Information processing device, information processing method, and program

Abstract

To prevent authentication information from being eavesdropped by not permitting transmission if a communication path is not encrypted or not allowing additional registration of a scanner terminal that is not encrypted, when a processing terminal transmits a scan instruction including authentication information.SOLUTION: An information processing apparatus executes an application that uses a predetermined protocol that supports both scanning methods of a pull scan instruction and a push scan instruction via a network. In a case where a condition related to at least any one of a communication mode, a connection form, and an authorization level of communication with respect to an image processing apparatus is satisfied, the push scan instruction to the image processing apparatus is enabled. A credential to be used in transmission processing in a push scan is transmitted to the image processing apparatus. In a case where a condition related to at least any one of the communication mode, the connection form, and the authorization level with respect to the image processing apparatus is not satisfied, the push scan instruction to the image processing apparatus is controlled not to be performed.SELECTED DRAWING: Figure 2

Description

[Technical Field]

[0001] The present invention relates to an information processing device, an information processing method, and a program. [Background technology]

[0002] In recent years, a configuration has become popular in which a client terminal sends a push scan request to a scanner terminal, and the scanner terminal then sends scanned data to an external terminal (see Patent Document 1). In such a system, a user first places a document on the scanner terminal, then specifies settings such as the destination and save location for storing the scanned results and the scan resolution from the client terminal, and selects start of scanning. The client terminal then sends the specified information and scan start instructions to the scanner terminal, and the scanner terminal, upon receiving this information, performs the scan. The scanner terminal then connects to the specified destination terminal and sends the scanned data.

[0003] Various scanning protocols have been proposed, but the HTTP-based protocols IPP Scan (PWG5100.17) and eSCL are widely used. Also, search protocols such as mDNS (RFC6762) are commonly used to search for and register scanner terminals on client terminals. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2017-112508 Summary of the Invention [Problem to be solved by the invention]

[0005] The destination for saving scanned data can be a server within the same LAN, the device that issued the scan command, or various external devices such as cloud service storage. Authentication is required for the scanner device to connect to these external devices, and authentication information is sent from the client device to the scanner device along with the scan start request. Authentication information can be, for example, a token, username, or password. However, if the communication path from the client device to the scanner device is not encrypted, there is a risk that this authentication information could be intercepted. If authentication information is intercepted, a malicious user could impersonate the user and access the external device, extracting confidential data stored in the storage and potentially leaking the information.

[0006] An object of the present invention is to prevent authentication information from being intercepted when a scanning instruction including authentication information is transmitted from a processing terminal. [Means for solving the problem]

[0007] To achieve the object of the present invention, for example, a scanner according to one embodiment has the following configuration: That is, the scanner supports communication via a network using TLS (Transport Layer Security), and includes a receiving means for receiving a request regarding the capabilities of the scanner from an information processing device, and a transmitting means for transmitting a response in response to the request, wherein if a predetermined TLS setting of the scanner is valid, a response indicating that a predetermined function is available on the scanner is transmitted to the information processing device, and if the predetermined TLS setting of the scanner is invalid, a response not indicating that the predetermined function is available on the scanner is transmitted to the information processing device, and the predetermined function is A function of using the credential information transmitted from the information processing device to the scanner via the network in processing scan data obtained by scanning with the scanner, and using the credential information after the scanning. It is a function. [Effects of the Invention]

[0008] When a scan instruction including authentication information is transmitted from a client terminal, the authentication information can be prevented from being intercepted. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 is a diagram showing an example of a system including a processing terminal according to a first embodiment. [Figure 2] FIG. 4 is a diagram showing an example of a packet transmitted and received by a processing terminal according to the first embodiment. [Figure 3] 5A and 5B are diagrams showing an example of a request and a response sent by a processing terminal according to the first embodiment. [Figure 4] 6 is a flowchart showing an example of a search process in the system according to the first embodiment. [Figure 5] 6 is a flowchart showing an example of a scan process in the system according to the first embodiment. [Figure 6] FIG. 2 is a block diagram showing an example of the hardware configuration of a processing terminal according to the first embodiment. [Figure 7] 5A and 5B are diagrams showing an example of a screen flow and a confirmation screen of the processing terminal according to the first embodiment. [Figure 8] 10 is a flowchart showing an example of a scan process performed by the processing terminal according to the first embodiment. [Figure 9] 10 is a flowchart showing an example of a confirmation process performed by the processing terminal according to the first embodiment. [Figure 10] FIG. 10 is a diagram showing an example of the flow of a registration screen displayed by a processing terminal according to the second embodiment. [Figure 11] 10 is a flowchart showing an example of search processing performed by a processing terminal according to the second embodiment. [Figure 12] 10 is a flowchart showing an example of a registration process performed by a processing terminal according to the second embodiment. [Figure 13] 11 is a flowchart showing an example of a scan process performed by a processing terminal according to the third embodiment. [Figure 14] FIG. 10 is a view showing an example of a screen displayed by the image processing apparatus according to the fourth embodiment. [Figure 15] 10 is a flowchart showing an example of setting processing performed by the image processing device according to the fourth embodiment. [Figure 16] FIG. 10 is a block diagram showing an example of the hardware configuration of an image processing device according to a fourth embodiment. [Figure 17] 13A and 13B are diagrams showing an example of a request and a response sent by a processing terminal according to the fifth embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, embodiments will be described in detail with reference to the accompanying drawings. Note that the following embodiments do not limit the scope of the invention claimed. Although multiple features are described in the embodiments, not all of these multiple features are necessarily essential to the invention, and multiple features may be combined arbitrarily. Furthermore, in the accompanying drawings, the same reference numerals are used to designate the same or similar components, and redundant explanations will be omitted.

