JP2016126732A - Log-in method, image forming apparatus, mobile terminal, and computer program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a log-in method that reduces an operation burden on a user when the user logs in an image forming apparatus having an authentication function from a portable terminal.SOLUTION: A portable terminal 102 obtains a URL of a log-in check picture from an image forming apparatus 101 by short-range wireless communication, and then makes a web browser display the log-in check picture from the URL. Then, the portable terminal transmits user authentication information input by a user to the image forming apparatus 101 by encryption communication. The image forming apparatus 101 performs user authentication using the received user authentication information, and when the user authentication is successful, it makes the user log in a local UI (User Interface) and automatically cancels a power-saving mode.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a method for logging in to an image forming apparatus using a portable terminal.

In recent years, in an image forming apparatus such as a multifunction peripheral, user authentication is performed using information read by near field communication (NFC) determined by a standard, and login to the image forming apparatus is performed. It is possible. Among mobile terminals such as smartphones and tablet personal computers, those capable of short-range wireless communication are increasing. These portable terminals have a built-in NFC reader / writer, and can write and read data to and from an NFC tag such as a non-contact IC chip. Therefore, it is possible to add an NFC tag to the image forming apparatus and transmit information necessary for the operation to the portable terminal.
For example, Patent Document 1 discloses an image forming apparatus that can specify execution of a document printing or scanning function from a portable terminal by short-range wireless communication. In this image forming apparatus, using Bluetooth (registered trademark) as an example of short-range wireless communication, communication setting information, a function ID for identifying a function to be executed, and authentication information for performing user authentication are used from a mobile terminal. Read etc. Then, using the read information, authentication with the mobile terminal and communication setting are performed, and the function specified by the function ID is executed.

JP 2009-135865 A

  In the image forming apparatus described in Patent Document 1, authentication information is read from a portable terminal using short-range wireless communication, but there is a problem that security is lacking as it is. That is, if user authentication information is stored in a portable terminal and a configuration in which the user authentication information is read from an external NFC reader is permitted, the user authentication information is read in a form not intended by the user. When the image forming apparatus is in the power saving mode, it is necessary to perform an operation such as canceling the power saving mode by directly operating the image forming apparatus after user authentication. This eliminates the advantage of logging into the image forming apparatus from the mobile terminal.

  In order to solve such a problem, the present invention provides a technique for reducing a user's operation load while maintaining the security of user authentication information when logging in to a device having an authentication function from a mobile terminal. The main purpose.

  In order to achieve the above object, the present invention provides a novel login method to an apparatus having an authentication function. In this login method, the portable terminal held by the user acquires link information to the authentication function of the device from the device by short-range wireless communication, and other than the short-range wireless communication to the device according to the acquired link information Transmitting the user authentication information by communication, and the device that has received the user authentication information executes an authentication function based on the user authentication information, and if the authentication is successful, allows login by the portable terminal And a step of canceling the restricted state in operation of the apparatus that requires a local release operation by the user for the release without using the release operation.

  According to the present invention, since the user authentication information is valid only with the device that has acquired the link information by short-range wireless communication, the security can be maintained. In addition, when user authentication is successful on the device side, login is permitted and the restricted state of operation of the device is released, so that the operation load on the user can be reduced.

1 is an overall configuration diagram of a printing system. 1 is a hardware configuration diagram of an image forming apparatus and a mobile terminal. (A)-(d) is a related explanatory drawing of the electric power supply system which an image forming apparatus has. (A), (b) is a functional block diagram of an image forming apparatus and a portable terminal. The figure which shows the data format example of a user authentication table. (A) is an NFC reader / writer, (b) is a functional block diagram of an NFC tag seal. The figure which shows the data format example of NFC tag information. (A), (b) is explanatory drawing of the screen displayed on the operation part of a portable terminal. The sequence diagram of the login method. Explanatory drawing of the process sequence of the image forming apparatus for implement | achieving the login method. Explanatory drawing of the process procedure of the portable terminal for implement | achieving the login method.

