1. Field of the Invention
The present invention relates to a facsimile server connected with a terminal device such as a Personal Computer (PC) via a communication network such as a Local Area Network (LAN).
2. Description of the Related Art
In recent years, facsimile systems have spread in offices and other similar environments. The facsimile systems play advantageous roles in data communications in the offices and other environments. Such a system is configured to include a facsimile server and a so-called client PC, such as a terminal device, connected, for example, by a communication network such as a LAN. When data is received via facsimile, the facsimile server transfers the data to the client PC. Furthermore, when data having a designated transfer destination is received from the client PC, the facsimile server sends the received data to the designated transfer destination.
Such a facsimile server is equipped with a network board having a web server function. When receiving a facsimile or an electronic mail (e-mail), document management is performed by storing the received document in a personal folder or a shared folder within the network board in accordance with a delivery setting. The user can fetch the stored document from the client PC by making access to a storage location in the network board where the document is stored.
In such a facsimile system, a system administrator can be registered, and a device setting can be performed from a browser of a terminal device (a PC). To prevent a person other than the system administrator from altering the device setting or viewing registered items, authentication is performed with an Internet Protocol (IP) address or a password in order to limit the access.
In the above-described conventional facsimile server, the authentication is performed with the IP address or the password in order to limit the access. There is a problem that this process is cumbersome because a password must be set, maintained, and managed. Furthermore, it has been necessary to provide security against acquisition of the device information from the outside. Nonetheless, the device is required to provide easy controllability. Therefore, there is a demand for a method of simplifying the access.
On the other hand, in case of a security system using a password, there is a problem that if a password registered with a device is known to a third party, the third party can easily acquire the device information.
In view of the foregoing problems, an advantage of the present invention is to provide a facsimile server which can easily perform authentication management and can prevent unauthorized access using a password.
According to a preferred aspect of the present invention, a facsimile server includes a connection unit and a control unit. The connection unit establishes a connection with a terminal device via a communication network. When a terminal device located in the same segment as the facsimile server logs into the facsimile server, the control unit does not perform a password authentication. When a terminal device outside the same segment logs in, the control unit performs the password authentication.
According to another preferred aspect of the present invention, a facsimile server includes a connection unit, a password storage unit, and a control unit. The connection unit establishes a connection with a terminal device via a communication network. The password storage unit stores a password and an expiration date of the password. When a terminal device logs in, the control unit invalidates an expired password.
According to another preferred aspect of the present invention, when all the passwords stored in the password storage unit have expired, the control unit carries out a notification of such a fact.
According to the above-described facsimile server, if an access is made from a terminal device within the same segment where the facsimile server is located, no password is necessary. However, if an access is made from a terminal device not located in the same segment, an entry of a password is requested. Furthermore, the facsimile server determines whether a presently entered password agrees with any one of the passwords registered in the facsimile server. Consequently, security can be secured by simple authentication management.
In addition, any access using an expired password is invalidated. Therefore, even if a password is known to a third party, access can be inhibited after the password has expired. In consequence, the security can be enhanced.
In addition, when all of the passwords have expired, such a fact is notified to the system administrator or a user. Consequently, the administrator or the user can easily recognize that a new password should be set.
Other features, elements, processes, steps, characteristics and advantages of the present invention will become more apparent from the following detailed description of preferred embodiments of the present invention with reference to the attached drawings.
A preferred embodiment of the present invention in which a facsimile server is applied to a digital MFP is hereinafter described with reference to the drawings.
The network configuration illustrated in
An IP address includes a network portion and a host portion. The network portion of the IP address of the devices within the same segment is set to the same value. Within the same segment, the host portion of the IP addresses must not be set to the same value. Accordingly, the IP address of the digital MFP land the PCs 3 and 4 is set to “192.168.144.10”, “192.168.144.11”, and “192.168.144.12”, respectively. The IP address of the digital MFP 2 and the PCs 5 and 6 is set to “192.168.128.10”, “192.168.128.11”, and “192.168.128.12”, respectively.
Meanwhile, each of the digital MFPs 1 and 2 has various functions such as copy mode, print mode, and facsimile mode. Each of the digital MFPs 1 and 2 also has an e-mail sending function. The digital MFPs 1 and 2 are connected with the PSTN 8 and respectively with the networks 9 and 10. The networks 9 and 10 are also connected with the Internet (not illustrated). The digital MFPs 1 and 2 can send and receive e-mail via the Internet.
The CPU 11 controls the various parts of the hardware of the digital MFP 1 via the bus 23, and executes various programs based on a program stored in the ROM 12. The ROM 12 previously stores various programs necessary for an operation of the digital MFP 1 and an operational message or the like. The RAM 13 includes a Static RAM (SRAM) or the like and stores temporal data produced during an execution of a program. The RAM 13 includes an area for storing a delivery setting table 24 that stores a setting for a delivery destination in a case where a facsimile or e-mail is received.
The delivery setting table 24 is used to set a condition for deciding a delivery destination from at least one of a facsimile number of a sender and information included in the e-mail. When receiving a facsimile, it is normally difficult to identify a user of a destination. Each e-mail includes prescribed header information and a body. The header information includes “Date” indicating a date and time at which the e-mail was sent, “To” indicating the destination of the e-mail, “From” indicating a transmitter of the e-mail, and “Subject” indicating additive information such as a title of the e-mail. When the digital MFP 1 or 2 receives e-mail, the user of the destination address cannot be identified because an e-mail address dedicated for the digital MFP 1 or 2 is described in the “To” field. Therefore, information for determining the delivery destination from a caller number notification or an Integrated Services Digital Network (ISDN) subaddress sent from an exchange equipment at an arrival of a call can be set in the delivery setting table 24. Information for determining the delivery destination from a sender number that is sent as a Transmitter Subscriber Identification (TSI) signal in a facsimile procedure can be set in the setting table 24. Furthermore, information for determining the delivery destination from an F-code subaddress and a password sent in the facsimile procedure can be set in the setting table 24.
The display-and-control unit 14 includes a display portion and operation keys. The display portion displays an operational status of the digital MFP 1 or a control screen of various functions. The operation keys include numerous keys for operating the digital MFP 1. The scanner unit 15 includes at least one of an Auto Document Feeder (ADF) and a document table for a Flat Bed Scanner (FBS). The scanner unit 15 scans an original document by a scanner utilizing a Charge-Coupled Device (CCD) or the like, and outputs dot image data.
The image memory 16 includes a Dynamic RAM (DRAM) and stores image data to be transmitted, received image data, or image data scanned by the scanner unit 15. The recorder unit 17 includes an electrophotographic printer or the like and prints out received data, copied document data, or print data transmitted from an external PC.
The codec 18 encodes and decodes image data in accordance with a given protocol. The codec 18 encodes image data of a scanned original document by Modified Huffman (MH), Modified Read (MR), or Modified MR (MMR) scheme to transmit the image data. The codec 18 converts image data received from the outside into a generally used image format as a file that can be attached to an e-mail. At this time, the codec 18 encodes and decodes image data received from the outside to convert the image data into an image format such as a Tagged Image File Format (TIFF).
The modem 19 is connected with the bus 23 and has a function of a facsimile modem capable of facsimile communication. The modem 19 is also connected with the NCU 20, which is connected with the bus 23. The NCU 20 is a hardware unit for making and breaking an analog network. If necessary, the NCU 20 connects the modem 19 with the PSTN 8.
As illustrated in the functional block diagram of
The TCP/IP protocol control unit 31 controls the TCP/IP. The HTTPD control unit 32 performs processing on the HTTPD function, using a data stream transfer function of the TCP/IP protocol control unit 31, and handles a request from a World Wide Web (WWW) browser of the PCs 3 and 4 or the like. Further, the HTTPD is a daemon offering a function of an HTTP server, and is used when operating a Web server on the UNIX® operating system.
The website management unit 33 outputs a website file to the HTTPD control unit 32 in response to a website request from the HTTPD control unit 32. The document management unit 34 stores documents obtained as a result of an operation performed from the digital MFP 1, such as documents transmitted by facsimile, documents obtained by scanning, and delivery documents received by facsimile and/or e-mail. The document management unit 34 converts information of a list of stored documents into a file in the Hyper Text Markup Language (HTML) format in response to a request from the HTTPD control unit 32. Then, the document management unit 34 outputs the file to the HTTPD control unit 32, analyzes information entered from the HTTPD control unit 32, and processes the stored documents. For example, the document management unit 34 transfers or deletes the stored documents.
The LAN interface 22 is connected with the network 9 and receives data from an external PC or data from the Internet via the network 9. The LAN interface 22 also sends data to the network 9. The LAN interface 22 executes interface processing including data conversion and protocol conversion.
The digital MFPs 1 and 2 are constructed as described above. During facsimile transmission, image data of an original document is scanned by the scanner unit 15. The scanned data is compressed by the codec 18 and stored in the image memory 16. The compressed image data is read from the image memory 16 and modulated by the modem 19. The modulated image data is then sent to a communicating party from the NCU 20 via the PSTN 8. During facsimile reception, if a delivery setting is not made in particular, the received image data is demodulated by the modem 19, and stored in the image memory 16. Then, the image data is decoded by the codec 18, and printed out by the recorder unit 17.
During reception of e-mail, a delivery process to a specified delivery destination is carried out according to the setting in the delivery setting table 24. That is, when receiving e-mail, received data is stored in a corresponding folder and/or the received data is printed out by the recorder unit 17 according to the setting in the delivery setting table 24. The received data is printed out when the setting in the delivery setting table 24 includes printout.
Next, a description will be made of an operation performed when viewing a document stored in each folder of the document management unit 34 as described above from the PCs 3 and 4 or the like. A user starts a WWW browser. For example, a WWW browser screen is displayed on the monitor of the PC 4. On this WWW browser screen, an IP address of the digital MFP 1 is specified to make access. This is detected by the HTTPD control unit 32 of the network board 21 of the MFP 1. A website file described in the HTML is read from the website management unit 33 and transferred to the PC 4 via the TCP/IP protocol control unit 31, the LAN interface 22, and the network 9.
When the user selects display of a list of documents from the website and gives an instruction, the request for the display of the list is transferred to the digital MFP 1 via the network 9. This is detected by the HTTPD control unit 32 of the network board 21. Thus, the HTTPD control unit 32 instructs the document management unit 34 to transfer the list of the documents. The document management unit 34 converts information about the list of the stored documents into an HTML format file, and transfers the file to the PC 4. Consequently, the screen of the list of the documents illustrated in
As illustrated in
The switching tag “option” on the screen of
When an administrator clicks “remote connection” in the optional function selection screen as illustrated in
Next, by referring to the flowchart of
When the system administrator clicks a button in the option selection screen of
Then, the HTTPD control unit 32 determines whether or not an HTTP response has been received from the PC 3 (step 105). When receiving an HTTP response (step 105: Yes), a determination is made as to whether or not a user name and a password have been entered (step 106). When a determination is made that the user name and the password have been entered (step 106: Yes), the HTTPD control unit 32 determines whether or not the entered user name and the password correspond with a user name and a password stored in the password management unit 35 (step 107). When a determination is made that the entered user name and the password correspond with those stored in the password management unit 35 (step 107: Yes), the requested HTTP processing is carried out (step 108). When a determination is made at step 106 that the user name and the password have not been entered (step 106: No) or when a determination is made at step 107 that the entered user name and the password do not correspond with those stored in the password management unit 35 (step 107: No), the HTTPD control unit 32 returns an HTTP error response (step 109).
As described above, a password is not requested to be entered when an access is made from a terminal device within the same segment where the digital MFP is located. However, a password is requested to be entered when an access is made from a terminal device outside the same segment. In addition, a determination is carried out as to whether or not the entered password corresponds with the password registered in the digital MFP. Consequently, security can be guaranteed by simple authentication management.
In the first preferred embodiment described above, a determination is simply carried out as to whether the entered user name and the password correspond with those stored in the digital MFP. In the following, a description will be made of a second preferred embodiment in which a plurality of passwords may be registered and an expiration date is set for each password to improve security. The structure of the digital MFP 1 is the same as the structure already described in connection with
By referring to the flowchart of
When the system administrator clicks any button on the option selection screen (
Then, the HTTPD control unit 32 determines whether or not the PC 3 has made an HTTP response (step 203). When receiving an HTTP response (step 203: Yes), a determination is made as to whether or not a user name and a password have been entered (step 204). When a determination is made that the user name and the password have been entered (step 204: Yes), the HTTPD control unit 32 determines whether or not the entered user name and the password correspond with a user name and a password stored in the password management unit 35 (step 205). When a determination is made that the entered user name and the password correspond with those stored in the password management unit 35 (step 205: Yes), a determination is made as to whether or not the password has expired (step 206). When a determination is made that the password has not expired (step 206: Yes) the HTTP processing requested by the system administrator is executed (step 207).
On the other hand, when a determination is made at step 204 that at least one of the user name and the password has not been entered (step 204: No), or when a determination is made at step 205 that at least one of the user name and the password does not correspond with the user name and the password stored in the password management unit 35 (step 205: No), or when a determination is made at step 206 that the password has expired (step 206: No), the HTTPD control unit 32 makes an HTTP error response (step 208). As described above, since any access made with an expired password is invalidated, even when the password has become known to a third party, access can be inhibited after an expiration of the password. Consequently, the security can be enhanced.
On the other hand, when the password is set to have an expiration date as described above, in case all passwords expire, the system administrator fails to execute a processing even if the system administrator enters a password. Therefore, it is desired to give a notice of the expiration to the system administrator or a user. By referring to the flowchart of
The HTTPD control unit 32 of the network board 21 executes a program illustrated in the flowchart of
When a determination is made that all the passwords have expired (step 302: Yes), the HTTPD control unit 32 gives a notice of the expiration to the system administrator or the user using an e-mail or the like (step 303). When the expiration is notified (step 303) or when a determination is made at step 302 that there is an unexpired password (step 302: No), the HTTPD control unit 32 determines whether or not the expiration date of the password of all users has been checked (step 304). When there is any user having an unchecked expiration date, the expiration date of the password of the next user is checked (step 302). When a determination is made that the expiration date of the password of all the users has been checked, the program is ended.
When all the passwords have expired, a notification of the expiration is given to the system administrator or the user as described above. Therefore, the system administrator or the user can easily recognize that a new password should be set.
The above-described second preferred embodiment can be applied to a system in which an entry of a password is not requested for an access from a terminal device within the same segment, and in which an entry of a password is requested for an access from a terminal device located outside the same segment. The second preferred embodiment can also be applied to a system in which an entry of a password is requested also for an access from a terminal device within the same segment.
In the above-described preferred embodiments, the facsimile server according to the present invention is applied to a digital MFP as an example. The facsimile server according to the present invention can also be applied to a facsimile machine or an e-mail server having neither a copy function nor a PC print function.
While the present invention has been described with respect to preferred embodiments thereof, it will be apparent to those skilled in the art that the disclosed invention may be modified in numerous ways and may assume many embodiments other than those specifically set out and described above. Accordingly, it is intended by the appended claims to cover all modifications of the present invention that fall within the true spirit and scope of the present invention.
Number | Date | Country | Kind |
---|---|---|---|
2005-187530 | Jun 2005 | JP | national |