JP7110460B2 - Image processing device, control method and program - Google Patents

Description

The present invention relates to an image processing apparatus such as a multifunction machine , a control method, and a program .

2. Description of the Related Art In recent years, many image processing apparatuses such as multi-function peripherals are configured to perform user authentication and restrict access to jobs and resources according to logged-in users. In such an image processing apparatus, when a certain user performs a certain operation during login and the execution authority for the operation is insufficient, an authentication screen is often displayed to prompt login by a different authorized user. .

As such user session management, when a different user logs in, all information related to the user (for example, user profile such as user name and user email address, and user authority) is completely switched (hereinafter referred to as , Background Art Example 1). In this case, immediately before logging in as a different user, the previously logged-in user is automatically logged out (see, for example, Patent Document 1).

As for other user session management, among the already logged-in user information, the user profile such as the user name and the user's email address is not switched, and only the user authority is re-evaluated (hereinafter, background technology example 2). is. As a re-evaluation method in this case, the authority of the user who logged in later is often added to the authority of the user who logged in first.

JP-A-11-25040

FIG. 16 is a timing chart showing user session management in Background Art Example 1 above.

Item 4001 in the figure represents a user profile such as a user name and a user's e-mail address that are actually applied in a user session. Item 4002 represents user authority. An item 4003 represents login user information stored by the image forming apparatus in association with a user session in order to determine the contents of items 4001 and 4002 . FIG. 17 is a tabular diagram showing user profile and user authority settings of user A and user B used in FIG.

According to Background Art Example 1, at time t401, user information is entered on the login screen, and user A logs in. FIG. User A is permitted color copying by the setting information in FIG. 17, and can execute color copying.

Next, at time t402, when trying to execute the network management function, since user A is prohibited from using the network management function, he is requested to authenticate as an authorized user. By inputting user B's authentication information here, user A logs in as user B as an administrator. At this point, user profile 4001 is changed to user B as 4021 and user authority 4002 is changed to user B's authority as 4022 .

Next, at time t403, when user B attempts to execute color copying again, since user B is prohibited from color copying, he is requested to authenticate as an authorized user, and must reenter user A's authentication information. Be forced.

In this way, the background art example 1 employs a configuration in which a logged-in user is logged out when a new user logs in. In this configuration, since all the information related to the user is switched, there are cases where a function that can be used by a certain user becomes unusable when logged in as a different user. The user must log in again in order to be able to use the unavailable function again. As a result, there is a problem of poor usability because login is requested many times.

FIG. 18 is a timing chart showing user session management in Background Art Example 2. FIG.

Reference numerals 6001 to 6003 in the figure have the same meanings as the reference numerals 4001 to 4003 in FIG. In the example of FIG. 18, the user profile and user authority settings of user A and user B are the same as in the example of FIG.

At time t601, user A logs in by entering user information on the login screen. According to the setting information in the example of FIG. 17, user A is permitted to use color copying as an available function, and can execute color copying.

At the next time t602, when trying to execute the network management function, since user A is prohibited from using the network management function, he is requested to authenticate as an authorized user. By inputting user B's authentication information here, user A logs in as user B as an administrator. At this point, the user profile 6001 remains user A (see 6021 in FIG. 18), but the user authority 6002 is changed to permit all items that were permitted to user A and user B (6022 in FIG. 18). reference).

At the next time t603, when trying to execute color copying again, since the authority of user A is valid, it can be executed without displaying the authentication screen again.

As described above, in Background Art Example 2, if either the user who logged in earlier or the user who logged in later is permitted, the authority is re-evaluated so as to be permitted. Therefore, even if a user logs in as a different user, a function that can be used as a certain user does not become unusable, thereby improving convenience.

However, it is not intuitive for the user to decide whether the user profile such as the user name and the user's email address should remain as the user profile of the user who logged in first or switch to the user profile of the user who logged in later. Hateful.

For example, assume that there is an image processing apparatus that has an e-mail transmission function and automatically sets the e-mail address of the logged-in user as the sender address of outgoing e-mail. While logged in to this image processing apparatus as user A, it becomes necessary to change a certain management setting item, and after logging in again as user B who is the administrator and changing the settings, when an e-mail is sent, user A and It is difficult to know which user B is automatically set. Similar problems include unintended printing jobs of unintended users, unintended name of the sender of faxes, and unintended user data such as routine tasks and address books. For example, refer to

SUMMARY OF THE INVENTION It is an object of the present invention to provide the following image processing apparatus in view of the conventional problems described above. That is, in an apparatus configured so that access to jobs and resources can be restricted according to logged-in users, the number of user authentication information inputs is reduced and convenience is improved.

