JP2013196571A - Information processing system, portable terminal and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To reduce a processing load of a management device and to shorten a waiting time of a user in comparison with the case where authentication is requested to the management device when the user requests processing.SOLUTION: A management server 30 manages utilization control information restricting or permitting utilization of functions provided in an image processing apparatus 40 for each user. A portable terminal 10 transmits information about a user of the portable terminal 10 to the management server 30 and requests authentication. When the authentication is successful, utilization control information managed by management means for the user of the portable terminal 10 is acquired, and the acquired utilization control information is notified to the image processing apparatus 40. On the basis of the notified utilization control information, the image processing apparatus 40 controls the utilization of the functions provided in the image processing apparatus 40 by the user of the portable terminal 10.

Description

  The present invention relates to an information processing system, a portable terminal, and a program.

  There is a system that provides user authentication information to a device and processes a request received from a user based on a function permitted (or restricted) for the user after the user is authenticated.

  In such a system, for example, as described in Patent Document 1 below, the user information is held in the IC card, and the device requests authentication from the server based on the user information acquired from the IC card. As a result, a function that allows the user to use the user may be selected based on the information received from the server. When such a configuration is adopted, authentication processing to the server occurs for each processing request, and thus there is a possibility that a high load is applied to the server. Furthermore, the user also has to wait for processing to be executed until an authentication result is obtained from the server.

JP 2003-308486 A

  An object of the present invention is to reduce the processing load of the management device and reduce the waiting time of the user, as compared with a case where the user requests authentication when the user requests processing.

  In order to achieve the above object, the invention described in claim 1 includes a management device, a portable terminal, and a processing device, and the management device has a function of each function provided in the processing device for each user. Management means for managing use control information for restricting or permitting use, wherein the mobile terminal transmits information of a user of the mobile terminal to the management device and requests authentication, and the authentication When authentication by the requesting unit is successful, an acquisition unit that acquires usage control information managed by the management unit for the user of the mobile terminal, and notifies the processing device of the usage control information acquired by the acquisition unit The processing device controls use of each function provided in the processing device by a user of the portable terminal based on usage control information notified by the notification device. An information processing system which comprises a control means.

  In the invention according to claim 2, when the usage control information managed by the management unit is updated, the management device transmits the user information related to the updated usage control information to the processing device. Update processing means for notifying the user, and the processing device updates the usage control information when the user usage control information related to the information notified by the update notification means is notified by the notification means. Update notification means for notifying the mobile terminal that the update is necessary, and the acquisition means acquires the updated usage control information from the management apparatus after receiving the notification by the update necessity notification means The information processing system according to claim 1, wherein:

  Further, the invention according to claim 3 is characterized in that the processing device executes a process received from a user of the portable terminal based on the functions whose use is controlled by the control unit; History information transmitting means for transmitting history information indicating a history of processing executed by the process execution means to the portable terminal, wherein the portable terminal transmits the history information transmitted by the history information transmitting means, The information processing system according to claim 1, further comprising means for transmitting to the management apparatus.

  Further, the invention according to claim 4 transmits information of a given user to a management device that manages usage control information that restricts or permits the use of each function provided in the processing device for each user. Authentication request means for requesting authentication, acquisition means for acquiring use control information managed by the management apparatus for the given user when authentication by the authentication request means is successful, and the acquisition means Notification means for notifying the acquired usage control information to the processing device, and the processing device is provided in the processing device by the given user based on the usage control information notified by the notification means. It is a portable terminal characterized by controlling use of each function.

  Further, the invention according to claim 5 transmits information of a given user to a management device that manages usage control information that restricts or permits the use of each function provided in the processing device for each user. Authentication request means for requesting authentication, acquisition means for acquiring use control information managed by the management apparatus for the given user when authentication by the authentication request means is successful, and the acquisition means A program that causes a computer to function as a notification unit that notifies the processing device of acquired usage control information, wherein the processing device is operated by the given user based on the usage control information notified by the notification unit. A program for controlling the use of each function provided in the processing device.

