JP2014178881A - Information processing device and information processing method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a technique capable of recording print logs of each user even when causing a printing device to perform printing according to print requests from a plurality of users.SOLUTION: It is determined whether printing information generated in response to execution of printing includes information on a user corresponding to each piece of user information. A print log of the user is generated from the printing information including the information on the user corresponding to the user information.

Description

  The present invention relates to a print log collection technique.

  As a conventional technique for tracking the leakage path when confidential information is leaked, it is possible to identify and track the printed file from the print history, or leave only the print information as a print log and print from the print log. There are known methods for identifying and tracking files.

  According to Japanese Patent Application Laid-Open No. 2004-228561, printing execution in a monitoring target apparatus is monitored using a print monitoring Win32 API provided by Windows (registered trademark). Then, when printing is executed, information on the executed printing is acquired together with a print execution notification through the Win32 API, and a print log is acquired.

JP 2010-21116 A

  However, the conventional technique has the following problems. The login user name written in the print log is the name of the user who has logged in to the monitoring target device when printing is executed. However, in an information processing device that can be used by multiple users at the same time, if a user executes printing, it is output as a print log for all users logged in to the monitored device, so printing is actually performed. The print log of the user who has not been used is output.

  The present invention has been made in view of such problems, and provides a technique capable of recording a print log for each user even when the printing apparatus performs printing in response to a print request from a plurality of users. The purpose is to do.

  According to the first aspect of the present invention, there is provided an information processing device that can be used simultaneously from a plurality of terminal devices and that causes the printing device to execute printing in response to a print request received from each of the plurality of terminal devices. The management unit that manages the user information of the terminal device, and the print information generated in response to the execution of the printing includes user information corresponding to the user information managed by the management unit Determining means for determining whether or not, and generating means for generating a print log of the user from print information including user information corresponding to the user information managed by the management means. .

  According to the configuration of the present invention, it is possible to record a print log for each user even when the printing apparatus performs printing according to print requests from a plurality of users.

The block diagram which shows the function structural example of a system. The flowchart of the process for collecting and managing the user information of the user who logged in. 10 is a flowchart of processing for generating a print log. FIG. 2 is a block diagram showing an example hardware configuration of the server apparatus 100. The figure which shows the update example of a printing information list. The figure which shows the example of printing information. 1 is a schematic diagram of a system configuration.

  Preferred embodiments of the present invention will be described below with reference to the accompanying drawings.

[First Embodiment]
First, a functional configuration example of a system according to the present embodiment will be described with reference to the block diagram of FIG. The system according to the present embodiment is for implementing a terminal service. As is well known, the terminal service is a service in which the server device executes an application program in response to an input made on the client terminal device side. In other words, even a client terminal device that does not have an application program can enjoy the benefits of this application program.

  As shown in FIG. 1, the system according to the present embodiment includes a server device 100 that provides a terminal service, client terminal devices 170a and 170b that receive the terminal service, and a printing device 150a that performs printing based on print data from the server device 100. , B. The server device 100, the printing devices 150a and 150b, and the client terminal devices 170a and 170b are all connected to a network 160 configured by a LAN, the Internet, or the like, and can perform data communication with each other.

  Note that the configuration shown in FIG. 1 is merely an example, and other configurations may be adopted as long as an operation equivalent to or higher than the operation of the system described below can be realized. For example, in FIG. 1, the number of client terminal devices and printing devices is two, but is not limited to this, and may be three or more, for example. In addition, a part of all functions described as functions of the server apparatus 100 may be assigned to an external apparatus, and the external apparatus may be connected to the network 160 so that the partial function is executed by the external apparatus. good.

  First, the server apparatus 100 will be described. The security software 103 monitors the operation of the spooler 104 for each client terminal device 170a (170b) (for each user of the client terminal device). Further, when the spooler 104 sends the print data to the printing apparatus 150a (150b) and causes the printing apparatus 150a (150b) to execute printing, the security software 103 determines the print log from the information (print information) related to the printing. Is generated.

  The spooler 104 manages the print data transmitted from the client terminal device 170a (170b), and sequentially sends the print data to one of the printing devices 150a and 150b specified in the print data via the network 160. To do. Since the function of the spooler 104 is well known, further detailed description is omitted. The software is not limited to the spooler 104, and any software that manages the execution of printing may be used.

