Information processing device and program

Abstract

To prevent a setting from not being set as intended by a user in a setting for inputting an address and prefix of an information processing device.SOLUTION: An information processing device displays a screen for inputting network setting information to control the communication of a communication unit. The information processing device notifies predetermined information, which is network setting information input via the screen, when there is an inconsistency in the combination of an IP address and a prefix length for the IP address.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present disclosure relates to an information processing device and Program Regarding. [Background technology]

[0002] Conventionally, information processing devices determine communication paths for network communication based on routing information. There are two types of configuration means for routing information: static routing, which is set manually by the user, and dynamic routing, which is set automatically by the information processing device using a routing protocol. Static routing allows the user to intentionally determine the communication path, and is used when it is desired to fix the communication path for a specific communication. Users who use static routing generally set the destination address, prefix length, and gateway address, and perform maintenance such as adding or deleting settings as necessary. For example, Patent Document 1 proposes a means for checking whether or not a communication destination for static routing exists, and maintaining the static routing settings according to the checking result.

[0003] Static routing is also used in end-point information processing devices such as image forming devices equipped with multiple LAN I / Fs (Interfaces) as a means for determining which LAN I / F each communication will use. As with static routing settings, there is an address filter function that operates by specifying an address and a prefix length. Address filters are used as a means of permitting or restricting communication with specific external devices from a destination address. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Publication No. 5-330280 Summary of the Invention [Problem to be solved by the invention]

[0005] However, while static routing has the characteristic that the user can clearly set the communication route, there is a concern that the user may set it incorrectly and the communication route may not be as intended. For example, if the destination is specified as 192.168.10.1 / 24, values ​​are set not only in the 24-bit network part but also in the remaining 8-bit host part. In this case, it is possible that the specified prefix length is incorrect. For example, even if the user wants to apply the static routing rule to one address, 192.168.168.10.1, it may be automatically changed and set to a value applied to 255 addresses as 192.168.10.0 / 24. If the address is automatically changed and registered by the information processing device in this way, there is a problem that communication with a destination different from the user's intention may occur, causing security problems such as information leakage.

[0006] However, in conventional network devices, it is assumed that a network expert will enter configuration commands via a command line, directly edit a simple configuration file, or configure the network via a simple configuration screen, and therefore no measures have been considered against the above-mentioned configuration errors. [Means for solving the problem]

[0007] The information processing device according to the present invention is an information processing device capable of communicating with an external device via a communication unit, and includes an IP address and a corresponding IP address as setting information for an IP filter related to permission of communication using the IP address. Prefix a display control means for providing a screen for inputting a prefix length, and when there is an inconsistency between the IP address inputted via the screen and the combination of the prefix length for the IP address, Inform the user that there is an inconsistency in the combination of the IP address and the prefix length for the IP address. A notification means for notifying the user; a first inquiry means for, when there is an inconsistency between an IP address input via the screen and a combination of a prefix length for the IP address, inquiring as to whether or not the IP address should be changed to match the prefix length; The present invention is characterized by having the following. Effect of the Invention

[0008] According to the present invention, it is possible to prevent the address and prefix of an information processing device from being input in a manner not intended by the user. [Brief description of the drawings]

[0009] [Figure 1] FIG. 1 illustrates an example of a system configuration of an information processing system. [Diagram 2] FIG. 2 illustrates an example of a hardware configuration of an image forming apparatus. [Diagram 3] FIG. 2 is a diagram illustrating an example of a software configuration of an image forming apparatus. [Figure 4] 13 is a flowchart relating to static routing configuration. [Diagram 5] FIG. 13 is a diagram showing an example of a setting screen relating to static routing setting. [Figure 6] 13 is a flowchart illustrating an address filter setting. [Figure 7] FIG. 13 is a diagram showing an example of a setting screen relating to address filter setting based on an IPv4 address. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. In the description of the embodiment, an image forming apparatus will be used as an example of an information processing apparatus, but the information processing apparatus may be any apparatus having a communication function other than an image processing apparatus.

