JP7070621B2 - Information processing systems, information processing methods and programs - Google Patents

Description

The present invention relates to information processing systems , information processing methods and programs.

Conventionally, a mechanism for downloading and installing an application from a Web page provided by a Web server is known.

For example, Patent Document 1 discloses a configuration in which an MFP downloads and installs software in conjunction with a distribution server that distributes the software.

However, the technique disclosed in Patent Document 1 has a problem that the display content of the screen for installing (installing) the application on the device cannot be switched according to the authority of the user, and the convenience of the user is low. there were.

The present invention has been made in view of the above, and an object of the present invention is to provide an information processing system , an information processing method, and a program capable of improving user convenience.

In order to solve the above-mentioned problems and achieve the object, the present invention is an information processing system including an information processing device and one or more servers, and is provided with an authentication unit that performs authentication based on user information and the authentication unit. In response to the operation of the authenticated user, for each application, the acquisition unit that acquires screen information about the screen for instructing the introduction of the application into the information processing device, and the authority information corresponding to the user information. Correspondingly , the display information for each application on the screen, the change unit for changing the display content of the display information for instructing the introduction of the application into the information processing apparatus, and the plurality of display information. It is an information processing system including an introduction control unit that introduces an application corresponding to the display information of 1 among a plurality of applications into the information processing apparatus when an operation for the display information of 1 is accepted .

According to the present invention, the convenience of the user can be improved.

FIG. 1 is a diagram showing an example of a schematic configuration of an information processing system. FIG. 2 is a diagram showing an example of the hardware configuration of the MFP. FIG. 3 is a diagram showing an example of the software configuration of the MFP. FIG. 4 is a diagram showing an example of the function of the MFP of the first embodiment. FIG. 5 is a diagram showing an example of entry information. FIG. 6 is a diagram showing an example of the third information. FIG. 7 is a diagram showing an example of the fourth information. FIG. 8 is a diagram showing an example of an operation screen. FIG. 9 is a diagram showing an example of an app store. FIG. 10 is a diagram showing an example of an installation instruction. FIG. 11 is a diagram showing an example of entry information. FIG. 12 is a diagram showing an example of function restriction information. FIG. 13 is a diagram showing an example of the display form of the app store. FIG. 14 is a flowchart showing an operation example of the MFP of the first embodiment. FIG. 15 is a diagram showing an example of an archive file of an application. FIG. 16 is a diagram showing an example of the fifth information. FIG. 17 is a diagram showing an example of the hardware configuration of the app store server and the application server. FIG. 18 is a diagram showing an example of a function possessed by the app store server. FIG. 19 is a diagram showing an example of a function possessed by the application server. FIG. 20 is a sequence diagram showing an example of the operation procedure of the information processing system of the first embodiment. FIG. 21 is a diagram showing an example of the function of the MFP of the second embodiment. FIG. 22 is a diagram showing an example of an update screen. FIG. 23 is a flowchart showing an operation example of the MFP of the second embodiment. FIG. 24 is a diagram showing an example of the function of the MFP of the third embodiment. FIG. 25 is a diagram showing an example of a deletion screen. FIG. 26 is a flowchart showing an operation example of the MFP of the third embodiment.

Hereinafter, embodiments of the information processing system , information processing method, and program according to the present invention will be described in detail with reference to the accompanying drawings. Hereinafter, as an example of the information processing apparatus according to the present invention, a multifunction device (MFP: Multifunction Peripheral), which is one aspect of the image forming apparatus, will be described as an example, but the present invention is not limited thereto. The multifunction device is a device having a plurality of different functions such as a copy function, a scanner function, a printer function, and a fax function.

(First Embodiment)
FIG. 1 is a diagram showing an example of a schematic configuration of the information processing system 100 of the present embodiment. As shown in FIG. 1, the information processing system 100 includes an MFP 1, an app store server 2, and an application server 3, which are connected to each other via a network 8.

The app store server 2 is referred to as an application list screen (referred to as "app store" in the following description) to which display information (button in this example) instructing the installation (installation) of the application is associated with each application. ) Is provided for MFP1. More specific contents will be described later. In this example, an application that provides a function of acquiring an application store from the application store server 2 and displaying it on the MFP 1 (hereinafter, may be referred to as a "store application") or an application displayed on the application store by a user. An application (hereinafter, may be referred to as an “installed application”) that provides a function for controlling the introduction of the selected application into the MFP1 is pre-installed in the MFP1. Since the function of the store application is realized by using an application for providing the function of the Web browser, it may be collectively referred to as a "browser application". The specific contents of MFP1 will be described later.

The application server 3 holds the application displayed on the application list screen, and distributes the application in response to the request from the MFP 1. More specific contents will be described later.

Next, the hardware configuration of the MFP 1 will be described with reference to FIG. As shown in FIG. 2, the MFP 1 includes a main body 10 capable of realizing various functions such as a copy function, a scanner function, a fax function, and a printer function, and an operation unit 20 that accepts user operations. It should be noted that accepting a user's operation is a concept including accepting information (including a signal indicating a coordinate value of a screen) input according to the user's operation. The main body 10 and the operation unit 20 are connected to each other so as to be able to communicate with each other via a dedicated communication path 30. The communication path 30 may be, for example, a USB (Universal Serial Bus) standard, but may be any standard regardless of whether it is wired or wireless.

The main body 10 can perform an operation according to the operation received by the operation unit 20. Further, the main body 10 can also communicate with an external device such as a client PC (personal computer), and can perform an operation according to an instruction received from the external device.

