JP2003288189A - Network device, network device management system, network device management method, and network device control method - Google Patents

Abstract

(57) [Summary] [Problem] A network device that can suppress unauthorized use of a third party due to leakage of authentication information, saves trouble of user registration and change of user authentication information, and is more easily managed by an administrator, and network device management. It is an object to provide a system and a control method thereof. SOLUTION: User authentication information management means for managing user authentication information and time lapse from issuance of the user authentication information, user authentication information update time interval obtaining means for obtaining a time interval for updating the user authentication information, A user authentication information updating unit that senses the passage of time, periodically issues new user authentication information by using an internal mechanism, and updates the user authentication information. A network device comprising a user authentication unit for collating the authentication information of the network device.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a network device (equipment connected to a computer network),
The present invention relates to a network device management system and a method for generating user authentication information for a network device.

[0002]

2. Description of the Related Art As conventional network devices used in an office environment, there are printers and copiers compatible with networks. Printers and copiers compatible with these networks are LAN (Local Area Network)
ork) and can print from a terminal on the network.

In an office using a copying machine, it is common to conclude a maintenance contract with a company that maintains the copying machine to pay a maintenance fee commensurate with the number of printed sheets.

When the copying machine is used in the office, it is usual to share the above-mentioned maintenance costs and the costs of consumables such as paper and toner in units such as sections and departments. At this time, the previous number of printed sheets is aggregated by division such as section or department and used for apportionment of costs.

Generally, the copying machine counts the number of printed sheets, and it is necessary to pay a counter fee to the company that manages the copying machine, which is expensive. Paper and toner used in printers and copiers also cost money. These expenses are generally managed for each department, and printers and copiers are also typically managed for each department.

In addition, the above printer and copying machine are
It is managed using an ID and password, and it is possible to use it only by entering the user ID and password when using it. With this mechanism, employees of other departments who do not know the user ID and password cannot use this printer or this copying machine.

However, when an employee of another department or a guest from the outside visits this department, there is a case where he or she wants to temporarily use the printer or copier of this department. In such a case, the administrator of the printer or copier of this department sets a new user ID / password for the printer / copier and notifies the employees or guests of other departments of the newly set user ID / password.
In this way, employees and guests in other departments can use the printers / copiers managed by this department.

Further, the network device may be a target of attack by a so-called hacker (a person who tries to know the user ID / password illegally). A hacker who once knows the user ID / password by hacking can use the device illegally as many times as long as the user ID / password is valid.

[0009]

In the office environment as described above, it is troublesome to be frequently used without permission by employees or guests of other departments who once know the user ID and password.

It is also a problem that employees or guests in other departments may teach a user ID / password to a third party and use it without their consent.

In order to prevent this, it is necessary for the administrator to invalidate the user ID and password after using the employees and guests of other departments.

Therefore, every time an employee or guest in another department uses the printer / copier, the administrator must register / delete the user ID / password for the printer / copier. There was a problem in that it took a lot of time.

Further, since the person who tries to know the user ID / password illegally escapes from the attack, the administrator is forced to change the user ID / password regularly, which is troublesome for the administrator. there were.

The present invention has been made in view of the problems of the prior art as described above, and an object thereof is to suppress the unauthorized use of a third party due to leakage of authentication information and save the trouble of user registration and change of user authentication information. Another object of the present invention is to provide a network device, a network device management system, a control method therefor, etc., which is easier for an administrator to manage.

[0015]

In order to solve the above problems, the present invention provides a network device which is connected to a network in which a plurality of terminals are connected and which can be used from an external terminal via the network. A user authentication information update time interval acquisition means for acquiring user authentication information and a user authentication information management means for managing the passage of time since the user authentication information is issued, and acquiring a time interval for updating the user authentication information is provided. When a processing request is received from an external terminal, it is equipped with a user authentication information updating unit that senses the passage of time, periodically issues new user authentication information using an internal mechanism, and updates the user authentication information. In addition, the user authentication means for collating the user authentication information is provided.