Hereinafter, an exemplary embodiment when the present invention is applied to a printing system will be described.
[First Embodiment]
FIG. 1 is an overall configuration diagram of a printing system. This printing system is configured by connecting an image forming apparatus 101 having an authentication function, a portable terminal 102 held by a user, and an access point 103 to a network 104. A personal computer (hereinafter abbreviated as “PC”) (not shown) may be connected to the printing system. The network 104 is a wireless local area network (LAN) such as WiFi, for example. The access point 103 is a connection interface with the wireless LAN. The image forming apparatus 101 can communicate with the mobile terminal 102 and the PC via the access point 103 and the network 104. Such communication may be referred to as second communication means in the sense of communication other than short-range wireless communication (NFC: first communication means) described later. Devices that are connected to the network 104, such as the image forming apparatus 101, the portable terminal 102, and a PC, are assigned addresses for identifying each device.

  The image forming apparatus 101 includes an NFC reader / writer 105 and an operation unit 106. The NFC reader / writer 105 is a device that reads information from an NFC medium that enables short-range wireless communication and writes information to the NFC medium. The operation unit 106 includes an operation panel that enables a local UI (User Interface) operation of the image forming apparatus 101. The local UI operation is a UI operation performed in front of the operation unit 106 of the image forming apparatus 101 for a remote UI operation. Specifically, local login, power on / off, cancellation of the power saving mode, and the like correspond to local UI operations.

  The mobile terminal 102 also includes two types of communication means for transferring data to and from the image forming apparatus 101. One is NFC means (third communication means) that performs short-range wireless communication 110 with the NFC reader / writer 105. The other is encryption communication means (fourth communication means) that performs secure encryption communication 111 other than near field communication via the access point 103.

  Hereinafter, the configuration of each of the above parts will be described in detail. FIG. 2 is a hardware configuration diagram of the image forming apparatus 101 and the mobile terminal 102. The image forming apparatus 101 is configured by connecting various functional components to an internal bus B1. The functional components include a computer composed of a CPU 201, an HDD 202, and a RAM 203. A CPU (Central Processing Unit) 201 functions as a control unit that performs control for realizing a characteristic login method in the image forming apparatus 101. An HDD (Hard Disk Drive) 202 stores a first computer program executed by the CPU 201 and various data. A RAM (Random Access Memory) 203 is a work area of the CPU 201, a reception buffer, and a volatile memory used for image drawing. In addition to the above-described NFC reader / writer 105 and operation unit 106, the internal bus B1 is also connected to components such as a network I / F (I / F is an interface, the same applies hereinafter) 206, a printer unit 207, and a scanner unit 208. Yes.

  The NFC reader / writer 105 performs short-range wireless communication with the mobile terminal 102. The operation unit 106 has the above-described operation panel. The operation panel has a display screen on which a touch sensor is mounted, and UI components such as various switch images and button images are arranged on the display screen. A network I / F 206 is a NIC (Network Interface Card) for connecting an external device such as the mobile terminal 102 or a PC to the network 104, for example. A printer unit 207 is a printer that performs printing on recording paper. The scanner unit 208 is a scanner that reads a printed document or the like and converts it into electronic data.

  The mobile terminal 102 is an information terminal held by the user, and is a kind of computer in which the CPU 209, the flash memory 210, and the RAM 211 are connected to the internal bus B2. An operation unit 212, a wireless network I / F 213, and an NFC reader / writer 214 are also connected to the internal bus B2. The CPU 209 functions as a control unit that controls the entire mobile terminal 102. The flash memory 210 stores a second computer program executed by the CPU 209 and various data. The RAM 211 is a memory that the CPU 209 uses as a work area for executing the second computer program. The operation unit 212 has a display screen on which a touch sensor is mounted. The wireless network I / F 213 is a wireless compatible NIC (fourth communication unit) such as WiFi connected to the access point 103. The NFC reader / writer 214 performs short-range wireless communication with the NFC reader / writer 105 of the image forming apparatus 101 (third communication unit).

<Overall operation of printing system>
Next, an example of the overall operation of the printing system will be described. First, an operation example of the image forming apparatus 101 will be described. The following description is based on the premise that the image forming apparatus 101 includes a power supply unit and its control unit in addition to the above functional components. FIGS. 3A to 3D are diagrams illustrating the state of the power supply system included in the image forming apparatus 101. FIG. The image forming apparatus 101 includes a first power supply unit 220, a second power supply unit 221, and a power control unit 222.

