Printing device, control method and program

Abstract

To solve such the problem that a standard such as IPP stipulates even privacy set up that cannot be specified by a vendor driver and printing may be run while the privacy set up is not consistent with a security level of a printing device.SOLUTION: When receiving a print request in a mode according to IPP including a privacy attribute value from a client terminal, a printing device controls access of a printing job on the basis of the privacy attribute value of the printing job.SELECTED DRAWING: Figure 7

Description

[Technical Field]

[0001] The present invention relates to a printing device that receives a print job from an external device, a control method, and a program. [Background technology]

[0002] A technology is becoming popular in which a print job is submitted from a client terminal to a printing device, and attribute items of the print data are kept confidential according to the privacy level specified in the print job (see Patent Document 1). In such a printing system, privacy settings are configured from the client terminal using a vendor driver for the printing device, and printing is then performed. The printing device sets access control for attribute items based on the specified privacy settings and saves job information.

[0003] On the other hand, methods for specifying print job privacy settings according to standard printing standards without using vendor drivers have been specified in RFC8011 and the Printer Working Group (PWG). These standards use a printing protocol called IPP (Internet Printing Protocol) to implement print job privacy settings in a format that conforms to IPP. In this way, printing methods using IPP without using vendor drivers have become more common in recent years. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Patent application 2002-367344 Summary of the Invention [Problem to be solved by the invention]

[0005] When using a vendor driver from the same vendor as the printing device, the privacy settings that can be specified are predefined, and printing can be performed without inconsistency with the security level of the printing device. However, standards such as IPP prescribe privacy settings that cannot be specified in the vendor driver, and there is a risk that printing will be performed without inconsistency with the security level of the printing device.

[0006] In view of the above-mentioned problems, one of the objects of the present invention is to provide a mechanism in a printing device that enables IPP printing with appropriate privacy settings reflected during IPP printing. [Means for solving the problem]

[0007] In order to achieve at least one of the above-mentioned objects, the printing device of the present invention is a printing device equipped with a printing means that receives a print job in a format conforming to IPP (Internet Printing Protocol) from a client terminal and performs IPP printing based on the received print job, and is characterized by having an identification means that identifies privacy attribute values ​​that can be specified when IPP printing in accordance with privacy settings for the print job in a format conforming to IPP, a response means that responds with at least the privacy attribute value in response to a capability inquiry request for the printing device received from the client terminal, and a control means that, when a print request in a format conforming to IPP including the privacy attribute value is received from the client terminal, performs access control for the print job based on the privacy attribute value of the print job. [Effects of the Invention]

[0008] It is possible to provide a mechanism that enables IPP printing in a printing device with appropriate privacy settings reflected during IPP printing. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 illustrates an example of a printing system. [Figure 2]FIG. 10 is a diagram showing an example of a user information list of a printing device. [Figure 3] FIG. 10 is a diagram illustrating an example of a job status confirmation screen of a printing device. [Figure 4] FIG. 1 is a diagram illustrating an example of a hardware configuration of a printing device. [Figure 5] 1 is an example of a privacy setting screen of a printing device according to a first embodiment; [Figure 6] FIG. 1 is a sequence diagram illustrating an example of control of a printing apparatus according to a first embodiment. [Figure 7] 1 is a flowchart of a capability response of a printing device according to a first embodiment; [Figure 8] 1 is a flowchart of a printing process performed by a printing device according to a first embodiment. [Figure 9] Flowchart of displaying a status confirmation screen of a printing device in the first embodiment [Figure 10] FIG. 10 is a diagram showing an example of a job status confirmation screen of the printing apparatus according to the first embodiment. [Figure 11] 10 is an example of packet data related to a capability response in the first embodiment. [Figure 12] 1 is an example of packet data related to a print request in the first embodiment. [Figure 13] 10 is an example of a privacy setting screen of a printing device according to a second embodiment. [Figure 14] Flowchart of displaying a status confirmation screen of a printing device in a second embodiment [Figure 15] 10 is a flowchart of a capability response of a printing device according to a third embodiment. [Figure 16] 10 is a flowchart of a printing process of a printing device according to a fourth embodiment. [Figure 17] An example of packet data related to a capability response in the fifth embodiment DETAILED DESCRIPTION OF THE INVENTION

[0010] The following describes embodiments of the present invention with reference to the drawings. Note that the following embodiments do not limit the scope of the invention as claimed, and not all of the combinations of features described in the embodiments are necessarily essential to the solution of the invention.

