JP2006209504A - Network compatible image forming system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a network compatible image forming system that can limit functions can be used by each user by specifying the user without using the account information embedded in print data. <P>SOLUTION: The network compatible image forming system equipped with network print function has a utility limitation setup acquiring means for acquiring, based on the address information of other terminal connected to the same network, the utility limitation setup of the terminal device, and carries out user limitation for print request in which the user identification information cannot be embedded by using the utility limitation setup acquired by the utility limitation setup acquiring means. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a network-compatible image forming apparatus having a network print function.

  In general, in the information and communication network field, there has been a need for security such as encryption for a long time, but the necessity is increasing with the spread of the Internet. This is because anyone with a certain level of knowledge can eavesdrop on the Internet, and data tampering can be performed relatively easily. Against this background, products with built-in security, which could only be high-functional machines and dedicated machines, have spread widely to software, image devices, communication devices, etc. on personal computer devices, and will be used in general offices. It has become.

  In addition, in order to restrict the functions that can be used for each user for devices connected to the network, a method of restricting user authentication using account information based on a combination of a user name and a password is generally used. is there.

  Further, for example, with respect to user restriction when using a network printer, there is a technique for restricting use for each user or department by inputting a user code from an operation panel or using an ID card (Patent Document 1, Patent Document 1). 2).

As a result, it is possible to prevent excessive use by restricting the copy color, fax transmission, printing, scanner, etc. for each user, and setting the usage amount for each department and setting an upper limit for usage. It was.
JP 2002-178567 A JP 2002-240398 A

  However, with LPR, which is a protocol used for a print service that uses the network print function, account information cannot be incorporated into print data, so the use of the conventional method cannot be restricted.

  The present invention has been made in view of such circumstances, and it is possible to identify a user without using account information incorporated in print data and to form a network-compatible image that can limit functions that can be used for each user. An object is to provide an apparatus.

  According to the present invention, in a network-compatible image forming apparatus having a network print function, use restriction setting acquisition means for acquiring a use restriction setting of a terminal device based on address information of another terminal device connected to the same network And by using the use restriction setting acquired by the use restriction setting acquisition means, user restriction is performed for a print request in which user authentication information cannot be incorporated into printer data.

  In addition, when the use restriction setting acquisition unit performs user restriction based on account information combining a user name and a password, the use restriction setting acquisition unit includes an address information conversion unit that converts the address information of the terminal device into account information. is there.

  The usage restriction setting acquisition unit acquires the usage restriction setting using an IP address as address information of the terminal device when receiving a print request from the terminal device.

  The usage restriction setting acquisition unit acquires a usage restriction setting by using a MAC address as address information of the terminal device when receiving a print request from the terminal device.

  The usage restriction setting acquisition unit acquires the usage restriction setting using a computer name as address information of the terminal device when receiving a print request from the terminal device.

  In addition, when the use restriction setting acquisition unit cannot obtain the use restriction setting of the terminal device from the address information of the print request source terminal device, the use restriction setting for the guest is applied to restrict the use. It is. Further, the period for applying the guest use restriction setting can be restricted. In addition, a time zone in which the guest use restriction setting is applied can be restricted.

  In addition, in processing at the time of accepting a print request with a protocol that can incorporate account information in the print data, the use restriction setting corresponding to the account information incorporated in the print data, and the use restriction setting acquired by the use restriction setting acquisition unit Further, a selection unit that allows the user to select which of these is prioritized is further provided.

  Also,

  Therefore, according to the present invention, even when a function using a protocol that cannot add account information to data is used, the use of the function can be restricted for each user.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

  FIG. 1 shows a network system according to an embodiment of the present invention.

  In the figure, a plurality of personal computer devices PC1 to PCn (personal computer devices PC1 to PCn), an authentication server device SM, and a network compatible MFP FX are connected to the local area network LAN.

  Here, the authentication server device SM is provided with a use restriction information database storing use restriction information, and the information on the use restriction database is transmitted to the network network compatible MFP FX connected to the local area network LAN. A search service is provided. In other words, the network network compatible MFP FX can obtain the use restriction setting from the authentication server device SM as necessary.

