JP2018201157A - Information processing system and information processing method - Google Patents

Abstract

To reduce a burden on management of authentication information.SOLUTION: An MFP 11 comprises: an input unit that receives input of registration information; a first transmission unit that transmits the registration information to a cloud 12A; a first receiving unit that receives access information transmitted from the cloud 12A and allocated it to every MFP 11; a first storing unit 103 that stores the access information; and a first processing unit that performs processing to access the cloud 12A by using the access information stored in the first storing unit 103. Each of the cloud 12A and a cloud 12B includes a second receiving unit that receives the registration information, a first generation unit 113 that generates the access information on the basis of the registration information, a second transmission unit that transmits the access information to an apparatus, a second storing unit 123 that stores the access information, and a second processing unit that performs processing to access the MFP 11 by using the access information stored in the second storing unit 123.SELECTED DRAWING: Figure 17

Description

  The present invention relates to an information processing system and an information processing method.

  Cloud systems that provide various services to devices connected to a network are used. For example, there is a system in which a server constituting the cloud performs processing related to the function of an MFP (Multifunction Peripheral), for example, processing of input data (scan document or the like), processing of print data, and the like. In such a system, authentication processing is performed using an account of a user who has authority to receive service.

  For example, when the MFP stores a user account, a user password, and a login password, changes the login password at a predetermined timing, and receives an input of the user account and the user password and a login request to the server, the MFP A configuration is disclosed in which login to a cloud server is attempted using a login password stored in (Patent Document 1).

  By storing the user's account in the device as in the conventional system, it is possible to eliminate the need for the user to input the account every time access is performed. However, in such a system, it is necessary to manage authentication information (accounts) of all users on the cloud side, and as the number of users increases, the burden on management of authentication information increases. In particular, in systems that provide services related to devices such as MFPs that are often shared by multiple users, the amount of authentication information to be managed becomes enormous and costs, workload, resource load, etc. on the cloud side Is prone to over-problem.

  The present invention has been made in view of the above, and an object of the present invention is to reduce the load on management of authentication information.

  In order to solve the above-described problems and achieve the object, one embodiment of the present invention is an information processing system in which a device and a cloud that provides a service related to the function of the device are connected via a network. The device is configured to receive an input unit that inputs registration information, a first transmission unit that transmits the registration information to the cloud, and access information that is transmitted from the cloud and assigned to each device. 1 receiving unit, a first storage unit that stores the access information, and a first processing unit that performs processing for accessing the cloud using the access information stored in the first storage unit The cloud includes: a second receiving unit that receives the registration information; a first generation unit that generates the access information based on the registration information; and A second transmission unit for transmitting, a second storage unit for storing the access information, and a second unit for performing processing for accessing the device using the access information stored in the second storage unit And a processing unit.

  According to the present invention, it is possible to reduce the load on management of authentication information.

FIG. 1 is a diagram illustrating a conceptual configuration of an information processing system according to an embodiment. FIG. 2 is a block diagram illustrating a network configuration of the information processing system according to the embodiment. FIG. 3 is a block diagram illustrating a hardware configuration of the MFP according to the embodiment. FIG. 4 is a block diagram illustrating a hardware configuration of a server included in the cloud service and a storage server included in the cloud storage according to the embodiment. FIG. 5 is a block diagram illustrating a functional configuration of the MFP according to the embodiment. FIG. 6 is a block diagram illustrating a functional configuration of the cloud service according to the embodiment. FIG. 7 is a block diagram illustrating a functional configuration of the cloud storage according to the embodiment. FIG. 8 is a diagram illustrating a data structure of registered device information according to the embodiment. FIG. 9 is a diagram illustrating a data structure of registered cloud information according to the embodiment. FIG. 10 is a flowchart illustrating a process when the MFP makes an access request that does not include access information to the cloud service in the information processing system according to the embodiment. FIG. 11 is a diagram illustrating a registration screen according to the embodiment. FIG. 12 is a flowchart illustrating a process when the MFP makes an access request including access information to the cloud service in the information processing system according to the embodiment. FIG. 13 is a diagram illustrating an access error display screen according to the embodiment. FIG. 14 is a diagram illustrating a tenant error display screen according to the embodiment. FIG. 15 is a diagram illustrating a registration mode selection screen according to the embodiment. FIG. 16 is a diagram illustrating a conceptual configuration of an information processing system according to a comparative example. FIG. 17 is a diagram illustrating processing when registering an MFP that can use a service in the conceptual configuration of the information processing system according to the embodiment. FIG. 18 is a diagram illustrating processing when the MFP uses a service in the conceptual configuration of the information processing system according to the embodiment.