First, the hardware configuration of the main body 10 will be described. As shown in FIG. 2, the main body 10 includes a CPU 11, a ROM 12, a RAM 13, an HDD (hard disk drive) 14, a communication I / F (interface) 15, a connection I / F 16, and an engine unit 17. , These are interconnected via the system bus 18.

The CPU 11 comprehensively controls the operation of the main body 10. The CPU 11 controls the operation of the entire main body 10 by executing a program stored in the ROM 12 or the HDD 14 using the RAM 13 as a work area (work area), and has the above-mentioned copy function, scanner function, fax function, printer function, and the like. Realize various functions of.

The communication I / F 15 is an interface for connecting to the network 8. The connection I / F 16 is an interface for communicating with the operation unit 20 via the communication path 30.

The engine unit 17 is hardware that performs general-purpose information processing and processing other than communication in order to realize a copy function, a scanner function, a fax function, and a printer function. For example, it is provided with a scanner (image reading unit) that scans and reads an image of a document, a plotter (image forming unit) that prints on a sheet material such as paper, and a fax unit that performs fax communication. Further, it may be provided with specific options such as a finisher for sorting printed sheet materials and an ADF (automatic document feeder) that automatically feeds documents.

Next, the hardware configuration of the operation unit 20 will be described. As shown in FIG. 2, the operation unit 20 includes a CPU 21, a ROM 22, a RAM 23, a flash memory 24, a communication I / F 25, a connection I / F 26, and an operation panel 27, which are the system bus 28. They are connected to each other via.

The CPU 21 comprehensively controls the operation of the operation unit 20. The CPU 21 controls the operation of the entire operation unit 20 by executing a program stored in the ROM 22 or the flash memory 24 using the RAM 23 as a work area (work area), and information (image) according to the input received from the user. ) Is realized, and various functions described later such as display are realized.

The communication I / F 25 is an interface for connecting to the network 8. The connection I / F 26 is an interface for communicating with the main body 10 via the communication path 30.

The operation panel 27 accepts various inputs according to the user's operation and displays various information (for example, information according to the accepted operation, information indicating the operating status of the MFP 1, information indicating the setting status, etc.). .. In this example, the operation panel 27 is composed of a liquid crystal display device (LCD) equipped with a touch panel function, but is not limited thereto. For example, it may be configured by an organic EL display device equipped with a touch panel function. Further, in addition to or in place of this, an operation unit such as a hardware key and a display unit such as a lamp may be provided.

Next, the software configuration of the MFP 1 will be described. FIG. 3 is a schematic diagram showing an example of the software configuration of the MFP 1. As shown in FIG. 3, the main body 10 has an application layer 101, a service layer 102, and an OS layer 103. The substance of the application layer 101, the service layer 102, and the OS layer 103 is various software stored in the ROM 12, HDD 14, and the like. By executing these software, the CPU 11 provides various functions.

The software of the application layer 101 is application software for operating hardware resources to provide a predetermined function (in the following description, it may be simply referred to as an "application"). For example, examples of the application include a copy application for providing a copy function, a scanner application for providing a scanner function, a fax application for providing a fax function, a printer application for providing a printer function, and the like.

The software of the service layer 102 is software that intervenes between the application layer 101 and the OS layer 103 to provide the application with an interface for using the hardware resources included in the main body 10. More specifically, it is software for providing a function of receiving an operation request for a hardware resource and arbitrating the operation request. As the operation request received by the service layer 102, a request such as reading by a scanner or printing by a plotter can be considered.

The interface function by the service layer 102 is provided not only to the application layer 101 of the main body 10 but also to the application layer 201 of the operation unit 20. That is, the application layer 201 (application) of the operation unit 20 can also realize a function using the hardware resource of the main body 10 (for example, the engine unit 17) via the interface function of the service layer 102.

The software of the OS layer 103 is basic software (operating system (OS)) for providing basic functions for controlling the hardware included in the main body 10. The software of the service layer 102 converts the usage request of the hardware resource from various applications into a command that can be interpreted by the OS layer 103 and passes it to the OS layer 103. Then, when the command is executed by the software of the OS layer 103, the hardware resource operates according to the request of the application.

Similarly, the operation unit 20 has an application layer 201, a service layer 202, and an OS layer 203. The application layer 201, the service layer 202, and the OS layer 203 included in the operation unit 20 also have the same hierarchical structure as the main body 10. However, the functions provided by the application of the application layer 201 and the types of operation requests that the service layer 202 can accept are different from those of the main body 10. The application of the application layer 201 may be software for operating the hardware resource provided in the operation unit 20 to provide a predetermined function, but the application mainly provided in the main body 10 (copy function, scanner function, fax function). , Printer function) is software for providing UI (user interface) functions for performing operations and displays. The application layer 201 also includes a browser application (store application), an installation application, and the like.

In this embodiment, the software of the OS layer 103 on the main body 10 side and the software of the OS layer 203 on the operation unit 20 side are different from each other in order to maintain the independence of the functions. That is, the main body 10 and the operation unit 20 operate independently of each other in different operating systems. For example, Linux (registered trademark) can be used as the software of the OS layer 103 on the main body 10 side, and Android (registered trademark) can be used as the software of the OS layer 203 on the operation unit 20 side.