  The personal computer devices PC1 to PCn have various programs such as facsimile application software for creating and displaying facsimile image information and various software for exchanging various data via the local area network LAN. Has been introduced and is used by specific users. Here, the specific user may be one or a plurality of users. In addition, various functions such as a network print function provided by the network compatible MFP FX can be used.

  Further, the network compatible MFP FX has an electronic mail processing function for exchanging image information and various reports as electronic mails, and other terminal devices connected to the local area network LAN (in this case, the personal computer device PC1). Network print function for providing a print function to PCn) and a transmission function for connecting to an analog public line network PSTN and performing image information transmission by a group 3 facsimile transmission procedure using the public network as a transmission path ing. In addition, the network-compatible MFP FX has a function to impose usage restrictions on the user for network functions such as a network print function provided by using the network. I am trying to get the settings.

  FIG. 2 shows a configuration example of the network compatible MFP FX.

  In the figure, a system control unit 1 performs various control processes such as a control process of each part of the network compatible MFP FX and a facsimile transmission control procedure process. The control processing program to be executed and various data necessary for executing the processing program are stored, and the work area of the system control unit 1 is configured. The parameter memory 3 is a network-compatible MFP FX. The clock circuit 4 outputs current time information.

  The scanner 5 is for reading a document image with a predetermined resolution, the plotter 6 is for recording and outputting an image with a predetermined resolution, and the operation display unit 7 is a network compatible MFP FX. It is for operation and consists of various operation keys and various displays.

  The encoding / decoding unit 8 encodes and compresses the image signal and also decodes the encoded and compressed image information into the original image signal. The magnetic disk device 9 stores various file data The image storage device 10 is for storing a large amount of image information that has been encoded and compressed.

  The group 3 facsimile modem 11 is for realizing the modem function of the group 3 facsimile, and is a low-speed modem function (V.21 modem) for exchanging transmission procedure signals and mainly for exchanging image information. A high-speed modem function (V.17 modem, V.34 modem, V.29 modem, V.27ter modem, etc.) is provided.

  The network control device 12 is for connecting the network compatible MFP FX to the analog public line network PSTN, and has an automatic outgoing / incoming function.

  The local area network interface circuit 13 is for connecting the network compatible MFP FX to the local area network LAN, and the local area network transmission control unit 14 is connected to another data terminal device via the local area network LAN. For executing communication control processing of various predetermined protocol suites for exchanging various data with each other.

  The system control unit 1, the system memory 2, the parameter memory 3, the clock circuit 4, the scanner 5, the plotter 6, the operation display unit 7, the encoding / decoding unit 8, the magnetic disk device 9, the image storage device 10, and the group 3 The facsimile modem 11, the network control device 12, and the local area network transmission control unit 14 are connected to an internal bus 15, and data exchange between these elements is mainly performed through the internal bus 15. It has been broken.

  Data exchange between the network control device 12 and the group 3 facsimile modem 11 is performed directly.

  Here, in the present embodiment, basically, data exchange between terminals connected to the local area network LAN is a transmission protocol up to a transport layer called TCP / IP, and more. This is performed by applying a combination with a higher layer communication protocol (so-called protocol suite). For example, LPR (Line Printer Daemon protocol; refer to RFC1179) is applied as a protocol for transferring print data from the personal computer apparatuses PC1 to PCn by the network print function.

  In this embodiment, first, the network administrator uses the setting screen of the usage restriction information database of the authentication server device SM as shown in FIGS. The address information of the personal computer devices PC1 to PCn used by the user and the information regarding the function that gives the user permission to use among the functions provided by the network compatible MFP FX are input and registered in the use restriction information database.

  Then, as shown in FIG. 6, the network-compatible MFP FX performs an operation when a device usage request is received from the user.

  That is, first, when receiving a device use request from the user (process 101), the network compatible MFP FX checks whether the authentication function of the device of the own terminal is enabled (determination 102).