  Each of the power supply units 220 and 221 is connected to a power source (not shown), and supplies power from the power source to the components of the image forming apparatus 101 via a power supply line. The second power supply unit 221 is responsible for supplying power to components that require relatively large power, in this example, the printer unit 207 and the scanner unit 208. The first power supply unit 220 is responsible for supplying power to components that do not require much power. The power control unit 222 performs on / off switching control of power supply to the printer unit 207, the scanner unit 208, and other components via a power control signal. In a state where the power supply is on (power ON state), a predetermined value of power is supplied to each component of the image forming apparatus 101. On the other hand, in a state where power supply is off (power supply OFF state), power supply is limited. However, the state in which the power supply is restricted includes a state in which power supply is performed from a very small amount of standby power supply to the extent that the power supply destination does not operate normally, in addition to a state in which all power supply is interrupted.

  FIG. 3A shows the power ON state. Assume that a predetermined time elapses without any function being executed in this state, or that the operation unit power saving button (UI component displayed on the display screen of the operation unit 106, the same applies hereinafter) 106a is pressed. Then, the image forming apparatus 101 automatically shifts to the power saving mode shown in FIG. The power saving mode is a mode that is a form of a restricted state in operation of the image forming apparatus 101. Specifically, in this mode, the supply of power to some or all of the components of the image forming apparatus 101 is restricted. In principle, the power saving mode requires a local canceling operation by the user to cancel the power saving mode. In this example, the state in which the operation of the operation unit LCD / LED and other buttons 106b, the printing process in the printer unit 207, and the scanner process in the scanner unit 208 are not used for a predetermined time or longer is set as the power saving mode. When the power button is turned OFF in the power ON state of FIG. 3A, the image forming apparatus 101 enters the power OFF state of FIG. When the power button is turned on in this power-off state, the power-on state shown in FIG.

  In the power saving mode of FIG. 3C, power supply from the first power supply unit 220 is maintained with respect to the operation unit power saving button 106a, the network I / F 206, the NFC reader / writer 105, and the power control unit 222. Power supply to other components is limited. It is assumed that the operation unit power saving button 106a is pressed in the power saving mode. Alternatively, it is assumed that user authentication is successful by a characteristic login method using the mobile terminal 102 described later. Then, the image forming apparatus 101 automatically cancels the power saving mode so as to be in the power ON state of FIG. Further, when the power button is turned off in the power saving mode, the image forming apparatus 101 enters the power-off state shown in FIG.

  Another example of the power saving mode is shown in FIG. In the state shown in the figure, the operation unit power saving button 106a is operated, but the printing process in the printer unit 207 and the scanner process in the scanner unit 208 are not used for a predetermined time or more. This state is also obtained when only local login is performed from the state of FIG. In this state, power supply is stopped only to the printer unit 207 and the scanner unit 208. When print processing is executed locally from this state and the printer unit 207 instructs a scanning operation, power is supplied to the scanner unit 208. When a copy operation is instructed, power is supplied to both the printer unit 207 and the scanner unit 208. When the states of FIGS. 3A to 3D are arranged in descending order of power consumption, FIG. 3A> FIG. 3D> FIG. 3C> FIG. 3B. That is, the power saving mode is set for a plurality of component parts each having different power consumption in the image forming apparatus 101, and the image forming apparatus 101 cancels the power saving mode for each component part in ascending order of power consumption. .

<Functions of image forming apparatus>
Next, functions realized in the image forming apparatus 101 will be described. FIG. 4A is a configuration diagram of functional blocks formed in the image forming apparatus 101 when the CPU 201 of the image forming apparatus 101 executes the first control program. The device driver 301 is a device control unit for controlling various hardware. The AP platform 302 is a platform that manages the activation of an AP (application program; hereinafter the same) and a service program (hereinafter abbreviated as “service”) that operate in the image forming apparatus 101. The AP platform 302 provides an API (AP interface; the same applies hereinafter) for exchanging data between AP and service, and an API for using hardware functions from the AP or service via a device driver group. . The AP platform 302 can be configured to include an operating system such as Linux (registered trademark), a JAVA (registered trademark) virtual machine, or an OSGi framework. The OSGi framework is a JAVA-based service platform defined by the standardization organization of OSGi (Open Services Gateway initiative).

  A local AP 303 is an AP for displaying a user interface on the operation unit 106 of the image forming apparatus 101. The local AP 303 includes a copy AP that provides a copy function, a scan AP that provides a scan function, and the like. The remote AP 304 provides a user interface described in HTML to each Web browser of the mobile terminal 102 or a PC (not shown). HTML is an abbreviation for HyperText Markup Language. The remote AP 304 includes an image forming apparatus management AP that provides a setting function of the image forming apparatus 101, a direct print AP that provides a PDF document print function, and the like.