[0011] First Embodiment First, the configuration of a printing system according to the present invention will be described using Figure 1. A printing system 100 according to this embodiment includes a printing device 101 and a client terminal 102. The printing device 101 communicates with the client terminal 102 via a network 103.

[0012] The network 103 may be configured by combining, for example, a communication network such as a LAN or a WAN, USB communication, a cellular network (e.g., LTE or 5G), a wireless network conforming to IEEE802.11, etc. In other words, the network 103 may be configured to be capable of transmitting and receiving data, and any communication method for the physical layer may be adopted.

[0013] The printing device 101 has a scanning function that transmits data based on an image obtained by scanning using a scanner to an external device, a printing function that prints an image on a sheet such as paper based on a print job received from an external device, and a copying function.

[0014] In this embodiment, an MFP (Multi Function Peripheral) having multiple functions is used as an example of a printing device, but the present invention is not limited to this. For example, a single-function SFP (Single Function Peripheral) having only a printing function may also be used. Furthermore, in this embodiment, printing on a sheet such as paper is used as an example, but the present invention is not limited to this and can also be applied to print control in 3D printing, which forms a three-dimensional object based on three-dimensional shape data.

[0015] Furthermore, the printing apparatus 101 of this embodiment has a storage area for print jobs. Print jobs are stored in storage such as an HDD of the printing apparatus 101, and the user can select a print job at any time to execute printing processing.

[0016] The client terminal 102 has a function for transmitting print data to the printing device 101. The user may install a vendor driver in the client terminal 102, or may use an IPP (Internet Printing Protocol) function that is pre-installed in the client terminal 102. In recent years, operating systems (OS) that come pre-installed with a printing function that uses IPP, such as AirPrint (registered trademark) or Mopria (registered trademark), have become widespread.

[0017] Here we will explain the issues with IPP printing when printing a privacy job using IPP. A print job in the IPP standard is a format that allows document job attributes to be set. Specifically, it specifies the Document-Privacy-Attributes attribute, which indicates the scope of job attributes, and the Document-Privacy-Scope attribute, which indicates which users can access the job attributes. The Document-Privacy-Attributes attribute and the Document-Privacy-Scope attribute each have the following setting values ​​defined.

[0018] [Table 1]

[0019] On the other hand, printing devices may manage users by assigning roles to each user, as shown in Figure 2. For example, user A is an administrator and has the authority to change all settings on the printing device and to view and operate all print jobs. Users B and C are ordinary users who do not have the authority to change administrator settings on the printing device or operate other users' jobs, but only have the authority to operate their own print jobs. If the privacy attribute value is a value indicating that some users cannot access it, such as "owner" or "default," access control is performed based on the role and / or user name of the person requesting print on the printing device 101. One form of access control of the present invention is described below.

[0020] Figure 3 shows the print job status confirmation screen of a printing device, which displays a list of print jobs received by the printing device. If no privacy settings are set for any print jobs (Document-Privacy-Attributes is set to none), any of users A, B, and C can access (obtain information about) job attributes, including print jobs, when viewing the status confirmation screen, so the job history of all users can be displayed without omission, as shown in Figure 3(A).

[0021] However, for example, if user B's print job has privacy settings of default for the Document-Privacy-Attributes attribute and owner for the Document-Privacy-Scope attribute, only user B, the document owner, can access the attributes of this print job.

[0022] Therefore, when user B views the status confirmation screen, the job history of all users will be displayed as shown in Figure 3(A), as usual. However, when a user other than user B views the status confirmation screen, they will not be able to access (obtain information about) the job attributes of job B sent by user B, and will instead see a list of jobs that does not include job B, as shown in Figure 3(B).

[0023] An administrator may want to see who printed what and when in order to manage printing devices. Also, if an error occurs during printing of Job B and the paper output process stops, the administrator may need to stop Job B on behalf of User B. However, if inappropriate settings are made in the IPP privacy attributes, the administrator may not be able to properly manage print jobs.