[0011] [Embodiment 1] FIG. 1 is a diagram showing an example of the configuration of a printing system including a processing terminal 101, which is an information processing apparatus according to this embodiment. The printing system includes the processing terminal 101, image processing apparatuses 102 to 104 equipped with a scan function, and a cloud storage service (service) 105. The processing terminal 101 communicates with the image processing apparatuses 102 to 104 located within the same LAN via a network 100. The network 100 enables data transmission and reception between the processing terminal 101 and the image processing apparatuses 102 to 104, and any communication method may be used for the physical layer. The image processing apparatuses 102 to 104 are equipped with a scan function and communicate with a service 105 on the Internet via a communication network or a cellular network. Hereinafter, when simply referring to an image processing apparatus, any of the image processing apparatuses 102 to 104 is used.

[0012] The network 100 may be, for example, a communication network such as a LAN or WAN, a cellular network (e.g., LTE or 5G), or a wireless network conforming to IEEE802.11, or may be configured by combining two or more of these communications. The processing terminal 101 may be a terminal capable of receiving and operating user input, such as a desktop PC, a tablet, or a mobile phone terminal. The image processing device 102 is not particularly limited as long as it has a scanning function, and may be, for example, a standalone scanner or a multifunction device also equipped with a printing function.

[0013] The processing terminal 101 according to this embodiment transmits a push scan start request to an image processing device via the network 100, causing the image processing device to execute a scan. Upon receiving the push scan start request, the image processing device uses the authentication information included in the push scan start request packet to connect to the service 105, which is the specified external destination, and transmits the scanned data.

[0014] [Push Scan] Next, the sending and receiving of communications in a typical push scan will be explained using Figures 2 to 5. In this embodiment, the push scan instruction described below is performed by HTTP protocol communication using XML, and the scanner terminal search is performed by mDNS protocol communication. Figure 2 is a diagram showing an example of a request and a response sent and received using the mDNS protocol.

[0015] 4 is a diagram showing an example of a sequence in which a user searches for an image processing device using the processing terminal 101 and registers the image processing device in the processing terminal 101. In step S401, the user selects a "Search" button on the operation screen of the processing terminal 101, thereby starting the processing that follows the subsequent step S402. In step S402, the processing terminal 101 transmits, by multicast packet, a request (search request) as to whether or not there is a terminal for which the scan service is available within the same link network using the mDNS protocol, as shown in FIG. 2(a).

[0016] In the processing according to this embodiment, the plaintext scan service protocol uses port number 80, and the TLS-encrypted scan service protocol uses port number 443. When both plaintext communication and encrypted communication are enabled in communication with the processing terminal 101, the image processing device that has received the search request sends an mDNS response (search response) including both No. 80 and No. 443, as shown in FIG. 2(b). Furthermore, when only one of the two is enabled, the image processing device sends a search response including only the enabled service of No. 80 or No. 443, as shown in FIGS. 2(c) and 2(d). TLS is communication using TCP / IP, and when TLS is enabled, communication between the processing terminal 101 and the image processing device 102 is encrypted, and when TLS is disabled, communication is performed in plaintext.

[0017] Steps S403 and S404 are processes in which the image processing device that has received a search request from the processing terminal 101 returns a response. In this example, the image processing device in step S403 transmits an mDNS response such as that shown in Fig. 2(c) to the processing terminal 101, and the image processing device in step S404 transmits an mDNS response such as that shown in Fig. 2(b) or Fig. 2(d). Following steps S403 and S404, the process proceeds to step S405.

[0018] In step S405, the processing terminal 101 receives the search response and displays a list of the image processing devices that have returned the search response on the display unit. In step S406, the processing terminal 101 acquires a desired selection input by the user from the list of image processing devices.

[0019] In step S407, the processing terminal 101 can send a request (detailed request) to the image processing device selected in step S406 to obtain more detailed information in order to know what kind of scanning is possible. In step S408, the processing terminal 101 receives a response to the detailed request from the image processing device. In step S409, the processing terminal 101 performs processing to register the selected image processing device in its internal memory, stores information indicating the selected image processing device in a storage area, and ends the registration processing. In this embodiment, the information indicating the image processing device for which registration processing has been completed is saved in a volatile area of ​​the processing terminal 101. This saved state is maintained even when the processing terminal 101 is powered off, and can be referenced and operated by the user at any time.

[0020] Fig. 5 is a diagram showing an example of a sequence in which the processing terminal 101 issues a push scan instruction based on a user operation. In this example, the following description will be given assuming that the image processing device 102 for which only plaintext communication is enabled is selected in step S406 and the processing shown in Fig. 5 is performed. In step S501, the user places a document to be scanned in the image processing device 102 in advance, and then selects the scan start button on the operation screen of the processing terminal 101, thereby starting the processing that follows in the subsequent step S402.

[0021] In step S502, in response to the selection of the scan start button, the processing terminal 101 transmits a scan start request as shown in FIG. 3(a) to the image processing device 102. In step S503, the image processing device 102 transmits a response to the scan start request as shown in FIG. 3(b) to the processing terminal 101. In the example of FIG. 3(a), the "DestinationURI" attribute indicates the push scan destination, and it is expressed that scan data is stored at the destination using POST as indicated by "HttpMethod." The example of FIG. 3(a) also indicates that the attribute indicated by "JobPassword" is used as an authentication token when connecting to the destination. The (push) scan destination is the destination to which scan data generated by (push) scanning is sent, and in this embodiment, it is assumed that the service 105 is specified. The authentication method required varies depending on the authentication settings of the destination, and methods such as OAuth authentication, DIGEST authentication, or BASIC authentication are used, for example.

[0022] In step S504, the image processing device 102 scans a document in response to receiving the scan start request. In step S505, the image processing device 102 transmits a connection request to the destination (here, the service 105) specified in the scan start request. Here, the image processing device 102 adds the necessary authentication information and transmits the connection request as shown in FIG. 3(c). The image processing device 102 according to this embodiment transmits a connection request including authentication information for BASIC authentication, but any authentication information according to the authentication method, such as an OAuth authentication token, may be used. In step S506, the image processing device 102 receives a connection success response from the service 105 for which authentication was successful.