[0011] <Embodiment 1> In the first embodiment, a process related to static routing settings will be described. (System Configuration) FIG. 1 is a diagram showing an example of a system configuration of an information processing system. In this embodiment, there are four LANs (Local Area Networks), and they operate with the addresses shown in Table 1. The image forming apparatus 100 has two LAN I / Fs and is directly attached to the LANs 110 and 120. The image forming apparatus 100 can communicate with the LAN 130 via the router 101 and with the LAN 140 via the router 102. Furthermore, the LAN 130 includes PCs 131 and 132. The LAN 140 includes PCs 141 and 142. The addresses of the devices are as shown in Table 2. Although the LANs 130 and 140 are different LANs, they are operated in the same address range. Therefore, the image forming apparatus 100 uses static routing settings to determine which device of the LANs 130 and 140 it will communicate with, and operates the device. Therefore, if the static routing settings are not executed as the user intended, there is a concern that communication between PC131 and PC141, or between PC132 and PC142, which have the same address, may be mistakenly performed to an unintended terminal.

[0012] [Table 1]

[0013] [Table 2]

[0014] (Hardware configuration) FIG. 2 is a diagram showing an example of the hardware configuration of the image forming apparatus 100. Note that the hardware configuration in this embodiment is an example, and is not limited to this. Note that in this embodiment, an image forming apparatus having a printing function of printing an image on a sheet and a transmission function of reading an original and transmitting scanned data obtained to an external device is exemplified as an example of an information processing apparatus, but is not limited to this. The setting control in this embodiment can also be applied to a single-function image processing apparatus having only a transmission function. Furthermore, it can also be applied to the setting control of information processing apparatuses such as PCs, network routers, and access point devices that perform wireless communication based on the IEEE802.11 series. In the image forming apparatus 100, various hardware components 201 to 209 are connected via an internal bus 200 and exchange data with each other. A CPU 201 controls the overall operation of the image forming apparatus 100. The CPU 201 reads and executes a control program stored in a ROM 202 to perform various controls such as print control and scan control.

[0015] The RAM 203 is a non-volatile memory used by the CPU 201 as a work area for executing various programs. The HDD 204 stores image data, various programs, and further setting values ​​related to the operation of the image forming apparatus 100. The operation unit 205 has a display that operates as a touch panel that can be operated by a user's finger, and keyboard input is possible. The printer unit 206 prints image data transferred via the internal bus 200 on paper. The scanner unit 207 transfers image data of a scanned document via the internal bus 200, and stores the data in the HDD 204 or transmits the data to an external device from the LAN I / F 208 or the LAN I / F 209. The LAN I / F 208 communicates with an external device connected to the Ethernet (registered trademark) 110, and can receive print instructions from the external device and transmit scan data to the external device. The LAN I / F 209 can also communicate with an external device connected to the LAN 120, similar to the LAN I / F 208. The LAN I / F 208 and the LAN I / F 209 are examples of communication units. The image forming apparatus 100 is capable of communicating with external devices via the LAN I / F 208 and the LAN I / F 209. The image forming apparatus 100 can accept a transmission destination setting based on a user operation via a screen of a transmission function (not shown). When a transmission destination is set and an instruction to start transmission is accepted, the image forming apparatus 100 reads an original using the scanner unit 207 and generates scan data. The processing of the scanner unit 207 is an example of a reading process. Next, the image forming apparatus 100 transmits data generated based on the generated scan data to the transmission destination set by the user.

[0016] In this embodiment, the configuration has two LAN I / Fs, but the present invention is not limited to this and may have one or more I / Fs. Furthermore, the LAN I / F is not limited to a physical I / F, and may be realized using a logical I / F such as a virtual I / F realized at the software level.

[0017] (Functional configuration) Fig. 3 is a diagram showing an example of a software configuration of the image forming apparatus 100. Note that each processing unit shown in Fig. 3 is realized by the CPU 201 executing a control program 300. Also, the software configuration in the present embodiment is an example, and is not limited to this. The control program 300 is a control program for the entire image forming apparatus 100 , and includes a panel control unit 301 , a data management unit 302 , a filter management unit 303 , and a communication control unit 304 .

