# US 10,484,417 B2 · Information processing apparatus that prevents unauthorized access thereto, method of controlling the information processing apparatus, and storage medium > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,417 B2 - Document ID: US10484417B2 - Status: Granted - Kind: B2 - Application number: 16/240,960 - Filed: 2019-01-07 - Published: 2019-05-09 - Granted: 2019-11-19 - Earliest claimed: 2015-05-13 - Assignees: Canon Kabushiki Kaisha - Applicants: Canon Kabushiki Kaisha - Inventors: Naoki Tsuchitoi - Web page: https://patentgrep.com/patent/US10484417B2 ## CPC - H04L 63/1433: {Vulnerability analysis} - H04L 61/2514: between local and global IP addresses - H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL} - H04L 63/1441: {Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002)} - H04L 63/205: {involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved (negotiation of communication capabilities H04L69/24)} - H04N 1/00: Scanning, transmission or reproduction of documents or the like, e.g. facsimile transmission; Details thereof - H04N 1/44: Secrecy systems - H04N 1/4406: {Restricting access, e.g. according to user identity (mechanisms actuated y cards, PIN or the like in apparatus for dispensing G07F7/08)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION ## Abstract An information processing apparatus which is capable of preventing unauthorized access thereto. The information processing apparatus is capable of communicating with a server. An inquiry is made of the server about an IP address of the information processing apparatus, which is managed by the server. When it is determined that the IP address obtained from the server as a result of the inquiry and an IP address stored in the information processing apparatus match each other, a warning that a security level of the information processing apparatus is low is issued. ## Claims ### Claim 1 An information processing apparatus capable of communicating with a server, comprising: a network interface; at least one memory that stores instructions; and at least one processor that executes the instructions to cause the information processing apparatus to perform operations comprising: obtaining an IP address assigned to the network interface; transmitting to the server an inquiring request for inquiring about whether the information processing apparatus is open to a global network, the inquiring request including at least the obtained IP address; receiving a response to the inquiring request from the server, the received response including information indicating whether the information processing apparatus is open to the global network, the information being determined based on a result of comparison of the obtained IP address included in the inquiring request and an IP address designating a sender of packet data constituting the inquiring request; and notifying a user of the information processing apparatus, when the response indicates that the information processing apparatus is open to the global network, of a warning that a security level of the information processing apparatus is low. ### Claim 2 (depends on 1) The information processing apparatus according to claim 1, wherein the performed operations further include executing a remedial measure to improve the security level of the information processing apparatus, when the response indicates that the information processing apparatus is open to the global network. ### Claim 3 (depends on 2) The information processing apparatus according to claim 2, wherein the execution of the remedial measure is implemented according to an instruction from a user. ### Claim 4 (depends on 1) The information processing apparatus according to claim 1, wherein in response to a user logging in to the information processing apparatus, the warning that the security level of the information processing apparatus is low is notified. ### Claim 5 (depends on 1) The information processing apparatus according to claim 1, wherein in response to a specific user logging in to the information processing apparatus, the warning that the security level of the information processing apparatus is low is notified. ### Claim 6 (depends on 5) The information processing apparatus according to claim 5, wherein the specific user is an administrative user who administrates security of the information processing apparatus. ### Claim 7 (depends on 1) The information processing apparatus according to claim 1, wherein the information processing apparatus is a printing apparatus that performs printing. ### Claim 8 A method of controlling an information processing apparatus capable of communicating with a server, the information processing apparatus including a network interface, the method comprising: an obtaining step of obtaining an IP address assigned to the network interface; an inquiry step of transmitting to the server an inquiring request for inquiring about whether the information processing apparatus is open to a global network, the inquiring request including at least the obtained IP address; a receiving step of receiving a response to the inquiring request from the server, the received response including information indicating whether the information processing apparatus is open to the global network, the information being determined based on a result of comparison of the obtained IP address included in the inquiring request and an IP address designating a sender of packet data constituting the inquiring request; and a warning step of notifying a user of the information processing apparatus, when the response indicates that the information processing apparatus is open to the global network, of a warning that a security level of the information processing apparatus is low. ### Claim 9 A non-transitory computer-readable storage medium storing a program for causing a computer to execute a method of controlling an information processing apparatus capable of communicating with a server, the information processing apparatus including a network interface, the method of controlling the information processing apparatus comprising: an obtaining step of obtaining an IP address assigned to the network interface; an inquiry step of transmitting to the server an inquiring request for inquiring about whether the information processing apparatus is open to a global network, the inquiring request including at least the obtained IP address; a receiving step of receiving a response to the inquiring request from the server, the received response including information indicating whether the information processing apparatus is open to the global network, the information being determined based on a result of comparison of the obtained IP address included in the inquiring request and an IP address designating a sender of packet data constituting the inquiring request; and a warning step of notifying a user of the information processing apparatus, when the response indicates that the information processing apparatus is open to the global network, of a warning that a security level of the information processing apparatus is low. ### Claim 10 A method of notifying to a user of a warning message relating to a network using an information processing apparatus and a server, comprising: the information processing apparatus transmitting to the server an inquiring request for inquiring about whether the information processing apparatus is open to a global network, the inquiring request including at least an IP address assigned to a network interface of the information processing apparatus; the server, upon condition that the server receives the transmitted inquiring request, comparing an IP address designating a sender of packet data constituting the inquiring request and the IP address included in the transmitted inquiring request and determining whether the information processing apparatus is open to the global network; the server transmitting information indicating whether the information processing apparatus is open to the global network as a response to the transmitted inquiring request, the information being obtained from the result of the determination; and the information processing apparatus, upon condition that the information processing apparatus receives the response from the server, controlling whether to notify the user of the warning message based on the response. ### Claim 11 (depends on 10) The method of notifying to the user of the warning message according to claim 10, wherein the transmission of the inquiring request is implemented by calling a Web API provided by the server. ### Claim 12 (depends on 10) The method of notifying to the user of the warning message according to claim 10, wherein, in response to a user logging in to the information processing apparatus, the warning message indicating that the security level of the information processing apparatus is low is notified. ### Claim 13 (depends on 10) The method of notifying to the user of the warning message according to claim 10, wherein, in response to a specific user logging in to the information processing apparatus, the warning message indicating that the security level of the information processing apparatus is low is notified. ### Claim 14 (depends on 13) The method of notifying to the user of the warning message according to claim 13, wherein the specific user is an administrative user who administrates security of the information processing apparatus. ### Claim 15 (depends on 10) The method of notifying to the user of the warning message according to claim 10, wherein the information processing apparatus is a printing apparatus that performs printing.