  According to the first, fourth, or fifth aspect of the present invention, the processing load of the management apparatus can be reduced and the user's waiting time can be reduced as compared with the case where the management apparatus requests authentication when the user requests the process. Can be shortened.

  According to the second aspect of the present invention, the control based on the updated usage control information is executed even when the usage control information is updated after the usage control information of the user is provided to the mobile terminal. it can.

  According to the third aspect of the present invention, the management device can manage the processing history of the user.

It is a figure showing an example of the system configuration figure of the information processing system concerning this embodiment. It is a figure which shows an example of the hardware constitutions of a portable terminal. It is a figure which shows an example of the hardware constitutions of an IC chip and an IC card reader. It is a figure which shows an example of the hardware constitutions of a radio relay apparatus. It is a figure which shows an example of the hardware constitutions of a management server. It is a figure which shows an example of the hardware constitutions of an image processing apparatus. It is a figure which shows an example of a usage control information management table. It is a figure which shows an example of the update information management table. It is a figure which shows an example of the sequence of a pre-processing. It is a figure which shows an example of the sequence of a process at the time of use. It is a figure which shows an example of the sequence of a use post-process. It is a figure which shows the other example of the sequence of a process at the time of use.

  Hereinafter, embodiments for carrying out the present invention (hereinafter referred to as embodiments) will be described with reference to the drawings.

[1. System Configuration]
FIG. 1 shows a system configuration diagram of an information processing system 1 according to the present embodiment. As illustrated in FIG. 1, the information processing system 1 includes a mobile terminal 10, a wireless relay device 20, a management server 30, one or a plurality of devices. In the present embodiment, an example in which the image processing apparatus 40 is a device will be described. However, the device may include an image processing function such as an image processing apparatus, a scanner, and a FAX transceiver.

  The wireless relay device 20, the management server 30, and the image processing device 40 are connected to each other via a network such as a local area network (LAN) so that data communication is possible. The mobile terminal 10 communicates wirelessly with the wireless relay device 20 and communicates with the management server 30 via the wireless relay device 20. Also. The portable terminal 10 includes an IC chip that performs non-contact communication, and at least one of the image processing devices 40 includes an IC card reader that functions as a reader of the IC chip. The mobile terminal 10 and the image processing apparatus 40 may perform data communication by non-contact communication between the IC chip of the mobile terminal 10 and the IC card reader of the image processing apparatus 40. Hereinafter, the details of the mobile terminal 10, the wireless relay device 20, the management server 30, and the image processing device 40 will be described with reference to FIGS.

[1.1. Mobile device]
First, details of the mobile terminal 10 will be described. The mobile terminal 10 is a computer such as a mobile phone, a PDA, or a tablet terminal operated by a user.

  FIG. 2 shows an example of the hardware configuration of the mobile terminal 10. As illustrated in FIG. 2, the mobile terminal 10 includes a control unit 100, a storage unit 102, a wireless communication unit 104, an input unit 106, a display unit 108, and an IC chip 110.

  The control unit 100 includes a CPU (Central Processing Unit), executes various arithmetic processes based on a program stored in the storage unit 102, and controls each unit of the mobile terminal 10.

  The storage unit 102 stores a control program such as an operating system of the mobile terminal 10 and data, and is also used as a work memory of the control unit 100. The program may be supplied to the portable terminal 10 while being stored in an information storage medium such as an optical disk, a magnetic disk, a magnetic tape, a magneto-optical disk, a flash memory, or the portable terminal via a data communication means such as the Internet. 10 may be supplied.

  The wireless communication unit 104 includes, for example, a network interface card, establishes wireless communication with the wireless relay device 20 via the network interface card, and communicates with the management server 30 via the wireless relay device 20.

  The input unit 106 is realized by an input device such as a touch panel or a keyboard, and receives an operation input from a user.

