JP2007081913A - Image forming apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an image forming apparatus allowing a designer of the image forming apparatus to easily design it. <P>SOLUTION: The image forming device is constituted such that, a function that a user can use is limited to a part of users, and the usable function is registered to each user, and also comprises a user information managing means for managing, registering, and editing user information for the user using the function; and a user log-in means for authenticating the user who has logged in and managing its state. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to an image forming apparatus in which functions usable by a user are limited to a part thereof and functions usable for each user are registered.

  In recent years, copying machines have been made more complex due to the digitalization of copying machines. For example, a method of writing image data on a photosensitive drum with a laser beam is exactly the same as a writing method of a laser printer. Therefore, if both controllers are installed, the functions of the copier and the printer can be integrated, that is, combined.

  Also, by combining the functions of fax and scanner in the same way, these functions can be combined. With the advent of such multi-function machines, copiers, printers, fax machines, and scanners, each of which has been a single-function office machine, have been combined into a single device, leading to a reduction in total office costs.

  In recent years, copying machines are not only combined but also networked. For example, digitalization has allowed multifunction devices to connect to office networks, and they have worked with personal computer devices and servers.

  Furthermore, the multifunction peripheral itself has evolved to include a memory and a hard disk drive (HDD), and has almost the same function as a personal computer device. As described above, the copier has evolved into a network multifunction peripheral, and has become a center machine in the office, which can meet a wide variety of user needs.

  For this reason, security management requires functions similar to those of personal computer devices, and it is natural to restrict functions according to the authority level of users who authenticate users and restrict functions for each user. ing. In addition, a user profile that is personal information of a user is also important. Although it is commonplace in personal computer devices, convenience is improved when desktop layouts of the operation unit of the image forming apparatus and favorites of Web pages are loaded according to the personal profile.

  Conventionally, the operation control of the multi-function device as described above has been performed by a computer mounted on the multi-function device, and this computer executes a program (P ′) for operation control, and thereby the RAM in the computer. In a predetermined area of (Random Access Memory), an application layer and a service layer can be constructed as shown in FIG.

  Among these, the application layer possesses a plurality of applications AP1 to AP4 such as a copy, a scanner, and a fax, so that the computer can realize the functions of the applications AP1 to AP4.

  Similarly, the service layer has a plurality of device control services SV1 to SV6 such as scanner control and plotter control, and each of these services SV1 to SV6 is a lower layer of the service. By performing operation control of hardware resources such as a plotter, the computer can realize the functions of the services SV1 to SV6.

  For example, the scanner control service SV1 controls the operation of the scanner. As a result, the computer has a function of reading a paper document using a scanner.

  However, each of the applications AP1 to AP4 uses services SV1 to SV6 necessary for processing among various services SV1 to SV6 of the lower service layer.

  For example, the copy application AP1 uses a scanner control service SV1 and a plotter control service SV2 in order to perform a copy process.

  The fax application AP2 uses a scanner control service SV1 and a fax transmission control service SV5 in order to perform a fax transmission process.

  As described above, since the individual applications AP1 to AP4 use a large number of services SV1 to SV6 in accordance with the type of processing, as shown in FIG. 19, many usage relationships are established from the application layer to the service layer, and the program P There was a problem that the design of 'became very complicated.

In addition, since the services SV1 to SV6 provide functions to a plurality of applications AP1 to AP4, even when it is desired to change the design of a part of the applications AP1 to AP4, the design changes of all the applications AP1 to AP4 As a result, there was a problem that design changes required a great deal of time and money.
JP 2005-51336 A

  Therefore, at present, even if it is desired to change the design of a part of an application, an object-oriented design that requires a part of the design change has been performed.

  This object-oriented design is a programming technique in which a program is described as a combination of objects, in which data and procedures for manipulating the data are integrated as a single unit called an object.

  In this way, if you want to change the design of a part of the application by describing the program with multiple objects, you can change the design of only the specific object related to it and also partially reuse the program Is also possible.

  Then, using the object-oriented development, it is required to develop a system in which applications are integrated as shown in FIG.

  SUMMARY An advantage of some aspects of the invention is that it provides an image forming apparatus that can be easily designed by a designer of the image forming apparatus.

  The present invention is an image forming apparatus in which functions that can be used by a user are limited to a part thereof and functions that can be used by each user are registered, and user information that uses the functions is managed And a user information management means for performing registration and editing, and a user login means for verifying the logged-in user and managing the status.

  The user information management means comprises user registration means for registering / editing users and user information means for representing user information.

  The user login means includes user restriction means for restricting user function use and login user information means for holding the state of the logged-in user.

  The user information means comprises user identification means for identifying the user and user characteristic means for representing the user characteristics.