As described above, in the MFP 1 of the present embodiment, since the main body 10 and the operation unit 20 operate on different operating systems, the communication between the main body 10 and the operation unit 20 is an interprocess communication in a common device. Not as communication between different devices. An operation (command communication) of transmitting information received by the operation unit 20 (instruction content from the user) to the main body 10 and an operation of the main body 10 notifying the operation unit 20 of an event correspond to this. Here, the function of the main body 10 can be used by the operation unit 20 performing command communication to the main body 10. Further, the events notified from the main body 10 to the operation unit 20 include the execution status of the operation in the main body 10, the contents set on the main body 10 side, and the like.

Further, in the present embodiment, since the power supply to the operation unit 20 is performed from the main body 10 via the communication path 30, the power control of the operation unit 20 is separated from the power control of the main body 10 (independently). Can be done.

Next, the functions of the MFP 1 will be described. FIG. 4 is a diagram showing an example of the function of the MFP 1. As shown in FIG. 4, the MFP 1 includes a login screen display unit 111, an authentication unit 112, an operation screen display unit 113, an acquisition unit 114, a first specific unit 115, and a first display unit 116. It has an introduction control unit 117 and a registration unit 118. For convenience of explanation, FIG. 4 mainly illustrates the functions according to the present invention, but the functions of the MFP 1 are not limited to these.

The login screen display unit 111 displays a login screen on the operation panel 27 prompting the input of the first user information used in the authentication process for determining whether or not the user has the authority to use the MFP 1, and the first user. Accepts information input. In this example, the first user information may be composed of a combination of a user ID and a password, but is not limited thereto.

When the authentication unit 112 receives the above-mentioned first user information (in this example, when the login screen display unit 111 accepts the input of the first user information), the authentication unit 112 uses the first user information and the MFP1. The authentication process is executed by comparing with the second user information that identifies the user who has the authority to use. Here, in the authentication process, when the first user information and the second user information match, it is determined that the user who has input the first user information has the authority to use the MFP 1, and the first method is performed. If the user information of the above and the second user information do not match, it is a process of determining that the user who has input the first user information does not have the authority to use the MFP1.

In the present embodiment, the authentication unit 112 holds the entry information shown in FIG. 5 for each user who has the authority to use the MFP1. Examples of the entry information item include an entry ID for identifying the entry information, a user ID, a password, a group to which the entry information belongs, and the like. In this example, the combination of the user ID and password of the entry information (the combination of the value corresponding to the user ID and the value corresponding to the password) corresponds to the second user information that identifies the user who has the authority to use the MFP1. are doing. Further, the group to which the entry information belongs is an item indicating the administrator group to which the user belongs. For example, when the value corresponding to the belonging group indicates "device administrator group", the user has the authority to use it. It means that the device administrator function is set as a function. Further, for example, when the value corresponding to the belonging group indicates "user administrator group", it means that the user administrator function is set as a function having the authority to be used by the user. That is, it can be considered that the affiliation group (value corresponding to the affiliation group) corresponds to the function information indicating the function available to the user.

That is, the entry information is a function indicating a function that the user identified by the second user information has the authority to use with respect to the second user information that identifies the user who has the authority to use the MFP 1. It can also be considered that the information is associated with the information in advance. Further, in the set of entry information set for each of a plurality of users, the function information indicating the function that can be used by the user identified by the second user information is associated with each of the plurality of second user information in advance. It can be considered as information. Here, it can be considered that one entry information corresponds to the "second information" of the claim, and the set of entry information set for each of a plurality of users is the "second information" of the claim. It can also be considered that it corresponds to.

In the present embodiment, the authentication unit 112 includes, as the above-mentioned first user information, a combination of a user ID and a password that matches the combination of the accepted user ID and the password when the input of the user ID and the password is accepted. When the entry information exists (that is, when the first user information and the second user information match), it is determined that the user who has entered the first user information has the authority to use the MFP1. That is, the user is authenticated.

Further, in the present embodiment, the authentication unit 112 indicates whether or not it is a condition for recognizing the authority associated with the function in advance that the authentication unit 112 has the authority to use the function for each of the plurality of functions. It holds a third piece of information that is associated with condition information in advance. FIG. 6 is a diagram showing an example of the third information. The third information shown in FIG. 6 is information in which a value indicating condition information is associated with each of a plurality of functions and a plurality of items corresponding to one-to-one. In the example of FIG. 6, the device administrator function setting corresponds to the device administrator function, the user administrator function setting corresponds to the user administrator function, the document administrator function setting corresponds to the document administrator function, and the network management. The user function setting corresponds to the network administrator function, and the service function setting corresponds to the service setting. As shown in FIG. 6, the fact that the value corresponding to the device administrator function setting indicates "valid" means that the user has the authority to use the device administrator function, which is associated with the device administrator function in advance. Indicates that it is a condition for recognizing authority. That is, unless the user has the authority to use the device administrator function, the authority associated with the device administrator function in advance is not recognized. The same applies to the user administrator function setting, the document administrator function setting, and the service function setting.

Further, as shown in FIG. 6, the fact that the value corresponding to the network administrator function setting indicates "invalid" means that the authority to use the network administrator function is associated with the network administrator function in advance. Indicates that it is not a condition for recognizing the granted authority. That is, even if the user does not have the authority to use the network administrator function, the authority corresponding to the network administrator function is recognized.

