JP2007164640A - Device, method, program and system for managing use restriction - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To easily manage use restriction of a device at low cost regardless of increase and decrease of users. <P>SOLUTION: A use restriction information determination part 23 extracts, when use restriction information of a user who succeeded in authentication is not registered in a use restriction information storage part 24, all use restriction rules related to the user and a multi-functional machine 10 from a use restriction rule storage part 25. The determination part 23 generates use restriction information based on the extracted use restriction rules, and transmits the generated use restriction information to the multi-functional machine 10 through a communication processing part 21. A controller 14 of the multi-functional machine 10 performs control while restricting entire or partial use of a scanner part 11, a printer part 12, and a FAX part 13 according to the use restriction information stored in a memory 15. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a use restriction management apparatus, method, program, and system, and more particularly, to a use restriction management apparatus, method, program, and system for easily managing use restrictions of an image forming apparatus.

  Currently, in offices, OA devices such as personal computers (hereinafter referred to as PCs), printers, copiers, facsimiles, and multi-function machines that integrate these are commonly used via a network. For example, when a printer is shared by a plurality of personal computers, it can also be used by a printer managed by another department connected to the network.

  However, in such a multifunction device, all users can use all functions such as printers, copiers, scanners, and facsimiles without restriction from the viewpoint of managing security and usage restrictions. It is not preferable. For example, depending on the department to which the user belongs and the job title of the user, it may be necessary to limit the use of the multifunction device itself or to limit available functions.

  Therefore, in order to restrict the use of the user, a technique for implementing user restriction including authentication in the service providing apparatus (for example, multifunction machine) main body or the user restriction server is introduced, and authentication information and restriction information to be verified are introduced. The pair is held in the device or the server (see, for example, Patent Document 1).

Specifically, Patent Document 1 discloses an information device network system in which a plurality of information devices including a server are connected via a network. The server manages user information and machine information, receives user information and machine information transmitted from the information device, and collates the received user information and machine information with the managed user information and machine information. Then, it is determined whether or not to grant permission to use the information device, and the determination result is transmitted to the information device.
JP 2000-20471 A

  In Patent Document 1, since the use of the user within the specified range is assumed, authentication information and restriction information are stored in advance in the service providing apparatus or the server.

  However, in an environment where users are fluid, it is necessary to change the settings of all service providing devices and servers that can be used whenever the number of users increases or decreases, and authentication and usage restrictions cannot be easily managed. There was a problem.

  Furthermore, when performing user restriction for each service providing apparatus, the user restriction server must hold restriction information for all combinations of the service providing apparatus and the user. For this reason, there has been a problem that the operation cost increases.

  The present invention has been proposed to solve the above-described problem, and even when the number of users increases or decreases, a usage restriction management apparatus that can easily manage device usage restrictions without incurring costs, It is an object to provide a method, a program, and a system.

  The use restriction management device according to the present invention includes a rule storage means for storing a rule representing the use restriction of a function of a service providing device for each user attribute, and reception for receiving a user attribute of a user who intends to use the service providing device. Use restriction information generating means for generating use restriction information for the user based on a rule that matches the user attribute received by the receiving means among the rules stored in the rule storage means, and the use Transmitting means for transmitting the use restriction information generated by the restriction information generating means to the service providing apparatus to be used by the user.

  The service providing apparatus refers to a device that provides various processes (services) such as document data processing such as copying, scanning, facsimile transmission / reception, image processing, and printing. Rules are stored in the rule storage means. The rule represents the use restriction of the function of the service providing apparatus for each user attribute. The use restriction indicates whether or not the function of the service providing apparatus can be used or to what extent.

  The receiving means receives a user attribute of a user who intends to use the service providing apparatus. The user attribute is not limited to one attribute related to the user, and may be a plurality of attributes.

  The usage restriction information generating means generates usage restriction information for the user based on a rule that matches the user attribute received by the receiving means among the rules stored in the rule storage means. The usage restriction information generation unit does not need to use all of the rules stored in the rule storage unit that match the user attributes received by the reception unit, and may use only a part of the rules. The transmission means transmits the generated use restriction information to the service providing apparatus that the user intends to use.

