JP2019220191A - Information processing apparatus, information processing method, and program - Google Patents

Abstract

To improve convenience of a user.SOLUTION: An information processing apparatus includes an authentication unit, an acquisition unit, a first specifying unit, and a first display unit. On receipt of first user information, the authentication unit compares the first user information with second user information, to execute authentication processing. The acquisition unit acquires an application list screen associated with display information on an instruction to introduce an application to the information processing apparatus, for each application, in response to an operation of a user authenticated by the authentication unit. When the acquisition unit acquires the application list screen, the first specifying unit specifies right information corresponding to the second user information for identifying the user authenticated by the authentication unit, on the basis of first information indicating correspondence between the second user information and the right information. The first display unit executes control to modify and display the content to be displayed on the application list screen, in accordance with the right information specified by the first specifying unit.SELECTED DRAWING: Figure 4

Description

  The present invention relates to an information processing device, an information processing method, and a program.

  Conventionally, a mechanism for downloading and installing an application from a Web page provided by a Web server has been known.

  For example, Patent Document 1 discloses a configuration in which an MFP downloads and installs software in cooperation with a distribution server that distributes software.

  However, the technology disclosed in Patent Literature 1 cannot switch the display contents of a screen for introducing (installing) an application into a device in accordance with the authority of a user, and thus has a problem that user convenience is low. there were.

  The present invention has been made in view of the above, and an object of the present invention is to provide an information processing apparatus, an information processing method, and a program capable of improving user convenience.

  In order to solve the above-described problem and achieve the object, the present invention relates to an information processing apparatus, which is used in an authentication process for determining whether a user has authority to use the information processing apparatus. An authentication unit that executes the authentication process by comparing the first user information with second user information for identifying a user who has authority to use the information processing device, An acquisition unit that acquires an application list screen associated with display information for instructing to introduce the application into the information processing apparatus, for each application, in accordance with an operation of the user authenticated by the authentication unit. When the acquisition unit acquires the application list screen, the acquisition unit indicates the second user information and the authority of the user identified by the second user information. A first specifying unit that specifies the authority information corresponding to the second user information that identifies a user authenticated by the authentication unit based on first information indicating a correspondence relationship with the limit information; An information processing apparatus comprising: a first display unit that performs control to change and display display contents of the application list screen according to the authority information specified by the first specifying unit.

  According to the present invention, user convenience can be improved.

FIG. 1 is a diagram illustrating an example of a schematic configuration of an information processing system. FIG. 2 is a diagram illustrating an example of a hardware configuration of the MFP. FIG. 3 is a diagram illustrating an example of a software configuration of the MFP. FIG. 4 is a diagram illustrating an example of functions of the MFP according to the first embodiment. FIG. 5 is a diagram illustrating an example of the entry information. FIG. 6 is a diagram illustrating an example of the third information. FIG. 7 is a diagram illustrating an example of the fourth information. FIG. 8 is a diagram illustrating an example of the operation screen. FIG. 9 is a diagram illustrating an example of the application store. FIG. 10 is a diagram illustrating an example of the installation instruction. FIG. 11 is a diagram illustrating an example of the entry information. FIG. 12 is a diagram illustrating an example of the function restriction information. FIG. 13 is a diagram illustrating an example of a display form of the app store. FIG. 14 is a flowchart illustrating an operation example of the MFP according to the first embodiment. FIG. 15 is a diagram illustrating an example of an application archive file. FIG. 16 is a diagram illustrating an example of the fifth information. FIG. 17 is a diagram illustrating an example of a hardware configuration of the application store server and the application server. FIG. 18 is a diagram illustrating an example of a function of the application store server. FIG. 19 is a diagram illustrating an example of a function of the application server. FIG. 20 is a sequence diagram illustrating an example of an operation procedure of the information processing system according to the first embodiment. FIG. 21 is a diagram illustrating an example of functions of the MFP according to the second embodiment. FIG. 22 is a diagram illustrating an example of the update screen. FIG. 23 is a flowchart illustrating an operation example of the MFP according to the second embodiment. FIG. 24 is a diagram illustrating an example of functions of the MFP according to the third embodiment. FIG. 25 is a diagram illustrating an example of the deletion screen. FIG. 26 is a flowchart illustrating an operation example of the MFP according to the third embodiment.

  Hereinafter, embodiments of an information processing apparatus, an information processing method, and a program according to the present invention will be described in detail with reference to the accompanying drawings. Hereinafter, a multifunction peripheral (MFP), which is an embodiment of an image forming apparatus, will be described as an example of an information processing apparatus according to the present invention, but the present invention is not limited to this. Note that the MFP is a device having a plurality of different functions such as a copy function, a scanner function, a printer function, and a fax function.

(1st Embodiment)
FIG. 1 is a diagram illustrating an example of a schematic configuration of an information processing system 100 according to the present embodiment. As shown in FIG. 1, the information processing system 100 includes an MFP 1, an application store server 2, and an application server 3, which are mutually connected via a network 8.

  The application store server 2 displays, for each application, an application list screen (in the following description, referred to as “app store”) in which display information (button in this example) for instructing to install (install) the application is associated. Is provided to the MFP 1. More specific contents will be described later. In this example, an application that provides a function of acquiring an application store from the application store server 2 and displaying the acquired application store on the MFP 1 (hereinafter, may be referred to as a “store application”), or an application displayed in the application store by the user An application that provides a function of performing control for introducing the selected application into the MFP 1 (hereinafter, may be referred to as an “installed application”) is installed in the MFP 1 in advance. Note that the function of the store application is realized using an application for providing the function of the Web browser, and thus may be collectively referred to as a “browser application”. Specific contents of the MFP 1 will be described later.

  The application server 3 holds the application displayed on the application list screen and distributes the application in response to a request from the MFP 1. More specific contents will be described later.