[0024] <Hardware Configuration of Printing Device 101> The hardware configuration of the printing device 101 in this embodiment will be described with reference to FIG. 4. FIG. 4 is a block diagram showing the hardware configuration of the printing device 101. The printing device 101 has a reading function for reading an image on a sheet, a file transmission function capable of transmitting the read image to an external communication device, and the like. It also has a printing function for printing an image on a sheet. It is also assumed to have a function for receiving and printing a print job from the CPS 102, the user management function described above, and a reservation printing function.

[0025] A CPU (Central Processing Unit) 201 controls the overall operation of the printing device 101. The CPU 201 reads control programs stored in a ROM (Read Only Memory) 202 or storage 204 to perform various types of control, such as print control and read control. The ROM 202 stores control programs executable by the CPU 201. A RAM (Random Access Memory) 203 is a main memory accessed by the CPU 201, and is used as a work area or a temporary storage area for expanding various control programs. The storage 204 stores print jobs, image data, various programs, and various setting information. In this way, the hardware, such as the CPU 201, ROM 202, RAM 203, and storage 204, constitutes what is known as a computer.

[0026] In the printing device 101 of this embodiment, one CPU 201 executes each process shown in the flowcharts described below using one memory (RAM 203), but other modes are also possible. For example, multiple processors, memories, and storages can work together to execute each process shown in the flowcharts described below. Also, some processes can be executed using hardware circuits.

[0027] The printer 206 prints an image on a sheet fed from a paper feed cassette (not shown) based on the input print image and print control commands. The printing method may be an electrophotographic method in which toner is transferred to paper and fixed thereon, or an inkjet method in which ink is ejected onto paper to print.

[0028] The operation unit 205 is equipped with a liquid crystal display unit with a touch panel function, various hard keys, etc. The operation unit 205 functions as a display unit that displays information to the user and a reception unit that receives instructions from the user. The CPU 201 cooperates with the operation unit 205 to control the display of information and the reception of user operations.

[0029] A network cable is connected to the communication unit 207, and communication can be performed with external devices on a network or the Internet. In this embodiment, it is assumed that the communication unit 207 is a communication interface that performs wired communication in accordance with Ethernet (registered trademark), but is not limited to this. For example, it may be a wireless communication interface that complies with the IEEE802.11 series. Furthermore, both may be wireless communication interfaces. Furthermore, it may be a communication interface that performs mobile communication via a 3G line such as CDMA, a 4G line such as LTE, or 5G NR.

[0030] Figure 5 is an example of a privacy setting screen for job attributes on a printing device. The privacy level can be selected from "High," "Medium," or "Low." "High" means that only the document owner who submitted the print job can access the attributes of that print job. "Medium" means that only the document owner who submitted the print job and the administrator can access the attributes of that print job. "Low" means that all users can access the attributes of that print job.

[0031] Next, the print job sequence in this embodiment will be described with reference to Figure 6. First, the user uses the client terminal 102 to perform a printer creation operation for the printing device 101. The printer creation operation differs depending on the OS, but generally, a printer search is performed from a printer setting screen. Upon receiving a printer creation instruction from the user, the client terminal 102 searches for printing devices present on the network and displays a list of discovered printing devices. The user selects one desired printing device from the list of printing devices and adds the printer (S601).

[0032] Upon receiving the printer addition instruction, the client terminal 102 sends a detailed capability inquiry request to the specified printing device in accordance with IPP (S602). Figure 11(A) is an example of a packet that uses the IPP Get-Printer-Attributes operation to inquire about the capabilities of the printing device 101. In this packet, "Document-Privacy-Attributes" inquires about the job attributes that are subject to privacy settings, and "Document-Privacy-Scope" inquires about the privacy settings.