  Exemplary embodiments of an information processing system and an information processing method will be described below in detail with reference to the accompanying drawings. The present invention is not limited by the following embodiments, and constituent elements in the following embodiments include those that can be easily conceived by those skilled in the art, those that are substantially the same, and those in the so-called equivalent range. . Various omissions, substitutions, changes, and combinations of the components can be made without departing from the scope of the following embodiments.

  FIG. 1 is a diagram illustrating a conceptual configuration of an information processing system 1 according to the embodiment. The information processing system 1 according to the present embodiment is a system that provides services related to the functions of the MFP 11 when the MFP 11 (device) accesses the cloud 12.

  The MFP 11 is an information processing apparatus having functions such as a copier, a printer, a scanner, and a facsimile, and is an example of a device that receives a service provided by the cloud 12. In this example, one MFP 11 is shared by a plurality of users 15.

  The cloud 12 is a computer network including one or more servers that perform processing for realizing services related to the functions of the MFP 11. The cloud 12 according to this example performs processing related to printing, scanning, data conversion, data transmission / distribution, and the like.

  Although FIG. 1 shows a state in which one MFP 11 is connected to the cloud 12, a plurality of MFPs 11 may be connected or devices other than the MFP 11 may be connected.

  FIG. 2 is a block diagram illustrating a network configuration of the information processing system 1 according to the embodiment. In this example, two MFPs 11 are connected to the local network 17, the cloud 12 is connected to the Internet 18, and the local network 17 and the Internet 18 are connected via a router or the like. The cloud 12 according to this example includes a cloud service 12A and a cloud storage 12B. The cloud service 12A is a network that executes a service related to the function of the MFP 11, and includes a server 13 that performs processing necessary to execute the service. The cloud storage 12B is a network that stores various data, and includes a storage server 14 and the like. Normally, the MFP 11 connected to the local network 17 can access the server 13 connected to the Internet 18, but the server 13 cannot directly access the MFP 11.

  FIG. 3 is a block diagram illustrating a hardware configuration of the MFP 11 according to the embodiment. The MFP 11 according to this example includes a main body unit 20 and an operation unit 30. The main unit 20 implements a printer function, a copy function, a scanner function, a facsimile function, and the like. The operation unit 30 is a user interface for operating the MFP 11. The main body unit 20 and the operation unit 30 are connected to each other via a connection I / F 29, a communication path 41, and a connection I / F 36 so that they can communicate with each other.

  The main body 20 performs an operation according to the operation received by the operation unit 30. The main unit 20 can communicate with an external device such as a PC (Personal Computer), and may be configured to perform an operation in accordance with an instruction (print instruction or the like) received from the external device.

  The main unit 20 includes a reading unit 21, a communication unit 23, a printing unit 24, a CPU (Central Processing Unit) 25, a ROM (Read Only Memory) 26, a RAM (Random Access Memory) 27, an HDD 28, and a connection I / F 29. . The reading unit 21, the communication unit 23, the printing unit 24, the CPU 25, the ROM 26, the RAM 27, the HDD 28, and the connection I / F 29 are connected to each other via the system bus 22.

  The reading unit 21 is hardware that performs processing for realizing a copy function, a scanner function, and a facsimile function. The reading unit 21 includes, for example, a scanner that scans and reads an image of a document.

  The communication unit 23 is an interface for connecting to the local network 17.

  The printing unit 24 is hardware that performs processing for realizing a printer function. The printing unit 24 includes, for example, a plotter that performs printing on a medium. The printing unit 24 may further include hardware for realizing specific options such as a finisher for sorting printed media and an ADF (Auto Document Feeder) for automatically feeding a document.

  The CPU 25 comprehensively controls the operation of the main body unit 20. The CPU 25 uses the RAM 27 as a work area to execute programs stored in the ROM 26, the HDD 28, and the like, thereby controlling the overall operation of the main unit 20, and various functions such as the printer function, copy function, scanner function, facsimile function, and the like described above. Is realized.

  The connection I / F 29 is an interface for communicating with the operation unit 30 via the communication path 41.

