JP2007280114A - Information processor and processing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To perform installation control of software in accordance with the authority of a user receiving a service. <P>SOLUTION: A network compatible device receives retrieval information including identification information of the user using a client device (step S401) and confirms whether the user has authority to receive a service (step S402, S403, S405 and S407). When the network compatible device determines that the user has the authority to receive the service, the network compatible device transmits attribute information for installation of software corresponding to the service by the client device in response to a request from the client device (step S408). <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an information processing apparatus and an information processing method that can be applied to, for example, a print service that prints printed matter via a communication line.

  2. Description of the Related Art Conventionally, service providing apparatuses and service providing systems that provide services in response to service requests from client apparatuses on a network are known. For example, with the rapid spread of communication over the Internet, various types of devices other than conventional personal computers have been developed as network compatible devices. For example, it supports networking from user interactive devices such as PDA (Personal Digital Assistance) and mobile phones, image processing devices such as scanners, printers, copiers and digital cameras, and home appliances such as TVs, air conditioners and refrigerators Is progressing rapidly.

  Along with this, in order to improve the convenience and simplicity in using these network-compatible devices, search software for network-compatible devices that provide services, search means, and application software for controlling network-compatible devices. Various protocols and architectures have been proposed that provide automatic setup means such as software, utility software, and an operating system (see, for example, Patent Documents 1 to 3).

  In addition, specifications are being worked on by multiple companies and standardization organizations to extend the plug-and-play that has been applied to local I / O connection devices to network-compatible devices.

    For example, UPnP (registered trademark, see Non-Patent Document 1) and WSD: Web Services for Devices (WS-Discovery / WS-MetadataExchange (see Non-Patent Documents 2 and 3)), which is being developed mainly by Microsoft Corporation. Examples include BMLinks (see Non-Patent Document 4) promoted by the Japan Business Machine and Information System Industries Association (JBMIA), and Renedzvous supported by OS X developed by Apple.

JP 2004-199113 A Japanese Patent Laid-Open No. 03-29019 JP 2003-150341 A UPnP Device Architecture v1.0 URL: http://www.upnp.org/download/UPnPDA10_20000613.htm Web Service Dynamic Discovery: WS-Discovery URL: http://specs.xmlsoap.org/ws/2005/04/discovery/ws-discovery.pdf WS-MetadataExchange URL: http://msdn.microsoft.com/library/en-us/dnglobspec/html/ws-metadataexchange.pdf "BMLinkS", Business Machine and Information System Industries Association, Internet URL: http://www.jbmia.or.jp/bmlinks/index.htm

  However, the above-described conventional technique has a problem that all the printer drivers that match the search conditions are installed while convenience is improved by the spread of network plug and play. In that case, because the printer that matches the search condition is a printer whose print upper limit value management, billing management, or usage time is restricted, the driver or application of the searched printer cannot be used without authorization at the time of printing. It will be installed automatically.

  This not only unnecessarily consumes network traffic, hardware resources, especially memory resources, but also reveals the existence of network-enabled devices by responding to searches from unreliable clients for security reasons. There was a problem that could lead to serious damage such as destruction and leakage.

  Accordingly, an object of the present invention is to perform software installation control in accordance with the authority of a user who receives a service.

An information processing apparatus according to the present invention is an information processing apparatus connected to an external apparatus via a communication line, and includes search information for searching for the information processing apparatus including identification information of a user who uses the external apparatus. Receiving means for receiving, authority checking means for checking whether or not the user has an authority to receive a service provided by the information processing apparatus based on the identification information of the user, and the user by the authority checking means Is determined to have the authority to receive the service, the external device sends information related to the information processing device for installing software corresponding to the service in response to a request from the external device. And transmitting means for transmitting to.
An information processing method of the present invention is an information processing method by an information processing apparatus connected to an external apparatus via a communication line, and searches for the information processing apparatus including identification information of a user who uses the external apparatus. A receiving step for receiving the search information, an authority confirmation step for confirming whether or not the user has an authority to receive a service provided by the information processing device based on the identification information of the user, and the authority confirmation If the step determines that the user has authority to receive the service, the information related to the information processing apparatus for the external apparatus to install software corresponding to the service in response to a request from the external apparatus Transmitting to the external device.
A program according to the present invention causes a computer to execute the information processing method.
The computer-readable recording medium of the present invention is characterized in that the program is recorded.