[0033] Upon receiving the capability inquiry request, the CPU 201 of the printing device 101 transmits a capability response packet to the client terminal 102 in accordance with IPP (S603). If the privacy setting in FIG. 5 is set to "low," the printing device responds by storing a privacy attribute value of "all" in "Document-Privacy-Scope" as shown in FIG. 11B. If the privacy setting is set to "medium," the printing device responds by storing a privacy attribute value of "default" in "Document-Privacy-Scope" as shown in FIG. 11C. If the privacy setting is set to "high," the printing device responds by storing a privacy attribute value of "owner" in "Document-Privacy-Scope" as shown in FIG. 11D. This allows the printing device 101 to notify the client terminal 102 of its privacy setting information in accordance with IPP. In this way, the printing device 101 stores mapping information that associates privacy settings (in the first embodiment, the privacy level is described as an example of a privacy setting) with privacy setting values.

[0034] The client terminal 102, which has received the capability response from the printing device 101, displays print screen settings according to the received capability (S604). Next, the user selects the desired print settings and performs an operation to execute printing (S605). Note that the print setting items and print setting value candidates displayed on the print setting screen are displayed according to the received capability response from the printing device 101, but privacy attribute values ​​may not be displayed so that they cannot be manipulated by the user.

[0035] Upon receiving the print implementation instruction, the client terminal 102 transmits print data to the printing device 101 in a format conforming to IPP, in accordance with the specified print settings (S606). FIG. 12A is an example of a print request packet in which "Document-Privacy-Scope" is specified as "all." If the capability response shown in FIG. 11B is received, this means that the printing device only supports the privacy setting of "all." Therefore, when the client terminal specifies "Document-Privacy-Scope," "all" is always specified. Similarly, FIG. 12B is an example of a print request packet in which "default" is specified as "Document-Privacy-Scope." FIG. 12C is an example of a print request packet in which "owner" is specified as "Document-Privacy-Scope."

[0036] The CPU 201 of the printing device 101 that receives the print request performs print processing according to the privacy settings specified in the received print job and sends a success response as shown in FIG. 12(D) to the client terminal 102. If the print request fails, a failure response as shown in FIG. 12(E) is sent. Note that if printing is performed in accordance with IPP without setting privacy settings when making a print request, a print request is made without specifying "Document-Privacy-Scope" and "Document-Privacy-Attributes" as shown in FIG. 12(F).

[0037] In addition to the "Document-Privacy-Scope" that can be set on a document-by-document basis, the IPP security settings also specify the "Job-Privacy-Scope" that can be set on a job-by-job basis. Since the same setting values ​​as the "Document-Privacy-Scope" described above are defined, the settings stored for "Job-Privacy-Scope" can also be switched in conjunction with the settings in Figure 5.

[0038] 7, 8, and 9, the operation of the CPU 201 of the printing device 101 when inquiring about the capabilities of the printing device 101 will be described using a flowchart. First, in S701, the CPU 201 receives a capabilities inquiry request from the client terminal 102 (corresponding to S602). Having received the request, in S702 the CPU 201 determines the content of the response based on the job attribute privacy setting of the printing device 101. If the privacy setting is set to "low," in S703 the CPU 201 stores the attribute value "all" in "Document-Privacy-Scope." If the privacy setting is set to "medium," in S704 the CPU 201 stores the attribute value "default" in "Document-Privacy-Scope." If the privacy setting is set to "high," in S705 the CPU 201 stores the attribute value "owner" in "Document-Privacy-Scope." Then, in step S706, the CPU 201 transmits a capability response packet such as that shown in FIG. 11(B), (C), or (D) to the client terminal 102.

[0039] Next, in S801, the CPU 201 receives a print request from the client terminal 102 (corresponding to S606). Having received the request, the CPU 201 determines the processing content in accordance with the privacy settings specified in the print request in S802.

[0040] 12A, when "all" is specified in "Document-Privacy-Scope," the CPU 201 sets the job attributes of the received print job so that all users can access them in step S803. The set job attribute values ​​of the print job are saved in the storage 204.

[0041] When "default" is specified in "Document-Privacy-Scope" as shown in FIG. 12B, in step S804, the CPU 201 sets the job attributes of the received print job so that only the document owner who submitted the job and the administrator can access them. The document owner is determined based on the user name specified in "Requesting-user-name" included in the print request packet, or the user name authenticated by BASIC authentication, DIGEST authentication, or OAUTH authentication. The job attributes of an IPP print job refer to the state that reflects the setting values ​​set by the user, but in the first embodiment, privacy attribute values ​​are also included as job attributes regardless of whether the user can set privacy attribute values.