  The operation unit 30 includes a CPU 31, a ROM 32, a RAM 33, a flash memory 34, a communication unit 35, a connection I / F 36, an operation panel 37, and an external connection I / F 38. The CPU 31, ROM 32, RAM 33, flash memory 34, communication unit 35, connection I / F 36, operation panel 37, and external connection I / F 38 are connected to each other via a system bus 39.

  The CPU 31 comprehensively controls the operation of the operation unit 30. The CPU 31 controls the overall operation of the operation unit 30 by executing a program stored in the ROM 32, the flash memory 34, or the like using the RAM 33 as a work area, and realizes display of information according to the input received from the user. .

  The communication unit 35 is an interface for connecting to the local network 17. The connection I / F 36 is an interface for communicating with the main body unit 20 via the communication path 41.

  The operation panel 37 accepts various inputs in accordance with user operations and displays various types of information (for example, information in accordance with accepted operations, information indicating the operation status of the MFP 11, information indicating setting states, etc.). The operation panel 37 can be configured using a liquid crystal display device, an organic EL display device or the like equipped with a touch panel mechanism. The operation unit 30 may further include a hardware key (button), a lamp, and the like as a user interface.

  The external connection I / F 38 is an interface such as NFC (Near Field Communication) used to connect to other devices such as smart devices.

  FIG. 4 is a block diagram illustrating a hardware configuration of the server 13 included in the cloud service 12A and the storage server 14 included in the cloud storage 12B according to the embodiment. The server 13 and the storage server 14 according to this example include a CPU 51, ROM 52, RAM 53, HDD 54, input device 55, output device 56, communication I / F 57, and bus 58. The CPU 51 performs predetermined arithmetic processing using the RAM 53 as a work area in accordance with a program stored in the ROM 52 or the HDD 54. The input device 55 is a device for inputting information from the outside, and is, for example, a keyboard, a mouse, a touch panel, or the like. The output device 56 is a device for outputting information generated internally to the outside, and is, for example, a display, a printer, or the like. The communication I / F 57 is a device that enables transmission / reception of information to / from an external device via the Internet 18.

  FIG. 5 is a block diagram illustrating a functional configuration of the MFP 11 according to the embodiment. The MFP 11 according to this example includes a UI (User Interface) unit 101, a cloud access processing unit 102, a registered cloud information storage unit 103 (first storage unit), a scanning unit 104, a printing unit 105, and a data transmission / reception unit 106. .

  The UI unit 101 provides a user interface for the user 15 to operate the MFP 11. The UI unit 101 includes CPUs 25 and 31, an operation panel 37, and the like.

  The cloud access processing unit 102 performs processing for accessing the cloud service 12A (server 13). The cloud access processing unit 102 establishes access with the cloud service 12 </ b> A based on the registered cloud information stored in the registered cloud information storage unit 103. Specifically, the cloud access processing unit 102 accesses the cloud service 12A by using the access information included in the registered cloud information as authentication information. The cloud access processing unit 102 includes a CPU 25, a communication unit 23, and the like.

  The registered cloud information storage unit 103 stores registered cloud information for the MFP 11 to access the cloud service 12A. The registered cloud information includes access information. The access information is information generated by the cloud service 12A and transmitted to the MFP 11. The access information will be described in detail later. The registered cloud information storage unit 103 includes a CPU 25, an HDD 28, and the like.

  The scan unit 104 realizes the reading function of the MFP 11. The scanning unit 104 includes a CPU 25, a reading unit 21, and the like.

  The printing unit 105 implements the printing function of the MFP 11. The printing unit 105 includes a CPU 25, a printing unit 24, and the like.

  The data transmission / reception unit 106 transmits / receives data to / from the cloud 12 via the local network 17 and the Internet 18. The data transmission / reception unit 106 includes a CPU 25, a communication unit 23, and the like.

  FIG. 6 is a block diagram illustrating a functional configuration of the cloud service 12A according to the embodiment. The cloud service 12A according to this example includes a UI unit 111, a registration processing unit 112, an access information generation unit 113, a distributed processing unit 114, a service processing unit 115, a user management unit 116, a device access processing unit 117, and a data transmission / reception unit 118. including.

  The UI unit 111 provides a user interface for the administrator of the cloud service 12A to operate resources such as the server 13. The UI unit 111 includes a CPU 51, an input device 55, an output device 56, and the like.

