JP2007296661A - Image forming system and user authentication method in this system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image forming system and the like which are free from a degradation of security even if image forming devices of various authentication systems different in security strength, are mixed in a network, and enables on-the-road access to the image forming device which the user uses in normal times via an image forming device on the road. <P>SOLUTION: The image forming system is formed of: a home printing device (first image forming device) 3 which allows the authenticated user to use the same; a printing device (second image forming device) 2 on the road, which has a security strength of the authentication system lower than the first image forming device; a portable terminal 1; and an authenticating means for authenticating the user who wants to access the first image forming device via the second image forming device, based on authentication information from the portable terminal, depending on the authentication system having the security strength equal to or higher than that of the first image forming device. If the authentication is successful, access from the second image forming device to the first image forming device by the user is permitted. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an image forming system including an MFP (Multi Function Peripherals) which is a multifunction digital image forming apparatus, and a user authentication method in the image forming system.

  In recent years, in companies and offices, construction of an image forming system in which a plurality of image forming apparatuses such as MFPs are connected via a network such as a LAN has become widespread, and data stored in a certain image forming apparatus is Printing can be performed by another image forming apparatus via a network.

  Recently, interest in security has been increasing, and biometric authentication methods with strong security, such as fingerprint authentication and vein authentication, are beginning to be installed in image forming apparatuses as user authentication means.

  In addition, the security strength of the authentication method mounted on the image forming apparatus has various levels depending on the price and manufacturing time, and the image forming apparatus having these various levels of authentication methods on the network. Are mixed.

  Under such circumstances, conventionally, an authentication technique is known in which access rights to data are distinguished based on the strength of authentication information input (see, for example, Patent Document 1).

In addition, a technique is disclosed in which an access source and an access destination have independent authentication functions in order to view an electronic document whose security is highly managed (see, for example, Patent Document 2).
JP 2003-303175 A JP 2003-141471 A

  However, in a system in which various image forming apparatuses having authentication methods with different security strengths are mixed as described above, an authentication method image forming device with a strong security strength used by a user (home image forming device) ), But if the destination image forming device that is the access source has weak security, the home image forming device can be accessed from the destination image forming device only with a password. As a result, there arises a problem that the security strength of the home image forming apparatus is lowered.

  In addition, if the access from the destination image forming apparatus as the access source to the home image forming apparatus is completely denied so as not to reduce the security strength, the home image forming apparatus has a strong security strength of the authentication method. The more it is, the fewer the number of image forming apparatuses that can perform printing on the go, and the convenience of the system is impaired.

  The known example described in Patent Document 1 does not compensate for the difference in security strength of the authentication method, and the known example described in Patent Document 1 does not provide the security strength of the access source and the access destination. Since the difference is not a problem, there is a possibility that any of them may log in with only the password from the image forming apparatus at the destination, and the problem of the decrease in the convenience of the system based on the difference in the security strength of the authentication method described above. , Can not provide a solution.

  The present invention has been made in view of the above circumstances, and even when image forming apparatuses adopting authentication methods with different security strengths are mixed on a network, image formation at a destination can be performed without reducing security. An object of the present invention is to provide an image forming system capable of appropriately accessing an image forming apparatus normally used from the apparatus, and a user authentication method in the system.