  According to the present invention, it is possible to perform software installation control in accordance with the authority of a user who receives a service.

  DESCRIPTION OF EXEMPLARY EMBODIMENTS Hereinafter, preferred embodiments to which the invention is applied will be described in detail with reference to the accompanying drawings. However, the protocol, version, address, other numerical values and the like described in the following description are not intended to limit the scope of the present invention only to those unless otherwise specified.

  First, a first embodiment of the present invention will be described. FIG. 1 is a block diagram showing a configuration of a network plug and play system according to the first embodiment of the present invention.

  In the figure, reference numeral 100 denotes a client device that supports Ethernet (registered trademark) as a communication function, includes a TCP / UDP / IP protocol stack 1, and includes an HTTP 2 on the protocol stack 1. The TCP / UDP / IP protocol stack 1 performs HTTP request analysis and response processing.

  A Simple Object Access Protocol (SOAP) processor 3 is provided in the upper layer of the TCP / UDP / IP protocol stack 1 and HTTP 2. The installation assist utility 4 and the WSD module 5 each realize bidirectional communication of data described in eXtensible Markup Language (XML) via the SOAP processor 3.

  The installation assist utility 4 controls driver installation, and stores, reads, and deletes attribute information necessary for driver installation in the storage device 8 via the memory controller 6. The installation assist utility 4 also notifies the WSD module 5 of identification information used in response processing to the Hello message (or Probe Match message), and transmission processing of a Probe message for searching for a network-compatible device. Issue a request.

  The WSD module 5 performs a response process to a Hello message (or Probe Match message) notified from a network-compatible device and a probe message issuance process for searching a network-compatible device via the SOAP processor 3. These processes are performed based on, for example, the WS-Discovery specification that is promoted by Microsoft and others.

  In addition, the WSD module 5 acquires attribute information of the network compatible device by issuing a GetMetadata message based on the WS-MetadataExchange specification.

  When the network compatible device 200 is found by these message processes, the installation assist utility 4 notifies the plug-and-play controller 7 of the attribute information of the found network compatible device. The plug-and-play controller 7 has a function of reading a corresponding driver from the recording device 8 via the memory controller 6 based on the attribute information and executing installation on the client device 100.

  On the other hand, the network compatible device 200 (in this embodiment, a network compatible printer) is compatible with Ethernet (registered trademark) as a communication function, and includes a TCP / UDP / IP protocol stack 11, and an HTTP 12 on the protocol stack. I have. The TCP / UDP / IP protocol stack 11 performs HTTP request analysis and response processing.

  The upper layer of TCP / UDP / IP protocol stack 11 and HTTP 12 includes Simple Object Access Protocol (SOAP) processor 13, and WSD module 15 and printer controller 16 are described in eXtensible Markup Language (XML) via SOAP processor 13, respectively. Bi-directional communication of recorded data.

  The WSD module 15 notifies the identification information used in the transmission process of the Hello message (or Probe Match message), which is the service provision information at the time of service activation, and the response process to the Probe message for searching the network compatible device. To do.

  Here, the WSD module 15 transmits a Hello message (or Probe Match message) via the SOAP processor 13 and performs a response process for the Probe message issued from the client device 100. These processes are performed by, for example, Microsoft based on the WS-Discovery specification that promotes the formulation of the specification.

  The WSD module 15 returns attribute information held by the network compatible device (in this embodiment, the network compatible printer) in response to the GetMetadata message issued from the client device 100 based on the WS-MetadataExchange specification.

  The user authentication module 20 authenticates the user certificate using the certificate of the root certification period held by the network compatible device 200 using the user certificate attached to the Probe message or the like transmitted by the client device 100. The certificate for the root certification period may be obtained via a network. Here, as actual authentication work, authentication is performed by a challenge-response method or the like.

  The authority confirmation module 21 confirms the authority of whether or not the user who has been authenticated by the user authentication module 20 can perform printing. When the authority confirmation is performed, the authority confirmation module 21 includes a print record server (to be described later), a billing information management server for managing billing information, a print server for the corresponding printer that can be used by the user, a use permission time, and a usable time. Inquiry of authority to a user management database or the like for registering etc.