  The registration processing unit 112 performs a process for registering the MFP 11 having authority to use the service before starting the provision of the service by the cloud service 12A. The MFP 11 is registered based on registration information input by the user 15. The content of the registration information is not particularly limited, but may be, for example, an account for identifying the user 15 or tenant information for identifying the tenant to which the MFP 11 belongs. The registration processing unit 112 includes a CPU 51, a communication I / F 57, and the like.

  The access information generation unit 113 generates access information for the MFP 11 registered by the registration processing unit 112. The access information is information uniquely assigned to each MFP 11 and is used as authentication information when the MFP 11 accesses to receive a service from the cloud service 12A. The access information generation unit 113 is configured by the CPU 51 and the like.

  The distributed processing unit 114 requests other servers (other clouds) as necessary for processing necessary to execute the service, and conversely executes the processing requested by other servers. The distributed processing unit 114 includes a CPU 51, a communication I / F 57, and the like.

  The service processing unit 115 performs processing for executing a service requested from the MFP 11. The service processing unit 115 includes a CPU 51, a communication I / F 57, and the like.

  The user management unit 116 manages information related to the user 15 who uses the MFP 11. The content of the information related to the user is not particularly limited. For example, registration information (such as a registration user ID, a password, and a tenant to which the MFP 11 belongs) input during the registration process by the registration processing unit 112, the mail of the user 15 It can be an address or the like. The user management unit 116 includes a CPU 51, an HDD 54, and the like.

  When the MFP 11 requests access to the cloud service 12A, the device access processing unit 117 uses the access information included in the access request and the registered device information stored in the registered device information storage unit 123 of the cloud storage 12B. Based on the access information included, it is determined whether to establish access. In other words, the device access processing unit 117 determines whether the accessing MFP 11 has the authority to use the service based on the access information. The device access processing unit 117 includes a CPU 51, a communication I / F 57, and the like.

  The data transmission / reception unit 118 transmits / receives various data via the Internet 18 and the local network 17. For example, the data transmission / reception unit 118 transmits the access information generated by the access information generation unit 113 to the MFP 11 and the cloud storage 12B, receives an access request including the access information transmitted from the MFP 11, and is transmitted from the cloud storage 12B. Registered device information including access information. The data transmission / reception unit 118 includes the CPU 51, the communication I / F 57, and the like.

  FIG. 7 is a block diagram illustrating a functional configuration of the cloud storage 12B according to the embodiment. The cloud storage 12B according to the present example is used to store various data used for processing by the cloud service 12A, and includes a UI unit 121, a user storage unit 122, a registered device information storage unit 123 (second storage unit), A file management unit 124 and a data storage unit 125 are included.

  The UI unit 121 provides a user interface for an administrator of the cloud storage 12B to operate resources such as the storage server 14 included in the cloud storage 12B. The UI unit 121 includes a CPU 51, an input device 55, an output device 56, and the like.

  The user storage unit 122 stores information related to a user (cloud service 12A) who uses the storage function of the cloud storage 12B. For example, the user storage unit 122 manages account information and the like when the cloud service 12A (server 13) accesses the cloud storage 12B (storage server 14). The user storage unit 122 includes the CPU 51, the HDD 54, and the like.

  The registered device information storage unit 123 stores registered device information related to the MFP 11 having authority to use the service of the cloud service 12A. The registered device information includes access information transmitted from the cloud service 12A. The configuration of the registered device information is not particularly limited, but may be, for example, a configuration in which the identification number of the MFP 11 and the access information are associated with each other. The registered device information storage unit 123 includes a CPU 51, an HDD 54, and the like.

  The file management unit 124 reads and writes files related to the user (cloud service 12A) who uses the functions of the cloud storage 12B. The file management unit 124 includes a CPU 51, an HDD 54, an input device 55, and the like.

  The data storage unit 125 stores data related to services provided by the cloud service 12A. The data storage unit 125 includes a CPU 51, an HDD 54, and the like.

  FIG. 8 is a diagram illustrating a data structure of the registered device information 151 according to the embodiment. The registered device information 151 is information stored in the registered device information storage unit 123 of the cloud service 12B and used by the device access processing unit 117 of the cloud service 12A when the MFP 11 accesses the cloud service 12A.