  The terminal service providing unit 102 executes processing for providing a terminal service to the client terminal devices 170a and 170b.

  In the storage unit 101, information on each user who can use the client terminal device 170a and the client terminal device 170b (user information) is registered in advance. The storage unit 101 also stores information (address and name) for specifying a printing device that can be used by each user who can use the client terminal device 170a and the client terminal device 170b.

  Next, the client terminal devices 170a and 170b will be described. The client terminal device 170a and the client terminal device 170b are devices that perform the same configuration and the same operation. However, in the following description, in the description common to the client terminal device 170a and the client terminal device 170b, the client terminal device 170a and the client terminal device 170b are collectively referred to as the client terminal device 170.

  When the client terminal device 170 wants to enjoy the terminal service provided by the server device 100, it is necessary to log in to the server device 100 first. However, the client terminal device 170 needs to transmit information necessary for login (user information (user name, password, etc.) of the user who operates the client terminal device 170) to the server device 100. When the user information is authenticated on the server device 100 side (when it matches any of the user information registered in advance in the storage unit 101), the client terminal device 170 can enjoy the terminal service provided by the server device 100. become able to. Thus, in order to enjoy the terminal service, it is necessary to execute a program called remote desktop connection (RDC) or a program called terminal service client (TSC). However, such a program needs to be installed in the client terminal device 170. The terminal service is a service that is generally provided in a general operation system (OS) such as Windows (registered trademark), MacOS, and Linux (registered trademark), and therefore the name varies depending on the OS.

  The remote service is a service for remotely operating the first PC by remotely logging in to the first personal computer (PC) from the second PC. For example, information is acquired from the first PC, information is written to the first PC, and software installed in the first PC is executed on the first PC. Note that a user who is directly logged in through the input unit of the first PC is called a local user, and a user who is remotely logged in from the second PC to the first PC is called a remote user.

  For example, the terminal service providing unit 102 executes the application program requested to be executed from the client terminal device 170 to generate a display screen, and returns the generated display screen data to the client terminal device 170. The client terminal device 170 generates a display screen based on this data, and displays the generated display screen on the display device. When the user of the client terminal device 170 views the display screen and inputs any operation (for example, a print instruction operation (print data transmission)), the operation content (for example, print data) is transmitted to the server device 100. The terminal service providing unit 102 (and other functional units may operate) executes a process based on the operation content and returns a result of the execution to the client terminal device 170. The client terminal device 170 reflects the result of this execution on the display screen. While the server apparatus 100 is used by a remote user, it can also be used by a local user concurrently.

  As described above, in a system (terminal service) that can be used simultaneously by a plurality of users including a remote user and a local user, an application program is executed on the server device 100. It is also possible to simultaneously connect to the server apparatus 100 from the client terminal apparatus 170 to execute the application program. In this case, a session is divided for each remote user, and each user can execute an application program using a separate virtual desktop environment. The terminal service providing unit 102 issues a session ID to distinguish each session. Note that “available simultaneously” includes a state in which a plurality of users are logged in at the same time. Since such a terminal service is a general technique, further explanation is omitted.

  Next, the printing apparatuses 150a and 150b will be described. The printing apparatuses 150 a and 150 b are apparatuses that print characters, images, and the like on a recording medium such as paper based on print data received via the network 160. In FIG. 1, the printing apparatuses 150a and 150b are connected to the network 160, but may be directly connected to the server apparatus 100.

  Next, a hardware configuration example of the server apparatus 100 will be described with reference to the block diagram of FIG.

  The CPU 401 executes processing using computer programs and data stored in the RAM 402 and ROM 403, thereby controlling the operation of the entire server apparatus 100 and executing each process described later as what the server apparatus 100 performs. .

  The RAM 402 has an area for temporarily storing computer programs and data loaded from the external storage device 405, and a work area used when the CPU 401 executes various processes. Furthermore, the RAM 402 also has an area for temporarily storing various data received from the client terminal device 170 via the network I / F (interface) 407. As described above, the RAM 402 can provide various areas as appropriate.

  The ROM 403 stores setting data and a boot program for the server device 100.