The above problem is solved by the following means.
(1) A first image forming apparatus that is permitted to be used by an authenticated user, and the first image forming apparatus that is connected to the first image forming apparatus via a network, and the security strength of the authentication method is the first image. Based on authentication information input from the second image forming apparatus weaker than the forming apparatus, the portable terminal, and the portable terminal, the authentication method having a security strength equal to or higher than that of the first image forming apparatus is used. Authentication means for authenticating a user who wishes to access the first image forming apparatus from the second image forming apparatus, and the first image forming apparatus, when authentication by the authentication means is successful An image forming system allowing access from the second image forming apparatus to the first image forming apparatus by the user.
(2) The image forming system according to item 1, wherein authentication by the authentication unit is executed in the mobile terminal, and when the mobile terminal succeeds in authentication, the mobile terminal transmits that fact to the first image forming apparatus.
(3) The image forming system according to item 1, wherein the authentication by the authentication unit is executed by the first image forming apparatus based on authentication information transmitted from the portable terminal.
(4) Authentication by the authentication unit is executed by an authentication server based on authentication information transmitted from the portable terminal, and when the authentication server succeeds in authentication, the authentication server notifies the first image forming apparatus of that fact. 2. The image forming system according to item 1, wherein the image is transmitted.
(5) When the first image forming apparatus permits access, the first image forming apparatus issues disposable identification information and transmits it to the portable terminal, and the second image forming apparatus transmits it to the portable terminal. 5. The image forming system according to any one of the preceding items 1 to 4, which enables data transmission / reception on condition that the same disposable identification information is transmitted.
(6) A third image forming apparatus connected to the first image forming apparatus via the network and having a security strength of an authentication method equal to or lower than that of the first image forming apparatus. When the forming apparatus permits access from the second image forming apparatus to the first image forming apparatus, access from the second image forming apparatus to the third image forming apparatus is also permitted. 6. The image forming system according to any one of items 1 to 5 above,
(7) The authentication information input to the portable terminal includes the identification information of the second image forming apparatus, and the portable terminal can read the identification information of the second image forming apparatus in a contactless manner. 7. The image forming system according to any one of items 1 to 6 above.
(8) A first image forming apparatus that is permitted to be used by an authenticated user, and the first image forming apparatus connected to the first image forming apparatus via a network, and the security strength of the authentication method is the first image. A user authentication method in an image forming system comprising a second image forming apparatus weaker than a forming apparatus and a mobile terminal, wherein the first image forming is based on authentication information input from the mobile terminal A step of authenticating a user who desires access from the second image forming apparatus to the first image forming apparatus by an authentication method having a security strength equal to or higher than that of the apparatus, wherein the first image forming apparatus comprises: When the authentication in the authentication step is successful, the user is permitted to access the first image forming apparatus from the second image forming apparatus. User authentication method in the image forming system.
(9) The authentication in the authentication step is executed in the mobile terminal, and when the mobile terminal succeeds in the authentication, the mobile terminal transmits the fact to the first image forming apparatus. Authentication method.
(10) The user authentication method in the image forming system according to (8), wherein the authentication in the authentication step is executed by the first image forming apparatus based on authentication information transmitted from the portable terminal.
(11) The authentication in the authentication step is executed by an authentication server based on the authentication information transmitted from the portable terminal, and when the authentication server succeeds in authentication, the authentication server notifies the first image forming apparatus. 9. The user authentication method in the image forming system according to item 8, wherein the transmission is performed.
(12) When the first image forming apparatus permits access, the first image forming apparatus issues disposable identification information and transmits the disposable identification information to the portable terminal, and transmits the information from the second image forming apparatus to the portable terminal. 12. The user authentication method in the image forming system according to any one of 8 to 11 above, wherein data can be transmitted and received on the condition that the same disposable identification information as that of the information is transmitted.

  According to the invention described in (1) above, when the user wants to access the first image forming apparatus using the second image forming apparatus as the access source at the destination, the authentication information input from the portable terminal is included in the authentication information. Based on this, authentication of a user who tries to access the first image forming apparatus from the second image forming apparatus is performed by an authentication method having a security strength equivalent to or higher than that of the first image forming apparatus. If this authentication is successful, access is permitted. Accordingly, data can be transmitted and received between the second image forming apparatus at the destination and the first image forming apparatus that the user normally uses, for example, document data stored in the first image forming apparatus, etc. Can be processed by the second image forming apparatus.