  The registered device information 151 according to this example is information that associates a device ID (device identification information), a tenant ID (tenant information), access information, and a registration rejection flag. The device ID is information for identifying a device (MFP 11 in this example) that accesses the cloud service 12A. The tenant ID is information for identifying the tenant to which the device belongs. As described above, the access information is information that is generated by the access information generation unit 113 of the cloud service 12A and is used as authentication information when the MFP 11 uses the service of the cloud service 12A.

  The registration rejection flag is information for restricting access to a specific device or a specific tenant. The registration rejection flag “OFF” indicates that access is not restricted, and the registration rejection flag “ON” indicates that access is restricted. For example, the registration refusal flag “ON” in the entry located second from the bottom indicates that access to the device corresponding to the device ID “DEVICE — 2222” is restricted (prohibited). The registration refusal flag “ON” in the entry at the bottom indicates that the device corresponding to the device ID “DEVICE — 3333” is restricted from accessing the tenant corresponding to the tenant ID “TENANT_XYZ”.

  FIG. 9 is a diagram illustrating a data structure of the registered cloud information 161 according to the embodiment. The registered cloud information 161 is information stored in the registered cloud information storage unit 103 of the MFP 11 and used by the cloud access processing unit 102 of the MFP 11 when the MFP 11 accesses the cloud service 12A.

  The registered cloud information 161 according to this example associates a cloud service URL (address information), a tenant ID, and access information. The cloud service URL is information indicating a URL accessed by the MFP 11 when receiving a service. The tenant ID and access information included in the registered cloud information 161 are the same as the tenant ID and access information included in the registered device information 151.

  As described above, the access information is included in both the registered device information 151 and the registered cloud information 161. The cloud service 12A is registered on the MFP 11 side (stored in the registered cloud information storage unit 103 of the MFP 11) and registered on the cloud 12 side (registered device information storage unit 123 of the cloud storage 12B). It is determined whether or not the MFP 11 has the authority to receive the service.

  In the present embodiment, when the MFP 11 makes an access request that does not include access information to the cloud service 12A, new access information is generated, and the generated access information is registered in the MFP 11 and the cloud storage 12B. Processing is performed. On the other hand, when the MFP 11 makes an access request including access information to the cloud service 12A, the cloud service 12A receives the access information transmitted from the MFP 11 and the registered device information 151 stored in the cloud storage 12B. Based on the above, processing such as service execution, access denial, and access information re-registration is performed.

  FIG. 10 is a flowchart illustrating processing when the MFP 11 issues an access request that does not include access information to the cloud service 12A in the information processing system 1 according to the embodiment. When the cloud access processing unit 102 of the MFP 11 transmits an access request that does not include access information to the cloud service 12A (S101), the registration processing unit 112 of the cloud service 12A displays a registration screen for inputting the registration information. (S102).

  FIG. 11 is a diagram illustrating a registration screen 201 according to the embodiment. The registration screen 201 according to this example includes a column 202 for inputting a tenant ID, a column 203 for inputting a registration user ID, a column 204 for inputting a password, and an execution button 205. The tenant ID is information for identifying the tenant to which the MFP 11 to be registered belongs. The registration user ID is information for identifying the user 15 who uses the MFP 11 to be registered. The password is authentication information uniquely associated with the registration user ID. The execution button 205 is an operation unit for confirming information input in each of the columns 202 to 204 and transmitting the information to the cloud service 12A.

  Returning to the flowchart of FIG. 10, when the user 15 of the MFP 11 inputs registration information on the registration screen 201 (S103), the cloud access processing unit 102 of the MFP 11 uses the device ID for identifying the own device and the input registration information in the cloud. It transmits to the service 12A (S104). The device ID may be stored in the ROM 26 or the like. When the access information generation unit 113 of the cloud service 12A receives the device ID and registration information from the MFP 11, the access information generation unit 113 generates access information (S105), and the registration processing unit 112 transmits the generated access information to the MFP 11 (S106).

  Upon receiving the access information transmitted from the cloud service 12A, the cloud access processing unit 102 of the MFP 11 generates registered cloud information 161 including the access information (S107), and stores the registered cloud information 161 in the registered cloud information storage unit 103. (S108).