[0018] Panel control unit 301 performs input / output processing equivalent to operation unit 205. For example, panel control unit 301 passes static routing settings input from operation unit 205 to data management unit 302, thereby storing the settings in a storage device such as HDD 204. Panel control unit 301 also displays screen data acquired from data management unit 302 on 205, and notifies each processing unit of control program 300 of an event input from operation unit 205. The data management unit 302 performs input processing for the storage devices, ROM 202 and HDD 204, in response to requests from each processing unit.

[0019] Filter management unit 303 manages control functions related to communication with external devices, such as static routing settings and address filter settings. When filter management unit 303 receives a notification from panel control unit 301 that static routing information or address filter information has been input, it verifies whether there is an inconsistency in the static routing information and address filter information. If an inconsistency is detected, filter management unit 303 displays that fact on operation unit 205 via panel control unit 301. Furthermore, when image forming apparatus 100 is started up, settings are changed, etc., filter management unit 303 sets static routing information and address filter information in communication control unit 304.

[0020] The communication control unit 304 controls the LAN I / F 208 and the LAN I / F 209, and controls communication with external devices via the LAN 110 and the LAN 120. For example, the communication control unit 304 reads the setting information of each LAN I / F from the data management unit 302 and executes the setting, or transmits and receives data to and from external devices based on the static routing information and the address filter information set by the filter management unit 303. The communication control unit 304, which has received an instruction to transmit data based on the scan data to a transmission destination, identifies an IP address corresponding to the transmission destination specified via the screen of the transmission function. If it is subsequently determined that the IP address matches the address filter, it determines whether or not to perform communication based on the policy described in the address filter. The verification of whether or not the policy matches is performed based on the order of the rules input from the operation unit 205. If multiple rules are defined, the rule that is determined to match first is applied. If it is determined that communication is to be performed as a result of the verification using the address filter, the communication control unit 304 determines whether or not the IP address matches the rule of the static routing setting. In addition, when the IP address matches multiple static routing rules in determining whether it matches the static routing rules, the routing rule to be applied is uniquely determined according to the longest match rule. If it is determined that the IP address matches any rule registered as static routing, the communication control unit 304 identifies the communication interface to be used as the output destination based on the rule, and transmits the data via the identified communication interface. If it is determined that the IP address does not match the static routing settings, the communication control unit 304 identifies the communication interface to be used as the output destination according to the longest match rule. In other words, it takes a logical AND between the IP address and the subnet of each communication interface, and transmits the data via the interface corresponding to the subnet that matches the longest.

[0021] (Static routing configuration flow chart) Fig. 4 is a flowchart relating to static routing setting. Each operation (step) shown in Fig. 4 and the flowchart of Fig. 6 described later is realized by CPU 201 calling up to RAM 203 a program corresponding to each control module stored in ROM 202 or HDD 204 and executing it. In this embodiment, data transmission / reception processing and the like are realized in cooperation with each I / F and each piece of hardware. In addition, in cases where it is desired to clearly indicate the software module that is responsible for the actual processing, the CPU is not used as the subject, but the name of each software module that causes the CPU to execute the processing is described as the subject.

[0022] In S 401 , the filter management unit 303 detects that static routing information has been input from the panel control unit 301 . In S402, the filter management unit 303 executes verification as to whether or not there is a mismatch between the input address and the prefix length. The address is the address of the communication destination.

[0023] More specifically, the filter management unit 303 distinguishes the network part and the host part from the prefix length for the address input in S401, and determines that there is an inconsistency if a value is entered in the host part. The filter management unit 303 determines that there is no inconsistency if no value is entered in the host part. An example of the determination will be described. The filter management unit 303 generates a bit mask in which the upper bits corresponding to the network address part specified by the prefix length are set to 0, and the lower bits corresponding to the host address part are set to 1. The filter management unit 303 determines that there is no inconsistency if the result of ANDing the generated bit mask with the input address (IPV4 address) is 0. The filter management unit 303 determines that there is an inconsistency if the result is other than 0. If the filter management unit 303 determines that there is no inconsistency, it advances the process to S408, and if it determines that there is an inconsistency, it advances the process to S404.