  Next, the operation of the network plug and play system according to the present embodiment will be described. FIG. 2 is a flowchart showing a process for setting the authority of the user to the server or the like that the authority confirmation module 21 makes an inquiry.

  In step S201, the authority confirmation module 21 uses a print management utility or the like, and sets usage authority for each user in the directory service. As values to be set, there are an upper limit value of the number of printed sheets and an upper limit value of the number of printed pages.

  In step S202, the print record server obtains an upper limit value for each user from the directory service, and sets the upper limit value for the number of printed sheets.

  FIG. 3 is a diagram illustrating an example of a print upper limit value and a result value for each user held by the print result server. As an example of the user 301, USER0003 indicates that the printing number upper limit 302 is 1000 sheets, and that the actual value of printing is 432 sheets.

  FIG. 4 is a flowchart showing a control flow of the probe response limiting operation in the network compatible device 200. The Probe message is described in XML-SOAP, and FIG. 5 shows an example of the message format.

  When the network compatible device 200 receives the Probe message (step S401), the received Probe message is notified to the SOAP processor 13 via the TCP / UDP / IP protocol stack 11. The SOAP processor 13 analyzes the contents of the Probe message and notifies the user authentication module 20 of the result.

  The user authentication module 20 verifies the user certificate by comparing the user certificate attached to the Probe message transmitted by the client device 100 with the certificate of the root certification authority held by the network compatible device 200. This is performed (step S402). A certificate for the root certification period may be obtained via a network. Here, if the attached user certificate is not valid, the probe match of WSDiscovery is not returned (step S409).

  On the other hand, when it is determined that the user certificate is valid, the WSD module 15 determines whether the content of the notified message matches the service function (in this case, the print service) provided by the network compatible device 200. Is determined (step S403). If it is determined that they do not match, the information is ignored (step S409). Therefore, in this case, the Probe Match message is not issued from the network compatible device 200.

  On the other hand, if it is determined that they match, the WSD module 15 acquires access right information indicating a user who has an access right to the client device 100 from the Active Directory (step S404). Then, the WSD module 15 checks whether or not the user who made the determination in step S402 has the access right of the printer by collating the user information indicated in the user certificate with the access right information (step S405). If it is determined that there is no access right, a WSDiscovery Probe Match message is not returned (step S409). Here, the authority of the user may be confirmed by acquiring and referring to the service availability time information of the user.

  If it is determined that there is an access right, then the authority confirmation module 21 acquires the upper limit value and the actual value of the number of prints for each user, which is a dynamic access right, from the print result server (step S406). Values to be acquired include a print number upper limit value, a print number actual value, a print page number upper limit value, a print page number actual value, a charge upper limit value, a charge result value, and the like.

  Subsequently, the authority confirmation module 21 compares the acquired upper limit value of the number of printed sheets and the actual value (step S407). If it is determined that the upper limit has already been reached, the WSD module 15 does not return a WS Discovery Discovery Match message (step S409). On the other hand, if it is determined that the upper limit has not yet been reached, the WSD module 15 requests the SOAP processor 13 to issue a Probe Match message.

  The SOAP processor 13 generates a Probe Match message based on the WS-Discovery specification, and unicasts it to the client device 100 via the TCP / UDP / IP protocol stack 11 (step S408).

  FIG. 6 is a flowchart showing a driver installation operation when the client device 100 receives the Probe Match message.

  The Probe Match message is notified to the SOAP processor 3 via the TCP / UDP / IP protocol stack 1 of the client device 100 (step S601).

  The SOAP processor 3 analyzes the contents of the Probe Match message and notifies the installation assist utility 4 of the information described in the message.

  The installation assist utility 4 notifies the WSD module 5 of the information acquired from the SOAP processor 3 in order to acquire the attribute information of the network compatible device 200 that has transmitted the Probe Match message via the WSD module 5.

  The WSD module 5 requests the SOAP processor 3 to issue a GetMetadata message defined by WS-MetadataExchange to acquire the attribute information of the network compatible device 200 that issued the message, from the Probe Match transmission source address. .

  The SOAP processor 3 generates a GetMetadata message based on the WS-MetadataExchange specification, and unicasts the message to the network compatible device 200 via the TCP / UDP / IP protocol stack 1.

