Abstract: An information processing apparatus includes a determination unit configured to determine whether a user has authority to set setting data, a reception unit configured to, in a case where it is determined that the user has the authority to set the setting data, receive a setting of the setting data, a generation unit configured to generate verification data on the received setting data, and a verification unit configured to, in a case where the information processing apparatus starts, verify the setting data using the verification data.

Abstract: An information processing apparatus includes a determination unit configured to determine whether a user has authority to set setting data, a reception unit configured to, in a case where it is determined that the user has the authority to set the setting data, receive a setting of the setting data, a generation unit configured to generate verification data on the received setting data, and a verification unit configured to, in a case where the information processing apparatus starts, verify the setting data using the verification data.

Abstract: An information processing apparatus includes an installation unit that installs a first program after overwriting the first program so as to make the first program compatible with an operational environment on the information processing apparatus. A generation unit is included to generate first verification data based on the first program overwritten by the installation unit. A first detection unit is also included to detect an alteration to the first program after the installation based on the first verification data generated by the generation unit.

Abstract: An information processing apparatus includes an installation unit that installs a first program after overwriting the first program so as to make the first program compatible with an operational environment on the information processing apparatus. A generation unit is included to generate first verification data based on the first program overwritten by the installation unit. A first detection unit is also included to detect an alteration to the first program after the installation based on the first verification data generated by the generation unit.

Abstract: An information processing system that facilitates management of information security policy even for an extended application installed from exterior. A receiving unit receives security policy data in which a security policy is described. A management unit manages an extended application that can be added and deleted and that operates in an image processing apparatus. A notification unit notifies an administrator of error information about a security policy of an extended application managed by the management unit, when the extended application managed by the management unit does not comply with the security policy described in the security policy data, and when an identifier of an extended application that is extracted from the security policy data and that is excepted from applying the security policy does not match with the identifier of the extended application managed by the management unit.

Abstract: There is provided an apparatus, the apparatus comprising: a regeneration unit configured to, upon a change of a network configuration of the apparatus when communication by the second communication interface is set to be enabled in addition to enabled communication by the first communication interface, regenerate a digital certificate including at least two domain names of the first communication interface and of the second communication interface; an acquisition unit configured to acquire, as a signed digital certificate, the regenerated digital certificate with a digital signature attached; and an updating unit configured to update an old signed digital certificate currently held to the acquired signed digital certificate.

Abstract: An information processing apparatus which is capable of preventing unauthorized access thereto. The information processing apparatus is capable of communicating with a server. An inquiry is made of the server about an IP address of the information processing apparatus, which is managed by the server. When it is determined that the IP address obtained from the server as a result of the inquiry and an IP address stored in the information processing apparatus match each other, a warning that a security level of the information processing apparatus is low is issued.

Abstract: An image forming apparatus acquires an evaluation value of each user by using a combination of a plurality of criteria determined on the basis of usage history information, and determines priority order of users having a high possibility of using the image forming apparatus next time based on the acquired evaluation value.

Abstract: An information processing apparatus which is capable of reducing damage caused by invalid execution data received via a public network. The information processing apparatus carries out either communications using the public network or communications without using the public network with an external apparatus. An IP address assigned to the information processing apparatus is stored. Execution data for executing a job is received from the external apparatus. When the IP address assigned to the information processing apparatus is a global IP address that is for use in the communications using the public network, a setting is made to restrict execution of the execution data.

Abstract: An information processing apparatus which is capable of preventing unauthorized access thereto. The information processing apparatus is capable of communicating with a server. An inquiry is made of the server about an IP address of the information processing apparatus, which is managed by the server. When it is determined that the IP address obtained from the server as a result of the inquiry and an IP address stored in the information processing apparatus match each other, a warning that a security level of the information processing apparatus is low is issued.

Abstract: An image forming apparatus acquires an evaluation value of each user by using a combination of a plurality of criteria determined on the basis of usage history information, and determines priority order of users having a high possibility of using the image forming apparatus next time based on the acquired evaluation value.

Abstract: An image processing apparatus which is capable of restraining operation that does not comply with security policies even in a case where security policies are changed through setting of user modes. The security policies are set in advance in the image processing apparatus. The image processing apparatus has a UI operation unit that enables operation on the image processing apparatus. When settings of the image processing apparatus are changed via the UI operation unit, it is verified whether or not the changed settings match the security policies. Operation of the image processing apparatus is restrained until it is verified that the changed settings match the security policies.

Abstract: An information processing apparatus which is capable of preventing unauthorized access thereto. The information processing apparatus is capable of communicating with a server. An inquiry is made of the server about an IP address of the information processing apparatus, which is managed by the server. When it is determined that the IP address obtained from the server as a result of the inquiry and an IP address stored in the information processing apparatus match each other, a warning that a security level of the information processing apparatus is low is issued.

Abstract: An information processing system includes a first information processing apparatus for setting a security policy, and a second information processing apparatus subject to a function restriction according to the security policy set by the first information processing apparatus. The first information processing apparatus includes a generation unit generating forced data based on the security policy to set. The forced data includes a setting value for determining an operation of the second information processing apparatus and control information for controlling prohibition of a change of the setting value in the second information processing apparatus.

Abstract: When an expanded application (AP) is installed, an information processing apparatus analyzes port control information relating to a unique port to be used by the expanded AP and edits policy setting items including existing policy setting items based on the port control information. Then, the information processing apparatus receives setting input via the edited policy setting items and generates setting information. The information processing apparatus applies a filtering rule to a firewall (FW) unit according to the setting information, whereby the security is maintained in the case where the expanded AP is installed.

Abstract: An information processing apparatus which is capable of reducing damage caused by invalid execution data received via a public network. The information processing apparatus carries out either communications using the public network or communications without using the public network with an external apparatus. An IP address assigned to the information processing apparatus is stored. Execution data for executing a job is received from the external apparatus. When the IP address assigned to the information processing apparatus is a global IP address that is for use in the communications using the public network, a setting is made to restrict execution of the execution data.

Abstract: An information processing apparatus that makes it possible to save time and effort expended by an administrator on distribution of settings compliant with a security policy. Whether or not an application installed in the image processing apparatus to which setting values compliant with a security policy are to be distributed can be set to the settings is determined. When it is determined that the application cannot be set to the settings, whether or not the application can be set to the settings by updating thereof is determined. When the determination result indicates that the settings can be set by updating the application, the application is updated, and the settings are distributed to the image processing apparatus.

Abstract: An image forming apparatus that is capable of performing an update that properly maintains a security specification configuration for an image forming apparatus with a high security specification without making an improper update. Update of firmware is controlled to be stopped when it is determined that the specification configuration of the firmware before update is a security specification configuration, and an instruction to update the firmware has been manually issued.

Abstract: An image forming apparatus that facilitates management of information security policy even for an extended application installed from exterior. A scanning unit scans an original to generate image data of the original. A printing unit prints an image based on image data. A management unit manages applications dynamically installed. At least one of the applications executes a job using at least one of the scanning unit and the printing unit. A setting unit sets an operation mode for the image forming apparatus, based on security settings that are received from an external apparatus. A determination unit determines whether each of the applications supports the security settings. A control unit restricts an operation of an application that the determination unit determines that the application does not support the security settings.

Abstract: The hash value for an entire system file partition for storing firmware of an information processing apparatus is calculated. Alteration of the firmware is detected based on the hash value.