  The display unit 108 is realized by a display device such as a liquid crystal display, and displays a result (screen) of information processing by the control unit 100.

  The IC chip 110 executes a terminal application, communicates with the IC card reader 410, and acquires data (for example, user identification information) stored in the IC card reader 410. Hereinafter, a hardware configuration example of the IC chip 110 and the IC card reader 410 that performs non-contact communication with the IC chip 110 will be described with reference to FIG.

[1.1.1. IC chip]
FIG. 3 shows an example of the hardware configuration of the IC chip 110. As shown in FIG. 3, the IC chip 110 includes a wireless communication circuit 150, a CPU 152, a ROM 154, a RAM 156, and an EEPROM 158.

  The wireless communication circuit 150 includes, for example, an antenna and a high frequency circuit, and performs wireless communication with the IC card reader 410 at a short distance (for example, within several tens of centimeters).

  The CPU 152 is a central processing unit that executes arithmetic processing and controls each part of the IC chip 110 based on a control program stored in the ROM 154, a terminal application stored in the EEPROM 158, and the like.

  The ROM 154 is a memory that can only read data, and the ROM 154 stores, for example, a control program and control data for the IC chip 110.

  The RAM 156 is a memory in which data can be written and read. The RAM 156 is used as a working memory for processing by the CPU 152 and a temporary data storage area.

  The EEPROM 158 is a nonvolatile memory capable of writing and reading data. In the EEPROM 158, for example, a terminal application downloaded from the management server 30 is stored.

[1.1.2. IC card reader]
Next, a hardware configuration example of the IC card reader 410 will be described. As shown in FIG. 3, the IC card reader 410 includes a wireless communication circuit 450, a CPU 452, a ROM 454, a RAM 456, and an EEPROM 458. The IC card reader 410 may be provided in the image processing apparatus 40.

  The wireless communication circuit 450 includes, for example, an antenna and a high frequency circuit, and performs wireless communication with the IC chip 110 at a short distance (for example, within several tens of centimeters).

  The CPU 452 is a central processing unit that performs arithmetic processing and controls each part of the IC card reader 410 based on a control program stored in the ROM 454, an application stored in the EEPROM 458, and the like.

  The ROM 454 is a memory that can only read data, and the ROM 454 stores, for example, a control program and control data for the IC card reader 410.

  The RAM 456 is a memory capable of writing and reading data, and the RAM 456 is used as a working memory for processing by the CPU 452 and a temporary data storage area.

  The EEPROM 458 is a nonvolatile memory capable of writing and reading data. The EEPROM 458 stores, for example, information about the image processing apparatus 40.

[1.2. Wireless relay device]
Next, the wireless relay device 20 that functions as an access point for wireless communication will be described. FIG. 4 shows an example of the hardware configuration of the wireless relay device 20. As illustrated in FIG. 4, the wireless relay device 20 includes a control unit 200, a storage unit 202, a wireless communication unit 204, and a communication unit 206.

  The control unit 200 includes a CPU, executes various arithmetic processes based on a program stored in the storage unit 202, and controls each unit of the wireless relay device 20.

  The storage unit 202 stores a control program and data for the wireless relay device 20 and is also used as a work memory for the control unit 200.

  The wireless communication unit 204 performs wireless communication with the mobile terminal 10. As the wireless communication method, a communication method such as a wireless LAN may be used.

  The communication unit 206 performs data communication with the management server 30 connected via a communication cable such as a LAN cable or a serial cable.

[1.3. Management server]
Next, details of the management server 30 will be described. The management server 30 is a computer that manages authentication information and usage control information for each user.

  FIG. 5 shows an example of the hardware configuration of the management server 30. As shown in FIG. 5, the management server 30 includes a control unit 300, a storage unit 302, and a communication unit 304.

  The control unit 300 includes a CPU (Central Processing Unit), executes various arithmetic processes based on a program stored in the storage unit 302, and controls each unit of the management server 30.

