Data processing device

• US 8,789,137 B2
• Filed: 03/06/2009
• Issued: 07/22/2014
• Est. Priority Date: 03/13/2008
• Status: Active Grant

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: Yamasaki, Shozo
• Primary Examiner(s): Schwartz, Darren B
• Assistant Examiner(s): GYORFI, THOMAS A
• Application Number:
  US12/920,661
• Publication Number:
  US 20110307642A1
• Time in Patent Office: 1,964 Days
• Field of Search: 726/2, 726/4, 726/21, 713/165, 713/167
• US Class Current: 726/2
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices

Abstract

When a data processing device is disconnected from a computer system after mutual authentication has been completed between the computer system and the data processing device, the data processing device cancels an authenticated state, and is not able to transfer data to a device other than a specific computer system. Therefore, even when the data processing device is connected to a device other than the specific computer system after the connection of a cable supporting hot swapping has been changed, the data processing device maintains the confidentiality of data.

Claims

1. A data processing device comprising:

a first interface configured to connect the data processing device to an multifunction printer, wherein the first interface is a Serial Advanced Technology Attachment cable;

an authentication unit configured to perform a process for authenticating the multifunction printer which is connected via the first interface;

a control unit configured to control, in response to correct performance of authentication of the multifunction printer by the authentication unit, the data processing device so that transfer of data to the multifunction printer is enabled;

a determination unit configured to determine a state of connection of the data processing device to the multifunction printer via the first interface; and

a change unit configured to, on the basis of determination by the determination unit that the data processing device is not connected to the multifunction printer via the first interface, change to being in a state in which the authentication unit does not authenticate the multifunction printer; and

a second interface configured to connect the data processing device to a storage device,

wherein, when authentication of the multifunction printer is not correctly performed by the authentication unit, the control unit controls the data processing device so that the data processing device operates in a blocking mode in which the data processing device blocks an access request to the storage device which has been received by the data processing device from the multifunction printer via the first interface, and controls the data processing device, in response to correct performance of authentication of the multifunction printer by the authentication unit, so that the data processing device operates in a normal mode in which processing of data that has been received from the storage device and transfer of the data to the multifunction printer are permitted;

wherein the data processing device is able to operate so as to encrypt image data that has been transferred from the multifunction printer, to store the encrypted image data in the storage device, and to transfer the decrypted image data to the multifunction printer.

2. The data processing device according to claim 1,

wherein the data processing device receives encrypted data from the storage device via the second interface, and

wherein the control unit decrypts the encrypted data that has been received from the storage device in the normal mode, and transfers the decrypted data to the multifunction printer.

3. The data processing device according to claim 1, wherein the control unit controls the data processing device, on the basis of determination by the determination unit in the normal mode that the data processing device is not connected to the multifunction printer via the first interface, so as to change to being in the blocking mode.

4. The data processing device according to claim 1, wherein the determination unit determines, in response to no performance of transfer of data between the data processing device and the multifunction printer via the first interface in a predetermined period of time, that the data processing device is not connected to the multifunction printer via the first interface.

5. The data processing device according to claim 1, further comprising a detection unit that detects whether or not the data processing device is physically disconnected from the multifunction printer via the first interface, wherein the determination unit determines a state of connection of the data processing device to the multifunction printer via the first interface on the basis of a result of detection by the detection unit.

6. The data processing device according to claim 1, further comprising a unique information storage unit that stores unique information which is information unique to multifunction printer that is to be authenticated by the authentication unit, wherein the authentication unit performs a process for authenticating, using the unique information that is stored in the unique information storage unit, the multifunction printer that is connected via the first interface, and, when the multifunction printer does not correspond to the unique information, the authentication unit does not authenticate the multifunction printer.

7. The data processing device according to claim 6, wherein, when the authentication unit does not authenticate the multifunction printer, the control unit controls the data processing device so that a limitation on transfer of data to the multifunction printer is imposed.

8. The data processing device according to claim 1, wherein the authentication unit performs, on the basis of determination by the determination unit that the data processing device changes from being in a state in which the data processing device is not connected to the multifunction printer via the first interface to being in a state in which the data processing device is connected to the multifunction printer via the first interface, the process for authenticating the multifunction printer which is connected via the first interface.

9. The data processing device according to claim 1, wherein the first interface is an interface that supports hot swapping.

10. A data processing device that is connected to an multifunction printer via a first interface, and that is connected to a storage device via a second interface, the data processing device comprising:

a control unit configured to control the data processing device so that the data processing device is able to operate at least in a normal mode, in which data that has been received from the storage device is processed and the data is transferred to the multifunction printer, or a blocking mode, in which the data processing device blocks an access request to the storage device which has been received by the data processing device from the multifunction printer via the first interface, as an operation mode of the data processing device;

a determination unit configured to determine a state of connection of the data processing device to the multifunction printer via the first interface; and

a change unit configured to change, on the basis of determination by the determination unit in the normal mode that the data processing device is not connected to the multifunction printer via the first interface, the operation mode of the data processing device from the normal mode to the blocking mode, to maintain the blocking mode in a case where the data processing device is connected to an apparatus different from the multifunction printer via the first interface after the operation mode is changed to the blocking mode, and to change, in a case where the data processing device is connected to the multifunction printer via the first interface after the operation mode is changed to the blocking mode, the operation mode from the blocking mode to the normal mode;

wherein the data processing device is able to operate so as to encrypt image data that has been transferred from the multifunction printer, to store the encrypted image data in the storage device, and to transfer the decrypted image data to the multifunction printer.