  The log-in user information means comprises user status means for holding the user authentication status and user certification means for certifying the user.

  Therefore, according to the present invention, the user information management unit that performs user registration / editing and the user login unit that manages the status of the user who has logged into the system are considered separately, so that the user registration / editing / authentication operation can be performed. The effect is that it can be managed separately from the login state of the user.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

  The implementation environment assumed in the present invention is shown in FIG.

  As shown in the figure, an image forming apparatus FX according to the present invention is assumed to be an image forming apparatus connected to a network environment to which various devices are connected.

  FIG. 2 shows an example of the mechanical structure of the image forming apparatus FX according to the present embodiment.

  When a print key 34 on the operation unit 30 is pressed, a document bundle placed on the document table 2 on the document table 2 in the automatic document feeder (hereinafter referred to as ADF) 1 is the lowest document. Are fed to a predetermined position on the contact glass 6 by the feeding roller 3 and the feeding belt 4.

  It has a counting function for counting up the number of originals upon completion of feeding one original. After the fed original is read by the reading unit 50 on the image data of the original on the contact glass 6, the original that has been read is discharged by the feeding belt 4 and the discharge roller 5.

  Further, when it is detected by the document set detection 7 that the next document is present on the document table 2, the document is fed onto the contact glass 6 in the same manner as the previous document. The feeding roller 3, the feeding belt 4, and the discharging roller 5 are driven by a conveyance motor 26.

  The transfer papers stacked on the first tray 8, the second tray 9, and the third tray 10 are fed by the first paper feeding device 11, the second paper feeding device 12, and the third paper feeding device 13, respectively, and are conveyed vertically. The unit 14 is transported to a position where it abuts on the photoreceptor 15.

  The image data read by the reading unit 50 is written on the photoconductor 15 by the laser from the writing unit 57 and passes through the developing unit 27 to form a toner image.

  Then, the toner image on the photoconductor 15 is transferred while the transfer paper is conveyed by the conveyance belt 16 at the same speed as the rotation of the photoconductor 15. Thereafter, the image is fixed by the fixing unit 17 and discharged to the finisher 100 of the post-processing apparatus by the paper discharge unit 18.

  The finisher 100 of the post-processing apparatus can guide the transfer paper conveyed by the paper discharge roller 19 of the main body in the normal paper discharge roller 102 direction and the staple processing unit direction.

  By switching the switching plate 101 upward, the sheet can be discharged to the normal discharge tray 104 side via the transport roller 103.

  Further, by switching the switching plate 101 downward, the switching plate 101 can be conveyed to the staple table 108 via the conveying rollers 105 and 107.

  The transfer paper loaded on the staple table 108 is aligned by the paper jogger 109 every time one sheet is discharged, and is bound by the stapler 106 upon completion of partial copying. The group of transfer sheets bound by the stapler 106 is stored in the staple completion discharge tray 110 by its own weight.

  On the other hand, the normal paper discharge tray 104 is a paper discharge tray that can move back and forth. The paper discharge tray section 104 that can be moved back and forth moves forward and backward for each original or each copy section sorted by the image memory, and sorts copy paper that is simply discharged.

  When forming an image on both sides of the transfer paper, the transfer paper fed from each of the paper feed trays 8 to 10 is not guided to the paper discharge tray 104 side, and the branch claw 112 for switching the path is used. By setting it on the upper side, it is once stocked in the duplex feeding unit 111.

  Thereafter, the transfer paper stocked on the double-sided paper feeding unit 111 is re-fed from the double-sided paper feeding unit 111 to transfer the toner image formed on the photosensitive member 15 again, and the branching claw 112 for switching the path. Is set on the lower side and guided to the paper discharge tray 104. In this way, the duplex feeding unit 111 is used when creating images on both sides of the transfer sheet.

  The photoreceptor 15, the transport belt 16, the fixing unit 17, the paper discharge unit 18, and the development unit 27 are driven by a main motor 25, and each of the paper feeding devices 11 to 13 is driven by the paper feeding clutches 22 to 24. Driven by transmission. The vertical conveyance unit 14 is driven to transmit the drive of the main motor 25 by the intermediate clutch 21.

  FIG. 3 is a diagram showing the operation unit 30.

  The operation unit 30 includes a liquid crystal touch panel 31, a numeric keypad 32, a clear / stop key 33, a print key 34, a preheat key 35, a reset key 36, an initial setting key 37, a copy key 38, and a copy server key 39. Displays a function key, the number of copies, a message indicating the state of the image forming apparatus FX, and the like.

  By pressing the initial setting key 37, the initial state of the machine can be arbitrarily customized. It is possible to set the paper size stored in the machine, or to arbitrarily set the state set when the mode clear key of the copy function is pressed.