  The storage unit 302 stores a control program such as an operating system of the management server 30 and data, and is also used as a work memory of the control unit 300. The program may be supplied to the management server 30 in a state stored in an information storage medium such as an optical disk, a magnetic disk, a magnetic tape, a magneto-optical disk, a flash memory, or the management server via a data communication unit such as the Internet. 30 may be supplied.

  The storage unit 302 controls authentication information (password) for each user ID and restrictions or permission for use of each function provided in the device (image processing apparatus 40) for each user, for example, as shown in FIG. The usage control information management table storing the usage control information is stored. Attribute information (user name, group ID, etc.) may be further associated with the user ID and stored in the storage unit 302.

  As shown in FIG. 7, the usage control information management table stores a user ID for identifying a user, a device ID for identifying a device (image processing apparatus 40), and an upper limit value that can be used for each function in association with each other. The ∞ (infinity) may be stored when the function is not restricted at all, and 0 may be stored when the function is completely restricted. Further, the usage control information management table may be managed for each device ID with respect to the user ID, or may be managed collectively with all (or a plurality of) device IDs with respect to the user ID. Here, examples of functions that the image processing apparatus 40 has and are limited include color printing, black and white printing, color copying, black and white copying, color scanning, black and white scanning, color fax transmission, and black and white fax transmission. For each function, an upper limit value such as the number of output sheets can be set in the usage control information management table.

  The communication unit 304 includes, for example, a network interface card, and communicates with the wireless relay device 20 and the image processing device 40 via the network interface card.

[1.4. Image processing apparatus]
Next, details of the image processing apparatus 40 will be described. The image processing apparatus 40 is an apparatus that receives user operations and performs image processing.

  FIG. 6 shows an example of the hardware configuration of the image processing apparatus 40. As shown in FIG. 6, the image processing apparatus 40 includes a control unit 400, a storage unit 402, a communication unit 404, an image processing unit 406, an operation panel 408, and an IC card reader 410.

  The control unit 400 includes a CPU (Central Processing Unit), executes various arithmetic processes based on a program stored in the storage unit 402, and controls each unit of the image processing apparatus 40.

  The storage unit 402 stores a control program and data for the image processing apparatus 40 and is also used as a work memory for the control unit 400. The program may be supplied to the image processing apparatus 40 in a state stored in an information storage medium such as an optical disk, a magnetic disk, a magnetic tape, a magneto-optical disk, or a flash memory, or an image may be transmitted via a data communication unit such as the Internet. It may be supplied to the processing device 40.

  The communication unit 404 includes a network interface card and performs data communication with the management server 30 via the network interface card.

  In the case of a print function, the image processing unit 406 forms an image on a print medium (printing paper) supplied from a paper feed tray in accordance with an image processing command (print job) input from the control unit 400. For example, the image processing unit 406 may form an image by a laser printer method or may form an image by an ink jet printer method. In the case of the copy function, the image processing unit 406 forms an image obtained by reading a document on a print medium. In the case of the facsimile function, the image processing unit 406 converts an image obtained by reading a document into a facsimile transmission protocol, and transmits it to a destination through a communication line.

  The operation panel 408 is an input device with a display function including a display device such as a liquid crystal display and an input device such as a button type or a touch panel type. The operation panel 408 functions as an interactive interface with a user who operates the image processing apparatus 40.

  The IC card reader 410 is a device that transmits and receives data to and from the IC chip 110 by wireless communication and performs arithmetic processing based on the transmitted and received data. An example of the configuration of the IC card reader 410 is as shown in FIG.

[2. Sequence example]
Next, an example of processing performed in the information processing system 1 will be described with reference to the sequence diagrams shown in FIGS.

[2.1. Processing before using the device]
First, processing (preliminary processing) executed before the user uses a device will be described with reference to FIG. The preliminary process may be, for example, a process performed when the mobile terminal 10 is entered into a building.

