Internet 6. In this embodiment, the printer password is not notified to the server 200 from the printer. Therefore, the printer password is not stored in the server 200.

[0017] The control unit 230 includes a CPU 232 and a memory 234. The CPU 232 executes various processes in accordance with a program 240 stored in the memory 234. The memory 234 is configured by a volatile memory, a non-volatile memory, etc. The memory 234 further stores an account table 242 and a device table 244.

[0018] The account table 242 is a table that stores one or more pieces of account information corresponding to one or more users. The account information is information required to log in to the server 200, and is information in which a user ID and a server password are associated with each other. In the following, the password is referred to as "PW". In this embodiment, an email address is used as the user ID. In a modified example, the user ID may be a character string specified by the user instead of an email address. In the example of FIG. 1, the user ID "user@user.co.jp", which is the email address of the user of the terminal 10 (i.e., the administrator of the printer 100), is associated with the server PW "SP1" and stored. In the following, the user ID "user@user.co.jp" is simply referred to as "U1".

[0019] The device table 244 is a table that stores information about one or more devices (e.g., printers). The device table 244 stores a user ID, a serial number, and an access token in association with each other. The access token is information used when performing communication between the server 200 and a device identified by the associated serial number. In the example of FIG. 1, the user ID "U1", the serial number SN1, and the access token "AT" are stored in association with each other in the device table 244.

[0020] (Printer registration sequence; Figures 2 and 3) Next, a process for registering information related to the printer 100 in the server 200 will be described with reference to Figures 2 and 3. In the following, for ease of understanding, when describing the process executed by the CPU of each device (e.g., 32, 132, 232), the CPU will not be described as the subject, but each device (e.g., terminal 10, printer 100, server 200) will be described as the subject. Furthermore, unless otherwise specified, communication between each device is performed via a communication I / F (e.g., 20, 120, 220). Therefore, when describing communication between each device below, the expression "via a communication I / F" will be omitted.

[0021] 2, the account table 242 stores account information (i.e., user ID "U1" and server PW "SP1") of the user of the terminal 10 (i.e., the administrator of the printer 100). Also, in the initial state of FIG. 2, the device table 244 does not store information about the printer 100 (i.e., the serial number and the access token).

[0022] When the printer 100 receives a power-on operation from the administrator at T10, the printer 100 is powered on at T12. At this time, the printer 100 determines that information about the printer 100 itself has not yet been registered in the server 200. Specifically, the printer 100 determines that the printer 100 has not yet been registered in the server 200 because the Access Token has not been stored in the non-volatile memory 134B. In this case, the printer 100 displays a notification screen SC1 on the display unit 114 at T14. The notification screen SC1 includes a message that prompts the user to register information about the printer 100 with the server 200.

[0023] The administrator who has viewed the notification screen SC1 uses the terminal 10 to perform an operation for registering information about the printer 100 in the server 200. Specifically, first, the terminal 10 accepts an access instruction from the administrator at T20 to access the web server function of the printer 100. The access instruction includes a specification of an IP address (not shown) of the printer 100. In this case, the terminal 10 uses a web browser program (not shown) at T12 to send an access request to the printer 100. The following processing executed by the terminal 10 is also executed using the web browser program.

[0024] When the printer 100 receives an access request from the terminal 10 in T22, it transmits top screen data representing the top screen SC2 to the terminal 10 in T24.

[0025] When the terminal 10 receives the top screen data from the printer 100 in T24, in T26, the terminal 10 displays the top screen SC2 on the display unit 14. The top screen SC2 includes the current status of the printer 100 ("Idle" in the example of FIG. 2) and a number of buttons for changing various settings of the printer 100 (for example, a "Register to Server" button, a "Change Password" button, etc.).

[0026] The terminal 10 accepts selection of the “Register in Server” button in the top screen SC2 in T30. In this case, the terminal 10 transmits an access request to the server 200 in T32.

[0027] When the server 200 receives an access request from the terminal 10 in T32, the server 200 transmits login screen data representing the login screen SC3 to the terminal 10 in T34.

[0028] When the terminal 10 receives the login screen data from the server 200 in T34, in T36, the terminal 10 displays a login screen SC3 on the display unit 14. The login screen SC3 includes a message prompting the user to enter account information (i.e., a user ID and a server PW) for logging in to the server 200, a user ID input field, a server PW input field, an OK button, and a cancel button.

[0029] (Continuation of Figure 2; Figure 3) 3, the terminal 10 accepts a login operation from the administrator. The login operation includes an operation of inputting a user ID "U1" and a server PW "SP1" on a login screen SC3. In this case, the terminal 10 transmits a login request including the input user ID "U1" and server PW "SP1" to the server 200 in T42.