11. A method for controlling a data processing device, the method comprising the steps of:

connecting, via a first interface, the data processing device to an multifunction printer, wherein the first interface is a Serial Advanced Technology Attachment cable;

performing a process for authenticating the multifunction printer which is connected via the first interface;

controlling, in response to correct performance of authentication of the multifunction printer by the authentication unit, the data processing device so that transfer of data to the multifunction printer is enabled;

determining a state of connection of the data processing device to the multifunction printer via the first interface; and

cancelling authentication of the multifunction printer on the basis of determining that the data processing device is not connected to the multifunction printer via the first interface; and

connecting, via a second interface, the data processing device to a storage device,

wherein, when authentication of the multifunction printer is not correctly performed by the authentication unit, the control unit controls the data processing device so that the data processing device operates in a blocking mode in which the data processing device blocks an access request to the storage device which has been received by the data processing device from the multifunction printer via the first interface, and controls the data processing device, in response to correct performance of authentication of the multifunction printer by the authentication unit, so that the data processing device operates in a normal mode in which processing of data that has been received from the storage device and transfer of the data to the multifunction printer are permitted;

wherein the data processing device is able to operate so as to encrypt image data that has been transferred from the multifunction printer, to store the encrypted image data in the storage device, and to transfer the decrypted image data to the multifunction printer.

12. A method for controlling a data processing device that is connected to an multifunction printer via a first interface, and that is connected to a storage device via a second interface, the method comprising the steps of:

controlling the data processing device so that the data processing device is able to operate at least in a normal mode, in which data that has been received from the storage device is processed and the data is transferred to the multifunction printer, or a blocking mode, in which the data processing device blocks an access request to the storage device which has been received by the data processing device from the multifunction printer via the first interface, as an operation mode of the data processing device;

determining a state of connection of the data processing device to the multifunction printer via the first interface; and

changing, on the basis of determining in the normal mode that the data processing device is not connected to the multifunction printer via the first interface, the operation mode of the data processing device from the normal mode to the blocking mode, maintaining the blocking mode in a case where the data processing device is connected to an apparatus different from the multifunction printer via the first interface after the operation mode is changed to the blocking mode, and changing, in a case where the data processing device is connected to the multifunction printer via the first interface after the operation mode is changed to the blocking mode, the operation mode from the blocking mode to the normal mode;

wherein the data processing device is able to operate so as to encrypt image data that has been transferred from the multifunction printer, to store the encrypted image data in the storage device, and to transfer the decrypted image data to the multifunction printer.

13. A non-transitory computer-readable storage medium storing a control program for causing a data processing device to perform a control method, the control method comprising the steps of:

connecting, via a first interface, the data processing device to an multifunction printer, wherein the first interface is a Serial Advanced Technology Attachment cable;

performing a process for authenticating the multifunction printer which is connected via the first interface;

controlling, in response to correct performance of authentication of the multifunction printer by the authentication unit, the data processing device so that transfer of data to the multifunction printer is enabled;

determining a state of connection of the data processing device to the multifunction printer via the first interface; and

cancelling authentication of the multifunction printer on the basis of determining that the data processing device is not connected to the multifunction printer via the first interface; and

connecting, via a second interface, the data processing device to a storage device,

wherein, when authentication of the multifunction printer is not correctly performed by the authentication unit, the control unit controls the data processing device so that the data processing device operates in a blocking mode in which the data processing device blocks an access request to the storage device which has been received by the data processing device from the multifunction printer via the first interface, and controls the data processing device, in response to correct performance of authentication of the multifunction printer by the authentication unit, so that the data processing device operates in a normal mode in which processing of data that has been received from the storage device and transfer of the data to the multifunction printer are permitted;

wherein the data processing device is able to operate so as to encrypt image data that has been transferred from the multifunction printer, to store the encrypted image data in the storage device, and to transfer the decrypted image data to the multifunction printer.

14. A non-transitory computer-readable storage medium storing a control program for causing a data processing device to perform a control method, the data processing device being connected to an multifunction printer via a first interface, and being connected to a storage device via a second interface, the control method comprising the steps of:

controlling the data processing device so that the data processing device is able to operate at least in a normal mode, in which data that has been received from the storage device is processed and the data is transferred to the multifunction printer, or a blocking mode, in which the data processing device blocks an access request to the storage device which has been received by the data processing device from the multifunction printer via the first interface, as an operation mode of the data processing device;

determining a state of connection of the data processing device to the multifunction printer via the first interface; and

changing, on the basis of determining in the normal mode that the data processing device is not connected to the multifunction printer via the first interface, the operation mode of the data processing device from the normal mode to the blocking mode, maintaining the blocking mode in a case where the data processing device is connected to an apparatus different from the multifunction printer via the first interface after the operation mode is changed to the blocking mode, and changing, in a case where the data processing device is connected to the multifunction printer via the first interface after the operation mode is changed to the blocking mode, the operation mode from the blocking mode to the normal mode;

wherein the data processing device is able to operate so as to encrypt image data that has been transferred from the multifunction printer, to store the encrypted image data in the storage device, and to transfer the decrypted image data to the multifunction printer.