[0023] In step S507, the image processing device 102 transmits the scan data obtained by scanning the document to the service 105, and receives a response indicating that reception of the scan data has been completed in step S508. Furthermore, the processing terminal 101 periodically transmits a scan job status inquiry request as shown in Fig. 3(e) to the image processing device 102. Upon receiving the inquiry request, the image processing device 102 transmits a scan job status response as shown in Fig. 3(f) to the processing device 101, and if the job has been successfully saved to the destination, transmits a response indicating that the saving has been completed to the processing device 101.

[0024] In this example, since the image processing device 102 is enabled for plaintext communication only, the exchanges shown in Figures 3(a) and 3(b) are carried out in plaintext on HTTP port 80. This means that the authentication token and other data described above are sent in plaintext, which creates the risk of packets being intercepted and authentication information being leaked. Note that interception is easily prevented if encrypted communication on HTTPS port 443 is used for transmission and reception.

[0025] Therefore, the processing terminal 101 determines whether the communication mode, connection conditions, or approval level with the image processing device 102 satisfy predetermined conditions, and if they do not, performs control so as not to allow the image processing device 102 to be instructed to perform a push scan. Here, assuming that the predetermined conditions related to the communication mode are not satisfied, the processing terminal 101 according to this embodiment restricts the image processing device 102 from starting a push scan if communication with the image processing device 102 is not encrypted. If communication with the image processing device 102 is encrypted, the processing terminal 101 does not restrict the start of a push scan and can send credentials to the image processing device 102 to be sent to the service 105 during the push scan. The credentials are authentication information required for user authentication such as BASIC authentication or DIGEST authentication, and are sent by the image processing device 102 in step S505 described above. The following description will be given assuming that a user name and password are used as this authentication information.

[0026] Furthermore, if a predetermined condition related to the connection is satisfied and the communication path with the image processing device 102 is a P2P connection over a wireless LAN such as WiFi Direct, the processing terminal 101 does not restrict the start of push scanning. This is because, in a P2P connection over a wireless LAN, other terminals cannot join the connection, and because a wireless LAN layer is used, there is little risk of eavesdropping even when plaintext HTTP communication is performed.

[0027] FIG. 6 is a block diagram showing an example of the hardware configuration of the processing terminal 101. The processing terminal 101 includes a CPU 601, a ROM 602, a RAM 603, a storage unit 604, an operation unit 605, and a communication unit 606. The CPU 601 directly or indirectly controls each device (such as the ROM and RAM) connected via internal devices and executes a program for implementing the present invention. The ROM 602 is a read-only storage device that stores programs executed by the CPU 601 and stores BIOS as firmware. The RAM 603 functions as the main memory or work memory of the CPU 601 and is used to load software modules for implementing the present invention. The storage unit 604 is a storage area, such as a hard disk drive (HDD) or solid-state drive (SSD) that stores the operating system (OS) and software modules. The operation unit 605 functions as a display unit that displays information to the user and a reception unit that receives user instructions. The operation unit 605 is, for example, a liquid crystal display unit with a touch panel function or a display equipped with various hard keys.

[0028] The CPU 601 cooperates with the operation unit 605 to control the display of information and the acceptance of user operations. The communication unit 606 is an interface for connecting the processing terminal 101 to a network. The communication unit 606 according to this embodiment is assumed to be a communication interface for wired communication conforming to Ethernet (registered trademark), but is not limited thereto as long as communication is possible. The communication unit 606 may be, for example, a wireless communication interface conforming to the IEEE 802.11 series. The communication unit 606 may also perform communication as a wireless communication interface. Furthermore, for example, the communication unit 606 may perform communication via a 3G line such as CDMA, a 4G line such as LTE, or mobile communication such as 5G NR. Note that, although each process performed by the CPU 601 according to this embodiment will be described as being realized by the processing terminal 101, which is dedicated hardware, some or all of the process may be performed by a separate computer.

[0029] Next, a control process for restricting the start of push scanning in an unencrypted plaintext communication mode performed by the processing terminal 101 according to this embodiment will be described with reference to FIGS. 7 to 9. FIG. 7 shows an example of a screen flow of the operation unit 605 displayed by the processing terminal 101 according to this embodiment. Screen 701 is an example of a screen displaying a list of image processing devices registered in the processing terminal 101. When a user selects a desired terminal from the image processing devices displayed on screen 701 to perform scanning, the screen transitions to screen 702. Screen 702 is a main menu screen for the selected image processing device, and displays the status of the image processing device (e.g., idle or busy) or buttons for configuring detailed scan settings. In this example, when the user presses a button labeled "Open Scan Setting," screen 703, which is a screen for configuring detailed settings, is displayed. In the example of FIG. 7, screen 703 is a screen for configuring the size, resolution, or format to be scanned. However, any other settings for scanning, such as the position of the scan start point or the document feed direction, may also be configured.

[0030] When the user selects an item on the screen 703, the operation unit 605 displays a screen for making detailed settings for the selected item. Screens 704 to 708 are examples of setting screens corresponding to the items selected on the screen 703. The screen 704 is a screen for setting a push scan destination. The screen 704 allows the user to set whether the destination (destination) for storing the scan data is the user's own terminal or an external terminal, the path for storing the scan data, and authentication information required to connect to the destination. The screen 704 displays a "Destination" item, allowing the user to input whether the destination is the user's own terminal or an external terminal, and, if the destination is an external terminal, its details (URL). The screen 704 displays a form for inputting authentication information in response to a user authentication request from the destination terminal, such as BASIC authentication or DIGEST authentication, which requires a user name and password. This authentication information may be set in advance, or may be displayed as a pop-up on the operation screen of the processing terminal 101, prompting the user to input the authentication information when the image processing apparatus 102 transmits a user authentication request to the processing terminal 101. Furthermore, when user authentication with the service 105 using this authentication information has already been completed, an item for setting whether or not the token stored in the processing terminal 101 can be sent to the image processing device 102 may be provided on the screen 703. In this embodiment, various protocols such as HTTP, FTP, or SMB may be used as the protocol setting for connecting to the service 105, and the parameters required for setting the destination (here, the service 105) can be changed arbitrarily.

[0031] 8 is a flowchart showing an example of processing performed by the CPU 601 of the processing terminal 101 according to this embodiment to restrict the start of push scanning by displaying a warning screen. When the "Scan" button is pressed on the screen 703, the CPU 601 of the processing terminal 101 starts processing in step S801 and proceeds to step S802.