[0030] When the server 200 receives a login request from the terminal 10 in T42, the server 200 executes authentication in T50. Specifically, the server 200 judges whether or not the combination of the user ID "U1" and the server PW "SP1" included in the received login request is stored in the account table 242. In this case, since the combination is stored in the account table 242 (see the initial state in FIG. 2), the server 200 judges that the authentication is successful. In this case, the server 200 generates a PIN code "1234" in T52, and associates the user ID "U1" included in the received login request with the PIN code "1234" and stores them in the memory 234. Then, the server 200 transmits PIN code screen data representing a PIN code screen SC4 to the terminal 10 in T54. If the server determines in T50 that the combination of the user ID and server PW included in the received login request is not stored in the account table 242, i.e., if authentication fails, it does not execute the processes from T52 onwards.

[0031] When the terminal 10 receives the PIN code screen data from the server 200 in T54, it causes the display unit 14 to display a PIN code screen SC4 in T56. The PIN code screen SC4 includes a message indicating that a PIN code should be entered into the printer (printer 100 in this case) to be registered in the server 200, and the PIN code "1234". Therefore, the administrator can know that the PIN code "1234" displayed on the PIN code screen SC4 should be entered into the printer 100.

[0032] In T60, the printer 100 accepts a server registration operation from the administrator who has viewed the PIN code screen SC4, and in T62, causes the printer 100 to display a PIN code entry screen SC5 on the display unit 114. The PIN code entry screen SC5 includes a message prompting the user to enter a PIN code, a PIN code entry field, and an OK button.

[0033] When the printer 100 accepts, in T64, input of the PIN code "1234" into the PIN code input screen SC5 and selection of the OK button, in T66, it transmits a registration request to the server 200. The registration request includes the input PIN code "1234" and the serial number SN1 of the printer 100.

[0034] When the server 200 receives a registration request from the printer 100 in T66, the server 200 executes authentication in T70. Specifically, the server 200 judges whether or not the PIN code "1234" included in the received registration request has been stored in the memory 234. In this case, since the PIN code "1234" has been stored in the memory 234 (see T52), the server 200 judges that the authentication has been successful. In this case, the server 200 generates an Access Token "AT" in T72. Hereinafter, the Access Token "AT" may be simply referred to as "AT". Next, the server 200 identifies the user ID "U1" (see T52) stored in the memory 234 in association with the PIN code "1234". Then, the server 200 stores the identified user ID "U1", the serial number SN1 included in the registration request, and the generated Access Token "AT" in the device table 244 in association with each other. As a result, information about the printer 100 is registered in the server 200 .

[0035] In T74, the server 200 transmits "AT" to the printer 100. Note that if the PIN code included in the registration request has not been stored in the memory 234 in T70, that is, if authentication has failed, the server 200 does not execute the processes from T72 onwards.

[0036] When the printer 100 receives the "AT" from the server 200 in T74, the printer 100 registers the "AT" in the non-volatile memory 134B in T76. As a result, a so-called constant connection is established between the printer 100 and the server 200, although this is not shown in the figure. By using the constant connection, the server 200 can transmit a signal to the printer 100 across the firewall of the LAN 4 to which the printer 100 belongs, even if it does not receive a request from the printer 100. In other words, the constant connection is a connection that can execute server-push type communication. The constant connection is, for example, a connection that complies with XMPP (short for eXtensible Messaging and Presence Protocol).

[0037] When the printer 100 completes the registration of "AT", in T80 it transmits a registration completion notification indicating that the registration in the server 200 has been completed to the terminal 10. The registration completion notification includes registration completion screen data representing a registration completion screen SC6.

[0038] When the terminal 10 receives a registration completion notification from the printer 100 in T80, in T82, the terminal 10 displays a registration completion screen SC6 on the display unit 14. The registration completion screen SC6 includes a message indicating that registration to the server 200 has been completed. By looking at the registration completion screen SC6, the administrator can know that registration to the server 200 has been completed.

[0039] (PW change sequence; Figure 4) Next, the process of changing the PW of the printer 100 will be described with reference to Fig. 4. The process of Fig. 4 is executed after the process of Fig. 3 is completed. In addition, in the initial state of Fig. 4, the printer PW "PP1" is set in the printer 100. The process of Fig. 4 is executed, for example, when the administrator forgets the printer PW "PP1" that is set in the printer 100.

[0040] In T110, the terminal 10 accepts an operation for accessing the server 200 from the administrator (i.e., an operation of inputting the URL (short for Uniform Resource Locator) of the server 200), and in T112, transmits an access request to the server 200. The processes of T112 to T116 are similar to the processes of T32 to T36 in Fig. 2. Moreover, the processes of T118 to T122 are similar to the processes of T40 to T50 in Fig. 3.