  Also, select applications that are preferentially selected when there is no operation for a certain period of time, set the transition time to low power according to the International Energy Star Plan, and set the transition time to auto-off / sleep mode. It is possible to set.

  When the preheating key 35 is pressed, the machine shifts from the standby state to the power reduction state, and the fixing temperature is lowered or the display on the operation unit is turned off. The preheating state means a low power state as referred to in the International Energy Star Program. In order to cancel the preheating state, the off state / sleep state, and shift to the standby state, the preheating key is pressed again. By pressing the copy key 38, the copy function can be used.

  The copy server key 39 is used to edit existing stored image data (copy mode setting, printing, deleting).

Details of the copy server will be described later.
The scanner application key 41 is used when storing a document in a storage device inside the apparatus, when transmitting an input image read from the scanner, stored image data, or the like to the outside.
Details will be described later.

  FIG. 4 is a view showing an example of display on the liquid crystal touch panel 31 of the operation unit 30.

  When the operator touches a key displayed on the liquid crystal touch panel 31, the key indicating the selected function is inverted in black. In addition, when it is necessary to specify the details of the function (for example, if it is variable magnification, the variable magnification value, etc.), the detailed function setting screen is displayed by touching the key. Thus, since the liquid crystal touch panel uses a dot display, it is possible to graphically perform the optimal display at that time.

  In FIG. 4, the upper left is a message area for displaying messages such as “Ready to copy” and “Please wait”, the right is the copy number display section for displaying the set number of sheets, and the automatic paper for automatically selecting the transfer sheet Select key, sort key that specifies processing to arrange copies in order of pages, stack key that specifies processing to sort copies by page, staple key that specifies processing to bind sorted items partly, and magnification Same size key to set the same size, Scaling key to set the enlargement / reduction ratio, Double side key to set the duplex mode, Edit key to set the binding margin mode, etc. Cover page / Slip sheet to set the cover / interleaf mode This is a connection mode key that prints out a large number of printing operations divided into a plurality of parts via a network of keys and digital copying machines.

  In addition, a paper feed tray state corresponding to the number of paper feed trays is displayed, and keys for manually setting the paper feed tray are displayed for the number of paper feed trays.

  FIG. 5 illustrates a control device with a main controller as a center. The main controller 20 controls the entire image forming apparatus.

  The main controller 20 includes image processing for performing display to the operator, an operation unit 30 for performing function setting input control from the operator, control of the scanner, control for writing a document image into the image memory, control for image formation from the image memory, and the like. A distributed control device such as a unit (IPU) 49 and an automatic document feeder (ADF) 1 is connected.

  Each distributed controller and the main controller 20 exchange machine status and operation commands as necessary.

  A main motor 25 and various clutches 21 to 24 necessary for paper conveyance are also connected.

  Returning to FIG. 2, a process from reading a document to writing an image by the image forming apparatus FX will be described.

  The reading unit 50 includes a contact glass 6 on which an original is placed and an optical scanning system. The optical scanning system includes an exposure lamp 51, a first mirror 52, a lens 53, a CCD image sensor 54, and the like. Yes. The exposure lamp 51 and the first mirror 52 are fixed on a first carriage (not shown), and the second mirror 55 and the third mirror 56 are fixed on a first carriage (not shown).

  When reading a document image, the first carriage and the second carriage are mechanically operated at a relative speed of 2 to 1 so that the optical path length does not change.

  This optical scanning system is driven by a scanner drive motor (not shown). The document image is read by the CCD image sensor 54, converted into an electrical signal, and processed.

  The writing unit 57 is composed of a laser output unit 58, an imaging lens 59, and a mirror 60. Inside the laser output unit 58, a polygon mirror (polygon mirror) that rotates at a constant high speed by a laser diode and a motor as a laser light source. ).

  The laser beam output from the writing unit 57 is applied to the image forming photoconductor 15.

  Although not shown, a beam sensor for generating a main scanning synchronization signal is disposed at a position where a laser beam near one end of the photoconductor 15 is irradiated.

  FIG. 6 is a block diagram of the internal configuration of the image processing unit (IPU) 49.

  The reflection of light emitted from the exposure lamp 51 is photoelectrically converted by the CCD image sensor 54 and converted into a digital signal by the A / D converter 61. The image signal converted into the digital signal is subjected to shading correction 62 and then subjected to MTF correction, γ correction and the like in the image processing unit 63.

  Thereafter, the image data input via the print composition unit 71 is supplied to the scaling circuit 77 or to the image memory controller 65 by switching, and the image signal that has passed through the scaling circuit 77 is matched to the scaling ratio. The image is enlarged / reduced and sent to the writing unit 57.