  Next, a hardware configuration of the MFP 1 will be described with reference to FIG. As shown in FIG. 2, the MFP 1 includes a main body 10 capable of realizing various functions such as a copy function, a scanner function, a facsimile function, and a printer function, and an operation unit 20 that receives a user operation. Note that accepting a user operation is a concept including accepting information (including a signal indicating a coordinate value of a screen) input according to the user operation. The main body 10 and the operation unit 20 are communicably connected to each other via a dedicated communication path 30. The communication path 30 may use, for example, a USB (Universal Serial Bus) standard, but may use an arbitrary standard regardless of whether it is wired or wireless.

  In addition, the main body 10 can perform an operation according to the operation received by the operation unit 20. Further, the main body 10 can also communicate with an external device such as a client PC (personal computer), and can also perform an operation according to an instruction received from the external device.

  First, the hardware configuration of the main body 10 will be described. As shown in FIG. 2, the main body 10 includes a CPU 11, a ROM 12, a RAM 13, a HDD (hard disk drive) 14, a communication I / F (interface) 15, a connection I / F 16, and an engine unit 17. Are interconnected via a system bus 18.

  The CPU 11 totally controls the operation of the main body 10. The CPU 11 controls the entire operation of the main body 10 by executing a program stored in the ROM 12 or the HDD 14 using the RAM 13 as a work area (work area), and performs the above-described copy function, scanner function, fax function, printer function, and the like. To realize various functions.

  The communication I / F 15 is an interface for connecting to the network 8. The connection I / F 16 is an interface for communicating with the operation unit 20 via the communication path 30.

  The engine unit 17 is hardware that performs processing other than general-purpose information processing and communication for realizing a copy function, a scanner function, a facsimile function, and a printer function. For example, a scanner (image reading unit) for scanning and reading an image of a document, a plotter (image forming unit) for printing on a sheet material such as paper, a facsimile unit for facsimile communication, and the like are provided. Further, specific options such as a finisher for sorting printed sheet materials and an ADF (automatic document feeder) for automatically feeding documents can be provided.

  Next, a hardware configuration of the operation unit 20 will be described. As shown in FIG. 2, the operation unit 20 includes a CPU 21, a ROM 22, a RAM 23, a flash memory 24, a communication I / F 25, a connection I / F 26, and an operation panel 27. Connected to each other.

  The CPU 21 controls the operation of the operation unit 20 as a whole. The CPU 21 controls the overall operation of the operation unit 20 by executing a program stored in the ROM 22 or the flash memory 24 using the RAM 23 as a work area (work area), and outputs information (images) corresponding to an input received from the user. ) To realize various functions described later.

  The communication I / F 25 is an interface for connecting to the network 8. The connection I / F 26 is an interface for communicating with the main unit 10 via the communication path 30.

  The operation panel 27 receives various inputs according to the operation of the user and displays various information (for example, information corresponding to the received operation, information indicating the operation status of the MFP 1, information indicating the setting state, and the like). . In this example, the operation panel 27 is configured by a liquid crystal display (LCD) having a touch panel function, but is not limited to this. For example, an organic EL display device having a touch panel function may be used. Further, in addition to or instead of this, an operation unit such as a hardware key or a display unit such as a lamp may be provided.

  Next, a software configuration of the MFP 1 will be described. FIG. 3 is a schematic diagram illustrating an example of a software configuration of the MFP 1. As shown in FIG. 3, the main body 10 has an application layer 101, a service layer 102, and an OS layer 103. The entity of the application layer 101, the service layer 102, and the OS layer 103 are various software stored in the ROM 12, the HDD 14, and the like. Various functions are provided by the CPU 11 executing the software.

  The software of the application layer 101 is application software (hereinafter, may be simply referred to as “app” in the following description) for operating hardware resources to provide a predetermined function. For example, the application includes a copy application for providing a copy function, a scanner application for providing a scanner function, a fax application for providing a fax function, a printer application for providing a printer function, and the like.

  The software of the service layer 102 is software that is interposed between the application layer 101 and the OS layer 103 and provides an application with an interface for using hardware resources included in the main body 10. More specifically, it is software for providing a function of receiving an operation request for hardware resources and arbitrating the operation request. The operation request accepted by the service layer 102 may be a request for reading by a scanner or printing by a plotter.

  The function of the interface by the service layer 102 is provided not only to the application layer 101 of the main body 10 but also to the application layer 201 of the operation unit 20. That is, the application layer 201 (application) of the operation unit 20 can also realize a function using the hardware resources (for example, the engine unit 17) of the main body 10 via the interface function of the service layer 102.

  The software of the OS layer 103 is basic software (operating system (OS)) for providing a basic function of controlling hardware included in the main body 10. The software of the service layer 102 converts a hardware resource use request from various applications into a command that can be interpreted by the OS layer 103 and passes the command to the OS layer 103. When the command is executed by the software of the OS layer 103, the hardware resource performs an operation according to the request of the application.

  Similarly, the operation unit 20 includes an application layer 201, a service layer 202, and an OS layer 203. The application layer 201, the service layer 202, and the OS layer 203 included in the operation unit 20 have the same hierarchical structure as the main body 10 side. However, the functions provided by the applications of the application layer 201 and the types of operation requests that can be accepted by the service layer 202 are different from those of the main body 10. The application in the application layer 201 may be software for operating a hardware resource included in the operation unit 20 and providing a predetermined function, but mainly includes functions (copy function, scanner function, fax function) included in the main body 10. Software for providing a UI (user interface) function for performing operations and display related to the printer function. The applications of the application layer 201 include a browser application (store application), an installation application, and the like.

  In the present embodiment, software of the OS layer 103 of the main unit 10 and software of the OS layer 203 of the operation unit 20 are different from each other in order to maintain function independence. That is, the main body 10 and the operation unit 20 operate independently of each other by different operating systems. For example, Linux (registered trademark) can be used as software of the OS layer 103 on the main body 10 side, and Android (registered trademark) can be used as software of the OS layer 203 on the operation unit 20 side.