  As shown in FIG. 9, the mobile terminal 10 installs an authentication application (authentication application) in the mobile terminal 10 (S1001). The authentication application may be downloaded from a server via a network, or may be transferred from a computer such as a PC. The authentication application may be a program processed by the control unit 100 of the mobile terminal 10, a program processed by the IC chip 110, or a program processed by both of them in cooperation. .

  The mobile terminal 10 activates the authentication application, displays the information input screen on the display unit of the mobile terminal 10, and performs information setting of the authentication application based on the information input on the information input screen (S1002). For example, the information set in the authentication application may include an access point identifier (SSID) in the wireless network, an SSID password (network connection information), a user ID, and a user ID password. Information set in the authentication application is stored in the storage unit 102 of the mobile terminal 10 (or the EEPROM 158 of the IC chip 110).

  When the mobile terminal 10 enters the communication area of the wireless relay device 20, the SSID is notified from the wireless relay device 20 to the mobile terminal 10 (S1003).

  The portable terminal 10 acquires the SSID password (network connection information) notified from the wireless relay device 20 from the storage unit 102 (or EEPROM 158) of the portable terminal 10 (S1004), and wirelessly relays based on the acquired password. Wireless communication is established with the device 20 (S1005). Then, the mobile terminal 10 transmits authentication information including a user ID and a password to the management server 30 via the wireless relay device 20, and requests authentication (S1006).

  The management server 30 performs authentication based on the authentication information received from the mobile terminal 10, and when the result is authentication permission (S1007: Y), the usage control information management table (in association with the received user ID) The usage control information stored in FIG. 7 is acquired (S1008), and the acquired usage control information and authentication permission information indicating that the authentication is successful are transmitted to the mobile terminal 10 (S1009). The authentication permission information may include an electronic signature of the management server 30, an authentication date and time, a validity period, and the like. The management server 30 may similarly determine the validity period for the usage control information.

  The portable terminal 10 stores the usage control information and the authentication permission information received from the management server 30 in the EEPROM 158 (or the storage unit 102) (S1010), and ends the process. In S1007, if the result of the authentication performed by the management server 30 based on the authentication information received from the mobile terminal 10 is not authentication permission (S1007: N), the mobile terminal 10 is notified of authentication rejection (S1011). ), The process is terminated.

  In the above sequence example, S1001 and S1002 may be executed in advance when the wireless relay device 20 is outside the communication area.

[2.2. Processing when using the device]
Next, processing executed when the user uses the device (processing at the time of use) will be described with reference to FIG. The in-use process may be a process that is performed when the user starts using the portable terminal 10 over the IC card reader 410 of the image processing apparatus 40 to be used.

  As shown in FIG. 10, when the portable terminal 10 is held over the IC card reader 410 of the image processing apparatus 40 and communication with the IC card reader 410 is established, the portable terminal 10 is stored in the EEPROM 158 (or the storage unit 102) of the IC chip 110. The authentication permission information is transmitted to the image processing apparatus 40 via the IC card reader 410 (S2001). Hereinafter, communication between the portable terminal 10 and the image processing apparatus 40 may be performed via the IC chip 110 and the IC card reader 410.

  The image processing apparatus 40 determines whether or not the image processing apparatus 40 can be used based on the authentication permission information received from the mobile terminal 10 (S2002). For example, the image processing apparatus 40 may determine whether or not to permit the use based on confirmation of the electronic signature of the authentication permission information, a validity period set in the authentication permission information, and the like. Here, when the image processing apparatus 40 permits the use (S2002: Y), the use permission is notified to the portable terminal 10 (S2003).

  When the permission of use is notified from the image processing device 40, the portable terminal 10 reads and acquires the use control information stored in the EEPROM 158 (or the storage unit 102) (S2004), and performs image processing on the acquired use control information. It transmits to the apparatus 40 (S2005).

