Image processing apparatus that operates according to security policies, control method therefor, and storage medium

Patent metadata

Field	Value
Publication number	US-2016112459-A1
Application number	US-201514978213-A
Country	US
Kind code	A1
Filing date	Dec 22, 2015
Priority date	May 10, 2011
Publication date	Apr 21, 2016
Grant date	—

Abstract

An image processing apparatus which is capable of restraining operation that does not comply with security policies even in a case where security policies are changed through setting of user modes. The security policies are set in advance in the image processing apparatus. The image processing apparatus has a UI operation unit that enables operation on the image processing apparatus. When settings of the image processing apparatus are changed via the UI operation unit, it is verified whether or not the changed settings match the security policies. Operation of the image processing apparatus is restrained until it is verified that the changed settings match the security policies.

First claim

1 - 9 . (canceled)

10 . An image processing apparatus, comprising:
a managing unit configured to manage an operation setting of the image processing apparatus including a plurality of setting items; a setting unit configured to set a security policy of the image processing apparatus including a plurality of setting items; a storage unit configured to store correspondence information which defines a correspondence relationship between the plurality of setting items of the security policy and the plurality of the setting items of the operation setting; and an identifying unit configured to refer to the correspondence information stored in said storage unit and identify a setting item of the operation setting which corresponds to a setting item of the security policy set by said setting unit.

11 . The image processing apparatus according to claim 10 , further comprising a verifying unit configured to verify whether a setting content for the setting item of the operating setting identified by said identifying unit satisfies a constraint condition indicated by the setting item of the security policy.

12 . The image processing apparatus according to claim 10 , wherein one of the plurality of setting items included in the operation setting relates to whether to perform encryption when data is transmitted using IPP (Internet Printing Protocol).

13 . The image processing apparatus according to claim 10 , wherein one of the plurality of setting items included in the operation setting relates to whether to perform encryption when data is transmitted using SMTP (Simple Mail Transfer Protocol).

14 . The image processing apparatus according to claim 10 , wherein one of the plurality of setting items included in the security policy relates to whether to perform encryption of a communication path.

15 . A control method for an image processing apparatus, comprising:
managing an operation setting of the image processing apparatus including a plurality of setting items; setting a security policy of the image processing apparatus including a plurality of setting items; storing correspondence information which defines a correspondence relationship between the plurality of setting items of the security policy and the plurality of the setting items of the operation setting; and referring to the stored correspondence information and identifying a setting item of the operation setting which corresponds to a setting item of the set security policy.

16 . A non-transitory computer-readable storage medium storing a program for causing an image processing apparatus to implementing a control method, the control method comprising:
managing an operation setting of the image processing apparatus including a plurality of setting items; setting a security policy of the image processing apparatus including a plurality of setting items; storing correspondence information which defines a correspondence relationship between the plurality of setting items of the security policy and the plurality of the setting items of the operation setting; and referring to the stored correspondence information and identifying a setting item of the operation setting which corresponds to a setting item of the set security policy.

Assignees

• Canon Kk

Inventors

• Tsuchitoi Naoki

Classifications

• G06F21/608

  Secure printing · CPC title

• G06F21/50 Primary

  Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems · CPC title

• H04L63/0428

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/20 Primary

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title