Further, in the present embodiment, the authentication unit 112 holds a fourth piece of information to which one or more authorities are associated in advance for each of a plurality of functions. FIG. 7 is a diagram showing an example of the fourth information. In the example of FIG. 7, the device administrator function is associated with an authority such as an installation authority indicating the authority to install (install) an application in MFP1, and the user administrator function is associated with an address book (user entry). The authority to edit the address book, which indicates the authority to edit, the function restriction setting authority, which indicates the authority to set whether to restrict functions such as color printing for each user, and the authority to set the authentication method (enable / disable authentication). Privileges such as the authentication setting authority that represents the authority to set, the authority to set whether to use basic authentication or Kerberos authentication, etc.) are associated. The specific usage of the above information (entry information (second information), third information, fourth information) will be described later. In this example, the entry information, the third information, and the fourth information are held by the authentication unit 112, but the present invention is not limited to this, and for example, the entry information, the third information, and the fourth information are stored. The storage devices may be provided separately.

The description of FIG. 4 will be continued. The operation screen display unit 113 controls to display an operation screen for performing various operations on the operation panel 27. More specifically, when the operation screen display unit 113 receives a notification from the authentication unit 112 that the user has been authenticated, the operation screen display unit 113 controls to display the operation screen as shown in FIG. 8 on the operation panel 27 to display the user. When the notification that the authentication is not performed is received, the control for displaying the operation screen on the operation panel 27 is not performed, and for example, the control for displaying the screen indicating that the authentication has failed is performed on the operation panel 27. FIG. 8 is a diagram showing an example of the operation screen, and the icon 4 for starting the store application is displayed on the operation screen.

The description of FIG. 4 will be continued. The acquisition unit 114 indicates display information for instructing the introduction of the application into the MFP 1 for each application according to the operation of the user (logged-in user) authenticated by the authentication unit 112 (described later in this example). Acquires the application list screen (app store in this example) associated with the install button 5). In the present embodiment, when the user touches the icon 4, the store application is activated, and the store application (acquisition unit 114) signals the application store server 2 to request an app store (hereinafter, "app store request"). May be called) is sent. Then, as a response, the app store is acquired from the app store server 2.

FIG. 9 is a diagram showing an example of an app store (an app store in a state before being displayed on the MFP 1) acquired from the app store server 2. In the example of FIG. 9, the app store has explanatory information explaining the contents of the application for each of a plurality of applications, and a button 5 for instructing the application to be installed in the MFP 1 (hereinafter, "install button 5"). ) Is displayed. In this example, the instruction to install the application to the installation application (hereinafter referred to as "installation instruction") is in the form of URI (for example, the form of URL) and is pasted on the install button 5 corresponding to the application. Has been done. FIG. 10 is a diagram showing an example of an installation instruction attached to the installation button 5 corresponding to the application identified by the ID "49354", and shows an instruction to install the application identified by the ID "49354". ing.

Further, in this example, in the page response to the above-mentioned app store request, the install button 5 is displayed if the logged-in user has the install authority, and the install button is displayed if the logged-in user does not have the install authority. A script to hide 5 is embedded.

The description of FIG. 4 will be continued. When the application list screen (app store in this example) is acquired by the acquisition unit 114, the first specific unit 115 has the second user information and the authority that the user identified by the second user information has. Based on the first information indicating the correspondence relationship with the indicated authority information, the authority information corresponding to the second user information that identifies the user authenticated by the authentication unit 112 is specified.

In the present embodiment, the above-mentioned first information can be considered to include the above-mentioned entry information, the above-mentioned third information, and the above-mentioned fourth information. Then, the first specific unit 115 has a function associated with the second user information that identifies the user authenticated by the authentication unit 112 in the above-mentioned entry information among the privileges included in the above-mentioned fourth information. The information indicating the authority associated with the function matching the function indicated by the information is used as the authority information (authority information of the logged-in user) corresponding to the second user information for identifying the user authenticated by the authentication unit 112. Identify. Further, the first specific unit 115 corresponds to a function that matches the function to which the condition information indicating that the condition is not a condition in the above-mentioned third information is associated with the authority included in the above-mentioned fourth information. The information indicating the attached authority is specified as the authority information corresponding to the second user information that identifies the user authenticated by the authentication unit 112.

More details are as follows. In the present embodiment, when the app store is acquired by the acquisition unit 114, whether or not the first specific unit 115 restricts the use of the logged-in user to the authentication unit 112 for each of a plurality of functions. Function restriction information associated with restriction availability information indicating (whether or not the logged-in user has the authority to use the function), the above-mentioned third information, and the above-mentioned fourth information. To request. Upon receiving this request, the authentication unit 112 identifies the entry information including the second user information (in this example, the combination of the user ID and the password) that identifies the logged-in user, and assigns the specified entry information to the group to which the authentication unit 112 belongs. Generate function restriction information by referring to the corresponding value. For example, it is assumed that the specified entry information is in the aspect of FIG. In the example of FIG. 11, since the value corresponding to the belonging group indicates "device administrator group", it is a function that the user identified by the combination of the user ID and the password of the specified entry information has the authority to use. , The device administrator function is set. Therefore, the authentication unit 112 can create the function restriction information as shown in FIG. The example of FIG. 12 shows that the device administrator function is not restricted. That is, it means that the logged-in user has the authority to use the device administrator function. Further, in the example of FIG. 12, it is shown that other functions such as the user administrator function are restricted. This means that the logged-in user does not have the right to use other functions.

Then, the authentication unit 112 transmits the function restriction information generated as described above, the above-mentioned third information, and the above-mentioned fourth information to the first specific unit 115.