  Based on the usage control information received from the mobile terminal 10, the image processing device 40 selects a function that is allowed to be used by the user from among the functions provided in the image processing device 40, and presents the selected function to the user. (S2006). The function selection is a function that has not reached the upper limit value calculated based on the unit price for each function among the functions provided in the image processing apparatus 40 for the user ID, and the function that the user is permitted to use. It is good also as performing by selecting. In addition, the function is presented by, for example, enabling only the selected function on the operation screen displayed on the operation panel 408 of the image processing apparatus 40 and disabling the function that has not been selected. Good.

  The image processing apparatus 40 receives a process from the user via the operation panel 408 (S2007), and executes the received process (S2008). If the user does not end the use of the image processing apparatus 40 after executing the process (S2009: N), the process returns to S2007, and if the user ends the use of the image processing apparatus 40 ( S2009: Y), usage history information indicating the contents of the executed process is generated, and the generated usage history information is transmitted to the mobile terminal 10 (S2010). In S2009, whether or not the user ends the use of the image processing apparatus 40 may be determined based on an operation received from the user through the operation panel 408.

  The portable terminal 10 stores the use history information received from the image processing apparatus 40 in the storage unit 102 (or EEPROM 158) (S2011), and ends the process. In S2002, when the image processing apparatus 40 does not permit the use based on the authentication permission information received from the mobile terminal 10 (S2002: N), the mobile terminal 10 is notified of the use refusal (S2012), and the process is performed. Exit.

  The above sequence is executed every time the device (image processing apparatus 40) is used. In the above sequence, the mobile terminal 10 and the image processing apparatus 40 communicate with each other by non-contact communication between the IC chip 110 and the IC card reader 410, but perform wireless communication such as a wireless LAN. Also good.

[2.3. Processing after using the device]
Next, processing (post-use processing) executed after the user uses the device will be described with reference to FIG. The post-use process may be executed at a regular timing after the mobile terminal 10 acquires the use control information from the management server 30, for example.

  As illustrated in FIG. 11, the mobile terminal 10 determines whether or not the transmission timing of the usage history information has arrived (S3001). If the transmission timing has not arrived (S3001: N), the mobile terminal 10 waits. If the transmission timing has arrived (S3001: Y), unsent usage history information stored in the storage unit 102 (or EEPROM 158) is acquired (S3002). Then, the mobile terminal 10 transmits the acquired usage history information to the management server 30 via the wireless relay device 20 (S3003). When transmitting the usage history information, the mobile terminal 10 may add a transmission flag to the transmitted usage history information.

  The management server 30 receives the usage history information from the mobile terminal 10 and stores the received usage history information in the storage unit 302 of the management server 30 (S3004).

  Here, the mobile terminal 10 determines whether or not the end timing has come (S3005). Whether or not the end timing has come is determined, for example, whether or not the mobile terminal 10 has moved out of the communication area of the wireless relay device 20 (in this case, the timing when the mobile terminal 10 has moved out of the communication area is set as the end timing), or is determined in advance. It may be determined based on whether or not a given time (or elapsed time) has passed.

  When the end timing has not arrived (S3005: N), the mobile terminal 10 returns to S3001 and repeats the subsequent processing. When the end timing has arrived (S3005: Y), the storage unit 102 ( Alternatively, when unsent usage history information does not remain in the EEPROM 158 (S3006: N), the stored usage history information is deleted (S3007), and unsent usage history information remains in the storage unit 102 (or EEPROM 158). (S3006: Y), the stored use history information is not deleted, and the process ends. The stored unsent usage history information may be transmitted to the management server 30 at the next opportunity when the mobile terminal 10 becomes communicable with the management server 30, for example.

  In the above sequence, the transmitted usage history information may be deleted each time the mobile terminal 10 transmits the usage history information to the management server 30.

[2.4. Modification of processing when using device]
Here, a modified example of processing (use processing) executed when the user uses the device will be described with reference to FIG. The sequence illustrated in FIG. 12 is a process performed when the provided usage control information is updated after the usage control information is provided to the mobile terminal 10.

