Security information update system, information processing apparatus, and non-transitory computer-readable recording medium encoded with security information update program

Patent metadata

Field	Value
Publication number	US-10152583-B2
Application number	US-201615284183-A
Country	US
Kind code	B2
Filing date	Oct 3, 2016
Priority date	Oct 1, 2015
Publication date	Dec 11, 2018
Grant date	Dec 11, 2018

Abstract

Each of the plurality of information processing apparatus includes an operation panel, a storage that stores security information, and a hardware processor. The hardware processor registers an administrator, when a user is registered as the administrator, authenticates the user, and when the user is authenticated, executes a first process of updating any of the stored security information, and a second process of setting the information processing apparatus in accordance with an operation by the authenticated user, and when the user is not registered as the administrator and is authenticated as an administrator in communicable another information processing apparatus, executes the first process but not the second process.

First claim

What is claimed is:

1. A security information management system comprising:
a plurality of information processing apparatus including at least a first information processing apparatus and a second information processing apparatus, wherein
each of the plurality of information processing apparatus comprises:
an operation panel that accepts an operation by a user;
a storage that stores security information; and
a hardware processor, wherein

the hardware processor of each of the information processing apparatus:
registers an administrator of the first information processing apparatus,
when a user who operates the operation panel is registered as the administrator, authenticates the user,
when the user is authenticated, executes a first process of updating any of the stored security information and a second process of setting the first information processing apparatus in accordance with an operation that is performed by the authenticated user and accepted by the operation panel, and
when the user is not registered as the administrator of the first information processing apparatus and is authenticated as an administrator of the second information processing apparatus, executes the first process but not the second process.

2. The security information management system according to claim 1 , wherein
the hardware processor of each of the information processing apparatus further:
when the user is registered as the administrator of the first information processing apparatus, displays a first screen for starting the first process and the second process, and
when the user is not registered as the administrator of the first information processing apparatus and is registered as the administrator in the second information processing apparatus, displays a second screen for starting the first process but not the second process.

3. The security information management system according to claim 1 , wherein
the hardware processor of each of the information processing apparatus further:
when the user is not registered as the administrator of the first information processing apparatus and is authenticated as an administrator in an external device in which the administrator is registered, executes the first process but not the second process.

4. The security information management system according to claim 1 , wherein
the hardware processor of each of the information processing apparatus further:
registers the second information processing apparatus in advance as a device at another end of communication.

5. The security information management system according to claim 1 , further comprising a management server, wherein
the management server stores a security policy that defines identification information for identifying security information commonly used among the plurality of information processing apparatus, and
the hardware processor of each of the information processing apparatus further:
acquires the security policy from the management server, and
executes a process of updating the security information specified by the identification information, as the first process.

6. The security information management system according to claim 5 , wherein
the security policy further defines reference date and time in correspondence with the identification information, and
the hardware processor of each of the information processing apparatus further:
executes a process of updating the security information specified by the identification information corresponding to the reference date and time that is earlier than current date and time, as the first process.

7. The security information management system according to claim 6 , wherein
the hardware processor of each of the plurality of information processing apparatus, further:
in response to the acceptance by the operation panel of the security information specified by the identification information, temporarily stores the accepted security information, and
in response to the temporary storage of the security information, notifies the management server of completion of update preparation,

the management server, in response to reception of the notification of the completion from each of the plurality of information processing apparatus, gives an instruction to each of the plurality of information processing apparatus to perform the update, and
the hardware processor, in response to the instruction from the management server, further updates the security information specified by the identification information with the temporarily stored security information.

8. The security information management system according to claim 5 , wherein
the security policy, in correspondence with the identification information, further defines update date and time at which the security information specified by the identification information is updated,
the hardware processor of each of the information processing apparatus further:
in response to acceptance of the security information specified by the identification information before the update date and time, temporarily stores the accepted security information, and
in response to current date and time reaching the update date and time, updates the security information specified by the identification information with the temporarily stored security information.

9. The security information management system according to claim 8 , wherein
the security policy further defines a preparation period that includes the update date and time as an end point in correspondence with the identification information, and
the hardware processor of each of the information processing apparatus further:
when the security information specified by the identification information is accepted by the operation panel during the preparation period, temporarily stores the accepted security information.

10. The security information management system according to claim 1 , wherein
the hardware processor of each of the information processing apparatus further:
transmits security information corresponding to a service provision server among the security information stored in the storage to the service provision server, and
when authentication using the security information performed by the service provision server is successful, further executes an execution request process of receiving a service provided by the service provision server.

11. The security information management system according to claim 1 , wherein
the hardware processor of each of the information processing apparatus further:
when externally input security information is same as security information corresponding to an access process of accessing the storage among the security information stored in the storage, executes the access process.

12. The security information management system according to claim 1 , wherein
the hardware processor of each of the information processing apparatus further:
executes a process of encrypting data transmitted to and a process of decrypting data received from the second information processing apparatus using predetermined security information among the stored security information.

13. An information processing apparatus comprising:
an operation panel that accepts an operation by a user;
a storage that stores security information; and
a hardware processor, wherein
the hardware processor:
registers an administrator;
when a user who operates the operation panel is registered as the administrator, authenticates the user;
when the user is authenticated, executes a first process of updating any of the stored security information, and a second process of setting t

Assignees

• Konica Minolta Inc

Inventors

• Haba Shoko
• Nishimura Ryosuke
• Shozaki Toshiya
• Maruyama Tomoko
• Shiraishi Jun

Classifications

• G06F21/41

  where a single sign-on provides access to a plurality of computers · CPC title

• H04N2201/0094

  Multifunctional device, i.e. a device capable of all of reading, reproducing, copying, facsimile transception, file transception · CPC title

• H04L63/104

  Grouping of entities · CPC title

• G06F21/34 Primary

  involving the use of external additional devices, e.g. dongles or smart cards · CPC title

• H04N1/00347

  with another still picture apparatus, e.g. hybrid still picture apparatus (circuits or arrangements for control or supervision between image input and image output device H04N1/32) · CPC title