  The login service 305 provides functions such as a user management interface, local login, and remote login. The user management interface is a user interface that can switch whether user management is performed (ON) or not (OFF). When performing user management, a user interface for registering the ID and password of a user who uses the image forming apparatus 101 is provided. Switching on / off of the user management function is performed, for example, by an administrator having a certain authority from the operation unit 106 of the image forming apparatus 101 or a remote management computer (not shown).

  The local login is a function for performing user authentication by exchanging information with the mobile terminal 102 via the network 104 when the mobile terminal 102 is in the coverage area of the NFC reader / writer 105. When user authentication is successful by local login, the user of the portable terminal 102 is made to occupy the operation unit 106 until at least a predetermined time has elapsed. Note that user authentication may be performed using a user ID and password input from the operation unit 106. As described above, the local login is a state in which a user who can be regarded as existing (local) in front of the image forming apparatus 101 can operate the operation unit 106. The login service 305 allows access to the local AP 303 for users who have been successfully authenticated by local login. Note that the number of users who can log in locally at the same time is one, and a plurality of users cannot log in locally at the same time.

  Unlike local login, remote login is a function that performs user authentication by transferring user authentication information at a location away from the image forming apparatus 101. There are two types of remote login: login from the mobile terminal 102 and login from a PC. In the case of login from the mobile terminal 102, access to the remote AP 304 is permitted for the authenticated user. The login service 305 is configured so that a plurality of users can remotely log in at the same time.

The login service 305 has two URLs: a PC URL for logging in from a PC and a mobile terminal URL for logging in from a mobile terminal. A URL (Uniform Resource Locator) is a character string that represents a page or location to be accessed on the network and a communication method. The URL for PC is as follows.
“Https: // IP address of image forming device /”
When the user accesses the URL for PC, an acquisition request for a login confirmation screen is made. If the image forming apparatus 101 is in the power saving mode when the user accesses the URL for PC, the login service 305 continues the power saving mode. Further, the LCD (liquid crystal panel) and the LED (light emitting diode) (not shown) of the operation unit 106 are kept off. When logging in from a PC, it is assumed that the operation unit 106, the printer unit 207, the scanner unit 208, and the like are not used from a location away from the image forming apparatus 101. Therefore, control is performed so as not to cancel the power saving mode.

The URL for mobile terminals is as follows.
“Https: // image forming device IP address / mobilelogin.html”
When the user accesses this URL for mobile terminals, an acquisition request for a login confirmation screen is made. When the image forming apparatus 101 is in the power saving mode when accessing the URL for the portable terminal, the power saving mode is automatically canceled regardless of the releasing operation only when the authentication process is successful. Further, an LCD (not shown) or LED of the operation unit 106 is turned on, and a screen after login is displayed on the LCD. Such control is performed because the user is present in front of the image forming apparatus 101 when logging in from the portable terminal 102 and is assumed to use the operation unit 106, the printer unit 207, the scanner unit 208, and the like. .

[Mobile device functions]
Next, functions realized in the mobile terminal 102 will be described. FIG. 4B is a functional configuration diagram of the mobile terminal 102 formed by the CPU 209 of the mobile terminal 102 executing the second control program. The device driver 306 functions as a control unit for controlling various hardware of the mobile terminal 102. The AP platform 307 functions as a management unit that manages activation of APs and services operating on the mobile terminal 102. The AP platform 307 provides, for example, an API for the AP to use the hardware function of the mobile terminal 102 via the device driver 306 and an API for accessing data stored in the flash memory 210. The AP platform 307 can be configured by a platform such as Google's Android (registered trademark) or Apple's iOS. Various kinds of APs can be installed in the mobile terminal 102 and run on the AP platform 307. In the example of FIG. 4B, the image forming apparatus AP308 and the web browser 309 are available.

  Here, a user authentication information table referred to when the login service 305 performs user authentication will be described. FIG. 5 is a view showing an example of the user authentication information table. In the user authentication information table 401, an ID and a password used for user authentication are recorded. The user authentication information table 401 is stored in the HDD 202 in advance via a user interface provided by the login service 305 by the administrator of the image forming apparatus 101.