[0032] In step S802, the CPU 601 determines whether scanning can be started. Here, the CPU 601 first determines whether the scan processing by the image processing device 102 is push scanning or pull scanning. If it is pull scanning, there is no need to exchange authentication information as described above, so it is assumed that scanning can be started and the process proceeds to step S805. If it is push scanning, the process proceeds to step S803 to prevent leakage of authentication information.

[0033] In step S803, the CPU 601 determines whether the communication path between the processing terminal 101 and the image processing device 102 is a P2P connection via a wireless LAN such as WiFi Direct. If the communication path is a P2P connection, scanning can be started, and the process proceeds to step S805. On the other hand, if the communication path is not a P2P connection, such as in an environment where communication is via a general LAN connection, the process proceeds to step S804.

[0034] In step S804, the processing terminal 101 determines whether or not communication with the image processing device 102 is encrypted. If communication is not encrypted, such as communication with an image processing device 102 that supports only HTTP communication via port 80, the process proceeds to step S806. If communication is encrypted, the process proceeds to step S805.

[0035] In step S805, the processing terminal 101 determines that communication with the image processing device 102 is encrypted, and transmits a request to the image processing device 102 instructing the start of push scanning as shown in FIG. 3A to the image processing device 102, thereby terminating the processing. On the other hand, in step S806, the processing terminal 101 determines that communication with the image processing device 102 is not encrypted, and presents a warning screen as shown in screen 707 to the user, thereby terminating the processing. Furthermore, the processing terminal 101 may periodically check the status of the scan job, and when the storage of the scan data is completed after step S805, present the user with a completion display such as screen 705 or screen 706. Screen 705 is a completion display when the cloud 105 is an external device separate from the processing terminal 101, and screen 706 is a completion display when the destination of the scan processing is the processing terminal 101.

[0036] According to this processing, whether to send a push scan start request packet including authentication information is controlled depending on whether the communication mode, connection state, or approval level between the processing terminal and the image processing device (scanner) satisfies a predetermined condition, thereby preventing information leakage. In particular, when it is determined that the communication path between the processing terminal and the image processing device is encrypted, the scan start request packet is not sent, thereby preventing authentication information leakage.

[0037] Note that the processing terminal 101 may not restrict the start of push scanning even when the user consents to the transmission of authentication information to the service 105. That is, the push scanning start process may be continued depending on the user's consent to the transmission of authentication information in plain text, for example, when the processing terminal 101 and the image processing device 102 are connected within a completely closed LAN. To this end, the processing terminal 101 can present the user with a screen to confirm whether or not to continue the push scanning process (for example, when communication with the image processing device 102 is not encrypted) and obtain the user's selection. This process is, for example, step S906 in FIG. 9 (FIG. 7(b)), which will be described later. If the continuation of the scan process is approved, the communication approval level is deemed to satisfy the above-mentioned predetermined condition, and the start of push scanning is not restricted. If the continuation of the scan process is not approved, the communication approval level is deemed to not satisfy the above-mentioned predetermined condition, and the start of push scanning is restricted.

[0038] Fig. 9 is a flowchart showing an example of processing performed by the CPU 601 of the processing terminal 101 according to this embodiment to restrict the start of push scanning by displaying a confirmation screen for asking whether to continue the push scanning start processing instead of displaying the warning screen shown in Fig. 8. The processing shown in Fig. 9 is similar to that shown in Fig. 8 except that the processing of steps S901 and S902 is performed instead of step S806, and therefore a duplicated description will be omitted.

[0039] In step S901, which is performed if it is determined in step S804 that the communication is not encrypted, the processing terminal 101 presents the user with a confirmation screen asking whether to continue the push scan start process. In this example, a confirmation screen such as the screen 708 in FIG. 7(b) is displayed, and the user's selection of whether to continue or cancel the process is acquired. In step S902, the processing terminal 101 determines whether the user's selection on the confirmation screen displayed in step S901 is to approve the continuation of the process or to cancel it. If the user selects to continue the process, the process proceeds to step S805, where an instruction to start push scan is issued. If the user selects to cancel the process, the process ends.

[0040] Furthermore, when restricting the start of a push scan, the processing terminal 101 may instead suggest to the user that they perform a pull scan. As described above, a pull scan does not require the exchange of authentication information, and therefore the risk of authentication information leakage can be avoided even in plaintext communication. In this example, instead of displaying the warning screen in step S806, the processing terminal 101 presents the user with a screen that allows them to select whether or not to perform a pull scan.

[0041] [Embodiment 2] The processing terminal 101, which is an information processing device according to the second embodiment, restricts the display of image processing devices whose communications are not encrypted in the list of search results in the search process for image processing devices performed in steps S401 to S405 in the first embodiment, thereby preventing push scanning by the image processing devices. Except for this series of processes, the processing terminal 101 according to the second embodiment performs basically the same processes as those in the first embodiment, and therefore a redundant description will be omitted.

[0042] The processing terminal 101 according to this embodiment restricts the display of an image processing device in the list of search results by preventing the image processing device, whose communication is not encrypted, from being displayed in the list of search results, or by prompting a user to confirm whether the image processing device is actually to be registered when the image processing device is selected from the list. Fig. 11 (to be described later) shows a flowchart for preventing the image processing device from being displayed in the list of search results, and Fig. 12 shows a flowchart for prompting a user to confirm whether the image processing device is actually to be registered.

[0043] The processing terminal 101 according to this embodiment searches for image processing devices by transmitting a search request using a multicast packet, for example, using a method similar to that of step S402. Here, the processing terminal 101 references the mDNS responses of the image processing devices to the search request to determine whether communication with each of the searched image processing devices is encrypted. This determination is made by, for example, referencing the port number from the responses shown in FIGS. 2(b) to 2(d). Note that in the following example, the processing terminal determines whether push scanning is possible based on whether communication is encrypted, but this may be a condition based on the connection type or the approval level.