In addition, the user can easily determine which of the logged-in users has the user profile for which the operation for executing the function is to be performed.

In order to achieve the above object, an image processing apparatus according to claim 1 is an image processing apparatus capable of executing a plurality of functions including a copy function , wherein the plurality of functions include a user's personal computer for execution. and a second function that requires personal authentication of the user to the image processing device, and a user who has authenticated the image processing device can use the first function. It is characterized in that it is possible to set not to allow

According to the present invention, it is possible to reduce the number of times the user has to enter authentication information and improve convenience. In addition, the user can easily determine which of the multiple logged-in users has user information on which the predetermined function is to be executed.

1 is a schematic diagram showing the configuration of a system in which an image processing apparatus according to an embodiment is used; FIG. 2 is a block diagram showing the hardware configuration of the image processing apparatus in FIG. 1; FIG. 2 is a block diagram showing the software configuration of the image processing apparatus in FIG. 1; FIG. 4 is a timing chart showing user session management according to the first embodiment; It is a figure which shows a login screen. FIG. 3 is a diagram showing a menu screen used in the first embodiment; FIG. It is a figure which shows the login screen displayed at the time of lack of authority used by 1st Embodiment. FIG. 10 is a diagram showing an executing user selection screen; 4 is a flowchart showing characteristic processing according to the first embodiment; 9 is a timing chart showing user session management according to the second embodiment; FIG. 11 is a tabular diagram showing the user profile and user authority settings used in FIG. 10; It is a menu screen used in the second embodiment. FIG. 10 is a diagram showing a login screen displayed when authority is insufficient, used in the second embodiment; FIG. It is a figure which shows the error screen used by 2nd Embodiment. 9 is a flowchart showing processing according to the second embodiment; 5 is a timing chart showing user session management in Background Art Example 1; 17 is a tabular diagram showing the user profile and user authority settings used in FIG. 16; FIG. FIG. 11 is a timing chart showing user session management in Background Art Example 2; FIG.

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, embodiments of the present invention will be described with reference to the drawings.

[First embodiment]
<System configuration>
FIG. 1 is a schematic diagram showing the configuration of a system using an image processing apparatus according to an embodiment of the present invention.

This system comprises a server PC (personal computer) 1000, a user information server device 1001, a ticket issuing server device 1002, a client PC 1003, and an image processing device 1004, which are connected on a network. This system is a print management system that limits the access of users who use devices and limits the execution of jobs such as the number of prints. The user here includes an individual user, a department, an organization, and the like.

The server PC 1000 runs a system administrator utility to set and manage the system. In particular, it is possible to set function restriction information (hereafter referred to as ACE) of the user information server device 1001 . User information server device 1001 stores user information such as user IDs and passwords, and a function restriction information list (ACL hereinafter), which is a set of ACEs indicating which functions are permitted to be used by each user or device in the system. ) is retained.

The ticket issuing server device 1002 issues a ticket describing information about usable functions based on the ACL stored in the user information server device 1001 . It is assumed that the client PC 1003 operates a printer driver and requires login to identify which user is using the client PC when using the client PC.

The image processing device 1004 is, for example, a multifunction copier. The image processing apparatus 1004 not only has a function of copying a paper document, but also has a function of printing print data sent from an external printer driver, and reading a paper document and transmitting the image data to an external file server or e-mail address. It also has a function (SEND function). Furthermore, it also has a function (remote copy function, facsimile function) of transmitting data to another image processing apparatus and printing it by the destination image processing apparatus.

ACT is an abbreviation for Access Control Token. The ACT 1005 describes information about functions that can be executed by the user in the image processing apparatus 1004 and function restriction information for the image processing apparatus 1004. The ACT 1005 is data having a role of transmitting such information from the server to the device. .