[0016]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT An embodiment of the present invention will be described below with reference to the drawings. Although a printer is assumed as a network device in the embodiments, the same applies to all devices connected to the network and managed, and the device is not limited to the printer.

[First Embodiment] The first embodiment will be described below. In Figure 1, printer (D103), for administrator
The PC (P101) and the PC (PC102) can communicate with each other via a computer network (N104). Here, the computer network is a LAN (Local Area Network)
However, the present invention is not limited to this.

The printer (D103) can be used by connecting from a terminal on the network.
User authentication shall be performed using the ID and password. In the first embodiment, it is assumed that the user ID / password of the user is input via the network (N104), but the user may input it directly from the input device provided in the printer (D103).

The printer (D103) has a timer therein and automatically issues a user ID and password periodically. The user ID and password issued by the printer are
It has randomness and cannot be easily guessed by people. The time interval automatically issued by the printer (D103) is
It is assumed that the administrator (M106) can set the printer (D103).

The issued user ID and password are stored in the internal storage medium of the printer (D103) as shown in FIG.
-It shall be recorded and managed in the password management table. For example, the user ID in the first row of the table in Figure 2
-The password is updated every hour and a new user ID and password are replaced.

Similarly, the second line user ID and password is 1
Daily, line 3 is updated weekly, line 4 is updated monthly. It is assumed that the user ID / password management table records the user ID / password issuance time and expiration date so that the elapsed time from the date and time of issuance can be known.

The printer (D103) uses the issued user ID
Administrator's PC (Personal Computer) used by M106 who is the administrator of the printer (D103) for the password (P101)
To notify. The location information (IP address, etc.) of the administrator PC (P101) is preset in the printer (D103) by the administrator (M106), and the printer (D103) stores the location of the administrator PC (P101) in the internal storage medium. Information shall be recorded.

A printer management program of the administrator PC (P101) is used as means for setting the time interval for automatically issuing the user ID / password and the location information of the administrator PC (P101) to the printer (D103). This can be realized by the agent program of the printer (D103) communicating using a protocol such as SNMP.

The operation of the printer (D103) will be described below with reference to the flowchart of FIG. Printer (D103)
Starts processing in S201 starting from the interrupt processing by the printer internal timer. Printer (D103)
Determines in S202 whether or not the user ID / password managed by the user ID / password management table of FIG. 2 has expired.

If it has not passed, the processing is terminated once,
Wait for the next timer interrupt processing. If it has passed, in S203, a new user ID / password is issued using the internal mechanism of the printer (D103). The internal mechanism is realized by software or hardware.

The old user ID / password is deleted from the user ID / password management table in S204. Or disable it. The new user ID and password are S205
Register in the user ID / password management table at.

It is desirable that the processing of S204 and S205 be performed almost at the same time. For example, the new user ID is added to the old user ID / password on the user ID / password management table.
-By overwriting the password, delete the user ID / password and register a new user ID / password at the same time.

The newly issued user ID and password are
In S206, it is sent to the administrator PC (P101) of the printer (D103) to notify the administrator (M106). As means for notifying, it is conceivable to send an e-mail, communicate with the printer management program of the administrator PC (S203), or the like.

Further, the administrator PC (S203) is a printer (D1
You may connect to 03) and issue a notification request to notify you of a valid user ID and password. Administrator's PC (S10
Communication between 1) and the printer (D103) shall not be stolen by a third party due to network security technology such as encryption.

With the above mechanism, the manager (M106) can always know the currently valid user ID and password of the printer (D103). When the guest (G107) is requested a user ID and password for using the printer (D103), the administrator selects any user ID and password from the currently valid passwords issued by the printer (D103). Then, the guest (G107) may be notified.

When the guest uses it only once, the password valid for one hour may be notified. If guests are staying for one day, it's a good idea to give them a password that's valid for one day.

Since the user ID and password notified to the guest cannot be automatically used after the expiration date, there is no fear of further use. Moreover, even if the guest notifies the third party of the user ID and password, there is no concern that the guest will be used illegally beyond the expiration date.