  In other words, a portable terminal capable of inputting authentication information is prepared, and the second image forming apparatus is connected to the second image forming apparatus by an authentication method having a security strength equal to or higher than that of the first image forming apparatus based on the input authentication information. By enabling authentication of a user who desires access to one image forming apparatus, the security strength of the authentication method of the second image forming apparatus is the security strength of the authentication method of the first image forming apparatus. Even weaker can compensate for this. Accordingly, in a system in which image forming apparatuses having various authentication methods with different security strengths are mixed, the user can access the first image forming apparatus from the second image forming apparatus without reducing security. Therefore, convenience can be remarkably improved.

  According to the invention described in (2) above, the authentication can be performed on the mobile terminal side.

  According to the invention described in (3), the authentication can be performed on the first image forming apparatus side.

  According to the invention described in item (4), the authentication can be performed by an authentication server.

  According to the invention described in item (5) above, when the first image forming apparatus permits access, the first image forming apparatus issues disposable identification information such as a disposable password and transmits it to the portable terminal, and also the second image forming apparatus. Since it is possible to transmit and receive data on condition that the same disposable identification information as that issued from the image forming apparatus has been transmitted, it becomes clearer that the user who made the access is a regular user, In addition, higher security can be ensured.

  According to the invention described in item (6) above, once access from the second image forming apparatus to the first image forming is permitted, the security strength is equal to or lower than that of the first image forming apparatus. Since access to the third image forming apparatus having the authentication method is also automatically permitted, there is no need to bother authenticating the third image forming apparatus, and convenience is further improved.

  According to the invention described in item (7), the portable terminal can easily read the identification information of the second image forming apparatus in a non-contact manner.

  According to the invention described in item (8), in a system in which image forming apparatuses having various authentication methods with different security strengths are mixed, the user can change the first image forming apparatus from the second image forming apparatus without reducing security. Since access to the image forming apparatus becomes possible, the convenience can be greatly improved.

  According to the invention described in item (9) above, the authentication can be performed on the mobile terminal side.

  According to the invention described in item (10), the authentication can be performed on the first image forming apparatus side.

  According to the invention described in item (11), the authentication can be performed by an authentication server.

  According to the invention described in the preceding item (12), it becomes clearer that the user who performed the access is a regular user, and higher security can be ensured.

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

  FIG. 1 is a configuration diagram of an image forming system showing an embodiment of the present invention.

  In FIG. 1, the image system includes a portable terminal 1, a destination printing device 2 that is a second image forming device used by a user at a destination, and a home printing device 3 that is a first image forming device. The portable terminal 1, the destination printing device 2, and the home printing device 3 are connected via a network 4. The portable terminal 1 and the home printing apparatus 3 are connected via a public line 5.

  The portable terminal 1 is a portable terminal having a relatively strong security biometric authentication method such as fingerprint authentication and vein authentication. Examples of the portable terminal 1 include a mobile phone and a notebook personal computer. And PDA.

  The destination printing apparatus 2 can send and receive data to and from the home printing apparatus 3 on the network 4, but in this embodiment, the printing apparatus in which the account of the user who is trying to access the home printing apparatus 3 is not registered. It is. The printing apparatus 2 has an authentication function with a weak security level, such as an authentication method based on a password input, and does not have an authentication function with a security level as strong as that of the home printing apparatus 3.

  The home printing apparatus 3 is a printing apparatus that is usually used by the user in which an account of a user who desires access to the home printing apparatus 3 from the printing apparatus 2 at the destination is registered, and has high security strength. It has an authentication method such as biometric authentication as described above, and the data stored inside is also protected with the same security strength.

  The network 4 is used to transmit and receive data among the portable terminal 1, the destination printing device 2, and the home printing device 3.

  The public line 5 is used for communication between the portable terminal 1 and the home printing apparatus 3.