The server PC 1000, the user information server device 1001, the ticket issuing server device 1002, and the client PC 1003 are connected via Ethernet (registered trademark) (not shown), but this is only an example of the system. . The server PC 1000 other than the image processing apparatus 1004, the user information server device 1001, the ticket issuing server device 1002, and the client PC 1003 may all be configured by the same computer. Further, the server PC 1000, the user information server device 1001, the ticket issuing server device 1002, and the client PC 1003 may be mounted on the image processing device 1004 so that the image processing device 1004 alone may be used.

<Hardware Configuration of Image Processing Apparatus>
FIG. 2 is a block diagram showing the hardware configuration of the image processing apparatus 1004 in FIG. 1. As shown in FIG.

The controller unit 2000 is connected to the scanner 2070 as an image input device and the printer 2095 as an image output device, and is connected to the network 1008 and the public line 1009 to input/output image information and device information. A CPU 2001 is a controller that controls the entire system. A RAM 2002 is a system work memory for the CPU 2001 to operate, and is also an image memory for temporarily storing image data. A ROM 2003 is a boot ROM and stores a system boot program. An HDD 2004 is a hard disk drive and stores system software, applications, and image data.

An operation unit I/F 2006 is an interface unit with an operation unit 2012 having a touch panel, and outputs image data to be displayed on the operation unit 2012 to the operation unit 2012 . It also plays a role of transmitting information input by the user of the system from the operation unit 2012 to the CPU 2001 . A network I/F 2010 connects to the network 1008 and inputs and outputs information. The MODEM 2050 is connected to the public line 1009 to input/output information.

The SRAM 2100 is a non-volatile recording medium capable of high speed operation. The RTC 2110 is a real-time clock, and performs processing to keep counting the current time even when the controller unit 2000 is not powered on. The above devices are arranged on the system bus 2007 .

An Image Bus I/F 2005 is a bus bridge that connects the system bus 2007 and an image bus 2008 that transfers image data at high speed and converts the data structure. The image bus 2008 is configured with a PCI bus or IEEE1394. The following devices are arranged on the image bus 2008 .

The RIP 2060 is a raster image processor that develops PDL codes into bitmap images. A device I/F unit 2020 connects the scanner 2070 and printer 2095, which are image input/output devices, to the controller unit 2000, and performs synchronous/asynchronous conversion of image data. A scanner image processing unit 2080 corrects, processes, and edits input image data. A printer image processing unit 2090 performs printer correction, resolution conversion, and the like on print output image data. An image rotation unit 2030 rotates image data. The image compression unit 2040 performs compression/decompression processing.

<Software Configuration of Image Processing Device>
FIG. 3 is a block diagram showing the software configuration of the image processing apparatus 1004 in FIG.

This software is installed in the controller unit 2000 built in the image processing apparatus 1004 . Software built in the image processing apparatus 1004 and processed by the controller unit 2000 is implemented as so-called firmware and executed by the CPU 2001 .

The real-time OS 3001 is a real-time operating system that provides various resource management services and frameworks optimized for embedded system control for software running thereon.

The controller platform 3002 comprises a file system 3003 , job/device control 3004 , and counter 3005 . A file system 3003 is a mechanism for storing data constructed on a storage device such as the HDD 2004 and RAM 2002 . A job/device control 3004 controls the hardware of the image processing apparatus 1004 and executes jobs using basic functions (print, scan, communication, image conversion, etc.) provided mainly by the hardware of the image processing apparatus 1004 . Control. A counter 3005 manages the expiration date for each application and the print/scan counter values stored in the SRAM 2100 .

A system service 3006 is a module for monitoring the operation status of the image processing apparatus 1004 and for downloading software and licenses from the software distribution server 1006 via the network 1008 .

The application platform 3007 is middleware that enables the mechanisms of the real-time OS 3001 and controller platform 3002 to be used by the system application 3008 and the addable application 3012 . System application 3008 comprises application management 3009 , user session management 3010 and access management 3011 .

Application management 3009 is a management module for installing, uninstalling, starting, and stopping the application 3012 . The user session management 3010 is a module that independently manages user information regarding multiple logged-in users for each login. That is, it is a module that manages user profiles and user authorizations according to user login/logout. The access management 3011 is a security module for permitting or prohibiting access to various jobs and resources based on the user authority of the user session management 3010 .

The application 3012 is application software that implements various business models using functions provided by the application platform 3007 .

