Processing device, multifunction device, network system, control method and computer readable medium

• US 20050060564A1
• Filed: 12/11/2003
• Published: 03/17/2005
• Est. Priority Date: 09/12/2003
• Status: Active Grant

• Current Assignee: Konica Minolta Business Technologies Incorporated (Konica Minolta Inc.)
• Original Assignee: Konica Minolta Business Technologies Incorporated (Konica Minolta Inc.)
• Inventors: Kobayashi, Minako, Sawayanagi, Kazumi, Murakami, Masakazu, Nakata, Hironobu
• Granted Patent: US 8,499,358 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability

Abstract

A processing device is provided in which unauthorized processing is prevented from being preformed at the time of executing a program or others. The processing device includes a processing portion for executing processing, a program memory portion for memorizing a program that makes the processing portion execute processing, a judge portion for judging whether or not the program is permitted to start, and a control portion for controlling the processing portion so that processing is executed in accordance with the program when the judge portion determines that the program is permitted to start, and for controlling the processing portion so that processing based on the program is not executed when the judge portion determines that the program is not permitted to start.

Claims

1. A processing device comprising:

a processing portion for executing processing;

a program memory portion for memorizing a program that makes the processing portion execute processing;

a judge portion for judging whether or not the program is permitted to start; and

a control portion for controlling the processing portion so that processing is executed in accordance with the program when the judge portion determines that the program is permitted to start, and for controlling the processing portion so that processing in accordance with the program is not executed when the judge portion determines that the program is not permitted to start.

2. A processing device comprising:

a processing portion for executing processing;

a creator information memory portion for memorizing first creator information used for identifying a creator of a program, the first creator information being prepared for each creator of a program;

a program obtaining portion for obtaining a program from an external device along with second creator information used for identifying a creator who created the program;

an authenticity judge portion for determining a program obtained by the program obtaining portion as an authorized program created by an authorized creator when the creator information memory portion memorizes the first creator information having the same contents as the second creator information obtained together with the program, and for determining the program obtained by the program obtaining portion as an unauthorized program created by an unauthorized creator when the creator information memory portion does not memorize the first creator information having the same contents as the second creator information obtained together with the program; and

a control portion for controlling the processing portion so that, with respect to a program determined to be an authorized program by the authenticity judge portion, processing is executed in accordance with the program, and for controlling the processing portion so that, with respect to a program determined to be an unauthorized program, processing based on the program is stopped.

3. A processing device comprising:

a processing portion for executing processing;

a program obtaining portion for obtaining a program from an external device;

a use approval/disapproval information memory portion for memorizing use approval/disapproval information indicating whether or not a creator of a program is permitted to use a function included in the processing portion, the program being obtained by the program obtaining portion;

a use approval/disapproval judge portion for determining whether or not a creator of a program obtained by the program obtaining portion is authorized to use the function corresponding to a code included in the program based on the use approval/disapproval information; and

a control portion for controlling the processing portion so that the function is called to execute processing when the use approval/disapproval judge portion determines that the creator of the program obtained by the program obtaining portion is authorized to use the function corresponding to the code included in the program, and for controlling the processing portion so that processing based on the program is stopped when the use approval/disapproval judge portion determines that the creator is not authorized to use the function.

4. A processing device comprising:

a processing portion for executing processing;

a function calling portion for invoking a function corresponding to a code described in a program out of functions included in the processing portion;

a program obtaining portion for obtaining a program from an external device;

a use approval/disapproval information memory portion for memorizing use approval/disapproval information indicating whether or not a creator of a program is permitted to use the function, the program being obtained by the program obtaining portion;

a use approval/disapproval judge portion for determining whether or not a creator of a program obtained by the program obtaining portion is authorized to use the function corresponding to a code described in the program based on the use approval/disapproval information; and

a control portion for controlling the function calling portion so that the function is called when the use approval/disapproval judge portion determines that the creator of the program obtained by the program obtaining portion is authorized to use the function corresponding to the code described in the program, and for controlling the processing portion so that processing based on the program is stopped when the use approval/disapproval judge portion determines that the creator is not authorized to use the function.