[NFC reader / writer / NFC tag seal]
Next, the NFC reader / writer 105 and the NFC tag seal 120 included in the image forming apparatus 101 will be described. The NFC reader / writer 105 is an NFC medium including an NFC chip 501 and an antenna 502, as shown in FIG. In the NFC chip 501, an NFC tag controller unit 503, a storage area 504, and a wired interface 505 are formed. The wired interface 505 is connected to the system bus B1 of the image forming apparatus 101, and reads and writes data to and from the storage area 504 via the NFC tag controller unit 503. The antenna 502 induces electric power based on an electromagnetic wave having a specific frequency transmitted from the mobile terminal 102, and enables short-range wireless communication using the electric power. Specifically, power is supplied to each block in the NFC chip 501 and communication with the NFC reader / writer 214 included in the mobile terminal 102 is performed. The NFC tag controller unit 503 establishes short-range wireless communication by a known method. In response to a data input / output request through the antenna 502, the NFC tag controller unit 503 writes / reads data to / from the storage area 504, and returns data to the request source as necessary. Note that data access to the storage area 504 is also performed only with power supplied from the antenna 502.

  The NFC tag seal 120 is an NFC medium provided with an NFC chip 506 and an antenna 507 as shown in FIG. A storage area 508 and an NFC tag controller 509 are formed in the NFC chip 506. The antenna 507 supplies power to the NFC chip 506 and communicates with the NFC reader / writer 105 by receiving an electromagnetic wave having a specific frequency from the outside. The NFC tag controller unit 509 establishes short-range wireless communication by a known method. The NFC tag controller unit 509 also writes data to and reads data from the storage area 508 in response to a data input / output request through the antenna 507. Also, data is returned to the request source as necessary. Note that data access to the storage area 508 can be performed only with power supplied from the antenna 507.

  The storage area 504 of the NFC reader / writer 105 stores NFC tag information that is link information. FIG. 7 is a view showing an example of the NFC tag information 601. In FIG. 7, “authentication information destination” is the IP address of the image forming apparatus 101 to which the link information is connected. The “wireless LAN access point SSID” is an identifier of an access point in the IEEE802.11 series wireless LAN, and stores the SSID of the access point 103. “Wireless LAN access point Key” is key information of the access point 103. “URL” is a URL for the mobile terminal of the login service 305. The portable terminal 102 detects the URL for the portable terminal and connects to the image forming apparatus IP address using HTTPS (Hypertext Transfer Protocol Secure) which is a kind of encrypted communication. Then, a login confirmation screen acquisition request is made to the login service 305 specified by the connection destination.

  FIG. 8 shows an example of a screen presented on the web browser 309 of the portable terminal when the user accesses the URL for the portable terminal of the login service 305 and requests acquisition of the login confirmation screen. This screen is called a login confirmation screen. FIG. 8A shows an example of a login confirmation screen. In the login confirmation screen D701, “ID” is a user ID. The user inputs the user ID and password through the presented login confirmation screen, and then presses the “Send” button. As a result, the user ID and password are transmitted to the image forming apparatus 101 via the network 104 by encrypted communication, and user authentication is performed by the login service 305. In addition, it is good also as a structure using the mechanism which memorize | stores the user ID or password once input using Cookie in login confirmation screen D701. With such a configuration, it is possible to save time and effort for the second and subsequent inputs. As described above, storing the user ID or password in the Web browser 309 to facilitate the login operation is referred to as “auto login”. FIG. 8B is an exemplary view of a login confirmation screen D702 displayed on the Web browser 309 when user authentication fails.

<How to login>
Next, a login method executed by the printing system configured as described above will be described with reference to FIG. In FIG. 9, S represents a process step. The login starts when the user holds the held portable terminal 102 over the NFC reader / writer 105 of the image forming apparatus 101 (S1001). Thereby, the portable terminal 102 acquires NFC tag information 601 that is link information to the authentication function by NFC (S1002). The NFC tag information 601 includes a mobile terminal URL, the SSID of the access point 103, and key information. The portable terminal 102 activates the Web browser 309 (S1003), and uses the read NFC tag information 601 to connect communications other than near field communication (S1004). After the connection, the mobile terminal URL read in S1002 is accessed, and an acquisition request for the login confirmation screen D701 for the mobile terminal is made from the login service 305 (S1005). When the login confirmation screen D701 is acquired, it is presented to the Web browser 309 (S1006). Following this presentation, the user inputs user authentication information (user ID and password) to the portable terminal 102 (S1007). When the transmission button is pressed on the web browser 309 (S1008), the portable terminal 102 transmits user authentication information to the image forming apparatus 101 by encrypted communication (S1009).