  When the authentication function of the device of the own terminal is valid and the result of determination 102 is YES, the network compatible MFP FX acquires the address information of the personal computer devices PC1 to PCn used by the requesting user ( Process 103), together with its own address information, is sent to the authentication server apparatus SM having the use restriction information database, thereby obtaining the use restriction setting of the corresponding request source user from the authentication server apparatus SM (process 104).

  The network compatible MFP FX checks whether or not the device use request at that time is a function permitted by the acquired use restriction setting (decision 105), and when the result of the decision 105 is YES, the requested function is obtained. When the result of determination 105 is NO, the requested function is not executed and an execution non-permission notice is issued to the requesting user (process 107).

  Further, when the authentication function of the device of the own terminal is invalid and the result of determination 102 is NO, the process proceeds to processing 106 and the requested function is executed as it is.

  Next, another embodiment of the present invention will be described.

  In this embodiment, first, the network administrator uses the setting information of the usage restriction information database of the authentication server device SM as shown in FIGS. Enter the address information of the personal computer devices PC1 to PCn, the user account information, and information about the function that gives the user permission to use among the functions provided by the network compatible MFP FX, and register it in the usage restriction information database To do.

  In this case, as shown in FIG. 10, the network compatible MFP FX and the authentication server device SM perform an operation when a device usage request is received from the user.

  That is, first, upon receiving a device use request from the user (process 201), the network compatible MFP FX checks whether the authentication function of the device of the own terminal is enabled (decision 202).

  When the authentication function of the device of the own terminal is valid and the result of determination 202 is YES, the network compatible MFP FX acquires the address information of the personal computer devices PC1 to PCn used by the requesting user ( Process 203), by transmitting to the authentication server device SM having the use restriction information database together with its own address information, the use restriction setting of the corresponding request source user is acquired from the authentication server device SM (process 204).

  Here, the authentication server device SM is applicable when the user authentication is possible with the account information of the requesting user corresponding to the received address information of the personal computer devices PC1 to PCn (the result of the determination 204 is YES). The use restriction setting of the requesting user is transmitted to the network compatible MFP FX.

  As a result, when the network-compatible MFP FX receives the usage restriction setting from the authentication server device SM (process 205), whether the device usage request at that time is a function permitted by the acquired usage restriction setting or not. When the result of determination 206 is YES, the requested function is executed (process 207), and when the result of determination 206 is NO, the use restriction setting is set in the authentication server device. If it cannot be received from the SM (the result of determination 204 is NO), the requested function is not executed and an execution non-permission notice is issued to the requesting user (process 208).

  Further, when the authentication function of the device of the own terminal is invalid and the result of determination 202 is NO, the process proceeds to processing 207 and the requested function is executed as it is.

  In the above-described embodiment, only registered users can use the function of the network compatible MFP FX, but other users (guest users) can also use the function of the network compatible MFP FX. You may want to

  In this case, first, the administrator gives a guest permission to use among the functions provided by the network compatible MFP FX from the guest setting screen shown in FIG. 11 displayed on the operation display unit 7. The information regarding is input and stored in the storage device of the network compatible MFP FX.

  In this case, as shown in FIG. 12, the network-compatible MFP FX and the authentication server device SM perform an operation when a device use request is received from the user.

  That is, first, upon receiving a device usage request from the user (process 301), the network compatible MFP FX checks whether the authentication function of the device of the own terminal is enabled (decision 302).

  When the authentication function of the device of the terminal itself is valid and the result of determination 302 is YES, the network compatible multi-function peripheral FX acquires the address information of the personal computer devices PC1 to PCn used by the requesting user ( Process 303), together with its own address information, is transmitted to the authentication server device SM having the use restriction information database.

  Thereby, in the authentication server device SM, when an entry corresponding to the received address information of the personal computer devices PC1 to PCn exists in the use restriction information database (the result of determination 304 is YES), the corresponding request source user The use restriction setting is transmitted to the network compatible MFP FX.