  As described above, in the MFP 1 of the present embodiment, since the main body 10 and the operation unit 20 operate on different operating systems, communication between the main body 10 and the operation unit 20 is based on inter-process communication in a common device. Instead, it is performed as communication between different devices. The operation (command communication) of transmitting the information (instruction content from the user) received by the operation unit 20 to the main unit 10 and the operation of the main unit 10 notifying the operation unit 20 of an event correspond to the operation. Here, the function of the main body 10 can be used by the operation unit 20 performing command communication to the main body 10. In addition, the event notified from the main body 10 to the operation unit 20 includes an execution state of an operation in the main body 10, contents set on the main body 10, and the like.

  In the present embodiment, power supply to the operation unit 20 is performed from the main body 10 via the communication path 30. Therefore, power control of the operation unit 20 is performed separately (independently) from power control of the main body 10. T) can be done.

  Next, functions of the MFP 1 will be described. FIG. 4 is a diagram illustrating an example of functions of the MFP 1. As shown in FIG. 4, MFP 1 includes a login screen display unit 111, an authentication unit 112, an operation screen display unit 113, an acquisition unit 114, a first identification unit 115, a first display unit 116, It has an introduction control unit 117 and a registration unit 118. For convenience of description, FIG. 4 mainly illustrates functions according to the present invention, but the functions of the MFP 1 are not limited thereto.

  The login screen display unit 111 displays a login screen on the operation panel 27 for prompting input of first user information used for an authentication process for determining whether or not the user has the authority to use the MFP 1. Accept input of information. In this example, the first user information can be composed of a combination of a user ID and a password, but is not limited to this.

  If the authentication unit 112 receives the first user information (in this example, the login screen display unit 111 receives the input of the first user information), the authentication unit 112 stores the first user information and the MFP 1 The authentication processing is executed by comparing the second user information with the second user information for identifying the user who has the authority to use. Here, in the authentication process, when the first user information and the second user information match, it is determined that the user who has input the first user information has authority to use the MFP 1, If the user information does not match the second user information, it is determined that the user who has input the first user information does not have authority to use the MFP 1.

  In the present embodiment, the authentication unit 112 holds entry information shown in FIG. 5 for each user who has authority to use the MFP 1. Items of the entry information include an entry ID for identifying the entry information, a user ID, a password, a belonging group, and the like. In this example, the combination of the user ID and the password of the entry information (the combination of the value corresponding to the user ID and the value corresponding to the password) corresponds to the second user information for identifying the user who has authority to use the MFP 1. are doing. The belonging group of the entry information is an item indicating an administrator group to which the user belongs. For example, when the value corresponding to the belonging group indicates “device administrator group”, the user has authority to use the device. This means that the device administrator function is set as the function. Further, for example, when the value corresponding to the belonging group indicates “user administrator group”, it means that the user administrator function is set as a function that the user has authority to use. That is, the belonging group (a value corresponding to the belonging group) can be considered to correspond to function information indicating a function available to the user.

  In other words, the entry information is a function indicating the function that the user identified by the second user information has the authority to use, with respect to the second user information that identifies the user who has the authority to use the MFP 1. It can be considered that the information is information in which information is associated in advance. Also, a set of entry information set for each of a plurality of users is associated with function information indicating a function available to the user identified by the second user information for each of the plurality of second user information in advance. Information can be considered. Here, it can be considered that one entry information corresponds to the “second information” in the claims, and a set of entry information set for each of a plurality of users is “second information” in the claims. It can be thought that it corresponds to ".

  In the present embodiment, when the input of the user ID and the password is received, the authentication unit 112 includes a combination of the user ID and the password that matches the received combination of the user ID and the password as the above-described first user information. When the entry information exists (that is, when the first user information matches the second user information), it is determined that the user who has input the first user information has authority to use the MFP 1. That is, the user is authenticated.

  Further, in the present embodiment, the authentication unit 112 indicates, for each of a plurality of functions, whether or not having the right to use the function is a condition for recognizing the authority previously associated with the function. The third information in which the condition information is associated in advance is held. FIG. 6 is a diagram illustrating an example of the third information. The third information illustrated in FIG. 6 is information in which a value indicating condition information is associated with each of a plurality of functions and a plurality of items corresponding to each other on a one-to-one basis. In the example of FIG. 6, the device manager function setting corresponds to the device manager function, the user manager function setting corresponds to the user manager function, the document manager function setting corresponds to the document manager function, and the network management function. The user function setting corresponds to the network administrator function, and the service function setting corresponds to the service setting. As shown in FIG. 6, the fact that the value corresponding to the device administrator function setting indicates “valid” means that the user has the authority to use the device administrator function, which is associated with the device administrator function in advance. Indicates a condition for granting authority. That is, unless the user has the right to use the device manager function, the right previously associated with the device manager function is not recognized. The same applies to the user administrator function setting, document administrator function setting, and service function setting.

  Also, as shown in FIG. 6, the fact that the value corresponding to the network administrator function setting indicates “invalid” means that the authority to use the network administrator function is associated with the network administrator function in advance. Indicates that it is not a condition for granting the authority granted. That is, even if the user does not have the authority to use the network administrator function, the authority corresponding to the network administrator function is recognized.