  Therefore, the above invention receives the user attribute of the user who intends to use the service providing apparatus, and uses the user attribute based on the rule that matches the received user attribute among the rules stored in the rule storage means. By generating the restriction information and transmitting the generated use restriction information to the service providing apparatus that the user intends to use, the use restriction of the service providing apparatus can be easily managed.

  The use restriction management system according to the present invention includes a service providing apparatus that provides a service by a plurality of functions, a rule storage unit that stores rules representing the use restrictions of the functions of the service providing apparatus for each user attribute, and the service providing apparatus. Receiving means for receiving a user attribute of a user who intends to use the user, and use restriction for the user based on a rule that matches the user attribute received by the receiving means among the rules stored in the rule storage means A usage restriction management device comprising: usage restriction information generating means for generating information; and transmission means for transmitting the usage restriction information generated by the usage restriction information generating means to a service providing apparatus to be used by the user; The service providing apparatus complies with the usage restrictions indicated by the usage restriction information transmitted from the usage restriction management apparatus. And providing a service Te.

  The service providing apparatus provides a service with a plurality of functions. The service refers to processing related to document data, and is not particularly limited to copying, scanning, facsimile transmission / reception, image processing, and the like. The service providing apparatus provides a service according to the usage restriction indicated by the usage restriction information transmitted from the usage restriction management apparatus. That is, when a specific function is restricted by the use restriction information, the service providing apparatus provides a service within the restriction range.

  Therefore, the above invention receives the user attribute of the user who intends to use the service providing apparatus, and uses the user attribute based on the rule that matches the received user attribute among the rules stored in the rule storage means. The restriction information is generated, the generated use restriction information is transmitted to the service providing apparatus to be used by the user, and the service providing apparatus provides the service according to the use restriction indicated by the use restriction information transmitted from the use restriction management apparatus. As a result, usage restrictions on the service providing apparatus can be easily managed.

  The present invention can also be applied to a usage restriction management apparatus and program.

  The use restriction management apparatus, method, program, and system according to the present invention can easily manage use restrictions of service providing apparatuses.

  Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the drawings.

[First Embodiment]
FIG. 1 is a block diagram showing the configuration of a usage restriction management system according to the first embodiment of the present invention. The usage restriction management system includes a multifunction machine 10 having copy, facsimile, scan, and print functions, a usage restriction management apparatus 20 that manages usage restrictions of the multifunction machine 10, an authentication server 30 that performs user authentication, It has. Although FIG. 1 illustrates one multifunction device 10 and one authentication server 30, a plurality of multifunction devices 10 and authentication servers 30 may exist.

  FIG. 2 is a block diagram illustrating a configuration of the multifunction machine 10. The multifunction device 10 records an electrostatic latent image on a photoconductor with a scanner unit 11 that reads an image recorded on a document, develops the electrostatic latent image using monochrome toner or color toner, and records the developed image. A printer unit 12 that transfers and outputs a facsimile message and a facsimile (hereinafter referred to as “FAX”) unit 13 that transmits and receives a facsimile message are provided.

  The multi-function device 10 further includes a controller 14 that controls the whole, a memory 15 that stores image data read by the scanner unit 11, image data received via a network, data of a FAX reception message, and the like, and an icon. A control panel 16 that displays an operation screen and inputs operation information in response to contact with an icon, an input / output port 17 for inputting / outputting data, and a communication control unit 18 for communicating with devices connected to a network. And.

  The scanner unit 11, the printer unit 12, the FAX unit 13, the controller 14, the memory 15, the control panel 16, and the input / output port 17 are connected to each other via a bus. The input / output port 17 is connected to the network via the communication control unit 18.

  In addition to the above, the memory 15 stores use restriction information for restricting the use of the functions of the multifunction machine 10 received from the use restriction management device 20 or input by the administrator. At this time, the controller 14 performs control while restricting the use of all or part of the scanner unit 11, the printer unit 12, and the FAX unit 13 in accordance with the use restriction information stored in the memory 15.