Not limited to this, for example, the first specific unit 115 is in a form of acquiring entry information including a second user information for identifying a logged-in user from the authentication unit 112 instead of the function restriction information. Alternatively, all the entry information (a plurality of entry information corresponding to one-to-one with a plurality of users) may be acquired from the authentication unit 112. This is because if the entry information can be acquired, it is possible to determine whether or not the use of the logged-in user is restricted for each of the plurality of functions.

Here, as an example, it is assumed that the first specific unit 115 acquires the function restriction information shown in FIG. 12, the third information shown in FIG. 6, and the fourth information shown in FIG. 7. In the example of FIG. 12, since it is shown that the device administrator function is not restricted, the first specific unit 115 is a function indicated by the function information associated with the second user information that identifies the logged-in user. To specify the device administrator function. Further, although other functions are restricted in the example of FIG. 11, in the third information shown in FIG. 6, the value corresponding to the network administrator function setting indicates "invalid", so that the logged-in user can use the logged-in user. Even if you do not have the authority to use the network administrator function, the authority associated with the network administrator function in advance will be granted. Therefore, the first specifying unit 115 specifies the network administrator function as a function associated with the condition information indicating that the condition is not a condition in the above-mentioned third information.

Next, the first specific unit 115 includes information indicating the authority associated with the device administrator function specified as described above among the authority included in the fourth information shown in FIG. 7, and the network. The information indicating the authority associated with the administrator function is specified as the authority information of the logged-in user. As can be understood from FIG. 7, in this example, the installation authority indicating the authority to install the application on the MFP1 is associated with the device administrator function, so that the authority indicated by the authority information of the logged-in user is used. Will include installation permissions.

Returning to FIG. 4, the explanation will be continued. The first display unit 116 controls to change and display the display contents of the application list screen (app store in this example) according to the authority information specified by the first specific unit 115. More specifically, the first display unit 116 hides the display information when the authority indicated by the authority information specified by the first specific unit 115 does not include the authority to introduce the application into the MFP1. Controls to display the application list screen in the displayed state. For example, the first display unit 116 is in a state where the installation button 5 is hidden as shown in FIG. 13 when the authority indicated by the authority information specified by the first specific unit 115 does not include the installation authority. Controls the display of the app store on the operation panel 27.

On the other hand, the first display unit 116 is in a state where the installation button 5 is displayed when the authority indicated by the authority information specified by the first specific unit 115 includes the authority to introduce the application into the MFP1. Controls the display of the app store.

FIG. 14 is a flowchart showing an operation example of the MFP 1 from the acquisition of the app store to the display. First, the acquisition unit 114 acquires the app store from the app store server 2 according to the operation of the logged-in user (step S1). Next, the first specifying unit 115 specifies the authority information of the logged-in user based on the above-mentioned first information (step S2). The specific contents are as described above. Next, the first display unit 116 confirms whether or not the authority indicated by the authority information (authority information specified in step S2) of the logged-in user includes the installation authority (step S3).

When the installation authority is not included in the authority indicated by the authority information of the logged-in user (step S3: No), the first display unit 116 operates the application store in a state where the installation button 5 is hidden. Control to display on 27 is performed (step S4). On the other hand, when the installation authority is included in the authority indicated by the authority information of the logged-in user (step S3: Yes), the first display unit 116 directly displays the app store acquired in step S1 on the operation panel 27. Control to display (step S5).

Returning to FIG. 4, the explanation will be continued. The introduction control unit 117 controls the introduction of the application into the MFP 1 according to the instruction of the user who is authenticated by the authentication unit 112 and has the authority to introduce the application into the MFP 1. In this example, a user who has been authenticated by the authentication unit 112 and has the authority to install an application into the MFP 1 presses the install button 5 of any application on the application store (instruction to install the application in the MFP 1). Then, the browser application notifies the OS of the operation unit 20 of the installation command pasted on the install button 5. The OS of the operation unit 20 confirms the notified installation command and broadcasts the installation command to each application of the operation unit 20. Then, the installation application (installation control unit 117) responds to the broadcasted installation command, requests the application server 3 to download the application identified by the ID included in the installation command, and the application server 3 requests the download of the application. Download the application. Then, the downloaded application is installed in MFP1.

For example, an application downloaded from an application server 3 is provided as an archive file as shown in FIG. 15, and is composed of a main body of the application and an information file associated with the main body of the application. The information file contains information about the product ID and version for identifying the application, the conditions of the MFP1 necessary for the application to operate, and the like. In this example, among the information contained in the information file, the information necessary for managing the application is extracted and recorded in the fifth information described later.

Returning to FIG. 4, the explanation will be continued. Each time the introduction control unit 117 introduces an application into the MFP 1, the registration unit 118 associates the introduced application with the authority information of the user who has instructed to introduce the application, and for each application installed in the MFP 1. , Register the authority information of the user who instructed the introduction of the application in the associated fifth information. For example, the introduction control unit 117 acquires the above-mentioned function restriction information, the above-mentioned third information, and the above-mentioned fourth information from the authentication unit 112 at the time of installation execution, and the above-mentioned first specific unit 115. The logged-in user authority information can be specified by the same method as above, or the logged-in user's authority information is requested from the first specific unit 115 described above, and the logged-in user is requested as a response. You can also get the authority information of.

FIG. 16 is a diagram showing an example of the fifth information. In the example of FIG. 16, the fifth information has a plurality of applications installed in the MFP 1 and a plurality of application information having a one-to-one correspondence. Each application information includes information for identifying the corresponding application (product ID, application name, version, type, license unique ID for identifying the license, activation state indicating whether the start setting is valid or not) and , Includes permission information for the user who instructed to install the corresponding application.