<User session management according to the first embodiment>
Next, user session management according to the first embodiment will be described with reference to FIG.

FIG. 4 is a timing chart showing user session management according to the first embodiment.

User session management according to the present embodiment is executed by the CPU 2001 of the image processing apparatus 1004 as functions of user session management 3010 and access management 3011 . Reference numerals 7001 to 7003 in FIG. 4 represent the same meanings as the reference numerals 4001 to 4003 in FIG. 16, respectively. Also, the user profiles and user authority settings for user A and user B are the same as those shown in FIG.

When the user inputs user information on the login screen (FIG. 5) at time t701 and logs in as user A, the menu screen (FIG. 6) is displayed on the operation unit 2012. FIG. A logged-in user display area 9005 is arranged at the bottom of the main menu 9000, and it is displayed that the function is being executed as user A at this time. User A is permitted to use the color copy function by the setting information in FIG. 17, and can execute the color copy function 9001 .

After completing the execution of the color copy function, the user selects return to menu 9002 to return to the main menu 9000, and attempts to execute the network management function 9003 at time t702. At this time, the access management 3011 determines that user A is prohibited from executing network management functions. In response, the user session management 3010 displays a login screen (FIG. 7) requesting user authentication as an authorized user.

Here, the user logs in again as user B by inputting user B's authentication information. At this time, the user session management 3010 changes the user profile 7001 to user B as 7021 and the user authority 7002 to user B's authority as 7022 . However, the information related to user A is neither discarded nor changed, and continues to be held in the login user information 7003 . At the same time, the display of the logged-in user display area 9005 is changed as follows. In other words, it is displayed that the network management function is executed as user B of users A and B who have logged in multiple times.

After executing the network management function, the user selects return to menu 9002 to return to the main menu 9000 and attempts to execute the color copy function 9001 again at time t703. At this time, the access management 3011 determines that only user A is permitted as a logged-in user. In response to this, the user session management 3010 assigns the user profile 7001 to the user A like 7023 and the user authority 7002 to the user like 7024 based on the information related to the user A held in the login user information 7003 . Change to A's authority. At the same time, the display of the logged-in user display area 9005 is changed again as follows. In other words, it is displayed that the network management function is executed as user A among users A and B logged in multiple times.

After completing the execution of the color copy function, the user selects return to menu 9002 to return to the main menu 9000, and at time t704 attempts to execute the facsimile function 9004. FIG. At this time, the access management 3011 determines that both the logged-in users A and B are permitted. In response to this, the user session management 3010 displays the executing user selection screen (9060 in FIG. 8). Assume that the user selects, for example, user B as an executing user who executes the facsimile function 9004 . In this case, the user session management 3010 performs the following processing based on information related to user B held in the login user information 7003. FIG. That is, the user profile 7001 is changed again to user B as indicated by 7025, and the user authority 7002 is changed again to user B's authority as indicated by 7026. FIG. At the same time, the display of the logged-in user display area 9005 is changed again as follows. That is, it is displayed that the network management function is executed as user B of users A and B who have logged in multiple times.

On the other hand, when user A is selected as the user who executes the facsimile function 9004, neither the contents of the user profile 7001 and user authority 7002 nor the display of the login user display area 9005 are changed.

<Characteristic processing according to the first embodiment>
Next, characteristic processing according to the first embodiment will be described with reference to FIG.

FIG. 9 is a flowchart showing characteristic processing according to the first embodiment. This process is a process of automatically determining execution user information when a function is selected or in accordance with user selection, and is executed by the CPU 2001 of the image processing apparatus 1004 as functions of user session management 3010 and access management 3011 .

When the user selects a function in step S121, the access management 3011 checks whether or not there are a plurality of logged-in users who are permitted to execute the selected function in the next step S122. If the number of users is not multiple, User Session Management 3010 automatically selects the only authorized user as the running user in step S123. Then, the process proceeds to the next step S126.

If the number of logged-in users permitted to execute the selected function is more than one, the user session management 3010 displays the execution user selection screen (FIG. 8) in step S124. Then, in subsequent step S125, the result of the user's selection is received, and based on this, the execution user of the selected function is determined. Then, the process proceeds to the next step S126.