5. A processing device according to claim 4, wherein the function calling portion is a portion for managing an application program interface of an operating system of the processing device.

6. A processing device according to claim 4, further comprising:

an authenticity judge portion for judging whether a program is an authorized program created by an authorized creator or an unauthorized program created by an unauthorized creator; and

a creator information memory portion for memorizing first creator information used for identifying a creator of a program, the first creator information being prepared for each creator of a program,

wherein

the program obtaining portion obtains second creator information used for identifying a creator who created a program along with the program,

the authenticity judge portion determines a program obtained by the program obtaining portion as an authorized program created by an authorized creator when the creator information memory portion memorizes the first creator information having the same contents as the second creator information obtained together with the program, and determines the program obtained by the program obtaining portion as an unauthorized program created by an unauthorized creator when the creator information memory portion does not memorize the first creator information having the same contents as the second creator information obtained together with the program, and

the control portion controls the processing portion so that, with respect to a program determined to be an authorized program by the authenticity judge portion, processing is executed in accordance with the program, and controls the processing portion so that, with respect to a program determined to be an unauthorized program, processing based on the program is stopped.

7. A multifunction device having at least two processing portions out of processing portions each of which performs scanning, printing, copying, transmission and reception of a facsimile, transmission and reception of a file or document management, the device comprising:

a use approval/disapproval information memory portion for memorizing use approval/disapproval information for each user, the information indicating whether or not a user is permitted to use a program that makes the processing portion execute processing;

a designation reception portion for receiving designation of processing that a user intends the processing portion to execute;

a use approval/disapproval judge portion for determining whether or not a user who made the designation is authorized to use the program that makes the processing portion execute processing relating to the designation based on the use approval/disapproval information of the user; and

a control portion for controlling the processing portion so that processing is executed in accordance with the program when the use approval/disapproval judge portion determines that the user is authorized to use the program, and for controlling the processing portion so that processing based on the program is not executed when the use approval/disapproval judge portion determines that the user is not authorized to use the program.

8. A multifunction device having at least two processing portions out of processing portions each of which performs scanning, printing, copying, transmission and reception of a facsimile, transmission and reception of a file or document management, the device comprising:

a use approval/disapproval information memory portion for memorizing use approval/disapproval information for each user, the information indicating whether or not a user is permitted to use a function included in the processing portion;

a designation reception portion for receiving designation of processing that a user intends the processing portion to execute;

a use approval/disapproval judge portion for determining whether or not a user who made the designation is authorized to use the function corresponding to a code included in a program that makes the processing portion execute processing relating to the designation based on the use approval/disapproval information of the user; and

a control portion for controlling the processing portion so that the function is called to execute processing when the use approval/disapproval judge portion determines that the user is authorized to use the function corresponding to the code included in the program, and for controlling the processing portion so that processing based on the program is stopped when the use approval/disapproval judge portion determines that the user is not authorized to use the function.

9. A multifunction device according to claim 8, further comprising a selection reception portion for receiving selection whether or not an update is allowed to be performed when the function corresponding to the code included in the program that makes the processing portion execute processing relating to the designation is a function for updating predetermined data,

wherein the control portion controls the processing portion so that the function is called to execute processing when the function corresponding to the code included in the program that makes the processing portion execute processing relating to the designation is the function for updating predetermined data and when the selection reception portion receives a notification indicating that the update is allowed to be performed, and otherwise controls the processing portion so that it is stopped to call the function to execute processing.

10. A multifunction device having at least two processing portions out of processing portions each of which performs scanning, printing, copying, transmission and reception of a facsimile, transmission and reception of a file or document management, the device comprising:

a use approval/disapproval information memory portion for memorizing use approval/disapproval information for each user, the information indicating whether or not a user is permitted to use a code for calling a function included in the processing portion, the code being described in a program that makes the processing portion execute processing;

a designation reception portion for receiving designation of processing that a user intends the processing portion to execute;

a use approval/disapproval judge portion for determining whether or not a user who made the designation is authorized to use the code included in the program that makes the processing portion execute processing relating to the designation based on the use approval/disapproval information of the user; and

a control portion for controlling the processing portion so that the function is called to execute processing when the use approval/disapproval judge portion determines that the user is authorized to use the code included in the program, and for controlling the processing portion so that processing based on the program is stopped when the use approval/disapproval judge portion determines that the user is not authorized to use the code.