[0041] When server 200 determines in T122 that authentication has been successful, server 200 transmits success screen data representing success screen SC7 to terminal 10 in T124. The success screen data includes serial number SN1 (see T72 in FIG. 3) stored in device table 244 in association with user ID "U1" determined to have been successfully authenticated.

[0042] When the terminal 10 receives the success screen data from the server 200 in T124, in T126, the terminal 10 displays a success screen SC7 on the display unit 14. The success screen SC7 includes the serial numbers SN1 included in the received success screen data as a list of registered devices, and also includes a number of buttons for executing various processes on the devices (for example, a "Change PW" button, a "Change Settings" button, etc.).

[0043] When terminal 10 accepts from the administrator in T130 the selection of serial number SN1 in success screen SC7 and the selection of the "Change PW" button, terminal 10 transmits a PW change instruction to server 200 in T132. The PW change instruction includes the selected serial number SN1. In this way, the administrator can select a device for which he wishes to change the PW from among the devices registered in server 200. Since the administrator does not need to input information (e.g., a serial number) identifying the device for which he wishes to change the PW, convenience for the administrator is improved.

[0044] When the server 200 receives a PW change instruction from the terminal 10 in T132, the server 200 generates a PIN code "2345" in T134, and associates the serial number SN1 included in the PW change instruction with the generated PIN code "2345" and stores them in the memory 234. Then, the server 200 transmits PIN code screen data representing a PIN code screen SC8 to the terminal 10 in T140. The PIN code screen data includes the generated PIN code "2345".

[0045] When the terminal 10 receives the PIN code screen data from the server 200 in T140, it displays the PIN code screen SC8 on the display unit 14 in T142. The PIN code screen SC8 includes a message indicating that a PIN code should be entered into the printer (printer 100 in this case) whose PW is to be changed, and the PIN code "2345". Therefore, the administrator can know that the PIN code "2345" displayed on the PIN code screen SC8 should be entered into the printer 100.

[0046] When the printer 100 accepts a PW change operation from the administrator who has viewed the PIN code screen SC8 in T150, it causes the display unit 114 to display a PIN code entry screen SC5 in T152.

[0047] When the printer 100 accepts, in T154, input of the PIN code "2345" into the PIN code input screen SC5 and selection of the OK button, it transmits, in T156, the input PIN code "2345" and the serial number SN1 of the printer 100 to the server 200. In this manner, the PIN code "2345" is directly input to the printer 100 by the administrator. A person who can directly input the PIN code "2345" to the printer 100 is highly likely to be a legitimate user of the printer 100. For this reason, the PW of the printer 100 can be changed to a more secure one.

[0048] When the server 200 receives the PIN code "2345" and the serial number SN1 from the printer 100 in T156, the server 200 executes authentication in T157. Specifically, the server 200 judges whether or not the combination of the received PIN code "2345" and the serial number SN1 is stored in the memory 234. In this case, since the combination is stored in the memory 234 (see T134), the server 200 judges that the authentication has been successful. In this case, the server 200 transmits a change permission notice to the printer 100 in T158. The change permission notice is a notice that permits the printer 100 to change the PW. Note that, if the server 200 determines in T157 that the above combination is not stored in the memory 234, that is, if the authentication has failed, it does not execute the processes from T158 onward.

[0049] When the printer 100 receives a change permission notification from the server 200 in T158, in T160, the printer 100 displays a new PW input screen SC9 on the display unit 114. The new PW input screen SC9 includes a message prompting the user to input a new printer PW, a printer PW input field, and an OK button.

[0050] When the printer 100 receives, in T162, input of a new PW "PP2" into the printer PW input field from the administrator and selection of the OK button, the printer 100 changes the printer PW from "PP1" to "PP2" in T164. In this way, the administrator can change the printer PW from "PP1" to "PP2" by inputting the new PW "PP2" into the new PW input screen displayed on the printer 100. Then, in T166, the printer 100 displays a completion screen SC10 on the display unit 114. The completion screen SC10 includes a message indicating that the change of the printer PW has been completed. The administrator can know that the change of the printer PW has been completed by looking at the completion screen SC10.

[0051] (Effects of the first embodiment) In this way, when the server 200 receives a PW change instruction from the terminal 10 (T132 in FIG. 4), it transmits PIN code screen data including the PIN code "2345" to the terminal 10 (T140). After that, when the PIN code "2345" is input to the printer 100 by the administrator (T154), the server 200 receives the PIN code "2345" from the printer 100 (T156) and transmits a change permission notice to the printer 100 (T158). As a result, the PW is changed in the printer 100 in response to the input of the new PW "PP2". In this way, the PW of the printer 100 can be changed only when the PIN code "2345" transmitted from the server 200 to the terminal 10 is transmitted from the printer 100 to the server 200 and the printer change permission notice is received by the printer 100. Therefore, the PW of the printer 100 can be securely changed.