[0042] If "owner" is specified in "Document-Privacy-Scope" as shown in Fig. 12(C), in S805 the CPU 201 sets the job attributes of the received print job so that only the document owner who submitted the job can access it. Thereafter, in S806 the CPU 201 performs printing processing using the printer 206 of the received print data. Then, in S807 the CPU 201 sends a print processing success response as shown in Fig. 12(D) to the client terminal 102 (corresponding to S607).

[0043] 9 is a flowchart of the CPU 201 when displaying the status check screen of the printing device. First, in S901, the CPU 201 detects that a request to display the print status check screen has been made by the user via the operation unit 205. Having detected the request, in S902 the CPU 201 checks the job attributes of the print jobs stored in the storage 204 one by one to determine whether to display or hide the target job. If the job attributes of the target job are set to be accessible to all users, the CPU 201 determines to display the job in S903.

[0044] On the other hand, if the job attributes are set to allow access only by the owner or administrator, the CPU 201 determines in S904 whether the operation requester is the owner or administrator. That is, when the operation requester operating the printing apparatus 101 logs in, the role and user name of the operation requester are checked to determine whether they are the owner or administrator. If the operation requester is the owner or administrator, the CPU 201 determines in S905 to display the target job. If the operation requester is not the owner or administrator, the CPU 201 determines in S906 not to display the target job.

[0045] Furthermore, if the job attributes are set to be accessible only by the owner, the CPU 201 determines in S907 whether the person making the operation request is the owner. If the person making the operation request is the owner, the CPU 201 determines in S908 to display the target job. If the person making the operation request is not the owner, the CPU 201 determines in S909 not to display the target job. Then, in S910, the CPU 201 determines whether there is other print job information in the storage 204, and if there is, changes the target job to another job and repeats the process from S902. If there is no other print job information, the CPU 201 displays a print status confirmation screen display on the operation unit 205 in S911.

[0046] For example, user B or C submits a print job by specifying "default" for "Document-Privacy-Scope." When user A, who has administrator privileges, views the print status confirmation screen, he or she can view print job information for users B and C in addition to his or her own print job for user A, as shown in FIG. 10. Note that although the "Document-Privacy-Scope" attribute has been used as an example in this embodiment, similar control may also be performed using the "Job-Privacy-Scope" attribute.

[0047] By mapping the printing device's privacy settings information to the IPP "Document-Privacy-Scope" attribute in this way, the appropriate privacy settings can be notified to the client terminal and the printing process can be performed. Therefore, even when using IPP, users can achieve the same benefits as with a vendor driver.

[0048] <Second embodiment> In the second embodiment, a mechanism for restricting input of privacy settings according to the authentication settings of a printing device will be described. Note that the hardware configuration of each device in the second embodiment is the same as that in the first embodiment. The differences from the first embodiment will be described below.

[0049] FIG. 13 is an example of a setting screen for user management settings and privacy settings of the printing device 101 in this embodiment. The user management setting allows the user management function on the printing device to be set to "enabled" or "disabled." If "enabled" for user management is selected, the printing device sets users and roles as shown in FIG. 4, and users must log in to operate the printing device's operation unit. On the other hand, if "disabled" for user management is selected, all users do not need to log in to the printing device and can perform all operations on the printing device.

[0050] When user management is enabled, there is always an administrator user who manages the printing device 101, and the administrator must view and manage all print jobs. Therefore, when user management is enabled and "owner" is specified in the "Document-Privacy-Scope" attribute of a print job, the administrator will not be able to access that print job. Therefore, when "User Management" is set, the privacy setting "High" is hidden or grayed out so that it cannot be set, as shown in Figure 13. This allows the administrator to control all print jobs when there is a user who will act as the administrator of the printing device 101.

[0051] 14 is a flowchart of the CPU 201 when displaying privacy settings. In S1401, the CPU 201 detects a request to display privacy settings. Next, in S1402, the CPU 201 references the user management settings and determines the display control of the privacy settings. If "User management" is set, the CPU 201 determines in S1403 to hide the "High" privacy setting level.