  FIG. 12 is a flowchart illustrating processing when the MFP 11 issues an access request including access information to the cloud service 12A in the information processing system 1 according to the embodiment. When the cloud access processing unit 102 of the MFP 11 transmits an access request including access information to the cloud service 12A (S201), the device access processing unit 117 of the cloud service 12A has an entry corresponding to the access request in the registered device information 151. It is determined whether or not (S202). At this time, the access request transmitted from the MFP 11 includes access information, a tenant ID associated with the access information in the registered cloud information 161, and a device ID for identifying the MFP 11.

  When there is an entry corresponding to the received access request in the registered device information 151 (S202: Yes), the device access processing unit 117 determines whether the registration rejection flag of the entry is ON (S203). If the registration rejection flag is not ON (OFF) (S203: No), the service processing unit 115 of the cloud service 12A executes the requested service (S204). On the other hand, if the registration refusal flag is ON (S203: Yes), the device access processing unit 117 determines whether or not a refusal tenant is specified (the entry whose registration refusal flag is ON includes a tenant ID). Determination is made (S205). When the rejected tenant is not specified (tenant ID is not included in the entry whose registration rejection flag is ON) (S205: No), the device access processing unit 117 transmits the access request to the UI unit 101 of the MFP 11 that has transmitted the access request. Then, an access error message indicating that access is impossible is displayed (S206).

  FIG. 13 is a diagram illustrating an access error display screen 211 according to the embodiment. The access error display screen 211 includes an access error message and is displayed on the display (operation panel 37) of the MFP 11 to which access is denied.

  Returning to the flowchart of FIG. 12, when the rejected tenant is specified (the tenant ID is included in the entry whose registration rejection flag is ON) (S205: Yes), the device access processing unit 117 outputs the access request. The registration screen 201 is displayed on the UI unit 101 of the transmitted MFP 11 (S207). When the user 15 inputs registration information on the registration screen 201 (S208) and the cloud service 12A receives the registration information (S209), the device access processing unit 117 determines whether the designated tenant ID is a rejected tenant ( It is determined whether or not the tenant ID included in the received registration information matches the tenant ID included in the entry whose registration rejection flag is ON (S210). When the designated tenant ID is a rejected tenant (S210: Yes), the device access processing unit 117 causes the UI unit 101 of the MFP 11 to display a tenant designation error message indicating that the designated tenant is not accessible. (S211), Step S207 is executed again.

  FIG. 14 is a diagram illustrating a tenant error display screen 221 according to the embodiment. The tenant error display screen 221 includes a tenant designation error message and is displayed on the display (operation panel 37) of the MFP 11 to which the registration information is input in step S208.

  Returning to the flowchart of FIG. 12, when the designated tenant is not a rejected tenant (the tenant ID included in the received registration information does not match the tenant ID included in the entry whose registration rejection flag is ON) (S210: No) The registration processing unit 112 of the cloud service 12A generates an entry for the registered device information 151 based on the registration information input in step S208 (S216), and adds the generated entry to the registered device information 151 (S217). The service processing unit 115 executes the requested service (S218).

  When there is no entry corresponding to the access request transmitted from the MFP 11 in the registered device information 151 (S202: No), the device access processing unit 117 of the cloud service 12A displays a registration mode selection screen on the UI unit 101 of the MFP 11. (S212). The registration mode indicates a method of adding a new entry to the registered device information 151. In this example, there are a continuous use mode and a re-registration mode. The continuous use mode is a mode in which a new entry is added to the registered device information 151 using existing registration information (tenant ID, registration user ID, password, etc.). In the present embodiment, the existing registration information is managed by the user management unit 116 of the cloud service 12A, but may be managed in the cloud storage 12B, for example. The re-registration mode is a mode in which a new entry is added to the registered device information 151 based on newly input registration information.

  FIG. 15 is a diagram illustrating a registration mode selection screen 231 according to the embodiment. The registration mode selection screen 231 includes a “continuous use of registration information” button that is operated when the continuous use mode is selected, and a “device registration re-execution” button that is operated when the re-registration mode is selected. Has been. The user 15 can select either the continuous use mode or the re-registration mode by pressing one of the buttons on the operation panel 37 of the MFP 11.