  In the network compatible device 200, the received GetMetadata message is notified to the SOAP processor 13 via the TCP / UDP / IP protocol stack 11.

  The SOAP processor 13 analyzes the content of the GetMetadata message and notifies the WSD module 15 of the result. The WSD module 15 requests the SOAP processor 13 to issue a GetMetadataResopnse message defined by WS-MetadataExchange in order to return the designated attribute information to the client.

  In the client device 100, the installation assist utility 4 receives these GetMetadataResopnse messages, thereby acquiring the model name, option information of the network compatible device 200, and the like (step S602).

  The installation assist utility 4 determines whether there is a port monitor corresponding to the address of the network-compatible device 200 that has been searched (step S603).

  If the port monitor corresponding to the address of the searched network compatible device 200 does not exist according to the determination result, the installation assist utility 4 installs the port monitor of the corresponding network compatible device 200 and sets address information and the like. The port is created (step S604).

  Subsequently, the installation assist utility 4 determines whether there is a printer driver corresponding to the address of the searched device (step S605).

  If the printer driver corresponding to the address of the searched device does not exist according to the determination result, the installation assist utility 4 acquires the driver of the corresponding device (step S606). At this time, if the driver does not exist on the local disk, the driver is obtained by automatic update via a preset server or network.

  After obtaining the driver, the installation assist utility 4 installs the driver. In installing the driver, the setting of the existing port monitor and driver created in step S604 corresponding to the device is performed (step S607).

  Further, the installation assist utility 4 sets the driver configuration information based on the option information acquired in step S602 (step S608), and completes the driver installation.

  From the steps described above, the client device 100 troubles only the driver of the device for which the user has authority to use the device for which the upper limit of the number of prints and the charge management are performed at the time of driver plug-and-play. It becomes possible to install without.

  Next, a second embodiment of the present invention will be described. In the present embodiment, in the network compatible device 200, a user who has not been given the use authority at the time of receiving the probe is notified that the use is possible due to an authority change such as resetting the upper limit value of the number of prints. The driver can be installed. The configuration of this embodiment is the same as that of the first embodiment shown in FIG. The same processing steps as those in the first embodiment are denoted by the same reference numerals, and the description thereof is omitted or simplified.

  FIG. 7 is a flowchart showing a flow of scheduling setting for notifying an available user after resetting the upper limit value of the number of printed sheets in the Probe response limiting operation in the network compatible device 200.

  If it is determined in step S402, step S403, step S405, or step S407 that the authority does not match and the WSDiscovery Probe Match transmission condition is not satisfied, the network compatible device 200 is added to the WSDiscovery Probe Match transmission condition waiting list. Registration is performed (step S701).

  FIG. 8 is a diagram illustrating an example of a list waiting for a probe match transmission condition of WSDiscovery. In the search condition setting item 801, a Probe message that does not match the condition is held. These messages are analyzed by the WSD module 15 and held in the storage device 18. In the printer setting item 802, identification information of the network compatible device 200 is held. The reply address setting item 803 holds the address of the client device 100 that is the reply destination of the Hello message. The user setting item 804 holds the user name that uses the corresponding client device 100. The scheduled reply time setting item 805 holds a scheduled time for replying the Hello message.

  The authority confirmation module 21 of the network compatible device 200 refers to the WSDiscovery Probe Match transmission condition waiting list stored in step S701 and checks whether there is a matching condition when the authority is changed or by polling.

  FIG. 9 is a flowchart showing a notification process to the client when the authority is matched in the authority confirmation module 21 of the network compatible device 200.

  The authority confirmation module 21 of the network compatible device 200 acquires a list waiting for Probe Match transmission conditions (step S901).

  Subsequently, the authority confirmation module 21 confirms the probe match transmission condition waiting condition (step S902). If authorized, the WSD module 15 performs a Hello message transmission process to the WSD module 15 based on the contents of the probe match transmission condition waiting list, and notifies the client of the start of service provision (step S903). ). Here, the WSD module 15 transmits a Hello message when connected to the network via the SOAP processor 13 based on the WS-Discovery specification promoted by Microsoft and the like.

  FIG. 10 is a flowchart showing the flow of installation processing when the client device 100 receives a Hello message (or Probe Match message).

  The installation assist utility 4 of the client device 100 receives a Hello message (or Probe Match message) that is a service start notification packet of the network compatible device 200 (step S1001).