  The user's account name and password are input to the control panel 16 when logging in. These pieces of information are transmitted to the usage restriction management apparatus 20 via the input / output port 17 and the communication control unit 18.

  The usage restriction management device 20 transmits the authentication information (user ID and password) transmitted from the multifunction device 10 to the authentication server 30 and transmits the usage restriction information regarding the user authenticated by the authentication server 30 to the multifunction device 10.

  Specifically, the usage restriction management device 20 issues a request for verification of authentication information to the authentication server 30 and a communication processing unit 21 for transmitting and receiving data between the multifunction machine 10 and the authentication server 30, An authentication processing unit 22 for confirming the legitimacy of a user who intends to use the machine 10, a usage restriction information determination unit 23 for extracting usage restriction rules and generating usage restriction information, and a use for storing usage restriction information A restriction information storage unit 24 and a use restriction rule storage unit 25 that stores use restriction rules are provided.

  The usage restriction information determination unit 23 acquires a user attribute from the multifunction machine 10 and the authentication server 30, and when usage restriction information corresponding to the user attribute is registered in the usage restriction information storage unit 24, the usage restriction information Is sent to the communication processing unit 21 for transmission to the multifunction machine 10. When the use restriction information is not registered in the use restriction information storage unit 24, the use restriction information determination unit 23 extracts the use restriction rule that matches the user attribute from the use restriction rule storage unit 25, and extracts the extracted use restriction rule. Then, the usage restriction information is generated and then supplied to the communication processing unit 21.

  The usage restriction information storage unit 24 stores usage restriction information including an upper limit value among the usage restriction information generated by the usage restriction information determination unit 23.

  The use restriction rule storage unit 25 stores use restriction rules created using the attributes associated with the MFP 10 and the attributes held by the authentication server 30 (including attributes related to the user and the group to which the user belongs) as a parameter. is doing.

  FIG. 3 is a diagram illustrating an example of a plurality of usage restriction rules stored in the usage restriction rule storage unit 25. In FIG. 3, priorities from 1 to 5 are assigned to each usage restriction rule.

  The use restriction rule of priority 1 indicates that the user of the general affairs department is “permitted” for copying, scanning, and faxing, but “forbidden” for printing and accumulation (accumulation of document data). . Further, the use restriction rule of priority 4 indicates that when the user is the manager's position, copying, scanning, faxing, and storage are “permitted”, but printing is “prohibited”. . As described above, the organization or position to which the user belongs can be used as the user attribute.

  The use restriction rule of priority 3 indicates that a user who uses a specific multifunction peripheral A is “permitted” to copy, print, and store, but “prohibited” to scan and fax. As described above, it is possible to provide a use restriction rule for a specific multifunction device 10 instead of for a user.

  The use restriction rule of priority 5 indicates that a user who does not match any of the priorities 1 to 4 is “permitted” to copy, but “prohibited” to print, scan, fax, and store.

  The usage restriction management system configured as described above manages usage restrictions for each user as follows.

  FIG. 4 is a flowchart showing a processing procedure of the usage restriction management apparatus 20. The usage authority management device 20 limits the usage of a user who intends to use the multifunction machine 10 by performing the following processing.

  For example, when the user inputs authentication information (user ID and password) to the control panel 16 of the multifunction device 10, the multifunction device 10 transmits the authentication information to the use restriction management device 20. In this embodiment, this user is assumed to be Mr. A General Affairs Department A (title: manager) who intends to use the multifunction device A.

  In step S1, the authentication processing unit 22 of the usage restriction management device 20 stands by until the communication processing unit 21 receives the authentication information. When detecting that the authentication information has been received, the authentication processing unit 22 proceeds to step S2.

  In step S2, the authentication processing unit 22 transmits authentication information to the authentication server 30 via the communication processing unit 21, requests verification of the authentication information, and proceeds to step S3.