Next, the configurations of the app store server 2 and the application server 3 will be described. FIG. 17 is a diagram showing an example of the hardware configuration of the app store server 2. The hardware configuration of the application server 3 is the same as the configuration of FIG.

As shown in FIG. 17, the app store server 2 includes a CPU 301, a ROM 302, a RAM 303, a communication I / F 304, an input device 305, and a display device 306. The CPU 301 comprehensively controls the operation of the app store server 2. The ROM 302 is a non-volatile memory for storing various data such as programs. The RAM 303 is a volatile memory that functions as a work area (work area) for various processes executed by the CPU 301. The communication I / F 304 is an interface for connecting to the network 8. The input device 305 is a device used for inputting an operation by a user, and is composed of, for example, a mouse or a keyboard. The display device 306 is a device that displays various types of information, and is composed of, for example, a liquid crystal display type display device.

FIG. 18 is a diagram showing an example of a function possessed by the app store server 2. As shown in FIG. 18, the app store server 2 has an app store holding unit 211 and an app store transmitting unit 212. For convenience of explanation, FIG. 18 mainly illustrates the functions according to the present invention, but the functions of the app store server 2 are not limited to these.

The app store holding unit 211 holds the above-mentioned app store. When the app store transmission unit 212 receives the above-mentioned app store request from the MFP 1, the app store transmission unit 212 transmits the app store held in the app store holding unit 211 to the MFP 1 as a response.

FIG. 19 is a diagram showing an example of the functions of the application server 3. As shown in FIG. 19, the application server 3 has an application holding unit 311 and an application transmitting unit 312. For convenience of explanation, FIG. 19 mainly illustrates the functions according to the present invention, but the functions of the application server 3 are not limited to these.

The application holding unit 311 holds a plurality of applications. The application transmission unit 312 transmits the application held in the application holding unit 311 to the MFP 1 in response to the request (download request) from the MFP 1.

FIG. 20 is a sequence diagram showing an example of the operation procedure of the information processing system 100 of the present embodiment. First, the above-mentioned login screen is displayed on the operation panel 27, and when the user inputs the first user information (for example, a user ID and password) to the login screen (step S11), the authentication unit 112 describes the above-mentioned. The authentication process is executed (step S12). If the result of the authentication process is affirmative, the operation screen shown in FIG. 8 is displayed on the operation panel 27, and if the result of the authentication process is negative, it indicates that the authentication has not been performed (the use of the MFP 1 is not permitted). The error screen is displayed on the operation panel 27. In the following, the description will be made on the assumption that the result of the authentication process is affirmative.

Next, when the logged-in user touches the icon 4 (see FIG. 8) on the operation screen (step S13), the browser application sends the above-mentioned app store request to the app store server 2 (step). S14).

Then, as the response, the browser application receives the application store from the application store server 2 (step S15), and executes the process according to the script embedded in the response. More specifically, it is as follows. First, the browser application (first specific unit 115) requests the authentication unit 112 for the above-mentioned function restriction information, the above-mentioned third information, and the above-mentioned fourth information (step S16). As a response, the above-mentioned function restriction information, the above-mentioned third information, and the above-mentioned fourth information are acquired (step S17). Then, the browser application (first specific unit 115) specifies the authority information of the logged-in user from the above-mentioned function restriction information, the above-mentioned third information, and the above-mentioned fourth information (step). S18). The specific contents are as described above. Next, the browser application (first display unit 116) controls to change and display the display content of the app store received in step S15 according to the authority information specified in step S18 (step S19).

Here, when the installation authority is included in the authority indicated by the authority information specified in the above-mentioned step S18, that is, in the above-mentioned step S19, the application store in the state where the installation button 5 is displayed is displayed on the operation panel 27. This will be described by taking as an example. When the user presses the install button 5 of any application on the app store (step S20), the browser application notifies the OS of the operation unit 20 of the installation command pasted on the install button 5 (step S21). ). The OS of the operation unit 20 confirms the notified installation command (step S22), and broadcasts the installation command to each application of the operation unit 20 (step S23).

Then, the installation application (introduction control unit 117) responds to the broadcast installation command and requests the application server 3 to download the application identified by the ID included in the installation command (step S24). The application is downloaded from the application server 3 (step S25). Then, the downloaded application is installed in the MFP 1 (step S26).

Further, the installation application (introduction control unit 117) requests the authentication unit 112 for the above-mentioned function restriction information, the above-mentioned third information, and the above-mentioned fourth information (step S27). As a response, the above-mentioned function restriction information, the above-mentioned third information, and the above-mentioned fourth information are acquired (step S28). Then, the installation application identifies the authority information of the logged-in user from the above-mentioned function restriction information, the above-mentioned third information, and the above-mentioned fourth information (step S29), and the specified authority information , The above-mentioned application information associated with the application installed in step S26 is recorded in the above-mentioned fifth information (step S30).

As described above, in the present embodiment, the display content of the app store is changed and displayed according to the authority information of the logged-in user. For example, if the authority indicated by the authority information of the logged-in user does not include the installation authority, control is performed to display the app store with the install button 5 hidden, and the authority information of the logged-in user indicates. If the permissions do not include the install permissions, control is performed to display the app store with the install button 5 hidden. That is, since it is possible to present an app store in a form that matches the authority of the logged-in user, it is possible to improve the convenience of the user.