[0052] On the other hand, if "No user management" is set, the CPU 201 determines in S1404 to display all levels of the privacy settings. Then, in S1405, the CPU 201 displays the privacy settings as shown in FIG. 13 or 5. Here, the control to hide the privacy settings has been described, but for example, if the privacy setting display is changed from "High" to "User management," the privacy setting level may be automatically set to "Medium." In other words, the privacy setting level is adjusted in response to the setting to perform user management. This prevents print jobs that the administrator cannot manage when user management is enabled, and allows appropriate job management even when IPP is used.

[0053] <Third embodiment> In the third embodiment, we will explain control when a client terminal specifies a value for the "Document-Privacy-Scope" attribute, ignoring the setting of the "Document-Privacy-Scope" attribute in the capability response from the printing device. Note that the hardware configuration of each device in the third embodiment is the same as in the first embodiment. The differences from the first embodiment will be explained below.

[0054] 15 is a flowchart of when the CPU 201 receives a print job in this embodiment. In step S1501, the CPU 201 receives a print request from the client terminal 102. Next, in step S1502, the CPU 201 compares the value of the "Document-Privacy-Scope" attribute included in the print request with the privacy setting level set in the printing device 101.

[0055] For example, suppose the printing device 101 has sent a capability response such as that shown in FIG. 11(C). That is, let us assume that the printing device's privacy setting is "medium" and that "Default" has been specified in the capability response. In this case, the client terminal 102 should issue a print request by specifying "Default" for the "Document-Privacy-Scope" attribute, as shown in FIG. 12(B). However, there is also a possibility that the client terminal 102 may send a print request by specifying "Owner," as shown in FIG. 12(C). This occurs when the client terminal 102 displays private attribute values ​​on the print setting screen and the user changes the private attribute values. In this case, it means that the client terminal 102 has specified a security level higher than that set in the printing device.

[0056] In this way, in S1503, the CPU 201 compares the security level of the privacy settings set in the printing device with the security level of the privacy settings included in the print request to determine whether they are equal or lower. If the security levels are equal or lower, the CPU 201 proceeds to S1504 and continues the print process normally. On the other hand, if the security level from the client terminal 102 is higher, the CPU 201 discards the print request in S1505 and sends a failure response to the client terminal 102. The failure response may indicate failure, for example, with a status code of 401 indicating "request not permitted," as shown in FIG. 12(E).

[0057] As a result, when a client terminal specifies an inappropriate privacy attribute value, the security levels are first compared within the printing device, thereby enabling appropriate job management so as not to process a print job with an inappropriate privacy setting.

[0058] <Fourth embodiment> In the fourth embodiment, control when a client terminal does not specify the "Document-Privacy-Scope" attribute will be described. Note that the hardware configuration of each device in the fourth embodiment is the same as that in the first embodiment. The differences from the first embodiment will be described below.

[0059] Even if the printing device responds with a privacy setting capability response to the client terminal, some client terminals may send a print request without including the "Document-Privacy-Scope" attribute, as shown in Figure 12(D). Figure 16 is a flowchart showing the processing of the CPU 201 when such a print request is received. First, in step S1601, the CPU 201 receives a print request from the client terminal.

[0060] Next, in step S1602, the CPU 201 determines whether the print request includes the "Document-Privacy-Scope" attribute. If the attribute is included as shown in Fig. 12(A), (B), or (C), the CPU 201 performs the same print processing as in the first to third embodiments in step S1604.

[0061] On the other hand, if the print request does not include the "Document-Privacy-Scope" attribute, as shown in FIG. 12(D), the CPU 201 refers to the privacy setting value of the printing device (FIG. 5) in S1603. If the privacy setting of the printing device is set to "high," the CPU 201 internally assigns the "Document-Privacy-Scope" attribute value of "owner" to the received job attributes. If the privacy setting is set to "medium," the CPU 201 internally assigns the "Document-Privacy-Scope" attribute value of "default" to the received job attributes. If the privacy setting is set to "low," the CPU 201 internally assigns the "Document-Privacy-Scope" attribute value of "all" to the received job attributes. Thereafter, in S1604, printing processing equivalent to that of the above-described embodiment is performed.

