Information processing apparatus, information processing method, and non-transitory computer readable medium

• US 10,321,018 B2
• Filed: 04/22/2015
• Issued: 06/11/2019
• Est. Priority Date: 09/24/2014
• Status: Active Grant

• Current Assignee: Fujifilm Business Innovation Corp. (Fujifilm Holdings Corporation)
• Original Assignee: Fuji Xerox Company Limited (Xerox Holdings Corp.)
• Inventors: Saito, Kazutaka
• Primary Examiner(s): Bechtel, Kevin
• Application Number:
  US14/693,587
• Publication Number:
  US 20160088190A1
• Time in Patent Office: 1,511 Days
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04N 1/00962 Input arrangements for operating instructions or parameters, e.g. updating internal software program loading in general G06F9/445; network-specific protocols involving the movement of software or configuration parameters H04L67/34
• CPC Class Codes: H04N 1/32502 in systems having a plurality of input or output devices
• CPC Class Codes: H04N 1/4433 to an apparatus, part of an apparatus or an apparatus function

Abstract

An information processing apparatus includes a detection unit and a change unit. The detection unit detects a first communication interface which has been newly assigned to the information processing apparatus, and a first network to which a connection is made via the first communication interface. The change unit changes, in a case where the first network and a second network to which a connection is made via a second communication interface that has been assigned earlier have an independent relationship, settings for a limitation on use of a service via the second communication interface.

Claims

1. An information processing apparatus comprising:

a first communication interface configured to be connected to a first network, the first communication interface having a first set of specific settings and a first set of common settings;

a second communication interface configured to be connected to a second network, the second communication interface having a second set of specific settings and a second set of common settings, the second set of specific settings being different from the first set of specific settings, and the second set of common settings being the same as the first set of common settings; and

a processing device that is configured to;

detect when a connection is made via the first communication interface and the first network after a connection is made via the second communication interface and the second network;

change settings for a limitation on use of a service via the second communication interface upon a determination that the first network and the second network are not reachable from each other; and

in response to a determination that the first network and the second network are not reachable from each other;

(i) change the second set of common settings and the second set of specific settings to increase a security level of the second communication interface;

(ii) set the first set of specific settings; and

(iii) set the first set of common settings to be the same as the second set of common settings.

2. The information processing apparatus according to claim 1, wherein

the processing device changes settings for a limitation on use of a service for each of the first communication interface and the second communication interface.

3. The information processing apparatus according to claim 2, wherein

the settings for a limitation on use of a service for each of the first communication interface and the second communication interface are specifically set for each of the first communication interface and the second communication interface, and include at least one of a setting relating to authentication of a communication interface administrator, a setting for a limitation on access from an external apparatus other than an external apparatus for which a specific IP address has been set, a setting relating to an access limitation in a case of changing a configuration from an external apparatus, a setting relating to a communication protocol limitation, and a setting relating to function control.

4. The information processing apparatus according to claim 1, wherein

the processing device sets, in a case where the first network and the second network have a shared relationship, the settings that have been set for the second communication interface for the first communication interface.

5. The information processing apparatus according to claim 1, wherein

the processing device detects first network identification information used to identify the first network, and second network identification information used to identify the second network, and

determines, in a case where at least either of the first network identification information and the second network identification information is information indicating the Internet, that the first network and the second network have an independent relationship.

6. The information processing apparatus according to claim 1, wherein

the processing device changes, in a case where both of the first network and the second network are connected to intranets, and the first communication interface and the second communication interface are reachable from each other, the first set of common settings and the second set of common settings.

7. The information processing apparatus according to claim 1, wherein

the first set of common settings and the second set of common settings include at least one of a setting relating to authentication of a machine administrator, a setting relating to a confidential box access limitation, and a setting relating to an ICMP protocol reply limitation.

8. The information processing apparatus according to claim 1, wherein,

the processing device notifies, upon the settings that have been set for the second communication interface being changed, an apparatus which communicates with the information processing apparatus over the second network that the settings have been changed.

9. The information processing apparatus according to claim 1, wherein,

the processing device notifies an apparatus which communicates with the information processing apparatus over the first network and an apparatus which communicates with the information processing apparatus over the second network that the settings have been changed.

10. An information processing method comprising:

detecting a first communication interface that has been newly assigned to an information processing apparatus, and a first network to which a connection is made via the first communication interface, the first communication interface having a first set of specific settings and a first set of common settings;

detecting a second communication interface assigned to the information processing apparatus, and a second network to which a connection has been made via the second communication interface prior to the connection between the first communication interface and the first network, the second communication interface having a second set of specific settings and a second set of common settings, the second set of specific settings being different from the first set of specific settings, and the second set of common settings being the same as the first set of common settings;

changing settings for a limitation on use of a service via the second communication interface;

determining that the first network and the second network have an independent relationship;

changing the second set of common settings and the second set of specific settings to increase a security level of the second communication interface;

setting the first set of specific settings; and

setting the first set of common settings to be the same as the second set of common settings.

11. A computer-readable storage device with computer executable instructions stored thereon that, when executed by one or more computer processors, cause the one or more computer processors to perform operations comprising:

detecting a first communication interface that has been newly assigned to an information processing apparatus, and a first network to which a connection is made via the first communication interface, the first communication interface having a first set of specific settings and a first set of common settings;

detecting a second communication interface assigned to the information processing apparatus, and a second network to which a connection has been made via the second communication interface prior to the connection between the first communication interface and the first network, the second communication interface having a second set of specific settings and a second set of common settings, the second set of specific settings being different from the first set of specific settings, and the second set of common settings being the same as the first set of common settings;

changing settings that indicate conditions of a limitation on use of a service via the second communication interface when it has been determined that the first network and the second network have an independent relationship; and

in response to a determination that the first network and the second network have an independent relationship;

(i) changing the second set of common settings and the second set of specific settings to increase a security level of the second communication interface;

(ii) setting the first set of specific settings; and

(iii) setting the first set of common settings to be the same as the second set of common settings.

12. An information processing apparatus comprising:

a first communication unit;

a second communication unit; and

a processing device that is configured to;

detect the first communication unit having been newly assigned or having been changed when the second communication unit has been previously assigned, the first communication unit having a first set of specific settings and a first set of common settings, the second communication unit having a second set of specific settings and a second set of common settings, the second set of specific settings being different from the first set of specific settings, and the second set of common settings being the same as the first set of common settings;

determine, in a case where both of the first communication unit and the second communication unit are connected to intranets, and the first communication unit and the second communication unit are reachable from each other, that a network to which the first communication unit is connected and a network to which the second communication unit is connected are shared networks;

change security settings of the second communication unit based on the determination; and

in response to a determination that a network to which the first communication unit is connected and a network to which the second communication unit is connected are not shared networks;

(i) changing the second set of common settings and the second set of specific settings to increase a security level of the second communication unit;

(ii) setting the first set of specific settings; and

(iii) setting the first set of common settings to be the same as the second set of common settings.