  The image forming apparatus 101 that has received the user authentication information decrypts the user authentication information and analyzes it (S1010). Also, user authentication processing based on the analyzed user authentication information is performed (S1011). If the user authentication is successful, the image forming apparatus 101 executes the above-described local login process, that is, the local login process (S1012). That is, login using the mobile terminal 102 is permitted. In addition, the user authentication success notification is transmitted to the mobile terminal 102 (S1013), and the power saving mode is automatically canceled regardless of the user's canceling operation (S1014). Then, an LCD or LED (not shown) of the operation unit 106 is turned on to display a screen after login. On the other hand, the mobile terminal 102 displays a successful user authentication through the Web browser 309 (S1015). With the processing so far, in the image forming apparatus 101, the local login process is executed with the user ID of the user holding the portable terminal 102. Therefore, the user can occupy and operate the part where the power saving mode is canceled, for example, the operation unit 106.

When the operation on the image forming apparatus 101 is completed, the user gives a logout instruction to the image forming apparatus 101 (S1018). When receiving a logout instruction from the user, the image forming apparatus 101 executes logout processing (S1019). By allowing only one local login from S1014 to S1019, even if the second user holds up a new portable terminal, the local login process cannot be executed. Note that the occupying operation of the portion for which the power saving mode has been canceled may be performed not until the logout process is performed after the power saving mode is canceled but until at least a fixed time elapses after the cancellation.
Individual processing procedures of the portable terminal 102 and the image forming apparatus 101 will be described later.

  Next, an individual processing procedure in the image forming apparatus 101 when the login method shown in FIG. 9 is performed will be described with reference to FIG. The processing shown in FIG. 10 is executed by the CPU 201 of the image forming apparatus 101 that has read the first control program. The image forming apparatus 101 determines whether user authentication information has been received via the access point 103 (S1501). If it is not received, it is determined whether or not it is a logout operation. If it is a logout operation, logout processing is performed (S1501: NO, S1519). If user authentication information is received in S1501, user authentication processing is executed with reference to the received ID, password, and user authentication information table 401 (S1501: Y, S1502). The image forming apparatus 101 determines whether the user authentication is successful (S1503). When it fails, an authentication error is returned to the transmission source of the user authentication information (S1503: N, S1504), and the process returns to S1501. The return destination of the authentication error is the mobile terminal 102 or a PC (not shown). If the user authentication is successful in S1503, the image forming apparatus 101 determines whether remote login is performed (S1503: Y, S1505). Remote login is performed except when directly logged in through the operation unit 106. If it is remote login, the image forming apparatus 101 determines whether the access is from the URL for the portable terminal (S1505: Y, S1506). If the URL is for a mobile terminal, local login processing is executed (S1506: Y, S1507), a user authentication success notification is transmitted to the mobile terminal 102 (S1508), and the process proceeds to S1512.

  In S1506, if the URL is for a PC intended for login from a PC, the image forming apparatus 101 executes remote login processing (S1506: N, S1509). Then, after a user authentication success notification is transmitted to a PC (not shown) (S1510), the process proceeds to S1512. When the user directly logs in through the operation unit 106 in S1505, the image forming apparatus 101 executes local login processing (S1505: N, S1511), and proceeds to S1512. In step S1512, it is determined whether the operation unit 106 is in the power saving mode. In the power saving mode, the image forming apparatus 101 cancels the operation unit 106 from the power saving mode (S1512: Y, S1513). In the example of FIG. 3, the state changes from FIG. 3 (c) to FIG. 3 (d).

  Next, the image forming apparatus 101 determines whether the operation instructed at the time of login is a print operation or a scanner operation (S1514). If it is a print operation or a scanner operation, it is determined whether the printer unit 207 and the scanner unit 208 of the image forming apparatus 101 are in the power saving mode (S1514: Y, S1515). If it is in the power saving mode, the image forming apparatus 101 cancels the power saving mode of the printer unit 207 and the scanner unit 208 (S1515: Y, S1516). When both the printer unit 207 and the scanner unit 208 are used when canceling the power saving mode, both the printer unit 207 and the scanner unit 208 are canceled. On the other hand, if the printer unit 207 only performs an unnecessary scanner operation, the power saving mode of only the scanner unit 208 is canceled. If the scanner unit 208 performs only an unnecessary printing operation, the power saving mode of the printer unit 207 only is canceled. You may make it do.