  On the other hand, the image memory controller 65 and the selector 64 are configured to be able to input and output image signals in both directions.

  Although not explicitly shown in FIG. 6, the IPU 49 has image data supplied from the outside via the I / O port 67 in addition to the image data input from the reading unit 50, for example, a data processing device such as a personal computer. It is assumed that it has a function of selecting input / output of a plurality of data so that the data input from can be processed.

  In this embodiment, the image forming apparatus FX is connected to the network via the I / O port 67, and a TCP / IP communication protocol that is widely used as a standard Internet protocol is used as the communication means. It is done.

  Further, the machine configuration information and operation status of each image forming apparatus connected to the network having the network configuration as shown in FIG. Send / receive book data.

  Further, a CPU 68 for setting the image memory controller 65 and the like and controlling the reading unit 50 and the writing unit 57, and a ROM 69, a RAM 70, and an NV-RAM 74 for storing the program (P) and data thereof are provided. Further, the CPU 68 can write and read data in the image memory 66 via the memory controller 65.

  The image sent to the image memory controller 65 as a document image is sent to the image memory 66 after the image data is compressed by an image compression device in the image memory controller.

  Here, 256 gradation data corresponding to the maximum image size can be written in the image memory 66 as it is, but the image memory is very much used for one original image.

  Therefore, a limited image memory can be used effectively by performing image compression.

  Further, since a large amount of original image data can be stored at a time, the stored original image data can be output in page order as a sorting function. In this case, when the image is output, the data in the image memory 66 is output while being sequentially expanded by the expansion device in the memory controller 65.

  Such a function is generally called “electronic sort”. Further, by using the function of the image memory, it is possible to sequentially read a plurality of document images into an area obtained by dividing the area of one transfer sheet of the image memory.

  For example, four original images are sequentially written in an area divided into four equal parts for one transfer paper in the image memory, whereby the four originals are combined into one transfer paper image to obtain a consolidated copy output. It becomes possible.

  Such a function is generally called “aggregate copy”. The image stored in the image memory 66 can be accessed from the CPU 68. For this reason, the contents of the image memory can be processed, and for example, image thinning processing, image clipping processing, and the like can be performed.

  For processing, the image memory can be processed by writing data into the register of the memory controller 65. The processed image is again held in the image memory. The image memory 66 is divided into a plurality of areas depending on the size of the image data to be processed, and the image data can be input / output simultaneously. In order to make it possible to execute input and output of image data in parallel in each divided area, the interface with the memory controller is connected with two sets of address and data lines for reading and writing. As a result, an operation of outputting (reading) an image from the area 2 while inputting (writing) the image to the area 1 becomes possible.

  The image memory 66 may be provided with a separate hard disk to store a large amount of image data. By using a hard disk, there is a feature that an external power source is unnecessary and an image can be retained permanently. In order to read and hold a plurality of standard documents (format documents) with a scanner, this hard disk is generally used.

  Also, when performing a series of operations such as data encoding processing when storing image data read from a scanner to the outside using e-mail, etc., and storage, editing, and deletion of an address book having distribution destination data Is also used.

  Writing and reading are temporarily stored in the image memory and processed in order to absorb the difference in processing speed with respect to image formation on the main body and image writing from the scanner. When data from the image storage device is sent to the writing unit 57, it is temporarily stored in the image memory 66 and sent to the writing unit 57. In this way, the image controller 66 determines the image path for the image memory 66, HD 75, scanner image, and input / output of the image to be sent to the writing unit.

  As described above, the CPU 68 determines the input and output of the image data, so that the memory controller 65 connected to the CPU can switch the flow of the image.

  When editing the stored image in the copy server, the copy server key 39 is pressed in FIG. At this time, the display screen of the touch panel 31 is as shown in FIG.

  In the display area 70, image information of image data stored in the HDD 75 is displayed. A user ID, a document name, the number of pages, and an accumulation time are displayed as image information for specifying image data. Since the user ID is assigned by the printer driver of the personal computer connected to the image forming apparatus FX, it exists only in the stored image by the printer function. A document name is assigned each time an image is stored.

  The number of pages is the number of accumulated original images. The accumulation time represents the time when the image is accumulated. Note that the image information at this time is held in the nonvolatile memory NV-RAM 74, and the image information continues to be held even when the power is turned off.

  Although only three pieces of image information are displayed in the display area 70 of FIG. 7, image information that is not displayed can be displayed by pressing the “Previous” key and the “Backward” key. When each image information displayed in the display area 70 is pressed, the image information display portion is inverted to black. This is called a selected state.