[0052] Here, a first comparative example is assumed in which the PW of the printer 100 is changed without using the terminal 10 and the server 200. In this comparative example, if a PW change operation (see T150 in FIG. 4) is performed on the printer 100, the PW of the printer 100 can be changed. That is, anyone who can physically access the printer 100 can change the PW of the printer 100. In contrast, in this embodiment, only a user who can log in to the server 200 (that is, a user who is likely to be a regular user of the printer 100) can change the PW of the printer 100. That is, in this embodiment, when changing the PW of the printer 100, two-step authentication is performed using login to the server 200 and authentication of the PIN code "2345". Therefore, the PW of the printer 100 can be changed more securely.

[0053] In addition, in this embodiment, when changing the PW of the printer 100 to the new PW "PP2", the administrator does not need to input the old PW "PP1" into the printer 100. Therefore, even in a situation where the administrator has forgotten the old PW "PP1", the administrator can change the PW of the printer 100.

[0054] Here, a second comparative example is assumed in which, in a situation where the administrator has forgotten the PW before the change, the administrator changes the PW by using a question (so-called "secret question") whose answer is preset by the administrator. In the second comparative example, the administrator inputs an answer to the secret question, and if the answer is successfully authenticated, the administrator is permitted to change the PW. On the other hand, in this embodiment, if the administrator logs in to the server 200 using a user ID and server PW for logging in to the server 200, the administrator can change the printer PW even if the administrator has forgotten the printer PW before the change. In general, the secret question is a question related to personal information. Therefore, the answer to the secret question can be guessed from, for example, the administrator's SNS (short for Social Networking Service) or the like. On the other hand, the user ID and server PW for logging in to the server 200 are often character strings specified by the administrator. Therefore, compared to the answer to the secret question, the user ID and server PW are less likely to be known to a third party. Therefore, in this embodiment, in a situation where the administrator has forgotten the printer PW before the change, the printer PW can be changed more securely compared to the second comparative example.

[0055] Also, a third comparative example is assumed in which the server 200 stores only the PIN code "2345" without associating the serial number SN1 with the PIN code "2345". In this comparative example, when the PIN code "2345" is input to a printer other than the printer 100 for which the administrator wants to change the PW, the PIN code "2345" is sent to the server 200 from the printer. In this case, since the PIN code "2345" is stored, the server 200 determines that the authentication is successful and sends a change permission notice to the printer. Therefore, in the third comparative example, the PW of a printer other than the printer 100 for which the administrator wants to change the PW can be changed. On the other hand, in this embodiment, the serial number SN1 of the printer 100 and the PIN code "2345" are stored in association with each other (T134 in FIG. 4). Then, the server 200 determines whether the combination of the serial number SN1 and the PIN code "2345" is stored (T157). Therefore, when the PIN code "2345" is entered into a printer other than the printer 100 for which the administrator wishes to change the PW, the serial number of the printer and the PIN code "2345" are sent from the printer to the server 200. In this case, the server 200 determines that the authentication has failed because the combination of the serial number and the PIN code "2345" of the printer is not stored, and does not send a change permission notice to the printer. Therefore, in this embodiment, only the printer PW of the printer 100 for which the administrator wishes to change the PW can be changed. In a modified example, the server 200 does not need to store the serial number SN1 and the PIN code "2345" in association with each other.

[0056] (Correspondence) The terminal 10, the printer 100, and the server 200 are examples of a "terminal device," a "communication device (and first external device)," and a "server," respectively. The PIN code "2345" and the PIN code "1234" are examples of "first authentication information" and "specific information," respectively. The combination of the user ID "U1" and the server PW "SP1" is an example of "target user information." The serial number SN1 is an example of "identification information." The success screen SC7 is an example of a "success screen." At T130 in FIG. 4, accepting the selection of the serial number SN1 and the selection of the PW change button is an example of "given a specified instruction."

[0057] The processes of T66 and T72 in FIG. 3 are examples of processes executed by the "registration request receiving unit" and the "first storage control unit", respectively. The processes of T120 and T124 in FIG. 4 are examples of processes executed by the "login request receiving unit" and the "success screen data transmitting unit", respectively. The processes of T132, T134, and T140 in FIG. 4 are examples of processes executed by the "change instruction receiving unit", the "second storage control unit", and the "first authentication information transmitting unit", respectively. The processes of T156 and T158 in FIG. 4 are examples of processes executed by the "authentication information receiving unit" and the "notification transmitting unit", respectively.

[0058] (Second embodiment; Figure 5) Next, a second embodiment will be described with reference to Fig. 5. The second embodiment differs from the first embodiment in that a Security Token is further used. The initial state of Fig. 5 is similar to the initial state of Fig. 4. In the process of Fig. 5, first, the same processes as T110 to T132 of Fig. 4 are executed.