  Next, the image forming apparatus 101 determines whether a logout operation has been performed (S1518). When the logout operation is performed, the image forming apparatus 101 executes logout processing (S1518: Y, S1519). In this processing procedure, the example in which the logout process is not performed until the logout operation is performed in S1518 has been described. However, the logout process is automatically performed when the operation unit 106 is not operated within a predetermined time or when the print / scanner is not operated. The structure to do may be sufficient. In this case, the image forming apparatus 101 determines whether the operation unit 106, the printer unit 207, and the scanner unit 208 have been operated for a predetermined time or more (S1520). When the operation is not performed for a predetermined time or longer, the image forming apparatus 101 switches the operation of the operation unit 106, the printer unit 207, and the scanner unit 208 to the power saving mode (S1520: N, S1521). In the example of FIG. 3, the state changes from FIG. 3 (a) to FIG. 3 (c) or FIG. 3 (d). Thereafter, the predetermined time elapse determination (S1520) and the user authentication information reception confirmation (S1501) are alternately repeated.

An individual processing procedure in the mobile terminal 102 (Web browser 309) when the login method shown in FIG. 9 is performed will be described with reference to FIG. The processing in FIG. 11 is executed by the CPU 209 of the mobile terminal 102 that has read the second control program.
The portable terminal 102 first reads the NFC tag information 601 stored in the NFC reader / writer 105 provided in the image forming apparatus 101 (S2001). As described above, the NFC tag information 601 is link information to the authentication function. Next, the mobile terminal 102 activates the Web browser 309 (S2002). Then, the image forming apparatus 101 is accessed through the Web browser 309 according to the NFC tag information 601 acquired in S2001. Specifically, wireless communication with the access point 103 is started (S2003). Thereafter, the portable terminal 102 requests acquisition of a login confirmation screen D701 for the portable terminal from the login service 305 of the image forming apparatus 101 via the access point 103 (S2004). Further, a login confirmation screen is displayed on the Web browser 309 (S2005). The portable terminal 102 determines whether user authentication information (ID and password) is stored in the web browser 309 (S2006).

  As described with reference to FIG. 8, the login confirmation screen D <b> 701 saves time and effort for inputting user authentication information by using a mechanism for storing user authentication information once input using Cookie in the Web browser 309. be able to. Therefore, when the user authentication information is already stored (S2006: Y), an operation for inputting the authentication information by the user in S2007 becomes unnecessary. On the other hand, when the user authentication information is not stored (S2006: N), the mobile terminal 102 receives the input of the user authentication information and stores the received user authentication information in the web browser 309 (S2007). Thereafter, the portable terminal 102 connects to the image forming apparatus IP address using HTTPS, which is secure HTTP communication, and transmits user authentication information to the login service 305 (S2008). The portable terminal 102 also receives the authentication result from the image forming apparatus 101 (S2009), and determines whether the user authentication is successful (S2010). When the user authentication is unsuccessful (S2010: N), the mobile terminal 102 displays a user authentication error on the login confirmation screen D702 (S2011). If the user authentication is successful (S2010: Y), the mobile terminal 102 finishes the login process.

  As described above, the image forming apparatus 101 allows the user who holds the portable terminal 102 over the NFC reader / writer 105 to log in to the image forming apparatus 101 and automatically performs the power saving mode without requiring the user to perform a release operation. Is released. Therefore, the user's operation load can be reduced. Further, since the user authentication information is valid only with the image forming apparatus 101 that has acquired the NFC tag information 601, the security can be maintained. In this embodiment, the user authentication information is basically stored in the mobile terminal 102 and is not read by an external NFC reader / writer. Therefore, the risk that the user authentication information is read in a form not intended by the user can be reduced.

[Second Embodiment]
Next, a second embodiment of the present invention will be described. In the first embodiment, the image forming apparatus 101 includes the NFC reader / writer 105, and the image forming apparatus 101 itself can read and write data in the storage area 504 via the wired interface 505. In the second embodiment, an example will be described in which the wired interface as shown in FIG. 6B is not used and is realized using a cheaper NFC tag seal 120.