  Returning to the flowchart of FIG. 12, after the registration mode selection screen 231 is displayed on the MFP 11 (S212), the registration processing unit 112 of the cloud service 12A determines the registration mode selected by the user 15 (S213). When the continuous use mode is selected (S213: continuous use), the registration processing unit 112 generates a new entry of the registered device information 151 based on the existing registration information corresponding to the received access request (S216). The added entry is added to the registered device information 151 (S217), and then the service processing unit 115 executes the requested service (S218). On the other hand, when the re-registration mode is selected (S213: re-registration), the registration processing unit 112 displays the registration screen 201 on the UI unit 101 of the MFP 11 (S214), and causes the user 15 to input registration information (S215). Thereafter, the device access processing unit 117 generates a new entry of the registered device information 151 based on the input registration information (S216), adds the generated entry to the registered device information 151 (S217), and then The service processing unit 115 executes the requested service (S218).

(Modification)
In the processing shown in FIG. 12, the registration processing unit 112 of the cloud service 12A uses the access information received from the MFP 11 even when the access information received from the MFP 11 is not registered in the registered device information 151. Processing for enabling access to the MFP 11 is performed. However, the registration processing unit 112 is not limited to the one that performs such processing. For example, when the access information received from the MFP 11 is not registered in the registered device information 151, the registration processing unit 112 stores it in the registered cloud information storage unit 103 of the MFP 11. Processing for deleting an entry including access information that is not registered in the registered device information 151 may be performed from the registered cloud information 161 that has been registered. By performing such processing, it is possible to simply and reliably prohibit the use of the service by the MFP 11 that is not registered on the cloud 12 side simply by accessing the cloud service 12A from the MFP 11.

  The program for realizing the functions of the information processing system 1 according to the present embodiment is a computer in an installable or executable format, such as a CD-ROM, a memory card, a CD-R, and a DVD (Digital Versatile Disk). Stored in a readable storage medium and provided as a computer program product.

  Further, the program may be provided by being stored on a computer connected to a network such as the Internet and downloaded via the network. Further, the program may be provided via a network such as the Internet without being downloaded. Further, the program may be provided by being incorporated in advance in the ROM 26, 52 or the like. Further, the program may have a module configuration including functions that can be realized by the program among the functional units included in the information processing system 1. The functions realized by the program are loaded into the main storage device (RAM 27, 53, etc.) by reading the program from the storage medium and executing it. That is, the function realized by the program is generated on the main storage device.

  As described above, according to the present embodiment, access information is generated for each MFP 11, and the access information is stored in the storage unit (registered cloud information storage unit 103) included in the MFP 11 and the storage unit (registered device information storage unit) included in the cloud 12. 123) and used as authentication information when the MFP 11 uses the service of the cloud 12.

  FIG. 16 is a diagram illustrating a conceptual configuration of an information processing system 1001 according to a comparative example. FIG. 16 shows a problem in the conventional configuration. In the tenant 1011 set in the cloud 1002 according to this comparative example, account information 1021 of a plurality of users 15 sharing one MFP 11 is managed. When using the service of the cloud 1002, each user 15 inputs his / her account information and requests access to the cloud 1002. Therefore, the administrator 16 of the cloud 1002 needs to register and manage the account information 1021 of all the users 15 in advance. According to such a configuration, as the number of users 15 increases, the load for managing the account information 1021 increases.

  FIG. 17 is a diagram illustrating processing when registering the MFP 11 that can use the service in the conceptual configuration of the information processing system 1 according to the embodiment. First, when registration information is transmitted from the MFP 11 (1), the cloud service 12A generates access information for each MFP 11 based on the registration information (2). The generated access information is transmitted to the cloud storage 12B and stored as a part of the registered device information 151 (3). The generated access information is transmitted to the MFP 11 (4) and stored as a part of the registered cloud information 161 (5).

  FIG. 18 is a diagram illustrating processing when the MFP 11 uses a service in the conceptual configuration of the information processing system 1 according to the embodiment. After the registration process is completed, when the MFP 11 uses the service of the cloud service 12A, the MFP 11 obtains access information from the registered cloud information 161 stored in its own device (6), and access including the access information The request is transmitted to the cloud service 12A (7). When the cloud service 12A receives an access request from the MFP 11, the MFP 11 (device) is registered based on the access information included in the access request and the access information included in the device registration information 151 stored in the cloud storage 12B. (8). Then, access to the MFP 11 confirmed to be registered is permitted (9), and service provision is started.

  According to the present embodiment, authentication information for accessing the cloud 12 can be managed for each MFP 11, so that even when there are many users 15 who use the MFP 11, authentication information can be managed. It is possible to provide a highly convenient cloud service without increasing the load.