  Further, in the present embodiment, the authentication unit 112 holds fourth information in which one or more authorities are associated in advance for each of a plurality of functions. FIG. 7 is a diagram illustrating an example of the fourth information. In the example of FIG. 7, an authority such as an installation authority indicating an authority to install (install) an application in the MFP 1 is associated with the device administrator function, and an address book (user entry) is associated with the user administrator function. Permission to edit the address book, the right to set whether or not to restrict functions such as color printing for each user, the right to set functions, and the right to set the authentication method (authentication enabled / disabled Authorization, such as authorization for setting, authorization for setting whether to use basic authentication or Kerberos authentication, and the like, are associated with each other. A specific method of using the above information (entry information (second information), third information, and fourth information) will be described later. In this example, the authentication unit 112 holds the entry information, the third information, and the fourth information. However, the present invention is not limited to this. For example, the entry information, the third information, and the fourth information are stored. The storage devices may be provided separately.

  The description of FIG. 4 will be continued. The operation screen display unit 113 performs control to display an operation screen for performing various operations on the operation panel 27. More specifically, when receiving a notification that the user has been authenticated from the authentication unit 112, the operation screen display unit 113 performs control to display an operation screen as shown in FIG. When the notification that the authentication is not received is received, the control for displaying the operation screen on the operation panel 27 is not performed. For example, the control for displaying the screen that the authentication has failed on the operation panel 27 is performed. FIG. 8 is a diagram illustrating an example of the operation screen. The operation screen displays an icon 4 for activating the store application.

  The description of FIG. 4 will be continued. Acquisition unit 114 displays, for each application, display information (in this example, described later in this example) for instructing to introduce the application into MFP 1 in response to the operation of the user (the logged-in user) authenticated by authentication unit 112. An application list screen (an application store in this example) associated with the install button 5) is acquired. In the present embodiment, when the user touches the icon 4, the store application is activated, and the store application (acquisition unit 114) sends a signal requesting an application store to the application store server 2 (hereinafter, “app store request”). Is transmitted). Then, as a response, the application store is acquired from the application store server 2.

  FIG. 9 is a diagram illustrating an example of the application store (the application store before being displayed on the MFP 1) acquired from the application store server 2. In the example of FIG. 9, the app store stores, for each of a plurality of applications, explanatory information describing the contents of the application, and a button 5 (hereinafter, an “install button 5”) for instructing the MFP 1 to install the application. ) Is displayed. In this example, an instruction to install the application with respect to the installation application (hereinafter, referred to as an “installation instruction”) is pasted in a URI format (for example, a URL format) to the install button 5 corresponding to the application. Has been. FIG. 10 is a diagram illustrating an example of an installation command pasted on the install button 5 corresponding to the application identified by the ID “49354”, which indicates a command to install the application identified by the ID “49354”. ing.

  Also, in this example, the installation button 5 is displayed in the page response to the above-described application store request when the logged-in user has the installation right, and the installation button is displayed when the logged-in user does not have the installation right. A script to hide 5 is embedded.

  The description of FIG. 4 will be continued. When the obtaining unit 114 obtains the application list screen (the application store in this example), the first specifying unit 115 displays the second user information and the authority of the user identified by the second user information. Authority information corresponding to second user information for identifying a user authenticated by the authentication unit 112 is specified based on the first information indicating a correspondence relationship with the indicated authority information.

  In the present embodiment, the first information can be considered to include the entry information, the third information, and the fourth information. Then, the first identification unit 115 is a function associated with the second user information for identifying the user authenticated by the authentication unit 112 in the above-mentioned entry information among the authorities included in the above-mentioned fourth information. The information indicating the authority associated with the function corresponding to the function indicated by the information is defined as authority information (authority information of the logged-in user) corresponding to the second user information for identifying the user authenticated by the authentication unit 112. Identify. In addition, the first specifying unit 115 corresponds to a function corresponding to a function associated with the condition information indicating that the condition is not used in the above-described third information among the authorities included in the above-described fourth information. The information indicating the attached authority is specified as authority information corresponding to the second user information for identifying the user authenticated by the authentication unit 112.

  The details are as follows. In the present embodiment, when the app store is acquired by the acquiring unit 114, the first specifying unit 115 determines whether or not the use of the logged-in user is restricted for each of the plurality of functions by the authentication unit 112. Function restriction information in which restriction permission information indicating whether or not the logged-in user has the right to use the function is associated with the third information and the fourth information. Request. Upon receiving this request, the authentication unit 112 specifies entry information including second user information (in this example, a combination of a user ID and a password) that identifies the logged-in user, and assigns the entry information to the group to which the specified entry information belongs. The function restriction information is generated with reference to the corresponding value. For example, it is assumed that the specified entry information is in the form of FIG. In the example of FIG. 11, since the value corresponding to the belonging group indicates “device manager group”, the function identified by the combination of the user ID and the password of the specified entry information has the authority to use the user. , The device administrator function is set. Therefore, the authentication unit 112 can create function restriction information as shown in FIG. The example of FIG. 12 indicates that the device manager function is not restricted. That is, the logged-in user has the authority to use the device manager function. Further, the example in FIG. 12 indicates that other functions such as the user manager function are restricted. That is, the logged-in user does not have authority to use other functions.

  Then, the authentication unit 112 transmits the function restriction information generated as described above, the above-described third information, and the above-described fourth information to the first specifying unit 115.

  The present invention is not limited to this. For example, the first specifying unit 115 acquires entry information including second user information for identifying a logged-in user from the authentication unit 112 instead of the function restriction information. Alternatively, all entry information (a plurality of entry information corresponding to a plurality of users on a one-to-one basis) may be acquired from the authentication unit 112. If the entry information can be obtained, it is possible to determine whether or not the use of the logged-in user is restricted for each of the plurality of functions.

  Here, as an example, it is assumed that the first specifying unit 115 acquires the function restriction information shown in FIG. 12, the third information shown in FIG. 6, and the fourth information shown in FIG. In the example of FIG. 12, since the device manager function is not restricted, the first specifying unit 115 determines the function indicated by the function information associated with the second user information for identifying the logged-in user. As the device manager function. Also, in the example of FIG. 11, although other functions are restricted, the value corresponding to the network administrator function setting in the third information shown in FIG. 6 indicates “invalid,” so that the logged-in user Even if the user does not have the authority to use the network administrator function, the authority associated with the network administrator function in advance is recognized. Therefore, the first specifying unit 115 specifies the network administrator function as a function associated with the condition information indicating that no condition is set in the above-described third information.