[0059] In T234 of FIG. 5, the server 200 generates a PIN code "2345" and a security token "ST". Hereinafter, the security token "ST" may be simply referred to as "ST". After generating the PIN code "2345" and "ST", the server 200 associates the serial number SN1 included in the PW change instruction (see T132 of FIG. 4), the generated PIN code "2345", and the generated "ST" and stores them in the memory 234. Then, in T240, the server 200 transmits PIN code screen data representing a PIN code screen SC8 to the terminal 10. The PIN code screen data includes the generated PIN code "2345". The process of T242 is the same as the process of T142 of FIG. 4.

[0060] Furthermore, in T244, the server 200 transmits the generated "ST" to the printer 100 using the constant connection (not shown) already established between the printer 100 and the server 200. As a result, although not shown, the printer 100 stores the "ST" received from the server 200 in the volatile memory 134A. In a modified example, the printer 100 may store the "ST" in the non-volatile memory 134B.

[0061] When the printer 100 receives "ST" from the server 200 in T244, it displays the PIN code entry screen SC5 on the display unit 114 in T252. In this way, when the printer 100 receives "ST" from the server 200, it can display the PIN code entry screen SC5 without receiving any operation from the administrator. This improves the convenience for the administrator.

[0062] The process of T254 is the same as the process of T154 in Fig. 4. In T256, the printer 100 transmits to the server 200 the input PIN code "2345", "ST" stored in the volatile memory 134A, and the serial number SN1 of the printer 100.

[0063] When the server 200 receives the PIN code "2345", "ST", and the serial number SN1 from the printer 100 in T256, the server 200 executes authentication in T257. Specifically, the server 200 judges whether or not the combination of the received PIN code "2345", the received "ST", and the received serial number SN1 is stored in the memory 234. In this case, since the combination is stored in the memory 234 (see T234), the server 200 judges that the authentication has been successful. In this case, the server 200 transmits a change permission notification to the printer 100 in T258. Note that, if the above combination is not stored in the memory 234 in T257, that is, if the authentication has failed, the server 200 does not execute the process from T258 onwards. The processes in T260 to T266 are the same as the processes in T160 to T166 in FIG. 4.

[0064] (Effects of the second embodiment) In the second embodiment, as in the first embodiment, the PW of the printer 100 can be securely changed. In particular, "ST" is information generated by the server 200 when the server 200 receives a PW change instruction from the terminal 10 (T132 in FIG. 4, which is referred to in FIG. 5). Then, "ST" is sent to the printer 100 (T244 in FIG. 5), but is not displayed on the printer 100. In other words, "ST" is information that is not obtained by the user. On the other hand, the serial number SN1 is information that is displayed, for example, on the casing or instruction manual of the printer 100, and is information that can be obtained by the user.

[0065] Here, assume a situation in which a third party obtains the serial number SN1 and PIN code "2345" of the printer 100 for which the administrator wants to change the PW, and the third party inputs the serial number SN1 and the PIN code "2345" to a printer different from the printer 100. In this case, the different printer transmits the PIN code "2345" and the serial number SN1 to the server 200. In such a situation, in the configuration of the first embodiment, the server 200 stores the combination of the PIN code "2345" and the serial number SN1 received from the different printer, so it determines that the authentication has been successful and transmits a change permission notice to the different printer. As a result, there is a risk that the PW of the different printer will be changed by the third party. On the other hand, in the configuration of the second embodiment, the different printer does not store "ST". Also, as described above, the third party cannot obtain "ST". Therefore, the server 200 does not receive "ST" from the different printer, so it determines that the authentication has failed. For this reason, the server 200 does not transmit the change permission notice to the different printer. Therefore, the PW of the different printer cannot be changed by a third party. In this way, in the second embodiment, even if the PIN code “2345” and the serial number SN1 are obtained by a third party, the PW of the different printer is prevented from being changed by a third party.

[0066] (Correspondence) The security token "ST" is an example of "second authentication information." The PIN code input screen SC5 displayed in T252 in Fig. 5 is an example of an "associated screen." The processes of T234 and T244 in Fig. 5 are examples of processes executed by a "third storage control unit" and a "second authentication information transmission unit," respectively.

[0067] (Third embodiment; Figure 6) Next, a third embodiment will be described with reference to Fig. 6. The third embodiment differs from the first embodiment in that the PW of the printer 100 is changed via the web server of the printer 100. The initial state of Fig. 6 is the same as the initial state of Fig. 4. In the process of Fig. 6, first, the same processes as T20 to T26 of Fig. 2 are executed.