From the above, the processing of the flow from step S122 to step S126 via step S123 is, in short, the following processing. That is, even if there are multiple logged-in users, if only one user is permitted to execute the selected function, the user is not prompted to reselect from the list of logged-in users. automatically selected as the executing user of the selected function;

Next, the user session management 3010 determines in step S126 whether the execution user determined by the above procedure is the same as the current execution user. If they are the same, the process proceeds directly to step S129, and the application 3012 executes the selected function. If not, User Session Management 3010 changes the user profile to the determined effective user in step S127, and changes the user authority to the determined effective user in step S128. Then, in step S129, the selected function is executed.

<Advantages of First Embodiment>
According to the present embodiment, in an apparatus configured so that access to jobs and resources can be restricted according to logged-in users, the number of user authentication information input operations can be reduced, and convenience can be improved. be able to.

Further, a logged-in user display area is provided to display which of the logged-in users a predetermined function is executed as. This allows the user to easily determine which of the logged-in users' user profile the operation for executing the function is based on.

[Second embodiment]
Next, a second embodiment of the invention will be described.

The basic configuration of the second embodiment is the same as that described in FIGS. 1, 2 and 3 in the first embodiment. The characteristic parts of the second embodiment will be described below.

<User session management according to the second embodiment>
FIG. 10 is a timing chart showing user session management according to the second embodiment of the present invention.

User session management of this embodiment is executed by the CPU 2001 of the image processing apparatus 1004 as functions of a user session management 3010 and an access management 3011 . Reference numerals 5001 to 5003 in FIG. 10 have the same meanings as reference numerals 4001 to 4003 in FIG. 16, respectively.

FIG. 11 is a tabular diagram showing the user profile and user authority settings of User A and User B used in FIG.

In the example shown in FIG. 11, unlike the example in FIG. 17 used in the first embodiment, user type information 8001 indicating the user type (type) is registered as the user profile. User types include, for example, anonymous users and real-name users. An anonymous user is a special user who is used by an unspecified number of people, and does not have user identification elements such as user name information related to the user's name or e-mail address. A real-name user is a user who has these user-identifying elements.

When the user inputs user information on the login screen (FIG. 5) at time t801 and logs in as an anonymous user, the menu screen (FIG. 12) is displayed on the operation unit 2012. FIG. A logged-in user display area 9015 is arranged at the bottom of the menu 9010, and displays that the function is being executed as an anonymous user at this time. The anonymous user is permitted to use the color copy function by the setting information in FIG. 11, and can execute the color copy function 9011 . Note that login by an anonymous user may be automatically performed when the image processing apparatus 1004 is started.

After completing the execution of the color copy function, the user selects return to menu 9012 to return to the main menu 9010 and attempts to execute the network management function 9013 at time t802. Access Management 3011 then determines that the anonymous user is barred from network management functions. User session management 3010 then displays a login screen (9070 in FIG. 13) requesting authentication by an authorized user. Here, the user logs in again as user B by inputting user B's authentication information. At this time, the user session management 3010 changes the user profile 5001 to user B as shown by 5021 in FIG. Change all to allow. At the same time, the login user display area 9015 is changed so as to display that the user B is being executed.

After executing the network management function, the user selects return to menu 9012 to return to the main menu 9010, and at time t803 attempts to execute the color copy function again. At this time, the access management 3011 refers to the user authority 5002 indicated by 5022 in FIG. 10 and determines that the color copy function is permitted. As a result, the color copy function can be executed without displaying the authentication screen again, and the login user display area 9015 displays that the user B is being executed without any change.

After completing the execution of the color copy function again, the user selects return to menu 9012 to return to the main menu 9010, and executes the facsimile function 9014 at time t804. At this time, the access management 3011 refers to the user authority indicated by 5022 in FIG. 10 and determines that the facsimile function 9014 is not permitted. At this time, the user session management 3010 displays an error screen (FIG. 14) notifying that the user cannot be changed. This is because, in the second embodiment, further authentication is prohibited when logged in as a real-name user, and the user profile 5001 and user authority 5002 are not changed.

When entering user information on the login screen (FIG. 5), if you log in as user A, who is a real-name user, and try to execute the network management function 9013, an error screen notifying that the user cannot be changed will also appear. (FIG. 14) is displayed.

<Characteristic processing according to the second embodiment>
Next, characteristic processing according to the second embodiment will be described with reference to FIG.