  Next, the first specifying unit 115 outputs, from the authority included in the fourth information illustrated in FIG. 7, information indicating the authority associated with the device administrator function identified as described above, The information indicating the authority associated with the administrator function is specified as authority information of the logged-in user. As can be understood from FIG. 7, in this example, the installation authority indicating the authority to install the application in the MFP 1 is associated with the device administrator function. Will include installation rights.

  Returning to FIG. 4, the description will be continued. The first display unit 116 controls to change and display the display contents of the application list screen (in this example, the application store) according to the authority information specified by the first specifying unit 115. More specifically, the first display unit 116 hides the display information when the authority indicated by the authority information specified by the first specifying unit 115 does not include the right to introduce the application into the MFP 1. Control to display the application list screen in the state where it was done. For example, when the authority indicated by the authority information specified by the first specifying unit 115 does not include the installation authority, the first display unit 116 displays a state in which the install button 5 is hidden as illustrated in FIG. Control for displaying the application store on the operation panel 27 is performed.

  On the other hand, if the authority indicated by the authority information identified by first identifying unit 115 includes the authority to introduce the application into MFP 1, first display unit 116 displays a state in which install button 5 is displayed. Control to display the app store.

  FIG. 14 is a flowchart illustrating an operation example of the MFP 1 from the acquisition of the application store to the display. First, the acquisition unit 114 acquires an application store from the application store server 2 in response to an operation of a logged-in user (step S1). Next, the first specifying unit 115 specifies the authority information of the logged-in user based on the first information described above (Step S2). The specific contents are as described above. Next, the first display unit 116 checks whether or not the authority indicated by the authority information of the logged-in user (the authority information specified in step S2) includes the installation authority (step S3).

  If the authority indicated by the authority information of the logged-in user does not include the installation authority (step S3: No), the first display unit 116 displays the application store with the installation button 5 hidden on the operation panel. 27 is performed (step S4). On the other hand, when the authority indicated by the authority information of the logged-in user includes the installation authority (step S3: Yes), the first display unit 116 displays the application store acquired in step S1 on the operation panel 27 as it is. The display is controlled (step S5).

  Returning to FIG. 4, the description will be continued. The introduction control unit 117 controls the introduction of the application into the MFP 1 in accordance with an instruction from a user who has been authenticated by the authentication unit 112 and has the authority to introduce the application into the MFP 1. In this example, a user who has been authenticated by the authentication unit 112 and has the authority to introduce an application into the MFP 1 presses the install button 5 of any application on the application store (this is an instruction to install the application in the MFP 1). Then, the browser application notifies the OS of the operation unit 20 of the installation instruction pasted on the installation button 5. The OS of the operation unit 20 confirms the notified installation instruction, and broadcasts the installation instruction to each application of the operation unit 20. Then, the installation application (introduction control unit 117) responds to the broadcasted installation instruction and requests the application server 3 to download the application identified by the ID included in the installation instruction. Download the application. Then, the downloaded application is installed in MFP 1.

  For example, an application downloaded from the application server 3 is provided as an archive file as shown in FIG. 15, and includes an application main body and an information file associated therewith. The information file includes a product ID and version for identifying the application, information on conditions of the MFP 1 necessary for the application to operate, and the like. In this example, of the information included in the information file, information necessary for managing the application is extracted and recorded in fifth information described later.

  Returning to FIG. 4, the description will be continued. Each time the introduction control unit 117 introduces an application into the MFP 1, the registration unit 118 associates the introduced application with the authority information of the user who has instructed the introduction of the application, and associates the introduced application with the authority information of the application that has been installed in the MFP 1. Then, the authority information of the user who instructed the introduction of the application is registered in the associated fifth information. For example, at the time of installation, the introduction control unit 117 acquires the above-described function restriction information, the above-described third information, and the above-described fourth information from the authentication unit 112, and acquires the above-described first specifying unit 115. It is also possible to specify the logged-in user authority information in the same manner as described above, or to request the above-described first specifying unit 115 for the authority information of the logged-in user, and, as a response, Authority information can be obtained.

  FIG. 16 is a diagram illustrating an example of the fifth information. In the example of FIG. 16, the fifth information includes a plurality of application information corresponding to a plurality of applications installed in the MFP 1 on a one-to-one basis. Each application information includes information for identifying a corresponding application (a product ID, an application name, a version, a type, a license unique ID for identifying a license, and an activation state indicating whether or not a use start setting is valid) or And the authority information of the user who instructed the installation of the corresponding application.

  Next, the configurations of the application store server 2 and the application server 3 will be described. FIG. 17 is a diagram illustrating an example of a hardware configuration of the application store server 2. The hardware configuration of the application server 3 is the same as the configuration in FIG.

  As shown in FIG. 17, the application store server 2 includes a CPU 301, a ROM 302, a RAM 303, a communication I / F 304, an input device 305, and a display device 306. The CPU 301 controls the operation of the application store server 2 as a whole. The ROM 302 is a nonvolatile memory that stores various data such as programs. The RAM 303 is a volatile memory that functions as a work area (work area) for various processes executed by the CPU 301. The communication I / F 304 is an interface for connecting to the network 8. The input device 305 is a device used for inputting an operation by a user, and includes, for example, a mouse and a keyboard. The display device 306 is a device that displays various types of information, and includes, for example, a liquid crystal display device.

  FIG. 18 is a diagram illustrating an example of a function of the application store server 2. As shown in FIG. 18, the application store server 2 includes an application store holding unit 211 and an application store transmission unit 212. For convenience of description, FIG. 18 mainly illustrates functions according to the present invention, but the functions of the app store server 2 are not limited to these.