[Second Embodiment] A second embodiment will be described below. In the first embodiment, the printer itself automatically issues a user ID and password. The second embodiment is an example in which a terminal other than the printer on the network periodically issues a user ID / password automatically and registers the issued new user ID / password in the printer. As a result, the same effect as that of the first embodiment can be obtained.

The second embodiment has a structure as shown in FIG. The printer (D304), the administrator's PC (P301), the printer management server (P302), and the PC (PC303) can communicate with each other via the computer network (N305). The printer management server (P302) has a printer (D3
04) The printer management program to manage is running.

An agent program for communicating with an external terminal operates on the printer (D304).

The printer management program can manage (register / delete) the user ID / password of the printer (D304) by communicating with the agent program of the printer (D304). The printer management server has a user ID / password management table for managing the user ID / password of the printer (D304) as shown in FIG. Similarly, the printer (D304) also has a user ID
It has a password management table.

The processing of the printer management server (P302) in the above configuration will be described with reference to the flowchart of FIG.

The printer management server (P302) starts the process starting from the interrupt process by the internal timer. The printer management server (P302) is displayed in S402.
It is determined whether the user ID / password managed by the user ID / password management table in 2 has expired.

If it has not passed, the processing is once terminated,
Wait for the next timer interrupt processing. If so, the printer management program issues a new user ID / password in S403.

In step S404, the printer management program and the printer agent program communicate with each other, and the newly issued user ID / password is used as the printer user ID.
-Register in the password management table. At the same time, the old password is deleted and invalidated.

In step S405, the printer management program registers the new user ID / password in the user ID / password management table of the printer management server and deletes / invalidates the old user ID / password.

The order of the processes of S404 and S405 may be reversed. The newly issued user ID and password are used by the printer management program for the administrator of the printer (D304) in S406.
Send to PC (P301) to notify the administrator (M306). As a means of notifying, send an e-mail, for the administrator
It may be possible to communicate with the printer management program of the PC (S301).

In the second embodiment, it is assumed that the printer management server and the administrator PC are different terminals.
It may be the same terminal. In this case, it goes without saying that it is not necessary for the printer management server to notify the management PC of the user ID and password via the network.

The administrator's PC (P101), PC (PC102),
The administrator's PC (P301) or the like may be a general computer as shown in FIG.

FIG. 6 is a diagram showing the internal structure of a general personal user terminal device. In FIG. 6, 1200
Is a computer PC. PC1200 is CPU1
201, which executes device control software stored in the ROM 1202 or the hard disk (HD) 1211 or supplied from the flexible disk drive (FD) 1212, and executes the system bus 1204.
Control each device connected to the.

The CPU 1201 and RO of the PC 1200
The function of each unit of the present embodiment is realized by the program stored in the M1202 or the hard disk (HD) 1211.

A RAM 1203 functions as a main memory and a work area of the CPU 1201. A keyboard controller (KBC) 1205 is a keyboard (K
B) Control instruction input from 1209 or a device (not shown).

Reference numeral 1206 denotes a CRT controller (CRT
C) controls the display on the CRT display (CRT) 1210. 1207 is a disk controller (DK
In C), a boot program (startup program: a program for starting execution (operation) of hardware or software of a personal computer), a plurality of applications, edit files, user files, a hard disk (HD) 1211 for storing a network management program, and the like, and It controls access to the flexible disk (FD) 1212.

Reference numeral 1208 denotes a network interface card (NIC), which is a network printer, another network device, or another P device via the LAN 1220.
It exchanges bidirectional data with C.

It should be noted that the shapes and structures of the respective portions shown in the above-mentioned embodiments are merely examples of the embodiment for carrying out the present invention, and the technical scope of the present invention is thereby provided. It should not be construed as limiting. That is, the present invention can be implemented in various forms without departing from the spirit or the main features thereof.

[0051]

The network device and network device management system of the present invention actively change the user authentication information (user ID, password, etc.) and notify the administrator, so that the administrator himself / herself accesses the network device. Therefore, it is not necessary to register / delete the user authentication information. Also, the administrator does not have to worry about what user ID and password each time the user authentication information is changed.