[0068] The terminal 10 accepts the selection of the "Change Password" button in the top screen SC2 (see FIG. 2) in T310 of Fig. 6. In this case, the terminal 10 transmits selection information indicating that the "Change Password" button has been selected to the printer 100 in T312.

[0069] When the printer 100 receives the selection information from the terminal 10 in T312, it transmits PIN code entry screen data representing the PIN code entry screen SC11 to the terminal 10 in T314.

[0070] When the terminal 10 receives the PIN code entry screen data from the printer 100 in T314, in T316, the terminal 10 displays a PIN code entry screen SC11 on the display unit 14. The PIN code entry screen SC11 includes a message prompting the user to enter a PIN code, a PIN code entry field, and an OK button.

[0071] Furthermore, when the terminal 10 accepts selection of the "change password" button in T310, it transmits an access request to the server 200 in T320. The process of T320 is executed independently of the processes of T312 to T316. Specifically, in this case, the browser session in which the processes of T312 to T316 are executed is different from the browser session in which the process of T320 is executed. Therefore, the PIN code entry screen SC11 displayed in T316 and the PIN code screen SC12 displayed in T322 described below are simultaneously displayed on the display unit 14 by different browser sessions.

[0072] After that, when the same processes as those in T114 to T140 in FIG. 4 are executed, the terminal 10 displays the PIN code screen SC12 on the display unit 14 at T322. As described above, at the stage of T322, both the PIN code entry screen SC11 and the PIN code screen SC12 are displayed on the display unit 14 of the terminal 10. The PIN code screen SC12 includes a message indicating that the PIN code should be entered into the PIN code entry screen SC11, and the PIN code "2345". Therefore, the administrator can know that the PIN code "2345" displayed on the PIN code screen SC12 should be entered into the PIN code entry screen SC11.

[0073] In T330, the terminal 10 accepts input of the PIN code "2345" into the PIN code input field on the PIN code input screen SC11 and selection of the OK button from the administrator who has viewed the PIN code screen SC12. In this case, the terminal 10 transmits the input PIN code "2345" to the printer 100 in T332.

[0074] When the printer 100 receives the PIN code "2345" from the terminal 10 in T332, the printer 100 transmits the PIN code "2345" and the serial number SN1 of the printer 100 to the server 200 in T334.

[0075] When the server 200 receives the PIN code "2345" and the serial number SN1 from the printer 100 in T334, the server 200 executes authentication in T336. The specific processing of T336 is similar to the processing of T157 in Fig. 4. Moreover, the processing of T338 is similar to the processing of T158 in Fig. 4.

[0076] When the printer 100 receives the change permission notification from the server 200 in T338, it transmits new PW input screen data representing the new PW input screen SC13 to the terminal 10 in T340.

[0077] When the terminal 10 receives the new PW input screen data from the printer 100 in T340, in T342, it displays the new PW input screen SC13 on the display unit 14. The new PW input screen SC13 includes a message prompting the user to input a new printer PW, a printer PW input field, and an OK button.

[0078] When the terminal 10 accepts, in T344, the input of the new PW "PP2" in the printer PW input field and the selection of the OK button, in T346, it transmits a PW change request to the printer 100. The PW change request includes the new PW "PP2" that has already been input.

[0079] When the printer 100 receives a PW change request from the terminal 10 in T346, the printer 100 changes the printer PW from "PP1" to "PP2" in T348. Then, the printer 100 transmits a PW change completion notification including completion screen data representing the completion screen SC14 to the terminal 10 in T350.

[0080] When the terminal 10 receives a PW change completion notification from the printer 100 in T350, the terminal 10 displays a completion screen SC14 on the display unit 14 in T352. The completion screen SC14 includes a message indicating that the change of the printer PW has been completed. The administrator can know that the change of the printer PW has been completed by looking at the completion screen SC14.

[0081] (Effects of the third embodiment) In the third embodiment, as in the first embodiment, the PW of the printer 100 can be securely changed. In particular, in this embodiment, the administrator does not directly input the PIN code "2345" to the printer 100, so there is no need to go near the printer 100 to input the PIN code "2345" to the printer 100. This improves the convenience of the administrator. The terminal 10 is an example of a "second external device."

[0082] Although specific examples of the technology disclosed in this specification have been described in detail above, these are merely examples and do not limit the scope of the claims. The technology described in the claims includes various modifications and variations of the specific examples exemplified above. Modifications of the above embodiments are listed below.

[0083] (Variation 1) The terminal 10 may transmit a PW change instruction including a new PW "PP2" in addition to the serial number SN1 to the server 200 in T132 of Fig. 4. In this case, the server 200 may store the serial number SN1, the PIN code "2345", and the new PW "PP2" in association with each other in T134. Then, the server 200 may transmit a change permission notification including the new PW "PP2" associated with the PIN code "2345" to the printer 100 in T158. In this case, the printer 100 can omit the processes of T160 and T162.