  The application store holding unit 211 holds the above-described application store. Upon receiving the above-described application store request from MFP 1, application store transmission unit 212 transmits the application store held in application store holding unit 211 to MFP 1 as a response.

  FIG. 19 is a diagram illustrating an example of a function of the application server 3. As shown in FIG. 19, the application server 3 has an application holding unit 311 and an application transmitting unit 312. For convenience of description, FIG. 19 mainly illustrates functions according to the present invention, but the functions of the application server 3 are not limited to these.

  The application holding unit 311 holds a plurality of applications. The application transmitting unit 312 transmits an application held in the application holding unit 311 to the MFP 1 in response to a request (download request) from the MFP 1.

  FIG. 20 is a sequence diagram illustrating an example of an operation procedure of the information processing system 100 according to the present embodiment. First, the above-described login screen is displayed on the operation panel 27. When the user inputs first user information (for example, a user ID and a password) to the login screen (step S11), the authentication unit 112 performs the above-described operation. An authentication process is performed (step S12). If the result of the authentication process is affirmative, the operation screen shown in FIG. 8 is displayed on the operation panel 27, and if the result of the authentication process is negative, it indicates that the user has not been authenticated (the use of the MFP 1 is not permitted). An error screen is displayed on the operation panel 27. The following description is based on the premise that the result of the authentication process is positive.

  Next, when the logged-in user touches the icon 4 (see FIG. 8) on the operation screen (step S13), the browser application transmits the above-described application store request to the application store server 2 (step S13). S14).

  Then, the browser application receives the application store from the application store server 2 as a response (step S15), and executes a process according to the script embedded in the response. More specifically, it is as follows. First, the browser application (the first specifying unit 115) requests the authentication unit 112 for the above-described function restriction information, the above-described third information, and the above-described fourth information (step S16). Then, as the response, the above-described function restriction information, the above-described third information, and the above-described fourth information are obtained (step S17). Then, the browser application (the first specifying unit 115) specifies the authority information of the logged-in user from the above-described function restriction information, the above-described third information, and the above-described fourth information (step). S18). The specific contents are as described above. Next, the browser application (first display unit 116) performs control to change and display the display content of the application store received in step S15 according to the authority information specified in step S18 (step S19).

  Here, when the installation authority is included in the authority indicated by the authority information specified in step S18, that is, in the above-described step S19, the application store in which the install button 5 is displayed is displayed on the operation panel 27. The case will be described as an example. When the user presses the install button 5 of any application on the application store (step S20), the browser application notifies the OS of the operation unit 20 of the install command pasted on the install button 5 (step S21). ). The OS of the operation unit 20 confirms the notified installation instruction (Step S22), and broadcasts the installation instruction to each application of the operation unit 20 (Step S23).

  Then, the installation application (introduction control unit 117) responds to the broadcasted installation instruction and requests the application server 3 to download the application identified by the ID included in the installation instruction (step S24). The application is downloaded from the application server 3 (step S25). Then, the downloaded application is installed in MFP 1 (step S26).

  Further, the installation application (introduction control unit 117) requests the above-mentioned function restriction information, the above-mentioned third information, and the above-mentioned fourth information from the authentication unit 112 (step S27). As a response, the above-described function restriction information, the above-described third information, and the above-described fourth information are obtained (step S28). Then, the installation application specifies the authority information of the logged-in user from the above-described function restriction information, the above-described third information, and the above-described fourth information (step S29). The application information associated with the application installed in step S26 is recorded in the fifth information (step S30).

  As described above, in the present embodiment, control is performed to change and display the display content of the application store according to the authority information of the logged-in user. For example, when the authority indicated by the authority information of the logged-in user does not include the installation authority, control is performed to display the application store in a state where the install button 5 is hidden, and the authority information of the logged-in user indicates If the authority does not include the installation authority, control is performed to display the application store with the install button 5 hidden. That is, an application store in a form that matches the authority of the logged-in user can be presented, so that user convenience can be improved.

  Further, as described above, the MFP 1 of the present embodiment includes the second user information for identifying the user who has the authority to use the MFP 1 and the authority indicating the authority of the user identified by the second user information. It has first information indicating the correspondence with the information, and based on this first information, it is possible to specify the authority information of the logged-in user. Therefore, for example, in order for the user to install the application, an authentication process for determining whether the user has the authority to use the MFP 1 is required, but the user has the installation authority. Since the authentication process for determining whether or not the user is required is not required, the user is not required to input information necessary for authenticating the installation authority. That is, according to the present embodiment, since the number of times of authentication can be reduced, the convenience for the user can be improved in this respect as well.

(Second embodiment)
Next, a second embodiment will be described. A description of portions common to the first embodiment described above will be appropriately omitted. FIG. 21 is a diagram illustrating an example of functions of the MFP 1 according to the present embodiment. As shown in FIG. 21, the MFP 1 is different from the first embodiment in that the MFP 1 further includes a second specifying unit 121, a third specifying unit 122, and a second display unit 123.

  When the second identification unit 121 receives, from the user (logged-in user) authenticated by the authentication unit 112, an operation for requesting an update screen for instructing an update (update) of an application, the second identification unit 121 identifies the user. Authority information corresponding to the second user information to be specified. This specifying method is the same as the specifying method by the first specifying unit 115 described above. Note that the first specifying unit 115 may also have a function of the second specifying unit 121.

  The third specifying unit 122 specifies an application associated with the authority information that matches the authority information specified by the second specifying unit 121 in the above-described fifth information. More specifically, among a plurality of pieces of application information included in the fifth information described above, one or more pieces of application information including authority information that matches the authority information identified by the second identification unit 121 are identified, In other words, one or more applications corresponding to the specified one or more application information on a one-to-one basis are specified.