  A plurality of pieces of image information can be designated as the selected state. As editing functions for stored images, there are a “delete from list”, “print condition change” and “document print” functions. When a document is selected and the “Delete from list” key is pressed, the selected document is deleted. Select a document, press the “print condition” key, set the print condition on the displayed screen, and press the print key 34 to print the stored image corresponding to the selected document according to the specified print condition. Output.

  When image data read by the scanner or accumulated image data is transmitted to the outside, when the scanner application key 41 is pressed in FIG. 3, a screen as shown in FIG. 8 is displayed on the touch panel 31.

  When the reading condition key is pressed, the screen is switched to a display screen as shown in FIG. 9, and the original type, resolution, original size and density can be set from this screen for reading the original from the scanner.

  The reading conditions set here are displayed in the reading condition display field 80. The transmission destination designates the user displayed in the registered user display field 81.

  Alternatively, a destination can be literally input directly by pressing a direct input key and using a software keyboard.

  Here, when the document is set on the scanner and the print key is pressed, the document can be read and transmitted as an electronic image to a desired destination.

  Then, when the stored document key 82 is pressed, the display is switched as shown in FIG.

  Here, a list of accumulated documents is displayed.

  Here, when a plurality of documents are selected and the destination is set by returning to the scanner distribution basic screen of FIG. 8, the selected stored document can be transmitted to the outside.

  In addition, other stored documents can be deleted here.

  FIG. 11 is a login name and password input request screen displayed on the touch panel 31. FIG. 12 shows a soft keyboard displayed on the touch panel 31.

  When authentication is required when operating the image forming apparatus FX, the login name and password are input with this soft keyboard, and the login key 89 in the login name and password input request screen of FIG. 11 is pressed. If the user logs in and the logged-in user is the correct user, the screen is switched to a screen as shown in FIG. 4 and the system can be used.

  FIG. 13 is a function execution prohibition screen displayed on the touch panel 31. When a user who cannot operate the image forming apparatus FX performs an operation, a display for prohibiting the execution of the function is displayed.

  Next, the internal configuration of the software in the present invention will be described.

  When the computer executes the program (P), two applications layers and service layers shown in FIG. 14 are constructed in a part of the storage area of the RAM 70 in the image forming apparatus FX. Of these, the service layer provides operation control of devices such as scanners, plotters, and authentication devices included in the image forming apparatus FX in units that can be commonly used by integrated applications (hereinafter referred to as “integrated applications”).

  An application layer positioned above the service layer provides services such as copying, scanner distribution, and FAX transmission in order to satisfy the user's request. The application layer includes an operation system, a management system, and an execution system.

  Among these, the operation system interprets the user's request and provides the service in consideration of quality, cost, and delivery date. The operation system entrusts the actual processing to the management system and the execution system according to the contents of the service to be provided.

  Also, the management system monitors the device status of the image forming apparatus FX, grasps the optional configuration (finisher, billing apparatus, authentication apparatus, etc.), services necessary for the entire image forming apparatus such as data management (address book, stored document, etc.) Will be provided. The management system receives inquiries from the operation system and the execution system, and sends device information, device configuration information such as a charging device and an authentication device, address information, stored document information, authenticated user information, and charging information to the operation system and the execution system. To provide. Here, based on the authenticated user information, users that can be used are limited.

  Furthermore, the execution system holds a plurality of requests for copying, etc. received through the operation system, performs execution control of the plurality of requests, and provides the management system with equipment information required for this execution control. Ask for it. The execution system is responsible for accepting a document operation request for handling a document, such as copying or faxing, from the user and creating a copy of the document with the finish desired by the user.

  Next, the authentication management unit, which is a characteristic part of the present embodiment, will be described in detail with reference to FIGS. 15, 16, and 17 written in UML.

  Prior to the description, classes and instances, which are the basic terms used in object orientation, will be briefly described.

  A class defines a template of an instance that summarizes data and operations that are its operation procedures. By defining this, instances of the same kind can be handled together. A class is schematically expressed in UML as shown in FIG. As shown in FIG. 18, a class includes a data possessing unit that is a part for possessing a plurality of data, and an operation of reading out this data and performing some processing or writing data as a result of performing some processing. I have multiple operation management departments.

  On the other hand, an individual object having specific data for a class is called an “instance”. Instance is data as a program as an actual value based on a class, and is often used in contrast to a class. A class may be described as a “type” and an instance as an “entity”. . It means a set of data that is actually placed on the physical memory, and is a term that captures the substance of the data more specifically and directly. The concept of inheritance is used.

  In the following explanation, please note the difference in meaning between the above class and the above instance.

  FIG. 15 (analysis model) is a UML class diagram showing the configuration of the authentication management unit. The class shown in FIG. 15 is a part of software and a part of the program (P). When the program (P) is executed, the class is instantiated in a predetermined storage area of the RAM 70, and a data holding unit is realized using the predetermined storage area of the RAM 70.