[0084] (Variation 2) When the server 200 receives a PW change instruction including the serial number SN1 from the terminal 10 (T132 in FIG. 4), the server 200 may send an e-mail including the PIN code "2345" to the user ID "U1" associated with the serial number SN1 (i.e., the e-mail address "user@user.co.jp"). Generally speaking, the method of sending the "first authentication information" to the "terminal device" is not particularly limited.

[0085] (Modification 3) The terminal 10 may input the PIN code "2345" to the printer 100 via an NFC (abbreviation of Near Field Communication) connection. Specifically, instead of the process of T150 in FIG. 4, the administrator may bring the terminal 10 that has received the PIN code "2345" closer to the printer 100. In this case, an NFC connection may be established between the terminal 10 and the printer 100, and the PIN code "2345" may be input to the printer 100 using the NFC connection. In another modification, the terminal 10 may input the PIN code "2345" to the printer 100 via a BT (abbreviation of Bluetooth (registered trademark)) connection. In another modification, the terminal 10 may input the PIN code "2345" to the printer 100 via a WFD (abbreviation of Wi-Fi Direct (registered trademark)) connection. Generally speaking, the method of inputting the "first authentication information" to the "communication device" is not particularly limited.

[0086] (Variation 4) The processes of T110 to T130 in FIG. 4 can be omitted. In this case, when the terminal 10 receives from the administrator a predetermined instruction for changing the PW and an input of the serial number of the printer (e.g., the printer 100) for which the PW is to be changed, the terminal 10 may transmit a PW change instruction including the serial number to the server 200. That is, in this variation, the terminal 10 can change the PW of the printer 100 without logging in to the server 200. In this variation, the "memory" does not need to store "user information". Also, in this variation, the "registration request receiving unit", "first storage control unit", "login request receiving unit", and "success screen data transmitting unit" can be omitted.

[0087] (Variation 5) When the "Register to Server" button is selected at T30 in Fig. 2, the terminal 10 may display a PIN code entry screen on the display unit 14. Then, when the terminal 10 accepts input of the PIN code "1234" into the PIN code entry screen and input of the serial number SN1 of the printer 100 to be registered in the server 200, the terminal 10 may transmit a registration request including this information to the server 200. In this variation, the terminal 10 is an example of a "first external device."

[0088] (Variation 6) The processes of T32 to T36 in Fig. 2 and T40 to T56 in Fig. 3 can be omitted. In this case, printer 100 may display a screen for inputting a user ID and server PW when accepting a server registration operation (T60 in Fig. 3). In this case, printer 100 may transmit a registration request including the input user ID and server PW, and serial number SN1, to server 200. In this variation, the user ID and server PW are an example of "specific information".

[0089] (Modification 7) When the printer 100 receives "ST" at T244 in FIG. 5, the printer 100 may display an inquiry screen on the display unit 114 to inquire of the user whether or not to display the PIN code input screen SC5. Then, when the printer 100 is instructed to display the PIN code input screen SC5 on the inquiry screen, the printer 100 may display the PIN code input screen SC5 on the display unit 114. In this modification, the inquiry screen is an example of a "related screen". In another modification, the printer 100 may not display the PIN code input screen SC5 even if it receives "ST" from the server 200. In this case, the printer 100 may display the PIN code input screen SC5 when accepting a PW change operation from the administrator (see T150 and T152 in FIG. 4). In this modification, the "second authentication information transmission unit" may not display the "related screen related to the first authentication information by transmitting the second authentication information to the communication device" on the "communication device".

[0090] (Modification 8) The administrator may execute each process in Fig. 6 using a terminal different from the terminal 10. In this modification, the different terminal is an example of a "second external device."

[0091] (Modification 9) In each of the above embodiments, the processes in FIGS. 2 to 6 are realized by software (for example, the OS program 40, the programs 140, 240), but at least one of these processes may be realized by hardware such as a logic circuit.

[0092] The technical elements described in this specification or drawings have technical utility either alone or in various combinations, and are not limited to the combinations described in the claims at the time of filing. In addition, the technologies illustrated in this specification or drawings can achieve multiple objectives simultaneously, and achieving one of these objectives is itself technically useful. [Explanation of symbols]

[0093] 2: communication system, 4: LAN, 6: Internet, 10: terminal, 12, 112: operation unit, 14, 114: display unit, 20, 120, 220: communication I / F, 30, 130, 230: control unit, 32, 132, 232: CPU, 34, 234: memory, 40: OS program, 100: printer, 116: print execution unit, 134A: volatile memory, 134B: non-volatile memory, 200: intermediary server, 242: account table, 244: device table