[0024] In S404, the communication control unit 304 instructs the panel control unit 301 to display a message indicating that there is a mismatch between the address and the prefix length input to the operation unit 205. The message indicating that there is a mismatch is an example of predetermined information. The process of S404 is an example of a process of notifying that there is a mismatch. Furthermore, in S405, the filter management unit 303 displays a confirmation screen on the operation unit 205 via the panel control unit 301 to inquire whether the address having a mismatch with the prefix length should be changed to match the prefix length. The process of S405 is an example of a first inquiry process to inquire whether the address should be changed to match the prefix length.

[0025] In S406, the filter management unit 303 judges whether or not a change has been selected in response to the user's selection via the confirmation screen. If the user has selected not to change, the filter management unit 303 ends the process and cancels the setting of the static routing information, and if the user has selected to change, the filter management unit 303 advances the process to S407.

[0026] In S407, filter management unit 303 changes the address to match the prefix length, and stores the changed data in data management unit 302. The process of S407 is an example of a first change process in which the address is changed to match the prefix length. In S408, the filter management unit 303 sets the address, the prefix length, and the default gateway address as static routing information in the communication control unit 304. When the static routing setting is canceled, the filter management unit 303 may control the panel control unit 301 to display a message prompting the user to retry input, and return to the input screen again.

[0027] When the static routing is set, the image forming apparatus 100 performs communication control based on the static routing information. For example, if 172.16.10.254 is set as the default gateway of the image forming apparatus 100, communication from 192.168.10.0 is sent to the LAN 140 via the default gateway before the static routing setting is executed. On the other hand, when the static routing setting is set to set the gateway to 192.168.10.0 to 10.0.10.254, communication from 192.168.10.0 is sent to the LAN 130 based on the static routing setting.

[0028] (Static routing settings screen) 5 is a diagram showing an example of a setting screen related to static routing setting. Note that, in the present embodiment, a screen displayed on operation unit 205 of image forming apparatus 100 will be described as an example, but the screen may be in a web format that can be accessed by external devices connected via LAN I / F 208 and LAN I / F 209.

[0029] Fig. 5(a) is a screen for configuring static routing settings. When the user selects an edit button 501, the screen transitions to Fig. 5(b), where static routing information can be added and edited.

[0030] Fig. 5(b) is a screen for adding and editing static routing information. When the user inputs values ​​into address input area 510, prefix length input area 511, and gateway address input area 512, and selects OK button 513, the process of the static routing setting flowchart shown in Fig. 4 is executed. Here, when image forming apparatus 100 detects an inconsistency in the values ​​input into address input area 510 and prefix length input area 511, it transitions the screen to Fig. 5(c). The process of displaying the screen in Fig. 5(b) is an example of a display control process.

[0031] Fig. 5(c) shows a screen that is displayed when an inconsistency is detected between the address and prefix length in static routing settings. A message is displayed on the screen indicating that there is an inconsistency in the entered values, and a confirmation message asking whether to change the prefix length. In this state, if the OK button 520 is selected, the changes output in the confirmation message are implemented. On the other hand, if the Cancel button 521 is selected, the setting of the static routing information is canceled. If the setting is canceled, the screen returns to Fig. 5(b), and the user is prompted to re-enter information.

[0032] 5(d) is a screen that displays the static routing information that has been set. The static routing setting contents that have been set are displayed in setting information display area 530. If an inconsistency is detected and changed, the changed contents are displayed in setting information display area 530. That is, if an inconsistency is changed when 192.168.10.1 is entered as the address and 24 is entered as the prefix length, the address displayed in setting information display area 530 becomes 192.168.10.0.

[0033] As described above, according to the present embodiment, it is possible to prevent the static routing setting of the image forming apparatus 100 from being set as intended by the user, thereby solving the problem from the viewpoint of security.