  As a result, the instance can write data to the RAM 70 and read data previously written to the RAM 70. Instances cooperate by exchanging messages with each other. Then, the image forming apparatus FX can perform the processing described in the present invention by the cooperative operation of the instances.

  16 and 17 (sequence) are UML sequence diagrams when each instance performs a cooperative operation.

  As shown in FIG. 15, the authentication management unit is roughly composed of “A: user information management unit (user information management unit)” and “B: user login unit (user login unit)”.

  “A: user information management unit” receives “A1: user registration unit (user registration unit)” that accepts reference and editing of user information, and “A2: user information unit (user information unit)” holds individual user information. Is comprised.

  In addition, “A1: User registration unit” is configured by “User name list class”.

  Further, “A2: user information part” holds “A2_1: user identification part (user identification unit)” that holds information for identifying a user such as an account and a role, and information that represents the characteristics of the user. “A2_2: User characteristic section (user characteristic means)”.

  In addition, “A2_1: user identification unit” is configured by “account class”.

  Further, “A2_2: user characteristic portion” is configured by “user profile class”.

  “B: user login unit” manages login / logout of a user and checks the user's authentication status “B1: user restriction unit” and “B2: login user information unit” that holds the status of individual login users Consists of.

  Further, “B1: User restriction unit” is composed of “User restriction class”.

  Further, “B2: Login user information part” includes “B2_1: User state part” representing the state of the logged-in user and “B2_2: User proof part” holding means for certifying the user.

  In addition, “B2_1: user state part” is configured by “authenticated person class”.

  In addition, “B2_2: user certification section” is configured by “identification class”.

  Below, the relationship between each class shown by FIG. 15 is demonstrated.

  There are a plurality of the user list classes described above in the authentication management unit, and there are one or more account classes for the user list class. The user list class registers and manages account classes. Therefore, the user list class and the account class have a relationship between a registration place and a registered item.

  The account class described above holds one user profile class that represents user characteristic information. Therefore, the account class and the user profile class have a relationship between a holder and a holding target.

  The above-described user restriction class restricts a plurality of authentication target person classes representing users who are attempting to log in to zero or more. Therefore, the user restriction class and the person to be authenticated class have a relationship of a restriction person and a restriction object.

  The above-described authenticated person class holds a plurality of one or more means for proving his / her identity. Therefore, the person-to-be-authenticated and the identification class have a relationship of holder and proof means.

  The user restriction class described above holds one or more user lists. One user list is browsed. Therefore, the user restriction class and the user list class have a relationship between the holder and the holding target and a relationship between the viewer and the browsing target.

  The above-mentioned authenticated person class has one relationship with the account class that becomes his / her personal information when logging in. Therefore, the person to be authenticated class and the account class have a relationship between the user and personal information.

  Until now, authentication management has been performed by creating an authentication management mechanism for each application such as copy / fax / scanner.

However, the basic requirements for the task of managing authentication do not vary greatly from application to application. An example of basic requirements is shown below for reference.
(Requirement 1) Authenticate a user and prove it.
(Requirement 2) What can be done for each authenticated user is different.
(Requirement 3) Characteristic information exists for each authenticated user.

  If an authentication management mechanism is created for each application, if the requirements further increase from the above example, the workload of the designer will be proportional to it.

  In addition, if a mechanism for managing authenticated users is configured on the axis of application differences, the configuration is greatly affected whenever the number of applications increases.

  However, by separating authentication management between data and processing, even if a new application appears, additional design may be performed based on the interpretation that data and processing are added.

  In addition, the user profile is a technique that is becoming common in current personal computer devices and mobile phones, and can be applied to the image forming apparatus FX.

  The attributes and operations of each class are described below.

[User list class]
Attribute (data)
-Status-possesses a status in which the authentication management unit SS1 is referring / editing registered user information. This value changes depending on the processing state of the user list class.
Registration location—holds the name of the storage medium where the user information is registered.
Priority-A priority indicating which roster to use when the user logs in.
Maximum number of registrants-A value indicating how many people can be registered in the storage medium.
Operation / referencing-Processing for receiving a reference request for registered user information, which is performed by the user and the administrator via the operation system GRP1, and referring to attributes of an account class and a user profile class, which will be described later.
Edit—Process for accepting an edit request for registered user information made by the user and the administrator via the operation system GRP1 and editing attributes of an account class and a user profile class, which will be described later.
Add--Process that accepts a request for adding registered user information made by the user and the administrator via the operation system GRP1 and adds an account class and a user profile class to be described later.
Delete-A process of receiving a request to delete registered user information made by the user and the administrator via the operation system GRP1 and deleting an account class and a user profile class to be described later.