Claims

1. A computer program for a server, comprising: The server computer is composed of the following parts: a change instruction receiving unit that receives, from a terminal device, an instruction to change the password of the server and a communication device different from the terminal device; a first authentication information transmission unit that transmits first authentication information to the terminal device when the change instruction is received from the terminal device, the first authentication information being input to the communication device by a user of the terminal device after being transmitted to the terminal device; an authentication information receiving unit that receives the first authentication information from the communication device when the first authentication information is input to the communication device; a notification sending unit that sends a change permission notification to the communication device when the first authentication information is received from the communication device, the change permission notification being a notification that allows the communication device to change the password; A computer program that functions as a

2. the server includes a memory for storing one or more pieces of user information corresponding to one or more users; The computer program further causes the computer to a login request receiving unit that receives a login request including target user information from the terminal device; a success screen data sending unit that sends success screen data representing a success screen to the terminal device when the target user information included in the login request is stored in the memory; 2. The computer program product of claim 1, wherein the change instruction receiving unit receives the change instruction from the terminal device when a specified instruction to change the password of the communication device is given from the user on the success screen displayed on the terminal device after the success screen data is transmitted to the terminal device.

3. The computer program further causes the computer to a registration request receiving unit that receives a registration request from a first external device, the registration request including identification information for identifying the target user information and identification information for identifying the communication device; a first storage control unit that, when the registration request is received from the first external device, causes the target user information specified by the specification information and the identification information to be associated with each other and stored in the memory; the success screen data transmission unit, when receiving the login request from the terminal device after the target user information and the identification information are associated with each other and stored in the memory, transmits to the terminal device the success screen data representing the success screen including the identification information stored in the memory in association with the target user information included in the login request; 3. The computer program product of claim 2, wherein the change instruction receiving unit receives the change instruction including the identification information from the terminal device when the user gives the specified instruction to change the password of the communication device identified by the identification information included in the success screen on the success screen displayed on the terminal device after the success screen data is transmitted to the terminal device.

4. The computer program further causes the computer to when the change instruction including the identification information is received from the terminal device, the second storage control unit causes the first authentication information and the identification information to be stored in the memory in association with each other; the authentication information receiving unit receives the first authentication information and the identification information from the communication device when the first authentication information is input to the communication device; 4. The computer program product of claim 3, wherein the notification sending unit sends the change permission notification to the communication device when the first authentication information and the identification information are received from the communication device and the received first authentication information and the received identification information are associated and stored in the memory.

5. The computer program further causes the computer to a third storage control unit that associates the first authentication information with second authentication information different from the first authentication information and stores the first authentication information in the memory; a second authentication information transmission unit that transmits the second authentication information to the communication device identified by the identification information when the change instruction including the identification information is received from the terminal device; the authentication information receiving unit receives the first authentication information and the second authentication information from the communication device when the second authentication information is transmitted to the communication device and the first authentication information is input to the communication device; 5. The computer program of claim 3, wherein the notification sending unit sends the change permission notification to the communication device when the first authentication information and the second authentication information are received from the communication device and the received first authentication information and the received second authentication information are associated and stored in the memory.

6. The computer program product according to claim 5 , wherein the second authentication information transmission unit transmits the second authentication information to the communication device, thereby causing the communication device to display a related screen related to input of the first authentication information.

7. The computer program product according to claim 1 , wherein the first authentication information is input to the communication device by the user operating an operation unit of the communication device.

8. the communication device has a web server function, 7. The computer program product of claim 1, wherein the first authentication information is input to the communication device via the web server function of the communication device by the user using a second external device different from the communication device.

9. A server, a change instruction receiving unit that receives, from a terminal device, an instruction to change the password of the server and a communication device different from the terminal device; a first authentication information transmission unit that transmits first authentication information to the terminal device when the change instruction is received from the terminal device, the first authentication information being input to the communication device by a user of the terminal device after being transmitted to the terminal device; an authentication information receiving unit that receives the first authentication information from the communication device when the first authentication information is input to the communication device; a notification sending unit that sends a change permission notification to the communication device when the first authentication information is received from the communication device, the change permission notification being a notification that allows the communication device to change the password; A server comprising:

10. 1. A method performed by a server, comprising: The method comprises: a change instruction receiving step of receiving, from a terminal device, an instruction to change the password of the server and a communication device different from the terminal device; a first authentication information transmitting step of transmitting first authentication information to the terminal device when the change instruction is received from the terminal device, the first authentication information being input to the communication device by a user of the terminal device after being transmitted to the terminal device; an authentication information receiving step of receiving the first authentication information from the communication device when the first authentication information is input to the communication device; a notification sending step of sending a change permission notification to the communication device when the first authentication information is received from the communication device, the change permission notification being a notification that permits the communication device to change the password; A method comprising:

Images