  At this time, when the authentication information is transmitted from the usage authority management device 20, the authentication server 30 determines whether or not the same authentication information as this authentication information is held. A response indicating that there is a user (the user indicated by the authentication information is valid) and the user attribute of the authenticated user are transmitted to the usage authority management apparatus 20. Further, when the authentication server 30 does not hold the same authentication information as the authentication information transmitted from the usage authority management device 20, the authentication server 30 uses a reply that the authentication is failed (the user indicated by the authentication information is not valid). This is transmitted to the authority management device 20.

  In step S3, the authentication processing unit 22 determines whether or not the authentication is successful based on the response from the authentication server 30, and when the authentication is successful, a response indicating that the authentication is successful, transmitted from the authentication server 30. And the user information of the authenticated user are stored and the process proceeds to step S5. If the authentication is not successful, the process proceeds to step S4.

  In step S <b> 4, the authentication processing unit 22 transmits an error signal indicating authentication failure to the multi-function device 10 via the communication processing unit 21. As a result, the multifunction machine 10 does not accept this user input.

  In step S5, the use restriction information determination unit 23 determines whether or not the use restriction information of the user who has been successfully authenticated has been registered in the use restriction information storage unit 24. If registered, the process proceeds to step S6. If not registered, the process proceeds to step S7. In this embodiment, it is assumed that there is no registered use restriction information. The registered use restriction information will be described in detail in the second embodiment.

  In step S <b> 6, the use restriction information determination unit 23 reads the use restriction information of the user who has succeeded in authentication from the use restriction information storage unit 24, and transmits it to the multifunction machine 10 via the communication processing unit 21.

  At this time, the usage restriction information transmitted from the usage restriction management device 20 is input to the memory 15 via the communication control unit 18 of the multifunction machine 10 or the like. The controller 14 controls the use of all or part of the scanner unit 11, printer unit 12, and FAX unit 13 in accordance with the use restriction information stored in the memory 15.

  On the other hand, in step S7, the use restriction information determination unit 23 extracts all use restriction rules related to the user and the multifunction machine 10 from the use restriction rule storage unit 25, and uses the use restriction information based on the extracted use restriction rules. Generate.

[In the case of General Affairs Department A]
For example, for the general affairs department A (position: manager) who wants to use the multifunction device A, the usage restriction information determination unit 23 has priority levels 1, 3, 4 among the five usage restriction rules shown in FIG. Extract usage restriction rules. The method for determining the usage restriction information is not particularly limited, but for example, there is the following method.

(Decision by priority)
The use restriction information determining unit 23 uses the use restriction rule with the highest priority among the use restriction rules with the priority orders 1, 3, and 4, ie, the use restriction rule with the priority order 1 as shown in FIG. .

(Determined by the product of each usage restriction rule)
The use restriction information determination unit 23 generates use restriction information based on the use restriction rules of the priorities 1, 3, and 4 so that the use restriction becomes strictest. Specifically, the use restriction information determination unit 23 calculates a product for use restriction of the same function of each use restriction rule, assuming that “permission” of the use restriction rule is 1 and “prohibition” is 0. As shown in FIG. 6, this calculation result is used as restriction information.

(Decision based on the sum of each usage restriction rule)
The use restriction information determination unit 23 generates use restriction information based on the use restriction rules of the priorities 1, 3, and 4 so that the use restriction is most relaxed. Specifically, the use restriction information determination unit 23 calculates the sum of the use restrictions of the same function of each use restriction rule, assuming that “permission” of the use restriction rule is 1 and “prohibition” is 0. As shown in FIG. 7, this calculation result is used as usage restriction information.

[In the case of Accounting Department B]
For the accounting department B (post: manager) who intends to use the multifunction device A, the usage restriction information determination unit 23 uses the usage restriction rules of priority 3 and 4 from the five usage restriction rules shown in FIG. To extract. The method for determining the usage restriction information is not particularly limited, but for example, there is the following method.

(Decision by priority)
The use restriction information determining unit 23 uses the use restriction rule with the highest priority among the use restriction rules with the priority orders 3 and 4, that is, the use restriction rule with the priority order 3 as shown in FIG.