[0034] <Embodiment 2> In the second embodiment, a case where a check process is performed on the address filter settings will be described. Note that the software configuration and hardware configuration are similar to those of the first embodiment, and therefore a description thereof will be omitted. Note that the second embodiment can also be combined with the first embodiment. In this case, the image forming apparatus 100 executes the control exemplified in FIG. 4 when setting static routing, and executes the control shown in FIG. 6, which will be described later, when setting an address filter. The address filter settings are, for example, setting information related to an IP filter that controls whether or not communication using an IP address is permitted.

[0035] (Flowchart for address filter routing settings) 6 is a flowchart showing how to set an address filter, which will be described in detail below. In S601 , the filter management unit 303 detects that the address filter information has been input from the panel control unit 301 . In S602, the filter management unit 303 executes verification as to whether or not there is a mismatch between the input address and the prefix length.

[0036] In S603, the filter management unit 303 determines whether or not there is an inconsistency between the address and the prefix length as a result of the verification in S602. If the filter management unit 303 determines that there is an inconsistency, the process proceeds to S604, and if it determines that there is no inconsistency, the process proceeds to S612. The filter management unit 303 separates the network portion and the host portion from the prefix length for the input address, and determines that there is an inconsistency if a value is entered in the host portion. The filter management unit 303 determines that there is no inconsistency if no value is entered in the host portion. In S612 , the filter management unit 303 sets the input address filter information in the communication control unit 304 .

[0037] In S604, filter management section 303 instructs panel control section 301 to display a message indicating that there is a mismatch between the address and the prefix length input to operation section 205. Next, in S605, the filter management unit 303 determines whether the default policy of the address filter is rejection or permission. If the filter management unit 303 determines that the default policy is rejection, the process proceeds to S606, and if the filter management unit 303 determines that the default policy is permission, the process proceeds to S607.

[0038] In S606, the filter management unit 303 displays on the operation unit 205 via the panel control unit 301 a confirmation screen for inquiring whether or not to change the address having a mismatch with the prefix length to match the prefix length. The processing of S606 is an example of a first inquiry processing for inquiring whether or not to change the address to match the prefix length. On the other hand, in S607, the filter management unit 303 displays on the operation unit 205 via the panel control unit 301 a confirmation screen for inquiring whether or not to change the prefix length having a mismatch with the prefix length to match the address. The processing of S607 is an example of a second inquiry processing for inquiring whether or not to change the prefix length to match the address. This is because when the default policy is to deny, prioritizing the address value narrows the address range that is permitted for communication, reducing the risk from a security perspective even if the user makes a mistake in setting it. Similarly, when the default policy is to permit, prioritizing the prefix narrows the address range that is permitted.

[0039] In S608, the filter management unit 303 determines whether or not the user has selected a change, based on the information received via the panel control unit 301. If the filter management unit 303 determines that the user has selected a change, it proceeds to S610, and if it determines that the user has not selected a change, it ends the processing of the flowchart shown in FIG. In S610, the filter management unit 303 changes the address to match the prefix length. The process of S610 is an example of a first change process in which the address is changed to match the prefix length.

[0040] On the other hand, in S609, the filter management unit 303 determines whether or not the user has selected a change, based on the information received via the panel control unit 301. If the filter management unit 303 determines that the user has selected a change, it proceeds to S611, and if it determines that the user has not selected a change, it ends the processing of the flowchart shown in FIG. In S611, the filter management unit 303 changes the prefix length to match the address. The process of S611 is an example of a second change process in which the prefix length is changed to match the address. In S612, the filter management unit 303 sets the address and the prefix length as address filter information in the communication control unit 304.

[0041] In this embodiment, a filter related to an IP address is taken as an example, but an address filter related to other types of addresses such as a MAC address may be used. When the address filter setting is canceled, the filter management unit 303 may control the panel control unit 301 to return to the input screen again.