In the second embodiment, the URL for mobile terminals is stored not in the storage area 504 of the NFC reader / writer 105 but in the storage area 508 of the NFC tag seal 120. Data is written from the image forming apparatus 101 to the storage area 504 of the NFC reader / writer 105 via the wired interface 505. On the other hand, data is written from the portable terminal 102 to the storage area 508 of the NFC tag seal 120 via the antenna 507.
As described above, according to the second embodiment, the local login process using the portable terminal 102 can be performed only by attaching the inexpensive NFC tag seal 120 to the image forming apparatus 101.

[Modification]
In the first and second embodiments, the power saving mode has been described as an example of the device operation restriction state that requires a local release operation by the user for the release. However, the power OFF state may be the restriction state. good. Alternatively, it is not limited to power supply, but may be a function limited state.
The present invention can also be implemented in such a form that the first control program is supplied to the image forming apparatus 101 having an authentication function via a network or a portable storage medium, and the CPU 201 reads and executes the first control program. It is. Similarly, the second control program may be supplied to the portable terminal 102 via a network or a portable storage medium, and the CPU 209 reads and executes the second control program. The present invention can also be realized by mounting a circuit (for example, ASIC) that realizes one or more functions in the image forming apparatus 101 or the portable terminal 102.
Furthermore, although the present invention has been described with respect to an example in which the apparatus that logs in using the mobile terminal 102 is the image forming apparatus 101, it may be a communication apparatus, an information processing apparatus, or other apparatus having an authentication function.

Claims (12)

A method of logging into a device having an authentication function,
The portable terminal held by the user acquires link information to the authentication function of the device from the device by short-range wireless communication, and also performs user authentication to the device by communication other than the short-range wireless communication according to the acquired link information Sending the information;
The device that has received the user authentication information executes an authentication function based on the user authentication information, and when the authentication is successful, allows login by the mobile terminal and cancels the local release operation by the user. And a step of releasing a restriction state on the required apparatus operation without using the release operation. The mobile terminal accesses the device through a browser according to the link information, receives input of the user authentication information from the user, and stores the received user authentication information in the browser.
The login method according to claim 1. The device allows the user who has permitted the login to occupy and operate the portion where the restricted state is released until at least a certain time has elapsed after the release.
The login method according to claim 1 or 2. The restricted state is a power saving mode in which power supply to a part or all of the components constituting the device is stopped.
The login method according to claim 3. The power saving mode is set for a plurality of components having different power consumption in the device, and the device releases the power saving mode for each component in ascending order of power consumption.
The login method according to claim 4. A first communication means for causing a portable terminal held by a user to acquire link information of the own device by short-range wireless communication;
Second communication means for receiving user authentication information by communication other than the short-range wireless communication from the mobile terminal that has acquired the link information;
When the authentication function based on the user authentication information received by the second communication means is executed and the authentication is successful, the mobile terminal is allowed to log in and the release requires a local release operation by the user. An image forming apparatus comprising: a control unit that cancels the restricted state of the image without using the canceling operation. The first communication means includes an NFC medium that induces power based on an electromagnetic wave transmitted from the mobile terminal and enables short-range wireless communication using the power,
The link information is stored in the NFC medium;
The image forming apparatus according to claim 6. The second communication means presents a login confirmation screen to the portable terminal that has acquired the link information, and receives user authentication information input through the presented login confirmation screen from the portable terminal by encrypted communication. Configured to,
The image forming apparatus according to claim 6 or 7. When the control means succeeds in the authentication by the user authentication information, after the release of the restricted state, the control means causes the user to occupy the use of the component parts of the device until at least a certain time elapses.
The image forming apparatus according to claim 6. A third communication unit for performing the short-range wireless communication with the image forming apparatus according to any one of claims 7 to 9;
The login confirmation screen is acquired from the connection destination of the link information acquired by the short-range wireless communication by communication other than the short-range wireless communication, and user authentication information to be input to the login confirmation screen is acquired from the user and acquired. A fourth communication means for transmitting the user authentication information to the connection destination;
A portable terminal comprising: control means for displaying a successful user authentication on a predetermined display screen when a successful authentication notification based on the user authentication information is received from the image forming apparatus.   A computer program for causing a computer to operate as the image forming apparatus according to any one of claims 6 to 9.   A computer program for causing a computer to operate as the mobile terminal according to claim 10.