  The operation unit 404 is configured by a mouse, a keyboard, and the like, and various instructions can be input to the CPU 401 by an operation of the server device 100.

  The external storage device 405 is a large-capacity information storage device represented by a hard disk drive device. The external storage device 405 stores an OS (operating system) and computer programs corresponding to the security software 103, the spooler 104, and the terminal service providing unit 102 described above. The external storage device 405 also stores driver software for the printing apparatuses 150a and 150b. The external storage device 405 is also used for buffering a plurality of print data by the spooler 104. Further, since the external storage device 405 also functions as the storage unit 101 in FIG. 1, the external storage device 405 stores the data described above as being held by the storage unit 101.

  Computer programs and data stored in the external storage device 405 are appropriately loaded into the RAM 402 under the control of the CPU 401 and are processed by the CPU 401.

  The display unit 406 is configured by a CRT, a liquid crystal screen, or the like, and displays a processing result by the CPU 401 using an image, text, or the like.

  The network I / F 407 is for connecting the server apparatus 100 to the network 160, and the server apparatus 100 performs data communication with each device connected to the network 160 via the network I / F 407. It can be carried out.

  Each of the above parts is connected to the bus 408.

  Note that the hardware configuration shown in FIG. 4 is merely an example, and any configuration may be adopted as long as each processing described below can be performed by the server apparatus 100. The configuration shown in FIG. 4 may be applied to the client terminal device 170.

  Next, processing performed by the server apparatus 100 will be described with reference to FIGS. 2 is a flowchart of a process for collecting and managing user information of a user who has logged into the server apparatus 100, and FIG. 3 is a flowchart of a process for generating a print log.

  Note that computer programs and data for causing the CPU 401 to execute processing according to the flowcharts of FIGS. 2 and 3 are stored in the external storage device 405. The CPU 401 loads the computer program and data into the RAM 402 and executes them, so that the CPU 401 can execute processing according to the flowcharts of FIGS.

  In step S <b> 201, the CPU 401 loads the security software 103 stored in the external storage device 405 into the RAM 402 and activates the security software 103. The process in step S201 may be performed when the server apparatus 100 is activated, or may be performed in response to the user operating the operation unit 404 to input an activation instruction and the CPU 401 detecting this input. However, it may be started by another program. Of course, the other functional units shown in FIG. 1 are also activated.

  In step S202, the CPU 401 executes the security software 103. Thus, when the CPU 401 receives the user information transmitted from the client terminal device 170 for logging in to the server device 100, the CPU 401 and the user information registered in advance in the external storage device 405 (storage unit 101). Compare user information.

  Since the user information is for logging in to the server device 100 as described above, for example, the user of the client terminal device 170 operates an operation unit (not shown) and inputs his / her user name and password as user information. When the user operates an operation unit (not shown) and inputs a user information transmission instruction, the client terminal device 170 transmits the user information to the server device 100. The user information may be a value that can uniquely identify the user, such as an account name, a domain name, or a user name.

  As a result of the comparison, if user information that matches the user information received from the client terminal device 170 is stored in the external storage device 405, it is determined that the authentication is successful, and the process proceeds to step S203. On the other hand, as a result of this comparison, if user information that matches the user information received from the client terminal device 170 has not been stored in the external storage device 405, it is determined that the authentication has failed, and that is notified to the client terminal device 170. The processing in FIG.

  In step S203, the CPU 401 executes the security software 103. Accordingly, the CPU 401 registers the user information received from the client terminal device 170 in step S202 in a list (user information list) for registering user information of the logged-in user. At this time, a session ID may be used instead of the user information. Then, the process proceeds to step S205 in FIG.

  The CPU 401 transfers print data received from the client terminal device 170 (client terminal device that has been successfully authenticated) to the spooler 104 via the network I / F 407. Then, the CPU 401 executes the spooler 104 to manage the transferred print data in the external storage device 405 and send the print data to the printing device 150a or the printing device 150b at an appropriate timing. The print data is appropriately converted depending on the format and then transmitted to the printing apparatus 150a or the printing apparatus 150b.