11. A network system comprising:

a server;

a processing device;

a processing portion for executing processing included in the processing device; and

a network for making connection between the server and the processing device,

the server including

a memory portion for memorizing use approval/disapproval information indicating whether or not a creator of a program is permitted to use a function included in the processing portion, the information being prepared for each creator of a program, and

a transmission portion for transmitting the use approval/disapproval information of a designated creator to the processing portion that makes the designation, and

the processing device including

a function calling portion for invoking a function corresponding to a code described in a program out of functions included in the processing portion,

a program obtaining portion for obtaining a program,

a use approval/disapproval information obtaining portion for obtaining the use approval/disapproval information of a creator of a program obtained by the program obtaining portion from the server,

a use approval/disapproval judge portion for determining whether or not a creator of a program obtained by the program obtaining portion is authorized to use the function corresponding to a code described in the program based on the use approval/disapproval information of the creator, the information being obtained by the use approval/disapproval information obtaining portion, and

a control portion for controlling the function calling portion so that the function is called when the use approval/disapproval judge portion determines that the creator of the program obtained by the program obtaining portion is authorized to use the function corresponding to the code described in the program, and for controlling the processing portion so that processing based on the program is stopped when the use approval/disapproval judge portion determines that the creator is not authorized to use the function.

12. A network system according to claim 11,

wherein

the program obtaining portion obtains second creator information used for identifying a creator who created a program along with the program,

the use approval/disapproval information obtaining portion requests the use approval/disapproval information of a creator of a program obtained by the program obtaining portion by designating the second creator information of the creator of the program for the server,

the memory portion memorizes first creator information used for identifying a creator of a program along with the use approval/disapproval information of the creator, and

the transmission portion transmits the use approval/disapproval information memorized in the memory portion along with the first creator information of a creator specified in the second creator information designated by the processing device.

13. A network system according to claim 11, wherein the control portion controls the processing portion so that processing based on the program is stopped when the use approval/disapproval information of a creator of a program obtained by the program obtaining portion is not obtained.

14. A network system comprising:

a server;

a multifunction device having at least two processing portions out of processing portions each of which performs scanning, printing, copying, transmission and reception of a facsimile, transmission and reception of a file or document management; and

a network for making connection between the server and the multifunction device,

the server including

a use approval/disapproval information memory portion for memorizing use approval/disapproval information for each user, the information indicating whether or not a user is permitted to use a program that makes the processing portion execute processing, and

a transmission portion for transmitting the use approval/disapproval information of a requested user to the multifunction device that makes the request, and

the multifunction device including

a use approval/disapproval information obtaining portion for obtaining the use approval/disapproval information of a user of the multifunction device from the server,

a display portion for displaying identification information for identifying a program that the user of the multifunction device is permitted to use based on the approval/disapproval information of the user, the information being obtained by the use approval/disapproval information obtaining portion, and

a control portion for controlling the processing portion so that processing is executed in accordance with the program corresponding to identification information selected by the user of the multifunction device from the identification information displayed on the display portion.

15. A network system comprising:

a server;

a multifunction device having at least two processing portions out of processing portions each of which performs scanning, printing, copying, transmission and reception of a facsimile, transmission and reception of a file or document management; and

a network for making connection between the server and the multifunction device,

the server including

a use approval/disapproval information memory portion for memorizing use approval/disapproval information for each user, the information indicating whether or not a user is permitted to use a function included in the processing portion, and

a transmission portion for transmitting the use approval/disapproval information of a requested user to the multifunction device that makes the request, and

the multifunction device including

a use approval/disapproval information obtaining portion for obtaining the use approval/disapproval information of a user of the multifunction device from the server,

a designation reception portion for receiving designation of processing that a user of the multifunction device intends the processing portion to execute,

a use approval/disapproval judge portion for determining whether or not a user who made the designation is authorized to use the function corresponding to a code included in a program that makes the processing portion execute processing relating to the designation based on the use approval/disapproval information of the user obtained by the use approval/disapproval information obtaining portion, and

a control portion for controlling the processing portion so that the function is called to execute processing when the use approval/disapproval judge portion determines that the user is authorized to use the function corresponding to the code included in the program, and for controlling the processing portion so that processing based on the program is stopped when the use approval/disapproval judge portion determines that the user is not authorized to use the function.