  The second display unit 123 performs control to display an update screen for instructing update of the application specified by the third specifying unit 122. FIG. 22 is a diagram illustrating an example of the update screen displayed on the operation panel 27. On the update screen, only the applications installed by the logged-in user are displayed, and the user performs an operation of selecting any application and presses the “Update” soft key to update the selected application. Can be indicated.

  In the present embodiment, the applications displayed on the update screen are limited to applications that can be updated by the logged-in user, so that it is possible to prevent a situation in which an application installed by another administrator is mistakenly updated. it can.

  FIG. 23 is a flowchart illustrating an operation example of the MFP 1 according to the present embodiment. As illustrated in FIG. 23, when an operation requesting an update screen is received from a logged-in user (Step S41: Yes), the second specifying unit 121 specifies authority information of the logged-in user (Step S41). S42). Next, the third specifying unit 122 specifies an application associated with the authority information that matches the authority information specified in step S42 in the fifth information (step S43). Next, the second display unit 123 performs control to display an update screen for instructing the update of the application specified in step S43 described above (step S44).

(Third embodiment)
Next, a third embodiment will be described. A description of portions common to the above-described embodiments will be appropriately omitted. FIG. 24 is a diagram illustrating an example of functions of the MFP 1 according to the present embodiment. As shown in FIG. 24, the MFP 1 is different from the above-described first embodiment in further including a fourth specifying unit 124, a fifth specifying unit 125, and a third display unit 126.

  When the fourth specifying unit 124 receives an operation requesting a deletion screen for instructing deletion (uninstallation) of an application from a user (logged-in user) authenticated by the authentication unit 112, the fourth specifying unit 124 identifies the user. The authority information corresponding to the second user information to be identified is specified. This specifying method is the same as the specifying method by the first specifying unit 115 described above. Note that the first specifying unit 115 may also have a form that also functions as the fourth specifying unit 124.

  The fifth specifying unit 125 specifies an application associated with the right information that matches the right information specified by the fourth specifying unit 124 in the fifth information described above. More specifically, among a plurality of pieces of application information included in the above-described fifth information, one or more pieces of application information including authority information that matches the authority information identified by the fourth identification unit 124 are identified, In other words, one or more applications corresponding to the specified one or more application information on a one-to-one basis are specified.

  The third display unit 126 performs control to display a deletion screen for instructing deletion of the application specified by the fifth specifying unit 125. FIG. 25 is a diagram showing an example of the deletion screen displayed on the operation panel 27. On the deletion screen, only the applications installed by the logged-in user are displayed. The user performs an operation of selecting any application and presses the “Uninstall” soft key to display the selected application. Deletion can be ordered.

  In the present embodiment, the applications displayed on the above-described deletion screen are limited to applications that can be deleted by the logged-in user, so that it is possible to prevent a situation in which an application installed by another administrator is deleted by mistake. it can.

  FIG. 26 is a flowchart illustrating an operation example of the MFP 1 according to the present embodiment. As illustrated in FIG. 26, when an operation requesting a deletion screen is received from a logged-in user (step S51: Yes), the fourth specifying unit 124 specifies authority information of the logged-in user (step S51). S52). Next, the fifth specifying unit 125 specifies an application associated with the authority information that matches the authority information specified in step S52 in the fifth information (step S53). Next, the third display unit 126 performs control to display a deletion screen for instructing deletion of the application specified in step S53 (step S54).

  As described above, the embodiments according to the present invention have been described, but the present invention is not limited to the above embodiments as they are, and can be embodied by modifying the constituent elements in the implementation stage without departing from the gist thereof. . In addition, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the above-described embodiments. For example, some components may be deleted from all the components shown in each embodiment. Further, components of different embodiments may be appropriately combined.

  The functions of each unit of the MFP 1 described above (the login screen display unit 111, the authentication unit 112, the operation screen display unit 113, the acquisition unit 114, the first specifying unit 115, the first display unit 116, the introduction control unit 117) , The registration unit 118, the second identification unit 121, the third identification unit 122, the second display unit 123, the fourth identification unit 124, the fifth identification unit 125, and the third display unit 126) (11 or 21) is realized by executing a program stored in a storage device (for example, the ROM 12, the HDD 14, the ROM 22, the flash memory 24, or the like), but is not limited thereto. At least a part of them may be realized by a dedicated hardware circuit (for example, a semiconductor integrated circuit or the like).

  Further, in the above-described embodiment, the main body 10 and the operation unit 20 operate independently from each other using different operating systems. However, the present invention is not limited thereto. For example, the main body 10 and the operation unit 20 operate using the same operating system. It may be in a form.

  In the above-described embodiment, the above-described first information is configured by a combination of the above-described entry information (second information), the above-described third information, and the above-described fourth information. However, the present invention is not limited to this. For example, the above-described first information is information in which, for each of one or more pieces of second user information, authority information indicating the authority of the user identified by the second user information is associated. May be configured. In short, the above-mentioned first information is information that indicates (can be specified) the correspondence between the second user information and the authority information indicating the authority of the user identified by the second user information. Good.

  The programs executed by the information processing system 100 (the MFP 1, the application store server 2, the application server 3, and the like) of the above-described embodiment are files in an installable format or an executable format in a CD-ROM, a flexible disk ( FD), CD-R, DVD (Digital Versatile Disk), USB (Universal Serial Bus) and other computer-readable recording media may be used to record and provide, or via a network such as the Internet. It may be configured to provide or distribute. In addition, various programs may be configured to be provided by being incorporated in a ROM or the like in advance.