  At this time, in step S205, the CPU 401 executes the security software 103 and monitors the spooler 104 using a print operation monitoring Win32 API or the like provided by Windows (registered trademark). When the CPU 401 sends certain print data to the printing device 150a or the printing device 150b (the timing is not limited to after sending), the CPU 401 acquires print information related to this printing via the monitoring Win32 API or the like. The print information includes, for example, a user name, a printer name, a job ID, a document name, a PC name, the number of copies, a print (start, end) time, a print state (print start, print end), a printing apparatus IP address, and the like. included.

  In the following description, it is assumed that the user A, the user B, the user C, and the user D are logged in to the server apparatus 100 (however, the user information list includes the user A, the user B, and the like). , User information of user C and user D are registered). Then, the user name = user A executes printing using the printer name = printer name of the printing apparatus 150a, and the CPU 401 performs “user name = user A, printer name = printing apparatus 150a via the monitoring Win32 API or the like. It is assumed that print information including “printer name” is acquired.

  At this time, in step S205, the CPU 401 acquires print information for each user that can use the printer having the printer name (here, the printer name of the printing apparatus 150a) in the print information acquired in the same step. Here, it is assumed that the users who can use the printing apparatus 150a are the users A, C, and D. From the users A, C, and D, “(user name = user A, printer name = printing apparatus 150a Print information (including “printer name”).

  The security software 103 creates a list (print information list) that holds the print information received by the server apparatus 100. Next, in step S301, the CPU 401 executes the security software 103, print information in a list (print information list) for registering print information received in the past by the server apparatus 100, and the print acquired in step S205. Compare information. In this comparison, all the elements included in the print information may be compared, or a part of them may be compared. That is, any comparison may be used as long as it can be determined whether or not print information indicating the same print content as that acquired in step S205 is already registered in the print information list.

  If the same print information as the print information acquired in step S205 is already registered in the print information list, the process proceeds to step S308. On the other hand, if the same print information as the print information acquired in step S205 is not registered in the print information list, the process proceeds to step S302.

  In step S308, the CPU 401 discards the print information acquired in step S205 and ends the process. On the other hand, in step S302, the CPU 401 registers the print information acquired in step S205 in the print information list.

  Here, an example of updating the print information list will be described with reference to FIG. Since nothing is registered in the print information list in the initial state, the print information list is empty as shown in FIG. After that, when the print information A is acquired, nothing is registered in the print information list yet, so this print information A is registered in the print information list as shown in FIG. After that, it is assumed that the print information B is acquired. In this case, the print information A is registered in the print information list, but the print information B is not yet registered. Therefore, the print information B is registered in the print information list as shown in FIG. After that, it is assumed that the print information A is acquired. In this case, since the print information A is already registered in the print information list, the acquired print information A is discarded without being registered in the print information list. In this way, print information is registered in the print information list without duplication.

  FIG. 6 shows print information (α, β, γ) acquired when the account name (user name) = hoge1 executes printing using the printer name = Micro XPS Document Writer. Assume that user names of users who are logged in to the server apparatus 100 are hoge1, hoge2, hoge3, and hoge4. At this time, among the user names, the same print information (α, β, γ) is acquired for the users who can use the printer name = Micro XPS Document Writer (for example, hoge1, hoge2, hoge3). However, only the print information α is registered in the print information list.

  In step S303, the CPU 401 includes a user name (may be an account name) included in the print information acquired in step S205, a user name (may be an account name) in the user information read from the user information list, Compare As a result of the comparison, if the user name included in the print information acquired in step S205 matches the user name in any user information in the user information list, the process proceeds to step S304. On the other hand, if the user name included in the print information acquired in step S205 is not one of the user names in the user information, the process proceeds to step S305.

  Here, “the case where the user name included in the print information acquired in step S205 is not one of the user names in the user information list” can be considered as follows, for example. For example, the print data is transmitted from the client terminal device 170 with administrator authority. Further, in the case where authentication processing is required when using the printing apparatus, the following cases can be considered. That is, the user information transmitted from the client terminal device to the server device 100 to use the printing device is different from the user information transmitted from the client terminal device to the server device 100 to log in to the server device 100.

  In step S304, the CPU 401 executes the security software 103 and records the print information acquired in step S205 in the external storage device 405 as a user print log corresponding to user information whose user name matches the print information in the user information list. To do. For example, in the case of the above example, since the user name included in the print information acquired in step S205 is “user A”, this print information is recorded in the external storage device 405 as a print log of user A.

