INFORMATION PROCESSING APPARATUS, INFORMATION PROCESSING METHOD, AND NON-TRANSITORY COMPUTER READABLE MEDIUM

• US 20160088190A1
• Filed: 04/22/2015
• Published: 03/24/2016
• Est. Priority Date: 09/24/2014
• Status: Active Grant

• Current Assignee: Fujifilm Business Innovation Corp. (Fujifilm Holdings Corporation)
• Original Assignee: Fuji Xerox Company Limited (Fujifilm Holdings Corporation)
• Inventors: SAITO, Kazutaka
• Granted Patent: US 10,321,018 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04N 1/00962 Input arrangements for operating instructions or parameters, e.g. updating internal software program loading in general G06F9/445; network-specific protocols involving the movement of software or configuration parameters H04L67/34
• CPC Class Codes: H04N 1/32502 in systems having a plurality of input or output devices
• CPC Class Codes: H04N 1/4433 to an apparatus, part of an apparatus or an apparatus function

Abstract

An information processing apparatus includes a detection unit and a change unit. The detection unit detects a first communication interface which has been newly assigned to the information processing apparatus, and a first network to which a connection is made via the first communication interface. The change unit changes, in a case where the first network and a second network to which a connection is made via a second communication interface that has been assigned earlier have an independent relationship, settings for a limitation on use of a service via the second communication interface.

Claims

1. An information processing apparatus comprising:

a detection unit that detects a first communication interface which has been newly assigned to the information processing apparatus, and a first network to which a connection is made via the first communication interface; and

a change unit that changes, in a case where the first network and a second network to which a connection is made via a second communication interface that has been assigned earlier have an independent relationship, settings for a limitation on use of a service via the second communication interface.

2. The information processing apparatus according to claim 1, wherein

the change unit changes settings for a limitation on use of a service for each of the first communication interface and the second communication interface.

3. The information processing apparatus according to claim 2, wherein

the change unit further changes settings that are common to the first communication interface and the second communication interface.

4. The information processing apparatus according to claim 1, wherein

the change unit sets, in a case where the first network and the second network have a shared relationship, the settings that have been set for the second communication interface for the first communication interface.

5. The information processing apparatus according to claim 1, wherein

the detection unit further detects first network identification information used to identify the first network, and second network identification information used to identify the second network, and

the information processing apparatus further comprises:

a determination unit that determines, in a case where at least either of the first network identification information and the second network identification information is information indicating the Internet, that the first network and the second network have an independent relationship.

6. The information processing apparatus according to claim 3, wherein

the change unit changes, in a case where both of the first network and the second network are connected to intranets, and the first communication interface and the second communication interface are reachable from each other, the settings that are common to the first communication interface and the second communication interface.

7. The information processing apparatus according to claim 3, wherein

the settings that are common to the first communication interface and the second communication interface include at least one of a setting relating to authentication of a machine administrator, a setting relating to a confidential box access limitation, and a setting relating to an ICMP protocol reply limitation.

8. The information processing apparatus according to claim 2, wherein

the settings for a limitation on use of a service for each of the first communication interface and the second communication interface are specifically set for each of the first communication interface and the second communication interface, and include at least one of a setting relating to authentication of a communication interface administrator, a setting for a limitation on access from an external apparatus other than an external apparatus for which a specific IP address has been set, a setting relating to an access limitation in a case of changing a configuration from an external apparatus, a setting relating to a communication protocol limitation, and a setting relating to function control.

9. The information processing apparatus according to claim 1, further comprising:

a notification unit that notifies, in a case where the change unit has changed the settings that have been set for the second communication interface, an apparatus which communicates with the information processing apparatus over the second network that the settings have been changed.

10. The information processing apparatus according to claim 3, further comprising:

a notification unit that notifies an apparatus which communicates with the information processing apparatus over the first network and an apparatus which communicates with the information processing apparatus over the second network that the settings have been changed.

11. An information processing method comprising:

detecting a first communication interface that has been newly assigned to an information processing apparatus, and a first network to which a connection is made via the first communication interface; and

changing, in a case where the first network and a second network to which a connection is made via a second communication interface that has been assigned earlier have an independent relationship, settings for a limitation on use of a service via the second communication interface.

12. A non-transitory computer readable medium storing a program causing a computer to execute a process for information processing, the process comprising:

detecting a first communication interface that has been newly assigned to an information processing apparatus, and a first network to which a connection is made via the first communication interface; and

changing, in a case where the first network and a second network to which a connection is made via a second communication interface that has been assigned earlier have an independent relationship, settings that indicate conditions of a limitation on use in a case of using a service on a network and that are set for the second communication interface.

13. An information processing apparatus comprising:

a detection unit that detects a first communication unit having been newly assigned or having been changed;

a determination unit that determines, in a case where both of the first communication unit and a second communication unit that has been assigned earlier are connected to intranets, and the first communication unit and the second communication unit are reachable from each other, that a network to which the first communication unit is connected and a network to which the second communication unit is connected are shared networks; and

a change unit that changes security settings of the second communication unit in accordance with a result of determination by the determination unit.