  As illustrated in FIG. 12, when the management server 30 updates the usage control information based on, for example, data input from the administrator (S4001), information about the user whose usage control information has been updated (for example, a user ID). Is sent to each image processing apparatus 40 (S4002).

  The image processing apparatus 40 stores the information notified from the management server 30 (update information management table: see FIG. 8) in the storage unit 402 (S4003). As shown in FIG. 8, in the update information management table, for example, information on the user ID, the update date and time, and the update flag related to the update are stored in association with each other. The update flag may be a true / false value indicating whether it has been updated or not updated. The update flag may be not updated by default, and may be changed to updated when the update is performed.

  Next, when the portable terminal 10 is held over the IC card reader 410 of the image processing apparatus 40 and communication with the IC card reader 410 is established, the authentication permission information stored in the EEPROM 158 (or the storage unit 102) of the IC chip 110 is displayed. Then, the data is transmitted to the image processing apparatus 40 via the IC card reader 410 (S4004). Hereinafter, communication between the portable terminal 10 and the image processing apparatus 40 may be performed via the IC chip 110 and the IC card reader 410.

  The image processing apparatus 40 determines whether or not the image processing apparatus 40 can be used based on the authentication permission information received from the mobile terminal 10 (S4005). For example, the image processing apparatus 40 may determine whether or not to permit the use based on confirmation of the electronic signature of the authentication permission information, a validity period set in the authentication permission information, and the like. Here, when the image processing apparatus 40 permits the use (S4005: Y), it is determined whether or not it is necessary to update the use control information provided from the management server 30 to the mobile terminal 10 (S4006). The necessity of updating the usage control information may be determined based on, for example, an update flag stored in the storage unit 402 for the user ID specified from the authentication permission information.

  When determining that the usage control information needs to be updated (S4006: Y), the image processing apparatus 40 notifies the mobile terminal 10 that the usage control information needs to be updated (S4007).

  When notified from the image processing apparatus 40 that the usage control information needs to be updated, the portable terminal 10 requests the management server 30 to provide the updated usage control information (S4008). The portable terminal 10 may transmit authentication permission information when requesting provision of usage control information.

  In response to a request from the mobile terminal 10, the management server 30 transmits updated usage control information associated with the user ID specified based on the authentication permission information to the mobile terminal 10 (S4009).

  The portable terminal 10 overwrites and updates the usage control information stored in the EEPROM 158 (or the storage unit 102) based on the updated usage control information received from the management server 30 (S4010).

  In S4006, when the image processing apparatus 40 determines that the usage control information does not need to be updated (S4006: N), the portable terminal 10 is notified of permission of use (S4011).

  The mobile terminal 10 reads and acquires the usage control information stored in the EEPROM 158 (or the storage unit 102) after S4010 or S4011, and transmits the acquired usage control information to the image processing apparatus 40 (S4012).

  Based on the usage control information received from the mobile terminal 10, the image processing device 40 selects a function that is allowed to be used by the user from among the functions provided in the image processing device 40, and presents the selected function to the user. (S4013). For example, the presentation of the function may be performed by enabling only the selected function on the operation screen displayed on the operation panel 408 of the image processing apparatus 40 and disabling the function that has not been selected.

  The image processing apparatus 40 receives a process from the user through the operation panel 408 (S4014), and executes the received process (S4015). If the user does not end the use of the image processing apparatus 40 after executing the process (S4016: N), the process returns to S4014, and if the user ends the use of the image processing apparatus 40 ( S4016: Y), usage history information indicating the contents of the executed processing is generated, and the generated usage history information is transmitted to the mobile terminal 10 (S4017). In S4016, whether or not the user ends the use of the image processing apparatus 40 may be determined based on an operation received from the user through the operation panel 408.