  As a result, when the network-compatible MFP FX receives the usage restriction setting from the authentication server device SM (processing 305), whether the device usage request at that time is a function permitted by the acquired usage restriction setting or not. If the result of determination 306 is YES, the requested function is executed (processing 307). If the result of determination 306 is NO, the requested function is not executed. An execution non-permission notice is issued to the former user (process 308).

  On the other hand, when the entry corresponding to the received address information of the personal computer devices PC1 to PCn does not exist in the use restriction information database (the result of the determination 304 is NO), the authentication server device SM sends a request source to the network compatible MFP FX. Notify that the user is an unregistered user.

  In this case, if the guest use restriction setting is valid in the network compatible MFP FX (if the date is within the validity period set on the guest setting screen, or the time is included in the valid time zone) ) (The result of the determination 309 is YES), the network compatible MFP FX executes only the function permitted by the guest use restriction setting, and if the function is not permitted, the function is not executed and the request source is not executed. Issue a notice of execution disapproval to the user. If the result of determination 309 is NO, the process proceeds to process 308, and the function is not executed and an execution non-permission notification is issued to the requesting user.

  Further, when the authentication function of the device of the own terminal is invalid and the result of determination 302 is NO, the process proceeds to process 307 and the requested function is executed as it is.

  Incidentally, when print data is transferred from the personal computer devices PC1 to PCn to the network compatible MFP FX, depending on the protocol used, account information may be incorporated in the print data.

  When using such a protocol, first, the administrator uses a priority setting screen such as that shown in FIG. 13 displayed on the operation display unit 7 to request a print request using a protocol that can incorporate account information in the print data. In the processing at the time of reception, the priority is set to the usage restriction setting corresponding to the account information incorporated in the print data or the usage restriction setting acquired from the authentication server device SM, and the storage device of the network compatible MFP FX Save to.

  In this case, as shown in FIG. 14, the network-compatible MFP FX performs an operation when a device usage request is received from the user.

  That is, first, upon receiving a device use request from the user (process 401), the network compatible MFP FX checks whether the authentication function of the device of its own terminal is enabled (decision 402).

  If the authentication function of the device of the own terminal is valid and the result of determination 402 is YES, it is checked whether account information exists without print data (determination 403). When the result of the determination 403 is NO, the network compatible multi-function peripheral FX acquires the address information of the personal computer devices PC1 to PCn used by the requesting user (process 404), and uses restriction information together with its own address information. By transmitting to the authentication server device SM having the database, the use restriction setting of the corresponding request source user is acquired from the authentication server device SM (process 405).

  The network compatible MFP FX checks whether or not the device use request at that time is a function permitted by the obtained use restriction setting (decision 406), and when the result of judgment 406 is YES, the requested function is displayed. If the result of determination 406 is NO, the requested function is not executed and an execution non-permission notice is issued to the requesting user (process 408).

  On the other hand, if the count information is incorporated in the print data and the result of determination 403 is YES, it is checked whether the account information in the print data is prioritized (determination 409). When the result of determination 409 is NO, the process proceeds to process 404 and the subsequent processes are executed.

  When the result of determination 409 is YES, the network-compatible MFP FX executes only the functions permitted by the guest use restriction setting, and if the functions are not permitted, the function is not performed and the request source is not executed. Issue a notice of execution disapproval to the user.

  If the authentication function of the device of the own terminal is invalid and the result of determination 402 is NO, the process proceeds to process 406 and the requested function is executed as it is.

  As described above, in each of the above-described embodiments, even when a function using a protocol that cannot add account information to print data is used, the use of the function can be restricted for each user. Further, by associating the address information of the personal computer device used by the user with the account information already registered in the authentication server device SM, it is possible to efficiently limit use. In addition, it becomes possible to specify the user of the device using the IP address and restrict the use of the function. Further, even in an environment where an IP address is dynamically assigned by DHCP, it is possible to specify a user of a device using a MAC address and restrict the use of functions. Further, even in an environment in which IP addresses are dynamically assigned by DHCP, it is possible to specify a user of a device using a computer name and restrict the use of functions. In addition, even a user who does not have an account can use a device that requires user authentication. In addition, by providing a period in which a user who does not have an account can use, it is possible to prevent a user who does not have an account from continuing to use the device for a long period of time. In addition, by providing a time slot that can be used by a user who does not have an account, a user who does not have an account can be prevented from using the device when the device manager is absent.