Further, as described above, the MFP 1 of the present embodiment has a second user information that identifies a user who has the authority to use the MFP 1, and an authority that indicates the authority that the user identified by the second user information has. It has a first information indicating a correspondence relationship with the information, and based on this first information, it is possible to specify the authority information of the logged-in user. Therefore, for example, in order for a user to install an application, an authentication process for determining whether or not the user has the authority to use the MFP1 is required, but the user has the installation authority. Since the authentication process for determining whether or not the user is present is not required, the user is not required to input the information necessary for authenticating the installation authority. That is, according to the present embodiment, the number of authentications can be reduced, and the convenience of the user can be improved in this respect as well.

(Second embodiment)
Next, the second embodiment will be described. The description of the parts common to the first embodiment described above will be omitted as appropriate. FIG. 21 is a diagram showing an example of the functions of the MFP 1 of the present embodiment. As shown in FIG. 21, the MFP 1 is different from the above-described first embodiment in that the MFP 1 further includes a second specific unit 121, a third specific unit 122, and a second display unit 123.

When the second specifying unit 121 receives an operation requesting an update screen for instructing an application update (update) from a user (logged-in user) authenticated by the authentication unit 112, the second specifying unit 121 identifies the user. The authority information corresponding to the second user information is specified. This identification method is the same as the identification method by the first identification unit 115 described above. The first specific unit 115 may also have the function of the second specific unit 121.

The third specifying unit 122 identifies the application associated with the authority information that matches the authority information specified by the second specifying unit 121 in the above-mentioned fifth information. More specifically, among the plurality of application information included in the above-mentioned fifth information, one or more application information including the authority information matching the authority information specified by the second specific unit 121 is specified. One or more application information corresponding to one or more specified application information and one or more applications corresponding to one-to-one are specified.

The second display unit 123 controls to display an update screen for instructing the update of the application specified by the third specific unit 122. FIG. 22 is a diagram showing an example of an update screen displayed on the operation panel 27. Only the applications installed by the logged-in user are displayed on the update screen, and the user performs an operation to select one of the applications and presses the "update" softkey to update the selected application. Can be instructed.

In the present embodiment, the applications displayed on the above-mentioned update screen are limited to the applications that can be updated by the logged-in user, so that it is possible to prevent a situation in which an application installed by another administrator is accidentally updated. can.

FIG. 23 is a flowchart showing an operation example of the MFP 1 of the present embodiment. As shown in FIG. 23, when the operation requesting the update screen is received from the logged-in user (step S41: Yes), the second specifying unit 121 specifies the authority information of the logged-in user (step). S42). Next, the third specifying unit 122 identifies the application associated with the authority information that matches the authority information specified in the above-mentioned step S42 in the above-mentioned fifth information (step S43). Next, the second display unit 123 controls to display an update screen for instructing the update of the application specified in step S43 above (step S44).

(Third embodiment)
Next, a third embodiment will be described. The description of the parts common to each of the above-described embodiments will be omitted as appropriate. FIG. 24 is a diagram showing an example of the function of the MFP 1 of the present embodiment. As shown in FIG. 24, the MFP 1 is different from the above-described first embodiment in that the MFP 1 further includes a fourth specific unit 124, a fifth specific unit 125, and a third display unit 126.

When the fourth specific unit 124 receives an operation requesting a deletion screen for instructing the deletion (uninstallation) of the application from the user (logged-in user) authenticated by the authentication unit 112, the fourth specific unit 124 uses the user. Identify Authority information corresponding to the second user information. This identification method is the same as the identification method by the first identification unit 115 described above. The first specific unit 115 may also have the function of the fourth specific unit 124.

The fifth specific unit 125 identifies the application associated with the authority information that matches the authority information specified by the fourth specific unit 124 in the above-mentioned fifth information. More specifically, among the plurality of application information included in the above-mentioned fifth information, one or more application information including the authority information matching the authority information specified by the fourth specific unit 124 is specified. One or more application information corresponding to one or more specified application information and one or more applications corresponding to one-to-one are specified.

The third display unit 126 controls to display a deletion screen for instructing the deletion of the application specified by the fifth specific unit 125. FIG. 25 is a diagram showing an example of a deletion screen displayed on the operation panel 27. Only the applications installed by the logged-in user are displayed on the delete screen, and the user performs an operation to select one of the applications and presses the "Uninstall" softkey to display the selected application. You can instruct to delete it.

In the present embodiment, the applications displayed on the above-mentioned deletion screen are narrowed down to the applications that can be deleted by the logged-in user, so that it is possible to prevent a situation in which an application installed by another administrator is accidentally deleted. can.

FIG. 26 is a flowchart showing an operation example of the MFP 1 of the present embodiment. As shown in FIG. 26, when an operation requesting a deletion screen is received from a logged-in user (step S51: Yes), the fourth specific unit 124 specifies the authority information of the logged-in user (step). S52). Next, the fifth specifying unit 125 identifies an application associated with the authority information that matches the authority information specified in the above-mentioned step S52 in the above-mentioned fifth information (step S53). Next, the third display unit 126 controls to display a deletion screen for instructing the deletion of the application specified in step S53 described above (step S54).

Although the embodiments according to the present invention have been described above, the present invention is not limited to the above-described embodiments as they are, and at the implementation stage, the components can be modified and embodied within a range that does not deviate from the gist thereof. .. In addition, various inventions can be formed by an appropriate combination of the plurality of components disclosed in each of the above-described embodiments. For example, some components may be removed from all the components shown in each embodiment. In addition, components across different embodiments may be combined as appropriate.