  Further, in an environment where printing is performed from a plurality of client terminal devices 170, user information and print information may be output as a print log after first being filtered by the PC name included in the print information.

  On the other hand, in step S <b> 305, the CPU 401 executes the security software 103 and determines whether there is one user currently logged in to the server device 100. This may be determined by determining whether or not the user information registered in the user information list is for one person. As a result of this determination, when there is one user who is currently logged in to the server apparatus 100 (the user information registered in the user information list is one person), the process proceeds to step S306. On the other hand, if there are two or more users who are currently logged in to the server apparatus 100 (the user information registered in the user information list is two or more), the process proceeds to step S307.

  In step S306, the CPU 401 executes the security software 103, and the print information acquired in step S205 is stored in the external storage device 405 as a user print log corresponding to the user information for one person registered in the user information list. Record.

  On the other hand, in step S307, the CPU 401 executes the security software 103 and records or discards the print information acquired in step S205 as a print log. In the former case, it may be recorded in the external storage device 405 as a user's print log corresponding to all or part of the user information registered in the user information list, or it may be recorded in the external storage device 405 as an unknown person's print log. It may be recorded. The user to be recorded as a print log may be set in advance, or may be designated by the operator of the server apparatus 100 using the operation unit 404 each time.

  Note that the CPU 401 deletes the print information registered in the print information list every specified time. The specified time is not limited to a specific time. For example, an average time interval (several seconds) from receiving print information from one client terminal device to receiving print information from the next client terminal device. May be used as the “specified time”.

  In addition, when the number of logged-in users is not one, the operation history for each logged-in user during the printing time period is acquired, and a specific operation is performed (for example, a print setting window for printing is displayed and printed. The user may be identified as the user who executed the printing (for example, viewing the same document name as the document name).

  The operation of the system described above will be described with reference to the schematic diagram of FIG. In FIG. 7, a client terminal device 701 used by user A, a client terminal device 702 used by user B, and a client terminal device 703 used by user C are connected to server device 100. Reference numerals 103a to 103c are portions in charge of the client terminal devices 701 to 703 in the security software 103, respectively.

  Each of the security software 103a to 103c receives the user information from the corresponding client terminal device and performs the authentication process and registers the user information in the user information list. Further, each of the security software 103 a to 103 c monitors the operation of the spooler 104, and when the print information relating to printing is acquired, the acquired print information is transmitted to the security software 103. When the security software 103 acquires the respective print information, the security software 103 creates a user print log using the print information as described above.

  As described above, according to the present embodiment, in an information processing apparatus that can be used simultaneously by a plurality of users, even when a plurality of users log in and execute printing, a print log is assigned to one user. It is also possible.

[Second Embodiment]
In addition, because of polling, there are cases where a plurality of pieces of print information written out when printing is different for each piece of print information (for example, the number of printed sheets and printing time). Therefore, first, the user who performed printing is specified, and then it is determined whether or not a predetermined condition (for example, the number of printed sheets is the largest and the printing time is the newest) is matched. May be associated with the identified user and output as a print log of the user who performed printing. As described above, in the use of the information processing apparatus that can be used simultaneously by a plurality of users, the print information can be associated with the user and can be output as a print log of the user who performed the printing.

  In the use of an information processing apparatus that can be used simultaneously by a plurality of users, the following processing can also be performed if the print information can be associated with the user who has performed printing. Since the print information includes the IP address of the printing apparatus, the use of printing for each user can be controlled by associating the IP address with the user. For example, in an environment where a plurality of departments can use a plurality of printing apparatuses, it is possible to browse or steal printing of other departments that are not related to the department to which the user belongs. Therefore, the security software 103 obtains print information when printing is started (printing status is printing start), and refers to a table that associates the user stored in advance with the IP address of the printing apparatus that permits printing. Print control (permit / deny). By referring to the table in which the IP address of the printing apparatus is associated with the user, information leakage can be further suppressed.