  The portable terminal 10 stores the use history information received from the image processing device 40 in the storage unit 102 (or EEPROM 158) (S4018), and ends the process. In S4002, when the image processing apparatus 40 does not permit the use based on the authentication permission information received from the mobile terminal 10 (S4005: N), the mobile terminal 10 is notified of the use refusal (S4019), and the process is performed. Exit.

[3. Modified example]
The present invention is not limited to the above embodiment. For example, the management server 30 may generate usage control information associated with the user ID based on the upper limit restriction information associated with the user ID. Specifically, for a certain user ID, the upper limit restriction information may be divided into IC card use restriction information when the user uses the IC card and use control information when the mobile terminal 10 is used. Good. More specifically, when the use is restricted within the copy: X part by the upper limit restriction information for a certain user ID, the restriction information when using the IC card is copied: Y part, use control. The information may be copied: divided into Z parts (X = Y + Z). At this time, the ratio between Y and Z may be determined based on the ratio between the number of devices corresponding to the IC card and the number of devices corresponding to the mobile terminal 10.

  1 information processing system, 10 mobile terminal, 20 wireless relay device, 30 management server, 40 image processing device, 100 control unit, 102 storage unit, 104 wireless communication unit, 106 input unit, 108 display unit, 110 IC chip, 150 wireless Communication circuit, 152 CPU, 154 ROM, 156 RAM, 158 EEPROM, 200 control unit, 202 storage unit, 204 wireless communication unit, 206 communication unit, 300 control unit, 302 storage unit, 304 communication unit, 400 control unit, 402 storage Unit, 404 communication unit, 406 image processing unit, 408 operation panel, 410 IC card reader, 450 wireless communication circuit, 452 CPU, 454 ROM, 456 RAM, 458 EEPROM.

Claims (5)

Including a management device, a portable terminal, and a processing device;
The management device
Management means for managing usage control information for restricting or permitting the use of each function provided in the processing device for each user;
The portable terminal is
Authentication request means for transmitting information of the user of the mobile terminal to the management device and requesting authentication;
An acquisition unit that acquires usage control information managed by the management unit for a user of the portable terminal when the authentication by the authentication request unit is successful;
Notification means for notifying the processing device of the usage control information acquired by the acquisition means,
The processor is
An information processing system comprising: control means for controlling use of each function provided in the processing device by a user of the portable terminal based on usage control information notified by the notification means. The management device
When the usage control information managed by the management unit is updated, it further includes update notification means for notifying the processing device of user information related to the updated usage control information,
The processor is
Update necessity notification for notifying the mobile terminal that the usage control information needs to be updated when the user usage control information related to the information notified by the update notification unit is notified by the notification unit Further comprising means,
The acquisition means includes
The information processing system according to claim 1, wherein the updated usage control information is acquired from the management device after receiving the notification by the update necessity notification unit. The processor is
Processing execution means for executing processing received from a user of the mobile terminal based on the functions whose use is controlled by the control means;
History information transmitting means for transmitting history information indicating a history of processing executed by the process execution means to the mobile terminal;
The portable terminal is
The information processing system according to claim 1, further comprising means for transmitting the history information transmitted by the history information transmitting means to the management device. Authentication request means for requesting authentication by transmitting information of a given user to a management device that manages usage control information that restricts or permits the use of each function provided in the processing device for each user;
An acquisition unit that acquires usage control information managed by the management device for the given user when the authentication by the authentication request unit is successful;
Notification means for notifying the processing device of the usage control information acquired by the acquisition means,
The mobile terminal, wherein the processing device controls use of each function provided in the processing device by the given user based on usage control information notified by the notification means. Authentication request means for requesting authentication by transmitting information of a given user to a management device that manages usage control information that restricts or permits the use of each function provided in the processing device for each user;
An acquisition unit that acquires usage control information managed by the management device for the given user when the authentication by the authentication request unit is successful;
A program that causes a computer to function as notification means for notifying the processing device of usage control information acquired by the acquisition means,
The program for controlling the use of each function provided in the processing device by the given user based on the usage control information notified by the notification means.

Images