In this embodiment, the strength of the security strength is defined by “the degree of difficulty of impersonation” for various authentication methods. By defining the strength, it is determined whether or not the security strength of the authentication method possessed by the mobile terminal 1 is equal to or higher than that of the home printing apparatus 3. The security strength for each authentication method is as follows, for example.
(I) Number-type password input method: The security strength is weak (the risk of impersonation due to the password being known to a third party is high).
(II) Voice recognition method: The security strength is normal (there is a risk of impersonation by concealing pronunciation).
(III) Fingerprint authentication method: The security strength is strong (the risk of impersonation by acquiring a fingerprint attached to a doorknob is low).
(IV) Vein recognition method: The security strength is very strong (the risk of impersonation is lower than any of the above authentication methods).

  FIG. 2 is a block diagram showing a functional configuration of the mobile terminal 1.

  In FIG. 2, the mobile terminal 1 includes a sensor unit 11, an authentication unit 12, an operation unit 13, and a communication unit 14.

  The sensor unit 11 acquires (inputs) information necessary for authentication. For example, a sensor that detects biological information such as a fingerprint is employed.

  The authentication unit 12 performs authentication based on information input from the sensor unit 11.

  The operation unit 13 is used when a user performs an authentication operation or a communication operation. The operation unit 13 is provided with a display unit for displaying a disposable password and other data transmitted from the home printing apparatus 3.

  The communication unit 14 transmits / receives authentication information, a disposable password, and the like to / from the home printing apparatus 3. The communication unit 14 also has a function of reading the identification information (also referred to as ID) of the printing apparatus 2 at the destination in a non-contact manner by a wireless communication method such as Bluetooth.

  FIG. 3 is a block diagram showing a functional configuration of the destination printing apparatus 2.

  In FIG. 3, the destination printing apparatus 2 includes an operation unit 21, a communication unit 22, a printing unit 23, and an authentication unit 24.

  The operation unit 21 is used when a user performs an authentication operation or a printing operation.

  The communication unit 22 transmits / receives information such as print data, authentication information, and disposable passwords to / from the home printing apparatus 3. The communication unit 22 also has a function of transmitting its own identification information to the mobile terminal 1 by a wireless communication method such as Bluetooth.

  The printing unit 23 performs general functions provided by a printing function, such as paper feeding, exposure scanning, and printing.

  The authentication unit 24 performs authentication based on the password input from the operation unit 21. However, the authentication is limited to user authentication managed by the printing apparatus 2 at the destination.

  FIG. 4 is a block diagram showing a functional configuration of the home printing apparatus 3.

  In FIG. 4, the home printing apparatus 3 includes an operation unit 31, a communication unit 32, a terminal communication unit 33, a printing unit 34, and an authentication unit 35.

  The operation unit 31 is used when a user performs an authentication operation or a printing operation.

  The communication unit 32 transmits / receives print data, authentication information, disposable passwords and the like to / from the destination printing apparatus 2.

  The terminal communication unit 33 transmits and receives authentication information, a disposable password, and the like with the mobile terminal 1.

  The printing unit 34 performs general functions provided by a printing function, such as paper feeding, exposure scanning, printing, and the like.

  The authentication unit 35 performs authentication based on the password input from the operation unit 31. However, it is limited to user authentication managed by the home printing apparatus 3.

  Next, an outline of the authentication operation by the image system having the above configuration will be described.

  When the user wants to access the home printing device 3 that is the access destination using the destination printing device 2 that is the access source, first, the portable terminal 1 wirelessly communicates the ID of the destination printing device 2. Acquired without contact.

  In addition, as a method for inputting the ID of the printing device 2 at the destination to the mobile terminal 1, there are (I) manual input and (II) QR code reading (printing) in addition to the above-described Bluetooth (Bluetooth) or the like. (Q) Infrared communication and the like can be listed as a QR code is displayed on the operation panel of the apparatus and the display is captured by the camera of the portable terminal 1).