  In addition, there are printing apparatuses capable of monochrome printing (color printing is impossible) and printing apparatuses capable of color printing. Black and white printing for office users, color printing for sales users, black and white printing for documents used for internal processing, and color printing for documents used outside the company It is also possible to perform control. Specifically, the security software 103 acquires print information when printing is started (printing status is printing start), and associates a user / document name and a printer name (including color settings) stored in advance. Referring to the table, print control (permit / deny) is performed. By referring to the table in which the user / document name and the printer name are associated with each other, it is possible to reduce the printing cost which is convenient for the user.

Claims (11)

An information processing apparatus that can be used simultaneously from a plurality of terminal devices and that causes the printing apparatus to execute printing in response to a print request received from each of the plurality of terminal devices,
Management means for managing user information of the terminal device;
A determination unit that determines whether the print information generated in response to the execution of the printing includes user information corresponding to the user information managed by the management unit;
An information processing apparatus comprising: generation means for generating a print log of the user from print information including user information corresponding to user information managed by the management means. The generating means includes
The print information generated in response to the execution of the printing does not include user information corresponding to the user information managed by the management unit, and the management unit has a plurality of names. The information processing apparatus according to claim 1, wherein when user information is managed, a print log of the user is not generated from the print information. The generating means includes
The print information generated in response to the execution of the printing does not include user information corresponding to the user information managed by the management means, and the management means is for one person. The information processing apparatus according to claim 1, wherein when user information is managed, a print log of a user corresponding to the user information for the one person is generated from the print information. The generating means includes
The print information generated in response to the execution of the printing does not include user information corresponding to the user information managed by the management unit, and the management unit has a plurality of names. 4. The user print log corresponding to the user information for the plurality of names is generated from the print information when user information is managed. 5. Information processing device. An information processing apparatus that can be used simultaneously from a plurality of terminal devices and that causes the printing apparatus to execute printing in response to a print request received from each of the plurality of terminal devices,
Determination means for determining whether or not the print information generated in response to the execution of the print overlaps the registered print information registered in the list;
Means for registering the print information as registered print information in the list when the print information is different from any of the registered print information registered in the list;
An information processing apparatus comprising: generating means for generating a user print log from registered print information registered in the list. Furthermore,
6. The information processing apparatus according to claim 5, further comprising means for erasing the registered print information registered in the list at regular time intervals. An information processing method performed by an information processing apparatus that can be used simultaneously from a plurality of terminal devices and that causes the printing apparatus to execute printing in response to a print request received from each of the plurality of terminal devices,
A management step in which the management means of the information processing device manages user information of the terminal device;
The determination unit of the information processing apparatus determines whether the print information generated in response to the execution of the printing includes user information corresponding to the user information managed in the management process. A decision process;
The information processing apparatus includes a generation step of generating a print log of the user from print information including user information corresponding to the user information managed in the management step. Processing method. An information processing method performed by an information processing apparatus that can be used simultaneously from a plurality of terminal devices and that causes the printing apparatus to execute printing in response to a print request received from each of the plurality of terminal devices,
A determination step of determining whether or not the print information generated in response to the execution of the printing by the determination unit of the information processing apparatus overlaps the registered print information registered in the list;
A step of registering the print information in the list as registered print information when the print information is different from any of the registered print information registered in the list;
An information processing method comprising: a generation step of generating a print log of a user from registered print information registered in the list.   The computer program for functioning a computer as each means of the information processing apparatus of any one of Claims 1 thru | or 6. A plurality of terminal devices;
An information processing device that can be used simultaneously from the plurality of terminal devices and that causes the printing device to execute printing in response to a print request received from the terminal device;
A system comprising:
The information processing apparatus includes:
Management means for managing user information of the terminal device;
A determination unit that determines whether the print information generated in response to the execution of the printing includes user information corresponding to the user information managed by the management unit;
A system comprising: generating means for generating a print log of the user from print information including user information corresponding to user information managed by the management means. A plurality of terminal devices;
An information processing device that can be used simultaneously from the plurality of terminal devices and that causes the printing device to execute printing in response to a print request received from the terminal device;
A system comprising:
The information processing apparatus includes:
Determination means for determining whether or not the print information generated in response to the execution of the print overlaps the registered print information registered in the list;
Means for registering the print information as registered print information in the list when the print information is different from any of the registered print information registered in the list;
A generating unit configured to generate a user print log from the registered print information registered in the list.

Images