(Determined by the product of each usage restriction rule)
The use restriction information determination unit 23 generates use restriction information based on the use restriction rules of the priority orders 3 and 4 so that the use restriction becomes strictest. Specifically, the use restriction information determination unit 23 calculates a product for use restriction of the same function of each use restriction rule, assuming that “permission” of the use restriction rule is 1 and “prohibition” is 0. As shown in FIG. 9, this calculation result is used as restriction information.

(Decision based on the sum of each usage restriction rule)
The usage restriction information determination unit 23 generates the usage restriction information based on the usage restriction rules of the priority orders 3 and 4 so that the usage restriction is most relaxed. Specifically, the use restriction information determination unit 23 calculates the sum of the use restrictions of the same function of each use restriction rule, assuming that “permission” of the use restriction rule is 1 and “prohibition” is 0. As shown in FIG. 10, this calculation result is used as usage restriction information.

  The usage restriction information determination unit 23 generates the usage restriction information in this way, and transmits the generated usage restriction information to the multifunction machine 10 via the communication processing unit 21.

  The usage restriction information transmitted from the usage restriction management device 20 is input to the memory 15 via the communication control unit 18 of the multifunction machine 10 or the like. The controller 14 controls the use of all or part of the scanner unit 11, printer unit 12, and FAX unit 13 in accordance with the use restriction information stored in the memory 15. For example, when the use restriction information shown in FIG. 5 is input, the multi-function peripheral 10 can execute copying, scanning, and faxing, and cannot execute printing and storage.

  As described above, the usage authority management apparatus 20 stores in advance a usage restriction rule representing usage restrictions of the multifunction machine 10 for each user attribute or specific multifunction machine. The usage authority management device 20 extracts all usage restriction rules for a user who intends to use the multifunction machine 10, generates usage restriction information based on the extracted usage restriction rules, and transmits the usage restriction information to the multifunction machine 10. .

  As a result, the usage authority management apparatus 20 can generate usage restriction information for a user who intends to use the multifunction machine 10 even when the network configuration is changed or when the number of users increases or decreases. Therefore, the usage authority management device 20 does not need to hold information about all the multifunction devices 10 and all users, so that resource consumption can be suppressed and performance degradation due to the large-scale network can be suppressed. Can do. Moreover, since the usage authority management apparatus 20 does not need to perform maintenance every time the operator changes, the operating cost of the operator can be suppressed.

[Second Embodiment]
Next, a second embodiment of the present invention will be described. In addition, the same code | symbol is attached | subjected to the site | part same as 1st Embodiment, and the detailed description is abbreviate | omitted. The use restriction rule storage unit 25 of the use authority management apparatus 20 stores the following use restriction rules.

  FIG. 11 is a diagram illustrating an example of a plurality of usage restriction rules stored in the usage restriction rule storage unit 25. The usage restriction rule in FIG. 3 defines “permitted” or “prohibited” for each function of the multifunction machine 10. On the other hand, the usage restriction rule in FIG. 11 defines numerical values in addition to “permitted” and “prohibited” for each function of the multifunction machine 10. A numerical value defined in the usage restriction rule represents an upper limit value of the number of times that the function of the multifunction machine 10 can be executed.

  For example, the priority 1 usage restriction rule indicates that the general affairs department user is permitted to copy, print and fax up to “1000” times, scan is allowed without restriction, and accumulation is “prohibited”. Yes. Note that the number of processing, the number of output sheets, the number of printed surfaces, the amount of money calculated from these information, and the like can also be applied.

  Here, for example, when the general affairs department A tries to use the multifunction machine 10 for the first time, the use restriction information determination unit 23 of the use authority management apparatus 20 generates the following use restriction information (table).

  FIG. 12 is a diagram showing the usage restriction information generated by the usage right management device 20. This usage restriction information is determined by the priority order and is the same as the usage restriction rule of priority order 1. However, the copy, print, and fax in FIG. 12 are “0/1000”. The denominator represents the upper limit, and the numerator represents the performance. For example, in the case of copying, the upper limit value of copying is 1000 times, while the current copying performance value is 0 times.