  Further, the user inputs the user ID registered in both the authentication unit 35 of the home printing apparatus 3 and the authentication unit 12 of the mobile terminal 1, and then uses the sensor unit 11 and the authentication unit 12 to increase the security strength. User authentication is performed by a strong authentication method, for example, a biometric authentication method such as fingerprint authentication.

  If the authentication is successful, the portable terminal 1 sends the input ID and user ID of the destination printing apparatus 2 to the home printing apparatus 3 together with the result.

  When the home printing apparatus 3 receives the ID and user ID of the destination printing apparatus 2 as a result of the authentication success, the home printing apparatus 3 accesses the data held by the home printing apparatus 3 to the destination printing apparatus 2 and the user. to approve. Then, a disposable password is issued to the mobile terminal 1.

  On the other hand, when the user who has received the disposable password at the portable terminal 1 accesses the home printing apparatus 3 from the printing apparatus 2 at the destination, the printing apparatus 2 uses the ID of the printing apparatus 2 at the destination, the user ID, and the disposable password. 2 and input to the home printing apparatus 3. In the home printing apparatus 3, whether the ID, user ID, and disposable password of the printing apparatus 2 at the destination match the ID and user ID of the printing apparatus permitted to access and the disposable password transmitted to the portable terminal 1, respectively. If it matches, the data can be transmitted and received.

  Then, the user can acquire data held in the home printing apparatus 3 from the printing apparatus 2 at the destination, and can print it by the printing unit 23.

  If the user wants to end the work, the home printing apparatus 3 is notified of the end of access (logout). Then, the home printing apparatus 3 prohibits access from the destination printing apparatus 2 and notifies the destination printing apparatus 2 that the access has been changed to prohibition of access.

  In this way, when the authentication by the portable terminal 1 is successful, the home printing apparatus 3 gives the user permission to access the home printing apparatus 3 from the printing apparatus 2 at the destination, and therefore the printing apparatus 2 of the destination Even if the security strength of the authentication method is weak, it is possible to access the home printing apparatus 3 without lowering the security of the home printing apparatus 3. As a result, if the portable terminal 1 is prepared, even if there are a large number of printing apparatuses 2 having authentication methods with weak security strength, the home printing apparatus 3 can be accessed using these printing apparatuses 2. Therefore, convenience for the user can be ensured.

  Moreover, in this embodiment, when the authentication is successful, the home printing apparatus 3 transmits a disposable password to the portable terminal 1, and the transmitted disposable password is sent to the user along with the ID of the destination printing apparatus 2 and the user ID. From the printing device 2 to the home printing device 3, and the home printing device 3 sends the ID, user ID, and disposable password of the destination printing device 2 transmitted from the mobile terminal 1 to the user ID and destination By confirming the ID of the printing apparatus and the disposable password transmitted to the mobile terminal 1, access to the data is permitted. For this reason, compared with the case where a disposable password is not used, it becomes clear that the user who performed the access is a regular user, and higher security can be ensured. Of course, the form which does not use a disposable password may be sufficient.

  Next, access permission processing in the image forming system shown in FIG. 1 will be described with reference to the flowchart shown in FIG.

  In step S101, the mobile terminal 1 acquires the ID of the printing device 2 at the destination. In step S102, it is determined whether or not the user authentication is OK (success) based on the input biometric information and user ID. If the identification is not OK (NO in step S102), the process ends. If the personal authentication is OK (YES in step S102), in step S103, the authentication OK data is transmitted to the home printing apparatus 3 together with the ID of the destination printing apparatus 2 and the user ID.

  When the home printing apparatus 3 receives a contact from the portable terminal 1 in step S201, the home printing apparatus 3 determines whether the security strength of the authentication method of the portable terminal 1 is equal to or higher than that of the printing apparatus (access destination) 3. . If the security strength is not equal to or greater than that of the printing apparatus 3 (NO in step S201), the process returns to step S201 and the security strength determination is performed again. If the security strength is equal to or higher than that of the printing apparatus 3 (YES in step S201), the process proceeds to step S202.