[0044] The processing terminal 101 can perform control so that image processing devices whose communications are determined to be unencrypted during the search are not displayed in the list of search results. Furthermore, the processing terminal 101 may display all search results in a list, and when the user selects an image processing device to be registered, if communications with the image processing device are not encrypted, the processing terminal 101 may present this fact and obtain the user's choice of whether to continue with the registration (e.g., screen 1005). In this case, if communications with the selected image processing device are encrypted, the selected image processing device is registered in the list as a registered device.

[0045] 10 to 12 are diagrams for explaining an example of processing performed by the processing terminal 101 according to this embodiment when searching for an image processing device. Fig. 10 shows an example of a screen flow of the operation unit 605 displayed by the processing terminal 101 according to this embodiment when searching for an image processing device. Fig. 11 is a flowchart showing an example of processing for restricting display when searching for an image processing device, performed by the CPU 601 of the processing terminal 101 in the processing shown in Fig. 10.

[0046] Screen 1001 is a screen that displays a list of image processing devices that have been registered in the processing terminal 101. The operation unit 605 can search for and register new image processing devices by acquiring a user's operation on screen 1001. In step S1101, the processing terminal 101 transmits a search request by multicast packet. Here, when the user selects the "Search" button on screen 1001, the CPU 601 transmits an mDNS search packet such as that shown in FIG. 2(a) to the image processing device, and the operation unit 605 displays a screen 1002 indicating that a search is in progress.

[0047] In step S1102, the processing terminal 101 receives an mDNS response from each image processing device that performed the search. In step S1103, the processing terminal 101 determines whether the scan service in the response packet uses encrypted communication. For image processing devices that use encrypted communication, the processing of step S1104 is performed, and for image processing devices that do not use encrypted communication, the processing of step S1105 is performed. In step S1104, the processing terminal 101 adds, to the list of search results, as devices with encrypted communication, image processing devices that use encrypted communication in HTTPS communication by TLS using port 443, as shown in Figures 2(b) and 2(d), for example. On the other hand, in step S1105, the processing terminal 101 does not add, to the list of search results, as devices with unencrypted communication, image processing devices that perform a scan service in HTTP communication using port 80, as shown in Figure 2(c). When the processing of step S1104 or step S1105 is completed, the processing proceeds to step S1106, and the processing of steps S1103 to S1105 is repeated until the mDNS search response is completed, after which the processing proceeds to step S1107. In step S1107, the processing terminal 101 displays a list of search results for image processing devices on the display screen. The processing terminal 101 displays the list of image processing devices 103 and 104, excluding, for example, the image processing device 102, which supports only plaintext communication.

[0048] According to this process, when searching for an image processing device for registration, it is possible to determine whether the communication path with the processing terminal is encrypted. Therefore, by excluding image processing devices whose communication is not encrypted from the search results, it is possible to reduce the risk of leakage of authentication information.

[0049] 12 is a flowchart showing an example of a process performed by the CPU 601 of the processing terminal 101 in the process shown in Fig. 10 to restrict access after registering a searched image processing device in the list. In step S1201, the processing terminal 101 transmits a search request by multicast packet in the same manner as in step S1101. In step S1102, the processing terminal 101 receives mDNS responses from each image processing device that has been searched in the same manner as in step S1102.

[0050] In step S1203, the processing terminal 101 adds each image processing device that has returned an mDNS response to a list of search results. In step S1204, the processing terminal 101 determines whether the processing of step S1203 has been performed for all image processing devices that have returned mDNS responses. If it has been performed for all image processing devices, the processing proceeds to step S1205; if not, the processing returns to step S1203. In step S1205, after receiving all responses, the processing terminal 101 generates and displays a list of search results for image processing devices as shown on screen 1003.

[0051] In step S1206, the processing terminal 101 acquires the user's selection of an image processing device to be registered from the list. In step S1207, the processing terminal 101 determines whether communication between the image processing device selected in step S1206 and the processing terminal 101 is encrypted, as in step S1103. If communication with the selected image processing device includes an encrypted scan service, the process proceeds to step S1208, where the processing terminal 101 adds the image processing device to the list of registered devices, and the process ends. On the other hand, if the selected image processing device does not include an encrypted scan service, the process proceeds to step S1209.

[0052] In step S1209, the processing terminal 101 displays a screen, as shown in screen 1005, for obtaining a user selection as to whether or not to continue the registration process even though the communication does not include encrypted communication. In step S1210, the processing terminal 101 determines whether or not the user selected to continue the registration process in step S1209. If the user selected to continue, the process proceeds to step S1208, where the processing terminal 101 adds the image processing device to the list of registered devices, displays a message indicating that the addition has been completed, as shown in screen 1006, and the process ends. If the user did not select to continue, the registration process is canceled and the process ends.

[0053] According to this process, when searching for an image processing device to be registered, it is possible to determine whether the communication path with the processing terminal is encrypted. Next, for an image processing device whose communication is not encrypted, when selecting it from the list, it is possible to confirm whether the image processing device is actually to be registered, thereby reducing the risk of leakage of authentication information.

[0054] [Embodiment 3] In the printing system 100 according to the embodiment, push scanning is performed using the service 105 as the destination of scanning by the image processing device 102. On the other hand, when the image processing device 102 performs pull scanning with the processing terminal 101 as the destination of scanned data, it is not necessary to include authentication information in the instruction to start scanning. From this perspective, the processing terminal 101, which is an information processing device according to the third embodiment, determines whether the image processing device 102 can perform pull scanning. Next, the processing terminal 101 instructs the image processing device 102 to start pull scanning if pull scanning is possible, and instructs the image processing device 102 to start push scanning if pull scanning is not possible.

[0055] The processing terminal 101 according to this embodiment has the same configuration and performs the same processing as the processing terminal 101 according to the first embodiment, except that it transmits an instruction to start pull scanning when the image processing device 102 is capable of pull scanning. Therefore, a duplicated description will be omitted. In this embodiment, pull scanning will be described as a scan performed by the image processing device 102 in response to a scan start instruction from the processing terminal 101, with the processing terminal 101 being used as the storage destination for the scanned data.