[0062] As a result, even if the client terminal privacy attribute is not specified, the printing device can provide the privacy attribute according to the privacy setting set in the printing device, thereby enabling appropriate job management.

[0063] <Fifth embodiment> In the fifth embodiment, we will explain control using another determination method that determines the value of the capability response depending on the privacy setting of the printing device. Note that the hardware configuration of each device in the fifth embodiment is the same as in the first embodiment. The differences from the first embodiment will be explained below.

[0064] 17A and 17B show an example of packet data related to a capability response in this embodiment. Fig. 17A shows an example of a capability inquiry request received by the printing device 101 from the client terminal 102, and is the same as in the first embodiment.

[0065] 17(B), (C), and (D) are examples of packet data of a capability response that the printing device 101 responds to the client terminal 102. In this embodiment, if the privacy setting of the printing device is set to "low," the response stores three values, "all," "default," and "owner," in the "Document-Privacy-Scope" attribute, as shown in FIG. 17(B). This means that the printing device 101 does not care if any of these three values ​​is specified. Since the privacy setting is "low," it is sufficient that at least "all" is specified, and "default" or "owner" may also be specified.

[0066] On the other hand, if the printing device's privacy setting is set to "Medium," the response will contain two values, "default" and "owner," in the "Document-Privacy-Scope" attribute, as shown in Figure 17(C). If the printing device's privacy setting is set to "High," the response will contain only "owner" in the "Document-Privacy-Scope" attribute, as shown in Figure 17(D). By sending a capability response that includes multiple setting values, the user can select the most appropriate privacy setting before printing.

[0067] <Other embodiments> The present invention can also be realized by supplying a program that realizes one or more functions of each of the above-described embodiments to a system or device via a network or a storage medium, and having one or more processors in the computer of the system or device read and execute the program. It can also be realized by a circuit (e.g., ASIC or FPGA) that realizes one or more functions.

[0068] Furthermore, when the print status confirmation screen display is displayed, access control is performed to either display or not display jobs. However, access control may be performed such that jobs that are subject to access control are displayed but are grayed out and cannot be operated. [Explanation of symbols]

[0069] 101 Printing device 102 client terminals

Claims

1. A printing device having a printing means for receiving a print job in a format conforming to the IPP (Internet Printing Protocol) from a client terminal and performing IPP printing based on the received print job, a specifying means for specifying a privacy attribute value that can be specified during IPP printing in accordance with a privacy setting related to a print job in a format conforming to IPP; a response means for responding with at least the privacy attribute value in response to a capability inquiry request of the printing device received from the client terminal; A printing device characterized by having an access control means that, when a print request in a format conforming to IPP including the privacy attribute value is received from the client terminal, performs access control for the print job based on the privacy attribute value of the print job.

2. 2. The printing device according to claim 1, wherein the specifying unit specifies the privacy attribute value of the IPP based on mapping information that associates privacy settings set by a user with privacy setting values.

3. A printing device as described in claim 1 or 2, characterized in that when the privacy attribute value indicates a value indicating that some users cannot access the printing device, the access control means controls access based on the role and / or user name of the person requesting operation of the printing device.

4. 4. The printing apparatus according to claim 1, wherein the access control by the access control means is a determination as to whether or not to display a print job when displaying a print status confirmation screen.

5. 5. The printing device according to claim 1, wherein the privacy setting is a privacy level.

6. 6. The printing device according to claim 1, wherein the privacy attribute value is a value set for an attribute of Document-Privacy-Scope in IPP.

7. A printing device according to any one of claims 1 to 6, characterized in that if the privacy attribute value is not included in the print request from the client terminal, a control means is provided for performing access control for the print job based on the privacy attribute value identified by the printing device.

8. 8. The printing device according to claim 1, wherein privacy settings for print jobs in a format conforming to IPP are changed in response to changes in user management settings.

9. A printing device according to any one of claims 1 to 8, characterized in that when a print request in a format conforming to IPP including the privacy attribute value is received from the client terminal, if the privacy attribute value included in the print request has a higher security level than the privacy attribute value responded to by the response means, the printing request is discarded.

Images