16. A network system according to claim 15,

wherein

the multifunction device includes a selection reception portion for receiving selection whether or not an update is allowed to be performed when the function corresponding to the code included in the program that makes the processing portion execute processing relating to the designation is a function for updating predetermined data, and

the control portion controls the processing portion so that the function is called to execute processing when the function corresponding to the code included in the program that makes the processing portion execute processing relating to the designation is the function for updating predetermined data and when the selection reception portion receives a notification indicating that the update is allowed to be performed, and otherwise controls the processing portion so that the update is stopped.

17. A network system comprising:

a server;

a multifunction device having at least two processing portions out of processing portions each of which performs scanning, printing, copying, transmission and reception of a facsimile, transmission and reception of a file or document management; and

a network for making connection between the server and the multifunction device,

the server including

a use approval/disapproval information memory portion for memorizing use approval/disapproval information for each user, the information indicating whether or not a user is permitted to use a code for calling a function included in the processing portion, the code being described in a program that makes the processing portion execute processing, and

a transmission portion for transmitting the use approval/disapproval information of a requested user to the multifunction device that makes the request, and

the multifunction device including

a use approval/disapproval information obtaining portion for obtaining the use approval/disapproval information of a user of the multifunction device from the server,

a designation reception portion for receiving designation of processing that a user of the multifunction device intends the processing portion to execute,

a use approval/disapproval judge portion for determining whether or not a user who made the designation is authorized to use the code included in the program that makes the processing portion execute processing relating to the designation based on the use approval/disapproval information of the user obtained by the use approval/disapproval information obtaining portion, and

a control portion for controlling the processing portion so that the function corresponding to the code is called to execute processing when the use approval/disapproval judge portion determines that the user is authorized to use the code included in the program, and for controlling the processing portion so that processing based on the program is stopped when the use approval/disapproval judge portion determines that the user is not authorized to use the code.

18. A method for controlling a processing device for executing processing in accordance with a program, the method comprising:

making a creator information memory portion memorize first creator information used for identifying a creator of a program in advance, the first creator information being prepared for each creator of a program;

obtaining a program from an external device along with second creator information used for identifying a creator who created the program;

determining a program obtained by the program obtaining portion as an authorized program created by an authorized creator when the creator information memory portion memorizes the first creator information having the same contents as the second creator information obtained together with the program, and determining the program obtained by the program obtaining portion as an unauthorized program created by an unauthorized creator when the creator information memory portion does not memorize the first creator information having the same contents as the second creator information obtained together with the program; and

controlling the processing portion so that, with respect to a program determined to be an authorized program by the authenticity judge portion, processing is executed in accordance with the program, and controlling the processing portion so that, with respect to a program determined to be an unauthorized program, processing based on the program is stopped.

19. A method for controlling a processing device including a processing portion for executing processing in accordance with a program, the method comprising:

obtaining a program from an external device;

loading use approval/disapproval information on a memory of the processing device, the information indicating whether or not a creator of an obtained program is permitted to use a function included in the processing portion;

judging whether or not a creator of an obtained program is authorized to use the function corresponding to a code included in the program based on the use approval/disapproval information; and

controlling the processing portion so that the function is called to execute processing when judging that the creator of the obtained program is authorized to use the function corresponding to the code included in the program, and controlling the processing portion so that processing based on the program is stopped when judging that the creator is not authorized to use the function.

20. A method for controlling a multifunction device having at least two processing portions out of processing portions each of which performs scanning, printing, copying, transmission and reception of a facsimile, transmission and reception of a file or document management, the method comprising:

making a use approval/disapproval information memory portion memorize use approval/disapproval information for each user in advance, the information indicating whether or not a user is permitted to use a program that makes the processing portion execute processing;

receiving designation of processing that a user of the multifunction device intends the processing portion to execute from the user;

judging whether or not a user who made the designation is authorized to use the program that makes the processing portion execute processing relating to the designation based on the use approval/disapproval information of the user; and

controlling the processing portion so that processing is executed based on the program when judging that the user is authorized to use the program, and controlling the processing portion so that processing based on the program is not executed when judging that the user is not authorized to use the program.