[Account class]
Attribute (data)
Status-The possession of the status in which the authentication management unit SS1 is referring / changing the registered user account. This value varies depending on the processing status of the account class.
Account name—a name that identifies the user. This is set by the administrator by default. @Role-User's authority. This value is set by the administrator by default. According to this value, it is determined that the user can do with the system.
Manipulate / reference—Process for accepting a reference request for an attribute and an attribute of a user profile class (to be described later) from the above-described user list class and authenticated user class, and referring to user information.
Change—Processing to change user information by accepting a change request for an attribute and an attribute of a user profile class, which will be described later, from the above-described user list class.

[User profile class]
Attribute (data)
State—The state in which the authentication management unit SS1 is referring / changing the attributes of the user profile class. This value varies depending on the processing state of the user profile class.
User name-Holds the registered official name of the user.
• Email address-holds the user's email address.
Desktop layout-Desktop layout when the user logs in, copy density, selected paper, etc. are set.
Favorites-Holds URLs registered by the user.
Redial-Holds user redial information.
Address book-holds the user's personal address book.
Operation / reference-Accepts a request to register registered user information from the above account class, and processes / changes the user profile class attribute reference-Updates the registered user information from the above account class Process to accept change request and change attributes of user profile class

[User restriction class]
Attribute (data)
-State-possesses a state in which the authentication management unit SS1 is performing login / logout processing. This value varies depending on the processing state of the user restriction class.
• Maximum number of logins-Holds the maximum number of people who can log in.
Login method-Holds the method by which the user logs in.
Operation / Login-A process of requesting authentication to a class to be authenticated, which will be described later, based on a login name set by the user via the operation system GRP1 and authentication information such as a password and biometric information.
Logout—Processing for requesting authentication cancellation to a later-described authenticated user class based on a login name set by the user via the operation system GRP1.
Check--Receives the functions and items requested by the user set by the user via the operation system GRP1, and requests the later-described authenticated user class to check whether the functions and usage items requested by the user can be executed. processing.
Change—Processing for changing the login method and the maximum number of logins, which are attributes of the user restriction class, based on the login method set by the user via the operation system GRP1.

[Authenticated person class]
Attribute (data)
Login name—The login name input by the user via the operation system GRP1 when the authentication management unit SS1 receives a login request.
-Status-Authentication status of the logged-in user.
Operation / authentication—Processing to accept a verification request for authentication information such as a login name, password, and biometric information from the above-described user restriction class, and request confirmation of the user's identity from an identity class described later.
• Revocation of authentication—Processing of accepting a login name from the above-mentioned user restriction class and requesting the identity class described later to cancel the user's identification.
Check--A process of accepting a login name and a use function / item from the above-mentioned user restriction class, referring to the above-described account class, and determining whether the user can use the function from a role that is an attribute of the account class.

[ID class]
Attribute (data)
State-Indicates whether the ID class is valid or invalid.
Registration number-a number given when issued from the above-mentioned authenticated person class.
-Type-represents the type of identification card. Password and biometric information.
Expiration date-represents the time limit for the user to use the system.
Operation / submitting-Processing for requesting authentication to the service layer SRV1.
Invalidation-Processing to accept the content notified by the service layer SRV1 according to the status of the authentication device and change the status of the attribute class attribute.

  Next, the processing of this embodiment will be described.

  FIG. 16 is a UML sequence diagram showing collaboration between instances at the time of a login request.

  FIG. 17 is a UML sequence diagram showing collaboration between instances when the availability is confirmed.

  First, the outline of the processing of the operation system GRP1 in the login request sequence will be described.

  The user inputs a login name and password to the image forming apparatus FX via the soft keyboard (FIG. 12) displayed on the operation unit 31, and a login name / password input request displayed on the operation unit 30. A login request is input by pressing the login key 89 on the screen (FIG. 11).

  Thereby, the operation system GRP1 sends a message including the login request, the login name, and the password to the user restriction instance B1 '.

  The user restricted instance B1 'receives the message from the operation system GRP1 and performs a "login" process for making a login request.

  The user restriction instance B1 'sends a message including the login name to the user name list instance A1'.

  The user list instance A1 'receives the message from the user restriction instance B1' and performs "reference" processing to refer to the account instance A2_1 '.

  The user name list instance A1 'sends a message including the login name to the account instance A2_1'.

  The account instance A2_1 'performs a "reference" process for receiving a message from the user list instance A1' and returning the result of the account information reference.

  When the user-restricted instance B1 'confirms that the login name exists, the user-restricted instance B2_1' is generated, and a message including the login name and the password is sent to the authenticated user instance B2_1 '.