[0042] As described above, in the image forming apparatus 100 to which the address filter is applied, the communication control unit 304 allows only network packets with addresses registered as exceptions when the default policy is denial, and drops network packets for other communications. Also, when the default policy is permission, the communication control unit 304 drops network packets with addresses registered as exceptions, and allows other communications.

[0043] As described above, according to the present embodiment, it is possible to prevent the address filter setting of the image forming apparatus 100 from being set as intended by the user, thereby solving the problem from the viewpoint of security.

[0044] (Settings screen for address filter settings) 7 is a diagram showing an example of a setting screen for setting an address filter based on an IPv4 address. Note that, in the present embodiment, a screen displayed on the operation unit 205 of the image forming apparatus 100 is described as an example, but the screen may be in a web format that can be accessed by external devices connected via the LAN I / F 208 and the LAN I / F 209.

[0045] Fig. 7(a) is a screen for adding and editing address filter information. When the user inputs values ​​into the address input area 710 and the prefix length input area 711 and selects the OK button 517, the process of the address filter setting flowchart shown in Fig. 6 is executed. The process of displaying the screen in Fig. 7(a) is an example of a display control process. Here, when the image forming apparatus 100 detects an inconsistency in the values ​​input into the address input area 710 and the prefix length input area 711, it displays Fig. 7(b) or Fig. 7(c) depending on whether the value is changed to match the address or the prefix length.

[0046] Fig. 7(b) shows a screen when the prefix length is changed to match the address. More specifically, a confirmation message is displayed asking whether to change the value 24 input in the prefix length input area 711 to 32 to match the address 192.168.10.1 input in the address input area 710. In this state, when the OK button 720 is selected, the change output in the confirmation message is implemented. On the other hand, when the Cancel button 721 is selected, the setting of the address filter information is canceled. When the setting is canceled, the screen returns to Fig. 7(a), and the image forming apparatus 100 prompts the user to re-input.

[0047] Fig. 7(c) shows a screen when the address is changed according to the prefix length. More specifically, a confirmation message is displayed asking whether to change the address 192.168.10.1 input in the address input area 710 to 192.168.10.0 according to the value 24 input in the prefix length input area 711. In this state, when the OK button 730 is selected, the change output in the confirmation message is implemented. On the other hand, when the Cancel button 731 is selected, the setting of the address filter information is canceled. Note that when the setting is canceled, the screen returns to Fig. 7(a), and the image forming apparatus 100 prompts the user to re-input.

[0048] (Modification) In the first and second embodiments, an example was described in which one type of change proposal is presented according to the address or prefix length when a mismatch is detected. However, it can be modified as appropriate. For example, in the first embodiment, the IP address input by the user may be prioritized, an inquiry screen for correcting the prefix may be displayed, and the change may be accepted via the screen. Also, in the first and second embodiments, a display item that allows the user to select whether to prioritize the IP address or the prefix may be displayed on one inquiry screen, so that the user can select. Furthermore, an embodiment may also be adopted in which, at the time when the address or prefix length value is input, input prohibition on the screen is enabled so that a value that causes a mismatch with the other cannot be input.

[0049] <Other embodiments> The present invention can be realized by supplying a program for implementing one or more of the functions of the above-described embodiments to a system or device via a network or a storage medium. Then, one or more processors in a computer of the system or device can read and execute the program. It can also be realized by a circuit (e.g., ASIC) that implements one or more of the functions.

[0050] Although an example of an embodiment of the present invention has been described in detail above, the present invention is not limited to such a specific embodiment.

[0051] As described above, according to each of the above-mentioned embodiments, when inputting the address and prefix length of the image forming apparatus 100, it is possible to prevent the setting from being made in a manner not intended by the user, thereby solving the problem from a security perspective. [Explanation of symbols]

[0052] 100 Image forming device 201 CPU 205 Operation section

Claims

1. An information processing device capable of communicating with an external device via a communication unit, a display control means for providing a screen for inputting an IP address and a prefix length for the IP address as setting information for an IP filter related to permission of communication using the IP address; a notification means for notifying a user of an inconsistency between the IP address and the combination of the prefix length for the IP address input via the screen when the inconsistency exists between the IP address and the combination of the prefix length for the IP address; a first inquiry means for, when there is an inconsistency between an IP address input via the screen and a combination of a prefix length for the IP address, inquiring as to whether or not the IP address should be changed to match the prefix length; 13. An information processing device comprising:

2. 2. The information processing apparatus according to claim 1, wherein the notification means notifies the user of the inconsistency in a combination of an IP address and a prefix length for the IP address by displaying the inconsistency on the screen.