21. A method for controlling a multifunction device having at least two processing portions out of processing portions each of which performs scanning, printing, copying, transmission and reception of a facsimile, transmission and reception of a file or document management, the method comprising:

loading use approval/disapproval information on a memory, the information indicating whether or not a user of the multifunction device is permitted to use a function included in the processing portion;

receiving designation of processing that a user intends the processing portion to execute from the user;

judging whether or not a user who made the designation is authorized to use the function corresponding to a code included in a program that makes the processing portion execute processing relating to the designation based on the use approval/disapproval information of the user; and

controlling the processing portion so that the function is called to execute processing when judging that the user is authorized to use the function corresponding to the code included in the program, and controlling the processing portion so that processing based on the program is stopped when judging that the user is not authorized to use the function corresponding to the code included in the program.

22. A computer readable medium storing a control program used for a computer including a processing portion for executing processing in accordance with a program, the program making the computer perform the processing of:

accessing a creator information memory portion for memorizing first creator information used for identifying a creator of a program, the first creator information being prepared for each creator of a program;

obtaining a program from an external device along with second creator information used for identifying a creator who created the program;

determining an obtained program as an authorized program created by an authorized creator when the creator information memory portion memorizes the first creator information having the same contents as the second creator information obtained together with the program, and determining the obtained program as an unauthorized program created by an unauthorized creator when the creator information memory portion does not memorize the first creator information having the same contents as the second creator information obtained together with the program; and

controlling the processing portion so that processing is executed based on the program when judging that the obtained program is determined to be an authorized program, and controlling the processing portion so that processing based on the program is stopped when judging that the obtained program is determined to be an unauthorized program.

23. A computer readable medium storing a control program used for a computer including a processing portion for executing processing in accordance with a program, the program making the computer perform the processing of:

obtaining a program from an external device;

loading use approval/disapproval information on a memory, the information indicating whether or not a creator of an obtained program is permitted to use a function included in the processing portion;

judging whether or not a creator of an obtained program is authorized to use the function corresponding to a code included in the program based on the use approval/disapproval information; and

controlling the processing portion so that the function is called to execute processing when judging that the creator of the obtained program is authorized to use the function corresponding to the code included in the program, and controlling the processing portion so that processing based on the program is stopped when judging that the creator is not authorized to use the function.

24. A computer readable medium storing a control program used for a multifunction device having at least two processing portions out of processing portions each of which performs scanning, printing, copying, transmission and reception of a facsimile, transmission and reception of a file or document management, the program making the computer perform the processing of:

obtaining use approval/disapproval information indicating whether or not a user of the multifunction device is permitted to use a program that makes the processing portion execute processing;

receiving designation of processing that the user intends the processing portion to execute from the user;

judging whether or not the user is authorized to use the program that makes the processing portion execute processing relating to the designation based on the use approval/disapproval information of the user; and

controlling the processing portion so that processing is executed based on the program when judging that the user is authorized to use the program, and controlling the processing portion so that processing based on the program is not executed when judging that the user is not authorized to use the program.

25. A computer readable medium storing a control program used for a multifunction device having at least two processing portions out of processing portions each of which performs scanning, printing, copying, transmission and reception of a facsimile, transmission and reception of a file or document management, the program making the computer perform the processing of:

loading use approval/disapproval information on a memory, the information indicating whether or not a user of the multifunction device is permitted to use a function included in the processing portion;

receiving designation of processing that the user intends the processing portion to execute from the user;

judging whether or not the user is authorized to use the function corresponding to a code included in a program that makes the processing portion execute processing relating to the designation based on the use approval/disapproval information of the user; and

controlling the processing portion so that the function is called to execute processing when judging that the user is authorized to use the function corresponding to the code included in the program, and controlling the processing portion so that processing based on the program is stopped when judging that the user is not authorized to use the function.