  The person-to-be-authenticated instance B2_1 'receives the message from the user-restricted instance B1', generates an identification instance B2_2 ', and performs authentication processing for requesting authentication.

  The to-be-authenticated instance B2_1 'sends a message including the login name and password to the identification instance B2_2'.

  The identification instance B2_2 'performs a process of "submitting" to request authentication from the authentication device SRV1 by receiving a message from the authenticated person instance B2_1'.

  If authenticated person instance B2_1 'is authenticated, it changes the attribute state to the authenticated state.

  Next, the availability confirmation sequence will be described.

  The user selects a use function for the image forming apparatus FX via the function buttons 38 to 46 (FIG. 12) on the operation unit 30.

  As a result, the operation system GRP1 sends a message including the use function to the user restriction instance B1 '.

  The user-restricted instance B1 'receives the message from the operation system GRP1 and performs a “check” process for checking availability.

  The user restriction instance B1 'sends a message including the use function to the authenticated user instance B2_1'.

  The person-to-be-authenticated instance B2_1 'receives a message from the user restriction instance B1', and performs a "confirmation" process for confirming whether or not the user can use it.

  The to-be-authenticated person instance B2_1 'sends a message including the use function to the account instance A2_1'.

  The account instance A2_1 'performs a "reference" process for returning the attribute role by receiving a message from the authenticated user instance B2_1' instance.

  The to-be-authenticated person instance B2_1 'determines whether the function can be used from the role received from the account instance A2_1'.

  In this way, in this embodiment, by dividing the management of user information registered in the system and the management of login users, each part can be changed without depending on other states.

  Further, by dividing the part for performing the editing / reference work for the entire user and the part for performing the account editing / reference work for each user, it is possible to separate the processing for the user information and the individual user information for the entire system.

  Further, by separating the login / logout operation for the entire user and the portion for managing the authentication status for each user, the processing for the login user information and the individual login user information for the entire system can be separated.

  In addition, by setting items that can be changed only by the system administrator, such as account information, and items that can be changed by the user, such as profiles, detailed security levels can be set.

  Further, by separating the user login state and the user certification means, it is possible to determine one login state of the user using a plurality of user certification means, and to strictly take security measures.

  Note that the present invention can be applied in the same manner as long as it is an image forming apparatus other than those described in the above-described embodiments and includes a plurality of functions and the functions that can be used by the user are limited to a part of the functions. it can.

The block diagram which showed an example of the implementation environment assumed by this invention. 1 is a schematic configuration diagram illustrating an example of a mechanical structure of an image forming apparatus FX. FIG. 3 is a schematic configuration diagram illustrating an example of an operation panel of the image forming apparatus FX. Schematic which showed an example of the display screen of copy mode. The block diagram which showed an example of the structure of the control apparatus centering on the main controller. The block diagram which showed an example of the internal structure of the image processing unit (IPU) 49. Schematic which showed an example of the display screen of a copy server application. Schematic which showed an example of the display screen of a scanner application. Schematic which showed an example of the display screen of reading condition setting. Schematic diagram showing an example of a list display screen of accumulated documents. Schematic which showed an example of the login name / password input screen. Schematic which showed an example of the soft keyboard screen. Schematic which showed an example of the function execution prohibition screen. FIG. 3 is a block diagram showing an example of a software configuration of the image forming apparatus FX. The UML figure which showed an example of the structure of authentication management. The UML figure which showed an example of the sequence processing flow at the time of login. The UML figure which showed an example of the sequence processing flow at the time of use availability confirmation. Schematic for demonstrating the concept of a class. Schematic for demonstrating the relationship between the conventional application layer and a service layer. Schematic for demonstrating the relationship between an application layer and a service layer from now on.

Explanation of symbols

FX image forming apparatus 20 main controller 30 operation unit

Claims (5)

An image forming apparatus in which functions that can be used by a user are limited to a part of the functions and functions that can be used by each user are registered.
User information management means for managing user information to use functions, registering and editing the user information,
An image forming apparatus comprising: a user login unit that proves a logged-in user and manages the state of the logged-in user.   The image forming apparatus according to claim 1, wherein the user information management unit includes a user registration unit that performs user registration / editing and a user information unit that represents user information.   The image forming apparatus according to claim 1, wherein the user login unit includes a user restriction unit that restricts use of a user's function and a login user information unit that holds a state of the logged-in user.   3. The image forming apparatus according to claim 2, wherein the user information means includes user identification means for identifying a user and user characteristic means for representing a user characteristic.   4. The image forming apparatus according to claim 3, wherein the login user information unit includes a user state unit that holds a user authentication state and a user certification unit for performing user certification.