  In the above-described embodiment, the present invention is applied to the network compatible MFP FX. However, the present invention can be applied to other network compatible peripheral devices in the same manner.

1 is a block diagram showing a network system according to an embodiment of the present invention. FIG. 3 is a block diagram showing a configuration example of a network compatible MFP FX. Use restriction information database setting screen; Schematic showing an example of IP address use. Screen for setting use restriction information database; Schematic showing an example of using a MAC address. Screen for setting use restriction information database; Schematic showing an example of using a computer name. 6 is a flowchart showing an example of the operation of the network compatible MFP FX when a device usage request is received from a user. Screen for setting use restriction information database; Schematic showing another example of using IP address. Screen for setting use restriction information database; Schematic showing another example of using MAC address. Screen for setting use restriction information database; Schematic showing another example of using computer name. The flowchart which showed an example of operation | movement of the network corresponding | compatible multifunction peripheral FX and the authentication server apparatus SM when a device utilization request | requirement is received from the user. Schematic which showed an example of the setting screen for guests. 10 is a flowchart showing another example of operations of the network compatible MFP FX and the authentication server device SM when a device use request is received from a user. Schematic which showed an example of the priority setting screen. 10 is a flowchart showing another example of the operation of the network compatible MFP FX when a device use request is received from a user.

Explanation of symbols

FX network compatible MFP SM authentication server device

Claims (9)

In a network compatible image forming apparatus having a network print function,
Based on the address information of another terminal device connected to the same network, it has a usage restriction setting acquisition means for acquiring the usage restriction setting of the terminal device, and uses the usage restriction setting acquired by the usage restriction setting acquisition means. Thus, a network-compliant image forming apparatus that performs user restriction on a print request in which user authentication information cannot be incorporated into printer data.   When the use restriction setting acquisition unit performs user restriction based on account information combining a user name and a password, the use restriction setting acquisition unit includes an address information conversion unit that converts address information of the terminal device into account information. The network-compatible image forming apparatus according to claim 1.   The network support according to claim 1, wherein the usage restriction setting acquisition unit acquires the usage restriction setting using an IP address as address information of the terminal device when receiving a print request from the terminal device. Image forming apparatus.   The network support according to claim 1, wherein the usage restriction setting acquisition unit acquires a usage restriction setting by using a MAC address as address information of the terminal device when receiving a print request from the terminal device. Image forming apparatus.   The network support according to claim 1, wherein the usage restriction setting acquisition unit acquires a usage restriction setting using a computer name as address information of the terminal device when receiving a print request from the terminal device. Image forming apparatus.   When the use restriction setting acquisition unit cannot acquire the use restriction setting of the terminal device from the address information of the print request source terminal device, the use restriction setting for the guest is applied to restrict the use. The network-compatible image forming apparatus according to claim 1, claim 2, claim 3, claim 4, or claim 5.   The network-compatible image forming apparatus according to claim 6, wherein a period during which the guest use restriction setting is applied can be restricted.   The network-compatible image forming apparatus according to claim 6, wherein a time period during which the guest use restriction setting is applied can be restricted.   Either the usage restriction setting corresponding to the account information incorporated in the print data or the usage restriction setting acquired by the usage restriction setting acquisition means in the process at the time of accepting the print request with the protocol that can incorporate the account information in the print data 6. The apparatus according to claim 1, further comprising selection means for allowing a user to select whether or not to give priority to the above-mentioned item (1), (2), (3), (4), (5), (6), (7) or (7). 9. The network-compatible image forming apparatus according to 8.

Images