Apparatus, system, and method of setting a device

• US 8,499,145 B2
• Filed: 03/09/2010
• Issued: 07/30/2013
• Est. Priority Date: 03/10/2009
• Status: Active Grant

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: Ota, Hiroshi, Yokoyama, Akira, Okazato, Atsushi
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US12/720,299
• Publication Number:
  US 20100235642A1
• Time in Patent Office: 1,239 Days
• Field of Search: 713/153, 713/175
• US Class Current: 713/153
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

A device setting apparatus performs setting operation with respect to a counterpart apparatus using secure communication even when the counterpart apparatus is not previously provided with information required for secure communication. The device setting apparatus detects an error when the error occurs during the setting operation, and executes a browser to request a user to correct the error during the setting operation.

Claims

1. A device setting apparatus configured to connect to a counterpart apparatus through a network, the device setting apparatus comprising:

a storage device configured to store information specifying a procedure to be performed by the device setting apparatus to cause the counterpart apparatus to perform a user request;

a communication device configured to send a secure communication request to the counterpart apparatus to start secure communication via a secure interface protocol;

a processor including

a process determiner device configured to determine whether the counterpart apparatus is capable of performing secure communication based on whether a response is received by the communication device in response to the secure communication request and contents of the response when the response is received in response to the secure communication request to generate a first determination result; and

a process manager device configured to execute operation of setting secure communication for the counterpart apparatus according to the determination result indicating that the counterpart apparatus is not capable of performing secure communication, and to cause the communication device to send a request for performing the user request to the counterpart apparatus using a secure communication interface protocol or an insecure communication interface protocol, wherein

after the operation of setting the secure communication for the counterpart apparatus is executed, the process determiner device determines whether the procedure to be performed by the device setting apparatus to cause the counterpart apparatus to perform a user request is one of one or more procedures that require secure communication or one of one or more procedures that do not require secure communication to generate a second determination result, and when the second determination result indicates that the procedure is one of one or more procedures that do not require secure communication, the process manager device causes the communication device to

send a communication setting change request to the counterpart apparatus that causes the counterpart apparatus to change a communication setting from a value that requires the secure communication interface protocol to a value that requires the insecure communication interface protocol; and

send the request for performing the user request to the counterpart apparatus using the insecure communication interface protocol.

2. The device setting apparatus of claim 1, wherein the execution of operation of setting secure communication causes the communication device to send a request to the counterpart apparatus using an insecure communication interface protocol, the request being at least one of:

a certificate install request that causes the counterpart apparatus to create and install a certificate required for the counterpart apparatus to communicate with the device setting apparatus using the secure communication interface protocol; and

a secure communication setting request that causes the counterpart apparatus to set a communication setting to have a value that requires the secure communication interface protocol.

3. The device setting apparatus of claim 2, wherein the execution of operation of setting secure communication further causes the communication device to:

send a certificate signing request (CSR) creating request that causes the counterpart apparatus to create a CSR that requests a certificate authority to sign the certificate;

receive the CSR created by the counterpart apparatus to have the certificate authority sign the certificate; and

send a signed certificate install request that causes the counterpart apparatus to install the signed certificate onto the counterpart apparatus.

4. The device setting apparatus of claim 2, wherein the storage device further includes:

certificate creation procedure information specifying a procedure to be performed by the device setting apparatus to cause the counterpart apparatus to create and install the certificate; and

certificate information used for creating the certificate, and

the process manager device is configured to generate the certificate install request according to the certificate creation procedure information and the certificate information.

5. The device setting apparatus of claim 4, wherein the certificate information used for creating the certificate includes information regarding a private key of the counterpart apparatus, the private key being used by the counterpart apparatus for signing the certificate.

6. The device setting apparatus of claim 2, further comprising:

a result obtainer device configured to determine whether a setting operation is successfully performed and to generate a determination result indicating that an error has occurred when the setting operation is not successfully performed, the setting operation including the operation of setting secure communication and the operation of performing the user request;

a state analyzer device configured to specify a state of the counterpart apparatus when a request that causes the error is received from the device setting apparatus as an error state of the counterpart apparatus; and

a browser executer device configured to execute a browser based on information regarding the error state of the counterpart apparatus so as to cause the device setting apparatus to display a screen corresponding to the error state of the counterpart apparatus.

7. The device setting apparatus of claim 6, wherein:

the storage device further includes information regarding the processing result of performing the setting operation, and

the browser executer device is configured to obtain previously input information previously input by the device setting apparatus that causes the error from the storage device and cause the screen to include the previously input information for display.

8. The device setting apparatus of claim 7, wherein:

the browser executer device is further configured to receive newly input information input by the device setting apparatus in place of the previously input information displayed through the screen, and notify the process manager device upon detection of closing of the browser, and

the process manager device is further configured to cause the result obtainer device to determine whether the setting operation is successfully performed using the newly input information to generate a new determination result, and to overwrite the determination result indicating that an error has occurred stored in the storage device with the new determination result.