  In step S202, data (authentication success data, destination printing apparatus 2 ID and user ID) is received from the mobile terminal 1, and in step S203, access using the destination printing apparatus 2 is permitted. The disposable password is issued and transmitted to the portable terminal 1. Then, the process proceeds to step S204. In the portable terminal 1, the disposable password transmitted from the home printing apparatus 3 is displayed on the display unit of the operation unit 13 in step S <b> 104.

  On the other hand, in step S301, when the user inputs the device ID, the user ID, and the one-time password from the destination printing device 2 and logs in (accesses) to the home printing device 3, the home printing device 3 performs step S204. Then, it is determined whether or not the login is based on the user ID that has received the notification from the printing apparatus 2 that has received the notification, and whether or not the disposable passwords match. If the login is based on the user ID that has received the notification from the destination printing device 2 that has received the notification, and the disposable passwords match (YES in step S204), in step S205, the login with the destination printing device 2 is established. Data is transmitted / received between them, and the process proceeds to step S206. If the log-in is not performed by the user ID that has received the notification from the destination printing apparatus 2 that has received the notification, or if the disposable passwords do not match (NO in step S204), the process proceeds directly to step S206.

  In the destination printing apparatus 2 as well, data is transmitted to and received from the home printing apparatus 3 in step S302. When the work is completed, logout is requested from the destination printing apparatus 2 (step S303). Then, the home printing apparatus 3 prohibits access from the destination printing apparatus 2 in step S206, and prohibits access from the destination printing apparatus 2 to the destination printing apparatus 2 in step S207. After notifying.

  In the above embodiment, the authentication unit 12 of the mobile terminal 1 authenticates the user, and the result is sent to the home printing apparatus 2. However, the biometric information input from the mobile terminal 1 and the destination Authentication information including authentication information such as the ID of the printing apparatus 2 and a user ID may be sent to the home printing apparatus 3, and the authentication unit 35 of the home printing apparatus 3 that has received the authentication information may authenticate the user. .

  FIG. 6 is a block diagram of an image system showing another embodiment of the present invention. The same or corresponding parts as those in FIG.

  In FIG. 6, reference numeral 6 denotes an authentication server, which receives authentication information such as a user's biometric information, a destination printing device 2 ID, and a user ID from the portable terminal 1.

  Specifically, the mobile terminal 1 transmits to the authentication server 6 the ID of the printing device 2 that is the destination of the authentication method with weak security strength, the user ID, and the biometric information for authenticating the user. If the authentication is successful, the server 6 sends the authentication success, the ID of the destination printing apparatus 2 and the user ID to the home printing apparatus 3 of the authentication method with high security strength.

  Upon receiving this, the home printing apparatus 3 permits access using the printing apparatus 2 at the destination, and issues a disposable password and transmits it to the portable terminal 1 as necessary. The exchange between the destination printing apparatus 2 and the home printing apparatus 3 is the same as that described in the flowchart of FIG.

  As mentioned above, although embodiment of this invention was described, this invention is not limited to the said embodiment, A various deformation | transformation is possible within the scope of the present invention. For example, in a network environment where there is a third image forming apparatus performing user registration in addition to the home image forming apparatus 3, the security strength of the authentication method of the third printing apparatus is the image of the home printing apparatus 3. When the home image forming apparatus 3 permits access from the destination image forming apparatus 2 only when the security strength is equal to or less than the security strength of the forming apparatus, the third image forming apparatus is also the destination image forming apparatus. It is good also as a structure which permits access from 2 automatically. In this case, it is not necessary for the user to obtain authentication from the destination with the mobile terminal or the like for the third image forming apparatus, and convenience is further improved.