FIG. 15 is a flowchart showing processing according to the second embodiment. This processing is processing for determining whether or not to re-authenticate according to the logged-in user type when authority is insufficient. .

When the user selects a function in step S131, access management 3011 determines in step S132 whether the logged-in user is authorized to perform the selected function. If it is determined that it is permitted, the process proceeds to step S141, and the application 3012 executes the selected function. On the other hand, if it is determined that it is not permitted, the user session management 3010 determines whether the logged-in user is an anonymous user in step S133. If the user is not an anonymous user, the process proceeds to step S134 to display an error screen (FIG. 14).

On the other hand, if it is determined that the logged-in user is an anonymous user, the process advances to step S135 to display a login screen (for example, 9070 in FIG. 13), and to receive input of authentication information from the user in step S136. At step S137, it is determined whether or not the received authentication information is correct. On the other hand, if the received authentication information is correct, the access management 3011 determines whether execution of the selected function is permitted for the received authentication information in step S138. If it is not permitted, the process returns to step S135 and repeats the steps from step S135 to step S138.

On the other hand, if execution of the selected function is permitted, user session management 3010 overwrites the user profile with the newly logged-in user in step S139. Subsequently, the user authority information is merged in step S140, and the selected function is executed in step S141.

<Advantages of Second Embodiment>
Even if an anonymous user and a real-name user are combined as logged-in users, the same advantages as in the first embodiment are obtained.

The object of the present invention can also be achieved by executing the following processing. That is, a storage medium recording software program code for realizing the functions of the above-described embodiments is supplied to a system or device, and a computer (or CPU, MPU, etc.) of the system or device is stored in the storage medium. This is the process of reading the program code.

In this case, the program code itself read from the storage medium implements the functions of the above-described embodiments, and the program code and the storage medium storing the program code constitute the present invention.

Moreover, the following can be used as a storage medium for supplying the program code. For example, floppy (registered trademark) disk, hard disk, magneto-optical disk, CD-ROM, CD-R, CD-RW, DVD-ROM, DVD-RAM, DVD-RW, DVD+RW, magnetic tape, non-volatile memory card, ROM or the like. Alternatively, the program code may be downloaded over a network.

The present invention also includes the case where the functions of the above embodiments are realized by executing the program code read by the computer. In addition, based on the instructions of the program code, the OS (operating system) running on the computer performs part or all of the actual processing, and the processing realizes the functions of the above-described embodiments. is also included.

Furthermore, the present invention also includes a case where the functions of the above-described embodiments are realized by the following processing. That is, the program code read from the storage medium is written into a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer. Thereafter, based on the instruction of the program code, the CPU or the like provided in the function expansion board or function expansion unit may perform part or all of the actual processing.

1003 Client PC
1004 image processing device 2001 CPU
2002 RAM
2003 ROM
2012 Operation unit

Claims (21)