The functions of each part of the MFP 1 described above (login screen display unit 111, authentication unit 112, operation screen display unit 113, acquisition unit 114, first specific unit 115, first display unit 116, introduction control unit 117). , Registration unit 118, second specific unit 121, third specific unit 122, second display unit 123, fourth specific unit 124, fifth specific unit 125, third display unit 126) are CPUs. (11 or 21) is realized by executing a program stored in a storage device (for example, ROM 12, HDD 14, ROM 22, flash memory 24, etc.), but the present invention is not limited to this, and for example, the functions of each part of the MFP 1 are not limited to this. At least a part of them may be realized by a dedicated hardware circuit (for example, a semiconductor integrated circuit).

Further, in the above-described embodiment, the main body 10 and the operation unit 20 operate independently of each other in different operating systems, but the present invention is not limited to this, and for example, the main body 10 and the operation unit 20 operate in the same operating system. It may be in the form.

Further, in the above-described embodiment, the above-mentioned first information is composed of a combination of the above-mentioned entry information (second information), the above-mentioned third information, and the above-mentioned fourth information. However, the above-mentioned first information is not limited to this, and for example, the above-mentioned first information is information in which one or more second user information is associated with authority information indicating the authority possessed by the user identified by the second user information. It may be composed of. In short, the above-mentioned first information is information indicating (identifiable) the correspondence between the second user information and the authority information indicating the authority possessed by the user identified by the second user information. good.

Further, the program executed by the information processing system 100 (MFP1, application store server 2, application server 3, etc.) of the above-described embodiment is a CD-ROM or a flexible disk (a file in an installable format or an executable format). It may be configured to be recorded and provided on a computer-readable recording medium such as FD), CD-R, DVD (Digital Versail Disc), USB (Universal Serial Bus), or via a network such as the Internet. It may be configured to be provided or distributed. Further, various programs may be configured to be provided by incorporating them into a ROM or the like in advance.

1 MFP
2 App store server 3 Application server 8 Network 10 Main unit 20 Operation unit 100 Information processing system 111 Login screen display unit 112 Authentication unit 113 Operation screen display unit 114 Acquisition unit 115 First specific unit 116 First display unit 117 Introduction control unit 118 Registration unit 121 Second specific unit 122 Third specific unit 123 Second display unit 124 Fourth specific unit 125 Fifth specific unit 126 Third display unit 211 App store holding unit 212 App store transmission unit 311 Application holding unit 312 Application transmitting unit

Japanese Unexamined Patent Publication No. 2011-237881

Claims (8)

An information processing system that includes an information processing device and one or more servers.
An authentication unit that authenticates based on user information,
An acquisition unit that acquires screen information about a screen for instructing the introduction of the application into the information processing device for each application according to the operation of the user authenticated by the authentication unit.
A change to change the display content of the display information for each application on the screen according to the user information and the corresponding authority information for instructing the introduction of the application into the information processing apparatus. Department and
When an operation for one of the display information is accepted, the introduction control unit for introducing the application corresponding to the display information of the first display into the information processing apparatus among the plurality of applications, and the introduction control unit.
To prepare
Information processing system. When the authority information is the authority that can introduce the application to the information processing apparatus, the display information is displayed.
The information processing system according to claim 1. If the authority information is not an authority that allows the application to be introduced into the information processing device , the display information is hidden.
The information processing system according to claim 1 or 2. When the authority information is an authority capable of introducing an application to the information processing apparatus, the authenticated user responds to an input via the display content displayed as the introduceable content. An introduction control unit that controls the introduction of an application into the information processing device,
Each time the introduction control unit introduces an application into the information processing apparatus, a registration unit that registers the introduced application in association with a user instructed to introduce the application, and a registration unit.
The information processing system according to claim 2. The screen includes explanatory information for explaining the content of the application and display information for instructing the introduction of the application into the information processing apparatus for each of the plurality of applications.
The change unit is a plurality of display information included in the screen based on the authority information, and is for instructing the information processing apparatus to introduce the application provided for each of the plurality of applications. Change the display of display information ,
The information processing system according to claim 1. The acquisition unit displays the display information when the authority information is the authority to introduce the application to the information processing device, and the authority information is the authority to introduce the application to the information processing device. If not, get screen information including a script to hide the display information,
The information processing system according to claim 1. An information processing method executed by an information processing system including an information processing device and one or more servers.
An authentication step that authenticates based on user information,
In response to the operation of the user authenticated in the authentication step, for each application, an acquisition step for acquiring screen information regarding a screen for instructing the introduction of the application into the information processing apparatus, and an acquisition step.
A change to change the display content of the display information for each application on the screen according to the user information and the corresponding authority information for instructing the introduction of the application into the information processing apparatus. Steps and
When the operation for one of the display information is accepted, the introduction step of introducing the application corresponding to the display information of the first among the plurality of applications into the information processing apparatus, and the introduction step.
including,
Information processing method. To the computer provided in the information processing device and controlling the information processing device,
An authentication step that authenticates based on user information,
An acquisition step of acquiring screen information about a screen for instructing the introduction of the application into the information processing apparatus for each application according to the operation of the user authenticated by the authentication step.
A change to change the display content of the display information for each application on the screen according to the user information and the corresponding authority information for instructing the introduction of the application into the information processing apparatus. Steps and
When the operation for one of the display information is accepted, the introduction step of introducing the application corresponding to the display information of the first among the plurality of applications into the information processing apparatus, and the introduction step.
A program to execute.

Images