1 is a configuration diagram of an image forming system according to an embodiment of the present invention. It is a block diagram which shows the functional structure of a portable terminal. It is a block diagram which shows the functional structure of the printing apparatus of a delivery destination. It is a block diagram which shows the functional structure of the printing apparatus of a home. 3 is a flowchart showing access permission processing in the image forming system of FIG. 1. It is a block diagram of the image system which concerns on other embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Portable terminal 2 Printing device on the go (2nd image forming apparatus)
3 Home printing device (first image forming device)
4 Network 6 Authentication server 14, 22, 32, 33 Communication unit 12, 35 Authentication unit

Claims (12)

A first image forming apparatus that permits use by an authenticated user;
A second image forming apparatus connected to the first image forming apparatus via a network and having a security strength of an authentication method weaker than that of the first image forming apparatus;
A mobile device,
Based on the authentication information input from the portable terminal, it is desired to access the first image forming apparatus from the second image forming apparatus by an authentication method having a security strength equal to or higher than that of the first image forming apparatus. An authentication means for authenticating a user who
With
The first image forming apparatus permits an access from the second image forming apparatus to the first image forming apparatus by the user when the authentication by the authenticating unit is successful. Forming system.   The image forming system according to claim 1, wherein authentication by the authentication unit is executed in the portable terminal, and when the authentication is successful, the portable terminal transmits the fact to the first image forming apparatus.   The image forming system according to claim 1, wherein the authentication by the authentication unit is executed by the first image forming apparatus based on authentication information transmitted from the portable terminal.   The authentication by the authentication unit is executed by an authentication server based on authentication information transmitted from the portable terminal, and the authentication server transmits that fact to the first image forming apparatus when the authentication is successful. Item 4. The image forming system according to Item 1.   When the first image forming apparatus permits access, the first image forming apparatus issues disposable identification information and transmits the disposable identification information to the portable terminal, and is the same as that transmitted from the second image forming apparatus to the portable terminal. The image forming system according to claim 1, wherein data can be transmitted and received on condition that disposable identification information has been transmitted. A third image forming apparatus connected to the first image forming apparatus via the network and having a security strength of an authentication method equal to or lower than that of the first image forming apparatus;
When access from the second image forming apparatus to the first image forming apparatus is permitted by the first image forming apparatus, the second image forming apparatus transfers to the third image forming apparatus. The image forming system according to claim 1, wherein access is permitted.   The authentication information input to the portable terminal includes identification information of the second image forming apparatus, and the portable terminal can read the identification information of the second image forming apparatus in a non-contact manner. The image forming system according to claim 1. A first image forming apparatus that permits use by an authenticated user, and the first image forming apparatus are connected to the first image forming apparatus via a network, and the security strength of the authentication method is higher than that of the first image forming apparatus. A user authentication method in an image forming system including a weak second image forming apparatus and a portable terminal,
Based on the authentication information input from the portable terminal, it is desired to access the first image forming apparatus from the second image forming apparatus by an authentication method having a security strength equal to or higher than that of the first image forming apparatus. The step of authenticating the user to
The first image forming apparatus permits the user to access the first image forming apparatus from the second image forming apparatus when the authentication in the authentication step is successful. A user authentication method in an image forming system.   9. The user authentication method in the image forming system according to claim 8, wherein authentication in the authentication step is executed in the mobile terminal, and when the mobile terminal succeeds in authentication, the mobile terminal transmits that fact to the first image forming apparatus. .   The user authentication method in the image forming system according to claim 8, wherein the authentication in the authentication step is executed by the first image forming apparatus based on authentication information transmitted from the portable terminal.   The authentication in the authentication step is executed by an authentication server based on authentication information transmitted from the portable terminal, and the authentication server transmits the fact to the first image forming apparatus when the authentication is successful. Item 9. A user authentication method in the image forming system according to Item 8. When the first image forming apparatus permits access, the first image forming apparatus issues disposable identification information and transmits it to the portable terminal, and is the same as that transmitted from the second image forming apparatus to the portable terminal. The user authentication method in the image forming system according to claim 8, wherein data can be transmitted and received on condition that the disposable identification information is transmitted.

Images