  As mentioned above, although embodiment of this invention was described, the said embodiment is shown as an example and is not intending limiting the range of invention. The novel embodiment can be implemented in various other forms, and various omissions, replacements, changes, and combinations can be made without departing from the scope of the invention. This embodiment and its modifications are included in the scope and gist of the invention, and are included in the invention described in the claims and the equivalents thereof.

1,1001 Information processing system 11 MFP
DESCRIPTION OF SYMBOLS 12 Cloud 12A Cloud service 12B Cloud storage 13 Server 14 Storage server 15 User 16 Administrator 17 Local network 18 Internet 20 Main part 21 Reading part 23 Communication part 24 Printing part 25 CPU
26 ROM
27 RAM
28 HDD
29 Connection I / F
30 Operation unit 31 CPU
32 ROM
33 RAM
34 Flash memory 35 Communication unit 36 Connection I / F
37 Operation panel 38 External connection I / F
41 communication channel 51 CPU
52 ROM
53 RAM
54 HDD
55 Input device 56 Output device 57 Communication I / F
DESCRIPTION OF SYMBOLS 101 UI part 102 Cloud access process part 103 Registration cloud information storage part 104 Scan part 105 Print part 106 Data transmission / reception part 111 UI part 112 Registration process part 113 Access information generation part 114 Distributed process part 115 Service process part 116 User management part 117 Apparatus Access processing unit 118 Data transmission / reception unit 121 UI unit 122 User storage unit 123 Registered device information storage unit 124 File management unit 125 Data storage unit 151 Registered device information 161 Registration cloud information 201 Registration screen 211 Access error display screen 221 Tenant error display screen 231 Registration mode selection screen

JP2015-141691A

Claims (9)

An information processing system in which a device and a cloud providing a service related to the function of the device are connected via a network,
The equipment is
An input unit for entering registration information;
A first transmitter for transmitting the registration information to the cloud;
A first receiver that receives access information transmitted from the cloud and assigned to each device;
A first storage unit for storing the access information;
A first processing unit that performs processing for accessing the cloud using the access information stored in the first storage unit;
With
The cloud
A second receiving unit for receiving the registration information;
A first generation unit that generates the access information based on the registration information;
A second transmitter for transmitting the access information to the device;
A second storage unit for storing the access information;
A second processing unit that performs processing for accessing the device using the access information stored in the second storage unit;
Comprising
Information processing system. The second processing unit receives an access request including the access information from the device, and uses the received access information when the received access information is not stored in the second storage unit. Processing for accessing the device;
The information processing system according to claim 1. The second processing unit receives an access request including the access information from the device, and transmits the access request when the received access information is not stored in the second storage unit. A process for deleting the access information from the first storage unit
The information processing system according to claim 1. The second processing unit receives an access request including the access information from the device, and uses the received access information when the received access information is not stored in the second storage unit. A first mode for accessing the device or a second mode for deleting the access information from the first storage unit and accessing the device using the newly generated access information is selectively executed. Configured to be able to,
The information processing system according to claim 1. The second processing unit performs processing for generating new access information when an access request that does not include the access information is received from the device.
The information processing system according to any one of claims 1 to 4. The second processing unit performs processing for restricting access to the specific device.
The information processing system according to any one of claims 1 to 5. The second processing unit performs processing for restricting access to the device for each tenant corresponding to the device.
The information processing system according to any one of claims 1 to 6. The first storage unit stores information in which address information corresponding to the service, tenant information indicating a tenant corresponding to the device, and the access information are associated with each other,
In the second storage unit, information in which device identification information for identifying the device, the tenant information, and the access information are associated with each other is stored.
The information processing system according to any one of claims 1 to 7. An information processing method performed using a system in which a device and a cloud providing a service related to the function of the device are connected via a network,
Inputting registration information using the device;
Transmitting the registration information from the device to the cloud;
The cloud receiving the registration information;
The cloud generating access information assigned to each device based on the registration information;
Transmitting the access information from the cloud to the device;
The device receiving the access information;
Storing the access information in a first storage unit provided in the device;
Storing the access information in a second storage unit provided in the cloud;
Performing a process for the device to establish a connection with the cloud using the access information stored in the first storage unit;
Performing a process for the cloud to establish a connection with the device using the access information stored in the second storage unit;
An information processing method including:

Images