  The usage restriction information determination unit 23 generates usage restriction information in this way, stores the generated usage restriction information in the usage restriction information storage unit 24, and transmits the usage restriction information to the multifunction machine 10 via the communication processing unit 21. At this time, the use restriction information stored in the use restriction information storage unit 24 is the “registered use restriction information” described in step S5 of FIG.

  Therefore, when there is registered usage restriction information in the usage restriction information storage unit 24 (Yes determination in step S5), the usage restriction information determination unit 23 transmits the usage restriction information to the multifunction machine 10 (step S6). .

  As a result, the multifunction machine 10 restricts functions such as printing and scanning according to the use restriction information in FIG. Further, for example, when copying is executed, the multifunction machine 10 notifies the usage authority management apparatus 20 of the number of times of execution. Further, the multifunction machine 10 notifies the usage authority management apparatus 20 of the processing results of services such as printing and scanning.

  At this time, the usage restriction information storage unit 24 of the usage right management apparatus 20 updates the actual value of the usage restriction information by the number of executions of the function executed by the multifunction machine 10. For example, when the multifunction machine 10 performs copying five times, as shown in FIG. 13, the copy of the usage restriction information is “5/1000”, and only the past record value is updated. This use restriction information is transmitted to the multifunction device 10 when Mr. A tries to use the multifunction device 10 again.

  Next, for example, when the accounting department B tries to use the multifunction machine 10 for the first time, the usage restriction information determination unit 23 uses the priority order determination method to create new usage restriction information (table) as shown in FIG. Is generated. Further, for example, when the development unit C tries to use the newly installed multifunction machine 10, the usage restriction information determination unit 23 uses the priority order determination method to generate new usage restriction information as shown in FIG. (Table) is generated. The actual values of the use restriction information are also updated every time a predetermined function is executed in the multifunction machine 10.

  As described above, the usage authority management apparatus 20 according to the second embodiment stores the usage restriction rules including the executable upper limit values for the functions of the multifunction machine 10. Then, the usage authority management device 20 extracts all usage restriction rules for the user who intends to use the multifunction machine 10, generates usage restriction information based on the extracted usage restriction rules, and transmits the usage restriction information to the multifunction machine 10. To do.

  As a result, the usage authority management apparatus 20 has functions that can be executed on the multifunction machine 10 in addition to the effects of the first embodiment, even when the network configuration is changed or when the number of users is increased or decreased. An upper limit can be set.

  Note that the present invention is not limited to the above-described embodiment, and it is needless to say that the present invention can also be applied to a design modified within the scope of the claims.

  In the above-described embodiment, a multifunction peripheral has been described as an example of a service providing apparatus capable of executing a service (processing related to document data), but the present invention is not limited to this. For example, instead of the multifunction machine 10, a computer in which application software for performing various image processes may be installed.

  12 to 15 exemplify the usage restriction information related to Mr. A and the device (multifunction device) A. However, if Mr. A uses another device, the usage restriction information related to Mr. A and the other device. Of course there are also.

It is a block diagram which shows the structure of the use restriction management system which concerns on the 1st Embodiment of this invention. 1 is a block diagram illustrating a configuration of a multifunction machine. It is a figure which shows an example of the some usage restriction rule memorize | stored in the usage restriction rule memory | storage part. It is a flowchart which shows the process sequence of a use restriction management apparatus. It is a figure which shows the use restriction information determined by the priority of the use restriction rule. It is a figure which shows the use restriction information determined by calculating the product of a use restriction rule. It is a figure which shows the use restriction information determined by calculating the sum of use restriction rules. It is a figure which shows the use restriction information determined by the priority of the use restriction rule. It is a figure which shows the use restriction information determined by calculating the product of a use restriction rule. It is a figure which shows the use restriction information determined by calculating the sum of use restriction rules. It is a figure which shows an example of the some usage restriction rule memorize | stored in the usage restriction rule memory | storage part of 2nd Embodiment. It is a figure which shows the use restriction information produced | generated by the use authority management apparatus. It is a figure which shows the use restriction information in which only the actual value of copying was updated. It is a figure which shows the use restriction information produced | generated by the use authority management apparatus. It is a figure which shows the use restriction information produced | generated by the use authority management apparatus.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Multifunction machine 20 Usage authority management apparatus 21 Communication processing part 22 Authentication processing part 23 Usage restriction information determination part 24 Usage restriction information storage part 25 Usage restriction rule storage part 30 Authentication server

