INFORMATION PROCESSING APPARATUS AND CONTROL METHOD

Abstract

An information processing apparatus that communicates using an electronic certificate is provided. When identification information is configured that identifies the information processing apparatus on a network, the configured identification information is stored in a storage unit. A request for issue of an electronic certificate containing the identification information stored in the storage unit is issued to a certificate authority. Once the request for issue is issued, a determination is made as to whether or not the identification information contained in the request for issue matches the identification information stored in the storage unit prior to obtaining the electronic certificate that is issued by the certificate authority in response to the request for issue. If it is determined that a mismatch exists, the user is notified to that effect.

Description

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a diagram depicting an example of a network system assembly to which the present invention is applied.

FIG. 2 is a block diagram that depicts an example of a printing device hardware assembly according to the embodiment.

FIG. 3 is a block diagram that depicts an example of a server apparatus hardware assembly according to the embodiment.

FIG. 4 is a flowchart that depicts an overview of operation of an electronic certificate pertaining to the printing device according to the embodiment.

FIG. 5 is a flowchart that depicts an example of Certificate Signing Request processing according to the embodiment.

FIG. 6 is a flowchart that depicts an example of electronic certificate acquisition processing according to the embodiment.

FIGS. 7A-B are flowcharts that depicts an example of electronic certificate identification information mismatch notification processing according to the first embodiment.

FIGS. 8A-B are flowcharts that depicts a modified example of FIGS. 7A-B.

FIGS. 9A-E are flowcharts that depicts an example of CA service processing according to the first embodiment.

FIG. 10 is a diagram depicting an example of a printing device user interface assembly according to the embodiment.

FIG. 11 is a flowchart that depicts an example of operation of an electronic certificate according to the second embodiment.

FIG. 12 is a flowchart that depicts a variant example of FIG. 11.

FIG. 13 is a diagram depicting an example of a user interface screen when altering printing device identification information according to the embodiment.

FIG. 14 is a diagram depicting an example of a software keyboard display according to the embodiment.

FIG. 15 is a flowchart that depicts an example of printing device identification information alteration processing according to the second embodiment.

FIG. 16 is a flowchart that depicts a variant example of printing device identification information alteration processing according to the second embodiment.

FIGS. 17 and 18 are diagrams depicting error message display examples according to the second embodiment.

FIG. 19 is a flowchart that depicts an example of printing device Certificate Signing Request suspension processing according to the second embodiment.

FIG. 20 is a diagram depicting an example of an error screen in the event that no Certificate Signing Request (CSR) exists, according to the second embodiment.

FIG. 21 is a diagram depicting an example of a Certificate Signing Request cancellation screen according to the second embodiment.

FIG. 22 is a flowchart that depicts an example of printing device electronic certificate suspension or revocation processing according to the second embodiment.

FIG. 23 is a diagram depicting an example of an error screen for electronic certificate suspension or revocation operations according to the second embodiment.

FIG. 24 is a diagram depicting an example of a check screen for electronic certificate suspension or revocation operations according to the second embodiment.

FIG. 25 is a flowchart that depicts an example of printing device processing according to the third embodiment.

FIG. 26 is a diagram depicting an example of an error screen for device information acquisition via DHCP, according to the third embodiment.

FIG. 27 is a diagram depicting an example of an error screen for device information setting according to the third embodiment.

Claims

1. An information processing apparatus that performs communication using an electronic certificate, comprising: a configuration unit adapted to configure identification information for identifying the information processing apparatus on a network;a storage unit adapted to store the identification information configured by said configuration unit;a certificate request unit adapted to issue a first request for issue of the electronic certificate, containing the identification information stored in said storage unit, to a certificate authority;a determination unit adapted to determine whether or not the identification information stored in said storage unit has been altered between the time that the first request is issued by said certificate request unit, and the time that the electronic certificate issued by the certificate authority in response to the first request is obtained; anda notification unit adapted to issue a notification indicating that the identification information has been altered, when it is determined by said determination unit that the identification information has been altered.

2. An information processing apparatus that performs communication using an electronic certificate, comprising: a configuration unit adapted to configure identification information for identifying the information processing apparatus on a network;a storage unit adapted to store the identification information configured by said configuration unit;a determination unit adapted to determine whether or not first identification information contained in an electronic certificate matches second identification information stored in said storage unit, if the electronic certificate issued by a certificate authority has been obtained; anda notification unit adapted to issue a notification indicating that the first and second identification information do not match, when it is determined by the determination unit that the first and second identification information do not match.

3. The information processing apparatus according to claim 1, further comprising: a cancellation request unit adapted to issue a second request for cancellation, of the first request, to the certificate authority, if it is determined by said determination unit that the identification information has been altered.

4. The information processing apparatus according to claim 3, wherein the certificate request unit further issues a third request for issue of an electronic certificate, following the issue of the second request by said cancellation request unit.

5. The information processing apparatus according to claim 2, further comprising: a revocation request unit adapted to issue a fourth request for revocation of the electronic certificate, to the certificate authority, if it is determined by said determination unit that the first identification information and the second identification information do not match.

6. The information processing apparatus according to claim 5, further comprising: a certificate request unit adapted to issue a fifth request for issue an electronic certificate, containing the identification information stored in said storage unit, to a certificate authority;wherein said certificate request unit further issues the fifth request for issue of an electronic certificate, following the issue of the fourth request by said revocation request unit.

7. A control method for an information processing apparatus that is capable of configuring identification information for identifying itself on a network, and that is constituted such that the configured identification information is stored in a storage unit, as well as to perform communication using an electronic certificate, comprising the steps of: issuing a first request for issue of the electronic certificate, containing the identification information stored in the storage unit, to a certificate authority;determining whether or not the identification information stored in the storage unit has been altered between the time that the first request is issued and the time that the electronic certificate issued by the certificate authority in response to the first request is obtained; andissuing a notification indicating that the identification information has been altered, when it is determined in said determination step that the identification information has been altered.

8. A program for controlling an information processing apparatus, having a computer executing the program, a configuration unit adapted to configure identification information for identifying the information processing apparatus on a network, and a storage unit adapted to store the identification information configured by the configuration unit, the program comprising code for performing the following steps: issuing a first request for issue of the electronic certificate, containing the identification information stored in the storage unit, to a certificate authority;determining whether or not the identification information stored in the storage unit has been altered between the time that the first request is issued and the time that the electronic certificate issued by the certificate authority in response to the first request is obtained; andissuing a notification indicating that the identification information has been altered, when it is determined in said determination step that the identification information has been altered.

9. An information processing apparatus that performs communication using an electronic certificate, comprising: a configuration unit adapted to configure identification information for identifying the information processing apparatus on a network;a storage unit adapted to store the identification information configured by said configuration unit;a certificate request unit adapted to issue a first request for issue of the electronic certificate, containing the identification information stored in said storage unit, to a certificate authority; anda control unit adapted to prevent an alteration to the identification information, by said configuration unit, between the time that the first request is issued by said certificate request unit, and the time that the electronic certificate issued by the certificate authority in response to the request is obtained.

10. The information processing apparatus according to claim 9, further comprising: a cancellation request unit adapted to issue a second request for cancellation, of the first request, to the certificate authority; andwherein said control unit further negates the prevention of alteration to the identification information, by said configuration unit, between the time that the first request is issued by said certificate request unit, and the time that the electronic certificate that is issued by the certificate authority in response to the first request is obtained, if the second request is issued by the cancellation request unit.

11. A control method for an information processing apparatus that performs communication using an electronic certificate, the apparatus comprising a configuration unit adapted to configure identification information for identifying itself on a network, and a storage unit adapted to store the identification information configured by the configuration unit, the method comprising the steps of: issuing a first request for issue of the electronic certificate, containing the identification information stored in the storage unit, to a certificate authority; andpreventing an alteration to the identification information, by the configuration unit, between the time that the first request is issued, and the time that the electronic certificate that is issued by the certificate authority in response to the first request is obtained.

12. A program for controlling an information processing apparatus having a computer executing the program, a configuration unit adapted to configure identification information for identifying the information processing apparatus on a network, and a storage unit adapted to store the identification information configured by the configuration unit, the program comprising code for performing the following steps: issuing a first request for issue of the electronic certificate, containing the identification information stored in the storage unit, to a certificate authority; andpreventing an alteration to the identification information, by the configuration unit, between the time that the first request is issued, and the time that the electronic certificate that is issued by the certificate authority in response to the first request is obtained.

13. An information processing apparatus that performs communication using an electronic certificate, comprising: a configuration unit adapted to configure identification information for identifying the information processing apparatus on a network;a storage unit adapted to store the identification information configured by said configuration unit; anda control unit adapted to prevent an alteration, by said configuration unit, to identification information contained in an electronic certificate, if the electronic certificate issued by the certificate authority has been obtained.

14. The information processing apparatus according to claim 13, further comprising: a certificate request unit adapted to issue a first request for issue of the electronic certificate, containing the identification information stored in said storage unit, to a certificate authority; anda revocation request unit adapted to issue a second request for revocation of the electronic certificate, to the certificate authority, after the electronic certificate issued by the certificate authority in response to the first request issued by the certificate request unit, has been obtained;wherein said control unit further negates the prevention of alteration to the identification information, by the configuration unit, if the second request is issued by the revocation request unit.

15. A control method for an information processing apparatus that performs communication using an electronic certificate, the apparatus comprising a configuration unit adapted to configure identification information for identifying itself on a network, and a storage unit adapted to store the identification information configured by the configuration unit, the method comprising the step of: preventing an alteration, by the configuration unit, to identification information contained in an electronic certificate, if the electronic certificate issued by the certificate authority has been obtained.

16. A program for controlling an information processing apparatus that performs communication using an electronic certificate, the apparatus comprising a computer executing the program, a configuration unit adapted to configure identification information for identifying itself on a network, and a storage unit adapted to store the identification information configured by the configuration unit, the program comprising code for performing prevention of an alteration, by the configuration unit, to identification information contained in an electronic certificate, if the electronic certificate issued by the certificate authority has been obtained.