3. 3. The information processing device according to claim 1, further comprising a first modification means for modifying the IP address to match the prefix length when the first modification means selects to modify the IP address to match the prefix length as a result of the query by the first query means.

4. 4. The information processing device according to claim 1, further receiving an IP address and a prefix length setting for the IP address as setting information related to static routing.

5. the information processing device is an image processing device having a plurality of communication interfaces, a reading means, and a transmission function of transmitting data obtained by reading an original with the reading means to an outside via any one of the plurality of communication interfaces; An information processing device according to any one of claims 1 to 4, characterized in that it has a determination means for determining a communication interface for transmitting the data based at least on an IP address corresponding to a transmission destination set as a destination of the transmission function and on settings regarding static routing.

6. 6. The information processing apparatus according to claim 1, further comprising a control unit that controls whether or not communication is permitted based on the setting information of the IP filter.

7. 7. The information processing apparatus according to claim 1, wherein the information processing apparatus is an image forming apparatus.

8. 8. An information processing device according to claim 1, further comprising a determination means for determining whether or not there is an inconsistency in the network setting information input via the screen between an IP address and a combination of a prefix length for the IP address.

9. The information processing device according to claim 8, characterized in that the determination means distinguishes between a network portion and a host portion based on the prefix length, and determines that there is an inconsistency if a value is entered in the host portion, and determines that there is no inconsistency if no value is entered in the host portion.

10. An information processing device capable of communicating with an external device via a communication unit, a display control means for providing a screen for inputting an IP address and a prefix length for the IP address as setting information for an IP filter related to permission of communication using the IP address; a notification means for notifying a user of an inconsistency between the IP address and the combination of the prefix length for the IP address input via the screen when the inconsistency exists between the IP address and the combination of the prefix length for the IP address; a second inquiry means for inquiring whether or not to change the prefix length to match the IP address when there is an inconsistency between the IP address input via the screen and a combination of the prefix length for the IP address; 13. An information processing device comprising:

11. The information processing device according to claim 10, characterized in that the notification means notifies the user by displaying on the screen that there is an inconsistency in a combination of an IP address and a prefix length for the IP address.

12. The information processing device according to claim 10 or 11, characterized in that the information processing device further accepts an IP address and a prefix length setting for the IP address as configuration information regarding static routing.

13. The information processing device is an image processing device having a plurality of communication interfaces, a reading means, and a transmission function for transmitting data obtained by reading an original document with the reading means to an outside via any one of the plurality of communication interfaces; 13. An information processing device according to claim 10, further comprising a determination means for determining a communication interface for transmitting the data based at least on an IP address corresponding to a transmission destination set as a destination of the transmission function and on settings regarding static routing.

14. An information processing device according to any one of claims 10 to 13, further comprising a control means for controlling whether or not to permit communication based on the setting information of the IP filter.

15. The information processing device according to any one of claims 10 to 14, characterized in that the information processing device is an image forming device.

16. An information processing device as described in any one of claims 10 to 15, characterized in that it has a judgment means for determining whether there is an inconsistency in the network setting information input via the screen between an IP address and a combination of a prefix length for the IP address.

17. The information processing device described in Claim 16, characterized in that the determination means distinguishes between a network portion and a host portion based on the prefix length, and determines that there is an inconsistency if a value is contained in the host portion, and determines that there is no inconsistency if no value is contained in the host portion.

18. A program for causing a computer to function as each of the means of the information processing device according to any one of claims 1 to 17.

Images