Claims (13)

Rule storage means for storing a rule representing the use restriction of the function of the service providing apparatus for each user attribute;
Receiving means for receiving user attributes of a user who intends to use the service providing device;
Usage restriction information generating means for generating usage restriction information for the user based on a rule that matches the user attribute received by the receiving means among the rules stored in the rule storage means;
Transmitting means for transmitting the usage restriction information generated by the usage restriction information generating means to the service providing apparatus that the user intends to use;
Use restriction management device. The usage restriction management device according to claim 1, wherein the rule storage unit further stores a rule representing a usage restriction of a function of the service providing device for each specific service providing device. The rule storage means stores all the rules with priorities,
The usage restriction information generating means generates the usage restriction information based on a rule having the highest priority among the rules that match the user attributes received by the receiving means. Limit management device. The usage restriction information generating means generates usage restriction information so that the use of the user is most restricted or the most usable by the user based on all the rules that match the user attributes received by the receiving means. The use restriction management apparatus according to claim 1 or 2. The rule storage means stores a rule further including an upper limit value of the function of the service providing device,
The usage restriction management apparatus according to claim 1, wherein the usage restriction information generating unit generates usage restriction information further including an upper limit value of a function of the service providing apparatus. Receiving a user attribute of a user who intends to use the service providing device;
Use restriction information for the user based on a rule that matches the user attribute received in the receiving step among the rules that represent the use restriction of the function of the service providing device stored in the rule storage unit for each user attribute. Use restriction information generating step for generating
A transmission step of transmitting the use restriction information generated by the use restriction information generation step to a service providing apparatus to be used by the user;
A usage restriction management method. On the computer,
Receiving user attributes of a user who intends to use the service providing device;
Based on the rule that matches the received user attribute among the rules that represent the use restriction of the function of the service providing device stored in the rule storage unit for each user attribute, the use restriction information for the user is generated. ,
A use restriction management program for causing the service providing apparatus to be used by the user to transmit the generated use restriction information. A service providing apparatus that provides a service by a plurality of functions;
Stored in the rule storage means, a rule storage means for storing a rule representing the use restriction of the function of the service providing apparatus for each user attribute, a receiving means for receiving a user attribute of a user who intends to use the service providing apparatus, and the rule storage means Among the rules, the usage restriction information generating means for generating usage restriction information for the user based on the rule that matches the user attribute received by the receiving means, and the usage restriction generated by the usage restriction information generating means. A transmission means for transmitting information to a service providing apparatus that the user intends to use, and a use restriction management apparatus comprising:
The usage restriction management system, wherein the service providing device provides a service in accordance with usage restrictions indicated by usage restriction information transmitted from the usage restriction management device. An authentication device for authenticating a user who intends to use the service providing device;
The usage restriction management system according to claim 8, wherein the transmission unit of the usage restriction management apparatus transmits the usage restriction information to a service providing apparatus that a user authenticated by the authentication apparatus intends to use. 10. The use restriction management system according to claim 8, wherein the rule storage unit further stores a rule expressing the use restriction of the function of the service providing apparatus for each specific service providing apparatus. The rule storage means stores all the rules with priorities,
The usage restriction information generating means generates the usage restriction information based on a rule having the highest priority among the rules that match the user attributes received by the receiving means. The use restriction management system described in the section. The usage restriction information generating means generates usage restriction information so that the use of the user is most restricted or the most usable by the user based on all the rules that match the user attributes received by the receiving means. The use restriction management system according to any one of claims 8 to 10. The rule storage means stores a rule further including an upper limit value of the function of the service providing device,
The use restriction management system according to any one of claims 8 to 10, wherein the use restriction information generating unit generates use restriction information further including an upper limit value of a function of the service providing apparatus.

Images