An image processing device capable of executing multiple functions including a copy function,
The plurality of functions includes at least a first function that does not require personal authentication of the user in order to execute and a second function that requires personal authentication of the user for the image processing apparatus. 1. An image processing apparatus, characterized in that it is possible to make settings such that an authenticated user is not permitted to use said first function. A first display control means for displaying an operation screen including a first soft key for executing the first function and a second soft key for executing the second function. The image processing apparatus according to claim 1, wherein: further comprising authorization means for authorizing a user to use the function;
The permitting means permits the user to use the first function without personal authentication of the user, and if the user who has authenticated the image processing apparatus has the authority to use the second function, the user is authorized to use the second function. Permitting a user to use the second function, and permitting the user to use the second function if the user who authenticated the image processing apparatus does not have the authority to use the second function. 3. The image processing apparatus according to claim 1, wherein the image processing apparatus does not The image processing device has a touch panel display,
3. The image processing apparatus according to claim 2, wherein the first soft key and the second soft key are displayed on the touch panel display, and selection of the soft key by a user's touch operation is accepted. 5. The image processing apparatus of claim 4, wherein the selected softkeys include softkeys for executing a copy function. 2. The apparatus further comprises second display control means for displaying an authentication screen for authenticating the user when the second soft key is selected while the individual user has not been authenticated. The image processing device according to . The second display control means displays an authentication screen when the second soft key is selected while personal authentication of the user is not performed, and displays an authentication screen when the personal authentication of the user is performed. 7. The image processing apparatus according to claim 6, wherein the authentication screen is not displayed when the second function that the user does not have permission to use is selected. If the user authenticated on the authentication screen is authorized to use the second function, the user is permitted to use the second function, and if the user is not authorized to use the second function, the user is not permitted to use the second function. 8. The image processing apparatus according to claim 6 or 7. When the image processing apparatus is activated, the first display control means displays the operation screen in a state in which personal authentication of the user is not performed, and in that state, the second soft key is selected by a touch operation. 9. The image processing apparatus according to any one of claims 6 to 8, wherein said second display control means displays an authentication screen for authenticating a user based on said authentication. A state in which user personal authentication is not performed is a state in which an unspecified user is logged into the image processing apparatus, and a state in which user personal authentication is performed is a state in which a specific user is logged in to the image processing apparatus. 10. The image processing apparatus according to claim 9, wherein: Claims 2 , 4, and 3, wherein the operation screen displayed by the first display control means in a state in which the personal authentication of the user has not been performed displays that the personal authentication of the user has not been performed. 11. The image processing device according to any one of 10 . 12. The image processing apparatus according to claim 1, wherein said plurality of functions include at least a copy function and a facsimile function. An image processing apparatus having multiple functions including a copy function,
setting means for setting usage rights of the plurality of functions;
receiving means for receiving selection of one function from the plurality of functions;
permission means for permitting use of the selected function if the user is authorized to use the selected function without logging in with user-specific login information;
display control means for displaying a screen for inputting login information when the user is not logged in with login information specific to the user and the user does not have the authority to use the selected function;
Based on the user-specific login information input on the screen, if the user corresponding to the login information is authorized to use the selected function, use of the selected function is permitted, and the login information is and control means for not permitting use of the selected function if the corresponding user does not have permission to use the selected function,
The setting means permits use of a predetermined function among the plurality of functions in a state in which the user is not logged in with login information unique to the user, and logs in to the image processing apparatus with the login information unique to the user. An image processing apparatus characterized in that it is possible to set such that use is not permitted to a user who has 14. The apparatus according to claim 13, wherein said setting means is capable of setting authority to use a function when a user is not logged in with user-specific login information and authority to use a function of each user. Image processing device. Softkeys for executing functions that are permitted to be used without logging in with user-specific login information and functions that are not permitted to be used without being logged in with user-specific login information 15. The image processing apparatus according to claim 13, wherein a soft key for and a soft key are displayed on the same operation screen. 16. The image processing apparatus according to claim 15, wherein said image processing apparatus comprises a touch panel display, and said operation screen is displayed on said touch panel display. 17. The image processing apparatus according to claim 13, wherein said login information includes at least one of a user ID and a password. The display control means, based on user-specific login information input on the screen, does not display the authentication screen if the user corresponding to the login information does not have the authority to use the selected function. The image processing device according to any one of claims 13 to 17. A control method executed by an image processing apparatus capable of executing a plurality of functions including a copy function, wherein the plurality of functions include a first function that does not require personal authentication of a user for execution, and the image processing apparatus. and a second function that requires personal authentication of the user for the image processing apparatus, and it is possible to set not to allow the user who has authenticated the image processing apparatus to use the first function. control method. A control method executed by an image processing apparatus having a plurality of functions including a copy function,
a setting step of setting usage rights for the plurality of functions;
a receiving step of receiving selection of one function from the plurality of functions;
a permitting step of permitting use of the selected function when the user is not logged in with user-specific login information and the user is authorized to use the selected function;
display control means for displaying a screen for inputting login information when the user is not logged in with login information specific to the user and the user does not have the authority to use the selected function;
Based on the user-specific login information input on the screen, if the user corresponding to the login information is authorized to use the selected function, use of the selected function is permitted, and the login information is a control step of not permitting use of the selected function if the corresponding user does not have permission to use the selected function;
For a predetermined function among the plurality of functions, use of the function is permitted in a state in which user-specific login information is not used to log in, and a user who is logged in to the image processing apparatus with user-specific login information is permitted to use the function. A control method characterized in that it is possible to set not to allow the use of A program for causing a computer to function as each means according to any one of claims 1 to 18.

Images