[0056] 13 is a flowchart showing an example of a process for transmitting a pull scan start request performed by the processing terminal 101 according to this embodiment. The process shown in Fig. 13 is started when a scan start instruction is issued to the image processing device 102, for example, when the user presses the "Scan" button on the screen 703 in Fig. 7.

[0057] In step S1301, the processing terminal 101 detects that the user has issued a scan start instruction to the image processing device 102. In step S1302, the processing terminal 101 determines whether the destination (storage destination) of the data scanned by the image processing device 102 is its own terminal, i.e., the processing terminal 101, or an external terminal such as the service 105. Here, the processing terminal 101 makes the above-mentioned determination by referring to the item "Destination" entered by the user on screen 704 in Fig. 7. If the destination is its own terminal, the process proceeds to step S1303; if not, the process proceeds to step S803 in Fig. 8 to perform subsequent processing related to push scanning.

[0058] In step S1303, the processing terminal 101 determines whether or not the processing terminal 101 is capable of pull scanning. Here, it is determined whether or not the processing terminal 101 has a pull scanning function, and if so, whether or not the enable / disable setting for the pull scanning function is enabled. If the processing terminal 101 is also capable of pull scanning, the process proceeds to step S1304; if not, the process proceeds to step S803 in FIG. 8 to perform subsequent processing related to push scanning. In step S1304, the processing terminal 101 transmits a start instruction to the image processing device 102 to start scanning as a pull scan, and then ends the process.

[0059] This process allows the system to start a pull scan if it is possible. With a pull scan, the scan start request does not include authentication information, so there is no problem with sending and receiving data via plaintext HTTP. This prevents the leakage of authentication information.

[0060] [Embodiment 4] The processing terminal 101 according to the first embodiment searches for terminals that have a scan service without distinguishing between push scan and pull scan, as shown in Fig. 2(a). On the other hand, the processing terminal according to the present embodiment performs search processing assuming that a "pull scan service" and a "push scan service" also exist in addition to the conventional "scan service."

[0061] Figure 17 shows an example of a service search and response packet using an mDNS service when "pull scan service" and "push scan service" exist in addition to "scan service." Compared to the example in Figure 2, the pull scan and push scan services have been added to both the packet from the processing terminal and the response packet from the image processing device, so an image processing device that supports only the conventional scan service need only return a response similar to the example in Figure 2. Figure 17(b) is an example of a packet response from an image processing device that supports the pull scan service and uses plaintext communication (port number 80). Figure 17(c) is an example of a packet response from an image processing device that supports both the pull scan service and the push scan service and uses encrypted communication (port number 443).

[0062] In this embodiment, search requests are made using pull scan and push scan, and a response is returned for each. Therefore, even in an image processing device where "Use of TLS" is disabled and "Push" is enabled, as discussed in the fifth embodiment described below, if pull scan is possible, a response can be returned with information indicating that pull scan is possible.

[0063] In this system, the image processing device transmits a response to a search request from the processing terminal 101, including information indicating whether or not push scanning is possible. However, in order to prevent the leakage of authentication information, it is not necessary to indicate to the processing terminal 101 that push scanning is possible when plaintext communication is performed. From this perspective, the image processing device according to this embodiment does not transmit information indicating that push scanning is possible to the processing terminal 101 in response to a search request from the processing terminal 101 when communication with the processing terminal 101 is plaintext communication. In other words, information indicating that push scanning is not possible is transmitted as a response.

[0064] According to this process, the image processing apparatus can issue a service response using both push scanning and pull scanning, thereby enabling an appropriate service response to be issued using pull scanning as well.

[0065] [Embodiment 5] The image processing device 1600 according to the fourth embodiment performs push scanning in response to a push scanning start instruction from the processing terminal 101, similar to the image processing device 102 according to the first embodiment. In addition, the image processing device 1600 sets whether or not to perform encrypted communication (enabled / disabled), and sets whether or not to perform push scanning (enabled / disabled) according to the setting. Here, the image processing device 1600 sets the device so that push scanning is not performed when encrypted communication is set to disabled. In other words, the encrypted communication setting and the push scan enable / disable setting are linked, and push scanning is not performed when encrypted communication is not performed, thereby preventing leakage of authentication information.

[0066] The image processing device 1600 according to this embodiment is implemented in accordance with a standard that also includes a "pull scan service" and a "push scan service" in addition to the "scan service" according to the fourth embodiment. Therefore, in response to a search request from the processing device 101, the image processing device 1600 returns a response based on a setting of whether or not to perform the above-mentioned encrypted communication (enabled / disabled) and a setting of whether or not to perform push scanning (enabled / disabled) determined according to that setting. However, the image processing device 1600 is not particularly limited to being implemented in accordance with this standard, and may also return a response generated in accordance with a conventional standard, as shown in FIG. 2 of the first embodiment.

[0067] FIG. 16 is a block diagram showing an example of the hardware configuration of an image processing device 1600 according to this embodiment. The image processing device 1600 includes a CPU 1601, a ROM 1602, a RAM 1603, a storage unit 1604, a printer processing unit 1605, a scanner processing unit 1606, a communication unit 1607, and an operation unit 1608. The CPU 1601 directly or indirectly controls each device (such as a ROM and RAM) connected via internal devices and executes a program for implementing the present invention. The ROM 1602 is a read-only storage device that stores programs executed by the CPU 1601 and stores BIOS as firmware. The RAM 1603 functions as the main memory or work memory of the CPU 1601 and is used to load software modules for implementing the present invention. The storage unit 1604 is a storage area, such as a hard disk drive (HDD) or solid-state drive (SSD), in which an OS (basic software) and software modules are stored. The scanner processing unit 1606 reads and digitizes image files scanned by a platen or feeder. The printer processing unit 1605 controls copying or controls the ejection of an image printed in a specified image file in response to a print instruction from an external terminal. The operation unit 1608 functions as a display unit that displays information to the user and an acceptance unit that accepts instructions from the user. The operation unit 1608 is, for example, a liquid crystal display unit with a touch panel function or a display equipped with various hard keys.