15. The device setting apparatus of claim 1, wherein the process manager device is configured to determine whether installation of a certificate is required based on the first determination result.

9. A device setting method of setting a counterpart apparatus through a network using a device setting apparatus, the method comprising:

storing, in a storage device, information specifying a procedure to be performed by the device setting apparatus to cause the counterpart apparatus to perform a user request;

sending a secure communication request to the counterpart apparatus to start secure communication via a secure interface protocol;

determining whether the counterpart apparatus is capable of performing secure communication based on whether a response is received by the device setting apparatus in response to the secure communication request and contents of the response when the response is received in response to the secure communication request to generate a first determination result;

executing operation of setting secure communication for the counterpart apparatus according to the first determination result indicating that the counterpart apparatus is not capable of performing secure communication; and

sending a request for performing the user request from the device setting apparatus to the counterpart apparatus using a secure communication interface protocol or an insecure communication interface protocol, wherein

after the operation of setting the secure communication for the counterpart apparatus is executed, the device setting method further comprises determining whether the procedure to be performed by the device setting apparatus to cause the counterpart apparatus to perform a user request is one of one or more procedures that require secure communication or one of one or more procedures that do not require secure communication to generate a second determination result, and when the second determination result indicates that the procedure is one of one or more procedures that do not require secure communication,

sending a communication setting change request to the counterpart apparatus that causes the counterpart apparatus to change a communication setting from a value that requires the secure communication interface protocol to a value that requires the insecure communication interface protocol; and

sending the request for performing the user request to the counterpart apparatus using the insecure communication interface protocol.

10. The method of claim 9, wherein the operation of setting secure communication includes at least one of:

sending a certificate install request, using an insecure communication interface protocol, that causes the counterpart apparatus to create and install a certificate required for the counterpart apparatus to communicate with the device setting apparatus using the secure communication interface protocol; and

sending a secure communication setting request, using the insecure communication interface protocol, that causes the counterpart apparatus to set a communication setting to have a value that requires the secure communication interface protocol.

11. The method of claim 10, wherein the operation of setting secure communication further includes:

causing the counterpart apparatus to create a certificate signing request (CSR) that requests a certificate authority to sign the certificate;

transmitting the CSR created by the counterpart apparatus to the certificate authority to have the certificate authority sign the certificate; and

installing the signed certificate onto the counterpart apparatus.

12. The method of claim 10, further comprising:

generating a determination result indicating that an error has occurred when a setting operation is not successfully performed, the setting operation including the operation of setting secure communication and the operation of performing the user request;

specifying a state of the counterpart apparatus when a request that causes the error is received by the counterpart apparatus from the device setting apparatus as an error state of the counterpart apparatus; and

executing a browser based on information regarding the error state of the counterpart apparatus so as to cause the device setting apparatus to display a screen corresponding to the error state of the counterpart apparatus.

16. The method of claim 9, further comprising determining whether installation of a certificate is required based on the first determination result.

13. A device setting system including a device setting apparatus and a counterpart apparatus connected through a network, the system comprising:

a processor;

a storage device configured to store a plurality of instructions which cause the device setting apparatus to;

send a secure communication request to the counterpart apparatus to start secure communication via a secure interface protocol;

determine whether the counterpart apparatus is capable of performing secure communication based on whether a response is received by the device setting apparatus in response to the secure communication request and contents of the response when the response is received in response to the secure communication request to generate a first determination result;

execute operation of setting secure communication for the counterpart apparatus according to the first determination result indicating that the counterpart apparatus is not capable of performing secure communication; and

send a request for performing a user request to the counterpart apparatus using a secure communication interface protocol or an insecure communication interface protocol, wherein

the storage device further stores instructions which, after the operation of setting the secure communication for the counterpart apparatus is executed, cause the device setting apparatus to determine whether a procedure to be performed by the device setting apparatus to cause the counterpart apparatus to perform a user request is one of one or more procedures that require secure communication or one of one or more procedures that do not require secure communication to generate a second determination result, and when the second determination result indicates that the procedure is one of one or more procedures that do not require secure communication,

send a communication setting change request to the counterpart apparatus that causes the counterpart apparatus to change a communication setting from a value that requires the secure communication interface protocol to a value that requires the insecure communication interface protocol; and

send the request for performing the user request to the counterpart apparatus using the insecure communication interface protocol.

14. The system of claim 13, wherein the plurality of instructions further cause the device setting apparatus to:

generate a determination result indicating that an error has occurred when a setting operation is not successfully performed, the setting operation including the operation of setting secure communication and the operation of performing the user request;

specify a state of the counterpart apparatus when a request that causes the error is received by the counterpart apparatus from the device setting apparatus as an error state of the counterpart apparatus; and

execute a browser based on information regarding the error state of the counterpart apparatus so as to cause the device setting apparatus to display a screen corresponding to the error state of the counterpart apparatus.

17. The system of claim 13, wherein the plurality of instructions further cause the device setting apparatus to determine whether installation of a certificate is required based on the first determination result.