INFORMATION PROCESSING APPARATUS THAT DISTRIBUTES SETTINGS COMPLIANT WITH SECURITY POLICY AND CONTROL METHOD THEREFOR, IMAGE PROCESSING APPARATUS AND CONTROL METHOD THEREFOR, INFORMATION PROCESSING SYSTEM AND CONTROL METHOD THEREFOR, AND STORAGE MEDIUM

• US 20150067767A1
• Filed: 08/28/2014
• Published: 03/05/2015
• Est. Priority Date: 09/02/2013
• Status: Active Grant

• Current Assignee: Canon Ayutthaya Limited (Canon Inc.)
• Original Assignee: Canon Ayutthaya Limited (Canon Inc.)
• Inventors: Shimizu, Shota, Tsuchitoi, Naoki, Yasukawa, Akari
• Granted Patent: US 10,027,713 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 63/0254 Stateful filtering
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

An information processing apparatus that makes it possible to save time and effort expended by an administrator on distribution of settings compliant with a security policy. Whether or not an application installed in the image processing apparatus to which setting values compliant with a security policy are to be distributed can be set to the settings is determined. When it is determined that the application cannot be set to the settings, whether or not the application can be set to the settings by updating thereof is determined. When the determination result indicates that the settings can be set by updating the application, the application is updated, and the settings are distributed to the image processing apparatus.

Claims

1. An information processing apparatus comprising:

a setting determination unit configured to determine whether or not an application installed in an image processing apparatus can be set to settings compliant with a security policy, the image processing apparatus being an object to which the settings are to be distributed;

an acquisition unit configured to acquire, when it is determined by said setting determination unit that the application cannot be set to the settings, a result of determination of whether or not the application can be set to the settings by updating thereof;

an update unit configured to cause the application to be updated in a case where the result of determination acquired by said acquisition unit indicates that the application can be set to the settings; and

a distribution unit configured to distribute the settings to the image processing apparatus.

2. The information processing apparatus according to claim 1, further comprising a display unit configured to display a warning screen displaying a warning that distribution of the settings will cause the application to be stopped, in a case where the result of determination acquired by said acquisition unit indicates that the application cannot be set to the settings.

3. The information processing apparatus according to claim 1, wherein said setting determination unit determines whether or not the application can be set to the settings, using application information, including an application name and a version of the application installed in the image processing apparatus, and security policy items supported thereby.

4. The information processing apparatus according to claim 1, wherein said acquisition unit transmits an application name and a version of the application installed in the image processing apparatus, and a security policy item to be distributed which defines a setting to which the application cannot be set, to a server storing a list of applications, including respective application names and versions of the applications, and security policy items supported by each version of the applications, to thereby acquire the result of determination performed by the server.

5. An image processing apparatus to which settings compliant with a security policy are distributed, comprising:

a providing unit configured to provide application information including an application name and a version of an application installed in the image processing apparatus, and a security policy item supported thereby;

a setting unit configured to set the application to distributed settings when the application can be set to the distributed settings; and

a control unit configured to cause the application to be stopped when the application cannot be set to the distributed settings.

6. An information processing system including an information processing apparatus and an image processing apparatus, comprising:

a setting determination unit configured to determine whether or not an application installed in the image processing apparatus can be set to settings compliant with a security policy, the image processing apparatus being an object to which the settings are to be distributed;

an acquisition unit configured to acquire, when it is determined by said setting determination unit that the application cannot be set to the settings, a result of determination of whether or not the application can be set to the settings by updating thereof;

an update unit configured to cause the application to be updated in a case where the result of determination acquired by said acquisition unit indicates that the application can be set to the settings;

a distribution unit configured to distribute the settings to the image processing apparatus;

a setting unit configured to set the application to distributed settings when the application can be set to the distributed settings; and

a control unit configured to cause the application to be stopped when the application cannot be set to the distributed settings.

7. A method of controlling an information processing apparatus, comprising:

determining whether or not an application installed in an image processing apparatus can be set to settings compliant with a security policy, the image processing apparatus being an object to which the settings are to be distributed;

acquiring, when it is determined by said determining that the application cannot be set to the settings, a result of determination of whether or not the application can be set to the settings by updating thereof;

causing the application to be updated in a case where the result of determination acquired by said acquiring indicates that the application can be set to the settings; and

distributing the settings to the image processing apparatus.

8. The method according to claim 7, further comprising displaying a warning screen displaying a warning that distribution of the settings will cause the application to be stopped, in a case where the result of determination acquired by said acquiring indicates that the application cannot be set to the settings.

9. The method according to claim 7, wherein said determining includes determining whether or not the application can be set to the settings, using application information, including an application name and a version of the application installed in the image processing apparatus, and security policy items supported thereby.

10. The method according to claim 7, wherein said acquiring includes transmitting an application name and a version of the application installed in the image processing apparatus, and a security policy item to be distributed which defines a setting to which the application cannot be set, to a server storing a list of applications, including respective application names and versions of the applications, and security policy items supported by each version of the applications, to thereby acquire the result of determination performed by the server.

11. A method of controlling an image processing apparatus to which settings compliant with a security policy are distributed, comprising:

providing application information including an application name and a version of an application installed in the image processing apparatus, and a security policy item supported thereby;

setting the application to distributed settings when the application can be set to the distributed settings; and

causing the application to be stopped when the application cannot be set to the distributed settings.

12. A method of controlling an information processing system including an information processing apparatus and an image processing apparatus, comprising:

determining whether or not an application installed in the image processing apparatus can be set to settings compliant with a security policy, the image processing apparatus being an object to which the settings are to be distributed;

acquiring, when it is determined by said determining that the application cannot be set to the settings, a result of determination of whether or not the application can be set to the settings by updating thereof;

causing the application to be updated in a case where the result of determination acquired by said acquiring indicates that the application can be set to the settings;

distributing the settings to the image processing apparatus;

setting the application to distributed settings when the application can be set to the distributed settings; and

causing the application to be stopped when the application cannot be set to the distributed settings.

13. A non-transitory computer-readable storage medium storing a computer-executable program for executing a method of controlling an information processing apparatus,

wherein the method comprises:

determining whether or not an application installed in an image processing apparatus can be set to settings compliant with a security policy, the image processing apparatus being an object to which the settings are to be distributed;

acquiring, when it is determined by said determining that the application cannot be set to the settings, a result of determination of whether or not the application can be set to the settings by updating thereof;

causing the application to be updated in a case where the result of determination acquired by said acquiring indicates that the application can be set to the settings; and

distributing the settings to the image processing apparatus.

14. A non-transitory computer-readable storage medium storing a computer-executable program for executing a method of controlling an image processing apparatus to which settings compliant with a security policy are distributed,

wherein the method comprises:

providing application information including an application name and a version of an application installed in the image processing apparatus, and a security policy item supported thereby;

setting the application to distributed settings when the application can be set to the distributed settings; and

causing the application to be stopped when the application cannot be set to the distributed settings.