1 MFP
2 application store server 3 application server 8 network 10 main body 20 operation unit 100 information processing system 111 login screen display unit 112 authentication unit 113 operation screen display unit 114 acquisition unit 115 first identification unit 116 first display unit 117 introduction control unit 118 registration unit 121 second specifying unit 122 third specifying unit 123 second display unit 124 fourth specifying unit 125 fifth specifying unit 126 third display unit 211 app store holding unit 212 app store transmitting unit 311 Application holding unit 312 Application sending unit

JP 2011-237881 A

To solve the above problems and achieve the object, the present invention is an information processing apparatus, and authentication section you determine whether it is possible to use the information processing apparatus based on the user information, the authentication parts in response to operation of the user authenticated, for each application, an acquisition unit for the application to get the screen to indicate that the introduction to the information processing apparatus, the screen is acquired by the acquisition unit If the the JP tough that identifies the authority information corresponding to the user information, the according to the authority information is identified by the identifying unit, the screen of the display content cormorants line control to display to change the display And an information processing apparatus comprising:

Claims (11)

An information processing device,
When accepting first user information used for an authentication process for determining whether or not the user has the right to use the information processing device, the first user information and the right to use the information processing device are accepted. An authentication unit that executes the authentication process by comparing the second user information for identifying a user having the authentication unit;
An acquisition unit configured to acquire an application list screen associated with display information for instructing to introduce the application into the information processing apparatus for each application in response to a user operation authenticated by the authentication unit; ,
When the acquisition unit acquires the application list screen, first information indicating a correspondence between the second user information and authority information indicating authority of a user identified by the second user information. A first specifying unit that specifies the authority information corresponding to the second user information that identifies a user authenticated by the authentication unit, based on
A first display unit that performs control to change and display display content of the application list screen according to the authority information specified by the first specifying unit,
Information processing device. The first display unit hides the display information when the right indicated by the right information specified by the first specifying unit does not include the right to introduce an application into the information processing device. Perform control to display the application list screen in a state,
The information processing device according to claim 1. The first display unit is configured to display the display information when the right indicated by the right information specified by the first specifying unit includes a right to introduce an application into the information processing apparatus. Perform control to display the application list screen,
The information processing device according to claim 1. The first information is
Second information in which function information indicating a function that the user identified by the second user information has authority to use is associated with the second user information;
Third information in which condition information indicating whether to have the right to use the function for each of the plurality of functions is a condition for recognizing the authority previously associated with the function is set,
And fourth information in which one or more authorities are associated in advance for each of the plurality of functions.
The information processing apparatus according to claim 1. The first identification unit includes:
A function corresponding to the function indicated by the function information associated with the second user information for identifying the user authenticated by the authentication unit in the second information among the authorities included in the fourth information Identifying the information indicating the authority associated with the, as the authority information corresponding to the second user information that identifies the user authenticated by the authentication unit,
The information processing device according to claim 4. The first identification unit includes:
Among the authorities included in the fourth information, the information indicating the authority associated with the function corresponding to the function associated with the condition information indicating that the condition is not satisfied in the third information, Identifying as the authority information corresponding to the second user information identifying the user authenticated by the authentication unit,
The information processing device according to claim 4. Introduced control unit that is authenticated by the authentication unit and performs control to introduce an application to the information processing apparatus in accordance with an instruction of a user having authority to introduce an application to the information processing apparatus,
Each time the introduction control unit introduces an application into the information processing apparatus, the introduced application is associated with the authority information of the user who has instructed the introduction of the application, and the introduced application is installed in the information processing apparatus. A registration unit for registering the authority information of the user who has instructed the introduction of the application into fifth information associated with the authority information.
The information processing apparatus according to claim 1. When an operation requesting an update screen for instructing an update of an application is received from a user authenticated by the authentication unit, a request for specifying the authority information corresponding to the second user information for identifying the user is issued. 2 specific parts,
In the fifth information, a third identification unit that identifies an application associated with the authority information that matches the authority information identified by the second identification unit;
A second display unit that controls the display of the update screen for instructing the update of the application specified by the third specifying unit.
The information processing device according to claim 7. When an operation requesting a deletion screen for instructing deletion of an application is received from a user authenticated by the authentication unit, a request for specifying the authority information corresponding to the second user information for identifying the user is issued. 4 specific parts,
A fifth identification unit that identifies an application associated with the authority information that matches the authority information identified by the fourth identification unit, in the fifth information;
A third display unit that performs control to display the deletion screen for instructing deletion of the application specified by the fifth specifying unit.
An information processing apparatus according to claim 8. In a case where the first user information used for the authentication process for determining whether the user has the right to use the information processing apparatus is received, the first user information has the right to use the information processing apparatus. An authentication step of performing the authentication process by comparing the second user information for identifying a user;
Acquisition step of acquiring an application list screen associated with display information for instructing to introduce the application into the information processing device for each application in accordance with the operation of the user authenticated in the authentication step,
When the application list screen is acquired by the acquiring step, first information indicating a correspondence relationship between the second user information and authority information indicating authority possessed by the user identified by the second user information A specifying step of specifying the authority information corresponding to the second user information for identifying a user authenticated by the authentication step, based on
A first display step of performing control to change and display the display content of the application list screen according to the authority information specified by the specifying step.
Information processing method. On the computer,
In a case where the first user information used for the authentication process for determining whether the user has the right to use the information processing apparatus is received, the first user information has the right to use the information processing apparatus. An authentication step of performing the authentication process by comparing the second user information for identifying a user;
An acquisition step of acquiring an application list screen associated with display information for instructing to introduce the application into the information processing apparatus for each application in accordance with an operation of a user authenticated by the authentication step; ,
When the application list screen is acquired by the acquiring step, first information indicating a correspondence relationship between the second user information and authority information indicating authority possessed by the user identified by the second user information A specifying step of specifying the authority information associated with the second user information for identifying the user authenticated by the authentication step, based on
A program for executing a first display step of performing control for changing and displaying display contents of the application list screen according to the authority information specified in the specifying step.

Images