[0068] The CPU 1601 controls the display of information and the reception of user operations in cooperation with the operation unit 1608. The communication unit 1607 is an interface for connecting the image processing device 1600 to a network. The communication unit 1607 according to this embodiment is assumed to be a communication interface for wired communication conforming to Ethernet (registered trademark), but is not limited to this as long as communication is possible. The communication unit 1607 can perform communication in the same way as the communication unit 606 according to the first embodiment.

[0069] FIG. 14 is an example of a scan setting screen displayed on the operation unit 1608 of the image processing device 1600. The user sets desired scan settings via the screen 1400 shown in FIG. 14. The screen 1400 includes a setting for "Use of Network Scan," which determines whether to use the network scan function. Depending on whether the use of network scan is enabled or disabled, data transmission and reception via a network using application functions such as IPP scan or eSCL scan is enabled or disabled. Furthermore, when the "Use of TLS" setting is enabled or disabled on the screen 1400, data transmission and reception via plaintext communication using HTTP port 80 is enabled or disabled. In other words, when "Use of TLS" is enabled, data is transmitted and received via plaintext communication. Furthermore, the screen 1400 allows "Pull" and "Push" to be individually enabled or disabled as transmission types. In this example, when "Pull" is enabled, the pull scan function of the image processing device 1600 is enabled, and when "Push" is enabled, the push scan function of the image processing device 1600 is enabled. Either the "Pull" setting or the "Push" setting may be enabled, or both may be enabled. After the user selects these various scan settings, by pressing the "SAVE" button, the CPU 1601 acquires the selected various settings and stores them in the memory unit 1604.

[0070] FIG. 15 is a flowchart illustrating an example of a process performed by the image processing device 1600 to prohibit push scan settings when encrypted communication is disabled. The following description will be given assuming that each process proceeds in response to a user selection of an item on the screen 1400, but the present invention is not limited to this example as long as similar settings are made. The process shown in FIG. 15 begins in step S1501 upon receipt of an instruction to save scan settings, such as pressing the “SAVE” button on the screen 1400. In step S1501, the CPU 1601 detects the user's pressing of the “SAVE” button and performs subsequent processing on the settings acquired and stored upon the user's pressing. In step S1502, the CPU 1601 determines whether the “Use Network Scan” option is enabled or disabled. If the “Use Network Scan” option is enabled, processing proceeds to step S1503; if it is disabled, processing proceeds to step S1506.

[0071] In step S1503, CPU 1601 determines whether the "Push" setting is enabled or disabled. If the "Push" setting is enabled, processing proceeds to step S1504; if not, processing proceeds to step S1506. In step S1504, CPU 1601 determines whether the "Use TLS" setting is enabled or disabled. If the "Use TLS" setting is disabled, processing proceeds to step S1505; if not, processing proceeds to step S1506.

[0072] If the "Push" setting is enabled and "Use TLS" is enabled, the authentication information included in the push scan communication will be communicated in plain text. Therefore, in step S1505, CPU 1601 controls the system so that push scanning will not be performed using the scan settings acquired in S1501. Here, a warning message indicating that this setting combination is not possible is displayed on the display unit, and processing ends without saving the acquired settings. In step S1606, which is a setting other than "'Push' setting enabled and 'Use TLS' enabled," CPU 1601 stores the acquired settings, assuming that there is no security problem.

[0073] That is, the image processing device 1600 according to this embodiment does not implement both push scanning and plaintext communication, and the method for realizing this is not particularly limited. For example, the image processing device 1600 may display a warning message when the "SAVE" button is pressed, as in the flow of Fig. 15, or may enable the "Use TLS" setting in conjunction with enabling the "Push" setting. Furthermore, when "Use TLS" is disabled, the image processing device 1600 may automatically disable the "Push" setting, and, for example, gray it out so that it cannot be selected.

[0074] This process ensures that encrypted communication is always performed when the push scan setting on the image processing device is enabled. Therefore, by performing linkage and prohibition setting processing so that the encrypted communication setting is always enabled when the push scan setting on the scanning device is enabled, the communication path including the authentication information is always encrypted, preventing the authentication information from being intercepted.

[0075] 14 has been described as being performed in the image processing device 1600. However, the settings may be input on a different device, and for example, the image processing device 1600 may perform the processes from step S1502 onwards for scan settings that have been input on an external device such as the processing terminal 101 and for which the "SAVE" button has been pressed.

[0076] (Other Examples) The present invention can also be realized by supplying a program that realizes one or more functions of the above-described embodiments to a system or device via a network or a storage medium, and having one or more processors in the computer of the system or device read and execute the program. It can also be realized by a circuit (e.g., ASIC) that realizes one or more functions.

[0077] The invention is not limited to the above-described embodiments, and various changes and modifications can be made without departing from the spirit and scope of the invention. Accordingly, the following claims are appended to apprise the public of the scope of the invention. [Explanation of symbols]

[0078] 101: Processing terminal, 601: CPU, 602: ROM, 603: RAM, 604: Storage unit, 605: Operation unit, 606: Communication unit

Claims

1. A scanner that supports TLS (Transport Layer Security) communication over a network, receiving means for receiving a request regarding the capabilities of the scanner from an information processing device; a transmitting means for transmitting a response in response to the request, If the predetermined TLS setting of the scanner is valid, a response indicating that the predetermined function is available on the scanner is transmitted to the information processing device; If the predetermined TLS setting of the scanner is invalid, a response not indicating that the predetermined function is available on the scanner is sent to the information processing device; the predetermined function is a function of using credential information transmitted from the information processing device to the scanner via the network in processing scan data obtained by scanning with the scanner, and a function of using the credential information after the scanning. A scanner characterized by:

2. A scanner that supports TLS (Transport Layer Security) communication over a network, receiving means for receiving a request regarding the capabilities of the scanner from an information processing device; a transmitting means for transmitting a response in response to the request, When a predetermined TLS setting of the scanner is valid, a predetermined function can be used in response to a scan instruction from the information processing device, If the predetermined TLS setting of the scanner is invalid, the predetermined function is not used in response to a scan instruction from the information processing device, the predetermined function is a function of using credential information transmitted from the information processing device to the scanner via the network in processing scan data obtained by scanning with the scanner, and a function of using the credential information after the scanning. A scanner characterized by:

3. A scanner that supports TLS (Transport Layer Security) communication over a network, receiving means for receiving a request regarding the capabilities of the scanner from an information processing device; a transmitting means for transmitting a response indicating that a predetermined function can be used by the scanner to the information processing device in response to the request, the predetermined function is a function of using credential information transmitted from the information processing device to the scanner via the network in processing scan data obtained by scanning with the scanner, and a function of using the credential information after the scanning; When the TLS communication is performed between the information processing device and the scanner, the predetermined function can be used in response to a scan instruction from the information processing device, When the TLS communication is not performed between the information processing device and the scanner, the predetermined function is not used in response to a scan instruction from the information processing device. A scanner characterized by:

4. The credential information is a password. Scanner according to any one of claims 1 to 3.

5. The image data obtained by the scanning with the scanner, which has been subjected to the predetermined function, is transmitted from the scanner via a network.

2. The scanner of claim 1.

6. 4. The scanner according to claim 1, wherein the predetermined function includes transmitting an image scanned by the scanner.

7. 3. The scanner according to claim 1, further comprising a setting unit for setting the predetermined TLS setting to valid or invalid.

8. 8. The scanner according to claim 1, wherein the scanner is an image forming device having a scanning function and a printing function.

9. An information processing method performed by a scanner that supports communication via a network using TLS (Transport Layer Security), a receiving step of receiving a request regarding the capabilities of the scanner from an information processing device; a sending step of sending a response in response to the request; If the predetermined TLS setting of the scanner is valid, a response indicating that the predetermined function is available on the scanner is transmitted to the information processing device; If the predetermined TLS setting of the scanner is invalid, a response not indicating that the predetermined function is available on the scanner is sent to the information processing device; the predetermined function is a function of using credential information transmitted from the information processing device to the scanner via the network in processing scan data obtained by scanning with the scanner, and a function of using the credential information after the scanning.

1. An information processing method comprising:

10. An information processing method performed by a scanner that supports communication via a network using TLS (Transport Layer Security), a receiving step of receiving a request regarding the capabilities of the scanner from an information processing device; a sending step of sending a response in response to the request; When a predetermined TLS setting of the scanner is valid, a predetermined function can be used in response to a scan instruction from the information processing device, If the predetermined TLS setting of the scanner is invalid, the predetermined function is not used in response to a scan instruction from the information processing device, the predetermined function is a function of using credential information transmitted from the information processing device to the scanner via the network in processing scan data obtained by scanning with the scanner, and a function of using the credential information after the scanning.

1. An information processing method comprising:

11. An information processing method performed by a scanner that supports communication via a network using TLS (Transport Layer Security), a receiving step of receiving a request regarding the capabilities of the scanner from an information processing device; a transmitting step of transmitting a response indicating that a predetermined function can be used by the scanner to the information processing device in response to the request, the predetermined function is a function of using credential information transmitted from the information processing device to the scanner via the network in processing scan data obtained by scanning with the scanner, and a function of using the credential information after the scanning; When the TLS communication is performed between the information processing device and the scanner, the predetermined function can be used in response to a scan instruction from the information processing device, When the TLS communication is not performed between the information processing device and the scanner, the predetermined function is not used in response to a scan instruction from the information processing device.

1. An information processing method comprising:

12. The credential information is a password.

12. The information processing method according to claim 9, wherein the information processing method comprises:

13. The image data obtained by the scanning with the scanner, which has been subjected to the predetermined function, is transmitted from the scanner via a network.

10. The information processing method according to claim 9.

14. 12. The information processing method according to claim 9, wherein the predetermined function is a function including transmission of an image scanned by the scanner.

15. 11. The information processing method according to claim 9, further comprising a setting step of setting the predetermined TLS setting to valid or invalid.

16. 16. The information processing method according to claim 9, wherein the scanner is an image forming device having a scanning function and a printing function.

17. Scanners that support TLS (Transport Layer Security) communication over the network are receiving means for receiving a request regarding the capabilities of the scanner from an information processing device; A program for causing the device to function as a sending unit for sending a response in response to the request, If the predetermined TLS setting of the scanner is valid, a response indicating that the predetermined function is available on the scanner is transmitted to the information processing device; If the predetermined TLS setting of the scanner is invalid, a response not indicating that the predetermined function is available on the scanner is sent to the information processing device; the predetermined function is a function of using credential information transmitted from the information processing device to the scanner via the network in processing scan data obtained by scanning with the scanner, and a function of using the credential information after the scanning. A program characterized by:

18. Scanners that support TLS (Transport Layer Security) communication over the network are receiving means for receiving a request regarding the capabilities of the scanner from an information processing device; A program for causing the device to function as a sending unit for sending a response in response to the request, When a predetermined TLS setting of the scanner is valid, a predetermined function can be used in response to a scan instruction from the information processing device, If the predetermined TLS setting of the scanner is invalid, the predetermined function is not used in response to a scan instruction from the information processing device, the predetermined function is a function of using credential information transmitted from the information processing device to the scanner via the network in processing scan data obtained by scanning with the scanner, and a function of using the credential information after the scanning. A program characterized by:

19. Scanners that support TLS (Transport Layer Security) communication over the network are receiving means for receiving a request regarding the capabilities of the scanner from an information processing device; a program for causing the information processing device to function as a transmitting unit that transmits a response indicating that a predetermined function can be used by the scanner in response to the request, the predetermined function is a function of using credential information transmitted from the information processing device to the scanner via the network in processing scan data obtained by scanning with the scanner, and a function of using the credential information after the scanning; When the TLS communication is performed between the information processing device and the scanner, the predetermined function can be used in response to a scan instruction from the information processing device, When the TLS communication is not performed between the information processing device and the scanner, the predetermined function is not used in response to a scan instruction from the information processing device. A program characterized by:

Images