Further, since the network device and the network device management system of the present invention change the user authentication information regularly, the guest user administrator does not intend to use the device for a long period of time, or a person who knows the user authentication information illegally. It is possible to suppress the unauthorized use from.

For example, even if an unauthorized person who wants to know the user authentication information can know the user ID / password by hacking, it cannot be used after a certain period of time. For this reason, it is possible to discourage a person who attempts to illegally know the user authentication information from hacking.

[Brief description of drawings]

FIG. 1 is a diagram showing a network configuration according to a first embodiment.

FIG. 2 is a diagram showing a user ID / password management table in the first embodiment.

FIG. 3 is a flowchart illustrating the processing performed by the printer according to the first exemplary embodiment.

FIG. 4 is a diagram showing a network configuration according to a second exemplary embodiment.

FIG. 5 is a diagram showing a flowchart of a process in a printer management server according to the second embodiment.

FIG. 6 is a diagram showing a general computer.

[Explanation of symbols]

P101 Administrator PC P102 PC D103 printer N104 network M106 admin G107 Guest

   ─────────────────────────────────────────────────── ─── Continued front page    F term (reference) 5B021 AA01 BB01 BB04 BB09 CC05                       EE04 NN18                 5C062 AA05 AA14 AA35 AB20 AB21                       AB41 AB42 AC03 AC22 AC23                       AC55 AC58 AE15 AF06 AF12                 5K032 AA08 EC00

Claims (8)

[Claims] 1. A network device that can be used from an external terminal via a network, and user authentication information management means for managing user authentication information and the passage of time since the user authentication information was issued, and the user authentication information. A user authentication information update time interval acquisition means for acquiring a time interval for updating the time interval, a time lapse is sensed, and the user authentication information is newly issued periodically using an internal mechanism to update the user authentication information. A network device comprising: a user authentication information updating unit that performs the user authentication information and a user authentication unit that collates the user authentication information when receiving a processing request from the external terminal. 2. An external terminal location information acquisition means for acquiring location information of the external terminal, and a user authentication information transmission means for transmitting the user authentication information issued by using the user authentication information updating means to the external terminal. The network device according to claim 1, comprising: 3. A network device management system for managing a network device that can be used from an external terminal via a network, the user authentication being for managing user authentication information and the passage of time since the user authentication information was issued. An information management unit, a user authentication information update time interval acquisition unit that acquires a time interval for updating the user authentication information, senses the passage of time, and periodically issues a new user authentication information by using an internal mechanism. User authentication information updating means for updating the user authentication information, and user authentication for registering the user authentication information issued by using the user authentication information updating means in the network device to be managed via the network. A network device management system comprising information registration means. 4. External terminal location information acquisition means for acquiring location information of the external terminal, and user authentication information transmission means for transmitting the user authentication information issued by using the user authentication information update means to the external terminal. The network device management system according to claim 3, further comprising: 5. A method of controlling a network device that can be used from an external terminal via a network, comprising: a user authentication information update time interval acquisition step of acquiring a time interval for updating user authentication information; A user authentication information updating step of periodically issuing the user authentication information newly by using an internal mechanism and updating the user authentication information, and a step of receiving the user authentication information when receiving a processing request from the external terminal. A method of controlling a network device, comprising: a user authentication step of performing verification. 6. An external terminal location information acquisition step of acquiring location information of the external terminal, and a user authentication information transmission step of transmitting the user authentication information issued using the user authentication information updating step to the external terminal. The method for controlling a network device according to claim 5, further comprising: 7. A management method for managing a network device usable from an external terminal via a network, comprising: a user authentication information update time interval acquisition step of acquiring a time interval for updating user authentication information; The user authentication information is updated by periodically issuing an internal mechanism to newly issue the user authentication information, and the user authentication information is updated using the user authentication information updating step. A network device management method comprising: a user authentication information registration step of registering the user authentication information in the network device to be managed. 8. An external terminal location information acquisition step of acquiring location information of the external terminal, and a user authentication information transmission step of transmitting the user authentication information issued using the user authentication information updating step to the external terminal. The network device management method according to claim 7, further comprising: