# US 10,484,362 B2 · Information processing apparatus, access control method, and recording medium storing access control program > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,362 B2 - Document ID: US10484362B2 - Status: Granted - Kind: B2 - Application number: 15/345,673 - Filed: 2016-11-08 - Published: 2017-06-01 - Granted: 2019-11-19 - Earliest claimed: 2015-11-30 - Assignees: Richoh Company, Ltd. - Applicants: Hiroshi Kakii - Inventors: Hiroshi Kakii - Web page: https://patentgrep.com/patent/US10484362B2 ## CPC - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/101: {Access control lists [ACL]} - H04L 63/105: {Multiple levels of security} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An information processing apparatus includes multiple input interfaces each capable of receiving a user instruction to perform a management function provided by the information processing apparatus and circuitry that accepts, independently for each one of the multiple input interfaces, a selection that selects an option among multiple options regarding the access to the management function, the multiple options including an option that limits access to the management function and an option that allows access to the management function without authentication and controls access to the management function independently via each of the multiple input interfaces based on the option independently selected for each of the multiple input interfaces. ## Claims ### Claim 1 An information processing apparatus, comprising: multiple input interfaces each capable of receiving a user instruction to perform a management function provided by the information processing apparatus, the multiple input interfaces including a first input interface and a second input interface, the first input interface being a control panel and the second input interface configured to interface with a networked device; and circuitry configured to, display, on the control panel, an administrator login interface configuration screen such that the administrator login interface configuration screen simultaneously displays multiple access settings corresponding to each of the multiple input interfaces on a same screen, the multiple access settings including, for each of the multiple input interfaces, an open-access setting, a login-required setting, and a login-disabled setting, determine, independently for each one of the multiple input interfaces, a set access setting from among the multiple access settings based on input received from an administrator in response to the multiple access settings for each of the multiple input interfaces simultaneously displayed on the same screen; and control access to the management function independently via each of the multiple input interfaces based on the input independently selected for each of the multiple input interfaces such that the circuitry is configured to, allow the access to the management function via a respective one of the multiple input interfaces irrespective of an authentication, in response to the set access setting for the respective one of the multiple input interfaces being the open-access setting, allow the access to the management function via the respective one of the multiple input interfaces based on the authentication, in response to the set access setting for the respective one of the multiple input interfaces being the login-required setting, and deny the access to the management function via the respective one of the multiple input interfaces irrespective of the authentication, in response to the set access setting for the respective one of the multiple input interfaces being the login-disabled setting. ### Claim 2 (depends on 1) The information processing apparatus according to claim 1, wherein the first input interface is configured to allow the access to the information processing apparatus when the administrator is physically present and the second input interface is configured to facilitate remote access to the information processing apparatus. ### Claim 3 (depends on 2) The information processing apparatus according to claim 2, wherein the first input interface is the control panel provided to the information processing apparatus, and the second input interface is a network interface that accepts the user instruction via a network. ### Claim 4 (depends on 2) The information processing apparatus according to claim 2, wherein the management function provided by the information processing apparatus includes a first management function to allow an upper level administrator to register one or more lower level administrators, the upper level administrator having an authority to register the one or more lower level administrators, each lower level administrator having an authority to operate the management function other than the first management function. ### Claim 5 (depends on 1) The information processing apparatus according to claim 1, wherein the circuitry is further configured to, in response to detecting login to the information processing apparatus to access the management function via one of the multiple input interfaces, deactivate one or more of the multiple interfaces other than the input interface used for login, and in response to detecting logout from the information processing apparatus via the input interface used for login, reactivate the deactivated other input interfaces. ### Claim 6 (depends on 5) The information processing apparatus according to claim 5, wherein the management function provided by the information processing apparatus includes a first management function to allow an upper level administrator to register one or more lower level administrators, the upper level administrator having an authority to register the one or more lower level administrators, each lower level administrator having an authority to operate the management function other than the first management function. ### Claim 7 (depends on 1) The information processing apparatus according to claim 1, wherein the circuitry is configured to, accept a request to access the management function via one of the multiple input interfaces, and determine, whether or not to allow access to the management function via the input interface used for inputting the request to access, based on the input associated with the respective one of the multiple input interfaces. ### Claim 8 (depends on 7) The information processing apparatus according to claim 7, wherein the management function provided by the information processing apparatus includes a first management function to allow an upper level administrator to register one or more lower level administrators, the upper level administrator having an authority to register the one or more lower level administrators, each lower level administrator having an authority to operate the management function other than the first management function. ### Claim 9 (depends on 1) The information processing apparatus according to claim 1, wherein the management function provided by the information processing apparatus includes a first management function to allow an upper level administrator to register one or more lower level administrators, the upper level administrator having an authority to register the one or more lower level administrators, each lower level administrator having an authority to operate the management function other than the first management function. ### Claim 10 A method of controlling access to a management function via multiple input interfaces provided on an information processing apparatus, the multiple input interfaces including a first input interface and a second input interface, the first input interface being a control panel, the second input interface configured to interface with a networked device, the method comprising: displaying, on the control panel, an administrator login interface configuration screen such that the administrator login interface configuration screen simultaneously displays multiple access settings corresponding to each of the multiple input interfaces on a same screen, the multiple access settings including, for each of the multiple input interfaces, an open-access setting, a login-required setting, and a login-disabled setting, determining, independently for each one of the multiple input interfaces, a set access setting from among the multiple access settings based on input received from an administrator in response to the multiple access settings for each of the multiple input interfaces simultaneously displayed on the same screen; and controlling access to the management function independently via each of the multiple input interfaces based on the input independently selected for each of the multiple input interfaces by, allowing the access to the management function via a respective one of the multiple input interfaces irrespective of authentication, in response to the set access setting for the respective one of the multiple input interfaces being the open-access setting, allowing the access to the management function via the respective one of the multiple input interfaces based on the authentication, in response to the set access setting for the respective one of the multiple input interfaces being the login-required setting, and denying the access to the management function via the respective one of the multiple input interfaces irrespective of the authentication, in response to the set access setting for the respective one of the multiple input interfaces being the login-disabled setting. ### Claim 11 (depends on 10) The method according to claim 10, wherein the first input interface is configured to allow the access to the information processing apparatus when the administrator is physically present and the second input interface is configured to facilitate remote access to the information processing apparatus. ### Claim 12 (depends on 11) The method according to claim 11, wherein the first input interface is the control panel provided to the information processing apparatus, and the second input interface is a network interface that accepts a user instruction via a network. ### Claim 13 A non-transitory computer-readable recording medium storing a program that, when executed by one or more processors, causes the processors to implement a method of controlling access to a management function via multiple input interfaces provided on an information processing apparatus, the multiple input interfaces including a first input interface and a second input interface, the first input interface being a control panel, the second input interface configured to interface with a networked device, the method comprising: displaying, on the control panel, an administrator login interface configuration screen such that the administrator login interface configuration screen simultaneously displays multiple access settings corresponding to each of the multiple input interfaces on a same screen, the multiple access settings including, for each of the multiple input interfaces, an open-access setting, a login-required setting, and a login-disabled setting, determining, independently for each of the multiple input interfaces, a set access setting from among the multiple access settings based on input received from an administrator in response to the multiple access settings for each of the multiple input interfaces simultaneously displayed on the same screen; and controlling access to the management function independently via each of the multiple input interfaces based on the input independently selected for each of the multiple input interfaces by, allowing the access to the management function via a respective one of the multiple input interfaces irrespective of authentication, in response to the set access setting for the respective one of the multiple input interfaces being the open-access setting, allowing the access to the management function via the respective one of the multiple input interfaces based on the authentication, in response to the set access setting for the respective one of the multiple input interfaces being the login-required setting, and denying the access to the management function via the respective one of the multiple input interfaces irrespective of the authentication, in response to the set access setting for the respective one of the multiple input interfaces being the login-disabled setting. ### Claim 14 (depends on 13) The non-transitory computer-readable recording medium according to claim 13, wherein-the first input interface is configured to allow the access to the information processing apparatus when the administrator is physically present and the second input interface is configured to facilitate remote access to the information processing apparatus. ### Claim 15 (depends on 14) The non-transitory computer-readable recording medium according to claim 14, wherein the first input interface is the control panel provided to the information processing apparatus, and the second input interface is a network interface that accepts a user instruction via a network.