  Thereafter, the processing from step S602 is performed, and the driver installation is executed in the client device 100.

  Even if the probe match message cannot be transmitted because the upper limit of the number of printed sheets has already been reached by the above steps, the client device 100 is not limited to the network compatible device if the actual number of printed sheets is reset by monthly processing or the like. By the service start notification from 200, it becomes possible to immediately install the driver of the device that the user has authority to use without bothering the user.

In the above-described embodiment, the protocol defined by WS-Discovery is adopted as means for searching for a network-compatible device and means for notifying that the network-compatible device has joined the network. However, the present invention is not limited to this, and can be realized by using, for example, SSDP (Simple Service Discovery Protocol) and GENEA (General Event Notification Architecture) defined by UPnP ^™ v1. As a protocol for searching for a network compatible device, any protocol can be used as long as it can be acquired by an address for acquiring attribute information of the network compatible device and a control information transmission destination for controlling the network compatible device. This protocol is also applicable.

  In the above-described embodiment, Ethernet (registered trademark) is used as a communication medium. However, if the communication medium is capable of notifying device discovery and that the device has started function execution, Either local I / O or network is applicable.

  In the above-described embodiment, as an example of plug and play, driver installation corresponding to the discovered network compatible device is adopted, but utilities, applications, etc. necessary for using and controlling the network compatible device are used. The present invention can also be applied to the case where the client device 100 is automatically installed.

  In the above-described embodiment, an example of mounting a printer as a network-compatible device has been described. However, any device such as a scanner or a storage device can be used as long as the device can be used and controlled via a communication medium. It is.

  In the above-described embodiments, the client device 100 holds the driver for controlling the network compatible device in the memory. However, the present invention is not limited to the driver and can be applied to applications and utility software. is there. The software can also be applied to a case where the software is held on a network compatible device, or a case where the software is held on a third server.

  In addition, each processing function in the client device 100 and the network-compatible device 200 in the above-described embodiment is realized by reading a program for realizing each processing function from the memory and executing it by a CPU (Central Processing Unit). It is something to be made. However, the present invention is not limited to this, and all or some of the functions of the processing functions may be realized by dedicated hardware. In addition, the above-mentioned memory is a non-volatile memory such as a magneto-optical disk device or a flash memory, a recording medium that can only be read such as a CD-ROM, a volatile memory other than a RAM, or a computer read by a combination thereof, The recording medium may be a writable recording medium.

  In addition, a program for realizing each function in the client device 100 and the network compatible device 200 is recorded on a computer-readable recording medium. Then, each processing may be performed by causing the computer system to read and execute the program recorded on the recording medium.

  Here, the “computer system” includes an OS and hardware such as peripheral devices. Specifically, the program read from the storage medium is written into a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer. Thereafter, the CPU of the function expansion board or function expansion unit performs part or all of the actual processing based on the instructions of the program, and the functions of the above-described embodiments are realized by the processing.

  The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system. Further, the “computer-readable recording medium” includes a medium that holds a program for a certain period of time. For example, a volatile memory (RAM) in a computer system serving as a server or client when a program is transmitted via a network such as the Internet or a communication line such as a telephone line.

  The program may be transmitted from a computer system storing the program in a storage device or the like to another computer system via a transmission medium or by a transmission wave in the transmission medium. Here, the “transmission medium” for transmitting the program refers to a medium having a function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line.

  The program may be for realizing a part of the functions described above. Furthermore, what can implement | achieve the function mentioned above in combination with the program already recorded on the computer system, and what is called a difference file (difference program) may be sufficient.

  A program product such as a computer-readable recording medium in which the above program is recorded can also be applied as an embodiment of the present invention. The above program, recording medium, transmission medium, and program product are included in the scope of the present invention.

  The embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and includes designs and the like that do not depart from the gist of the present invention.

It is a block diagram which shows the structure of the network plug and play system which concerns on embodiment of this invention. It is a flowchart which shows the process which sets a user's authority to the server etc. which an authority confirmation module inquires. It is a figure which shows the example of the printing upper limit for every user, and a performance value which a printing performance server hold | maintains. It is a flowchart which shows the flow of control of Probe response restriction | limiting operation | movement with a network corresponding | compatible device. It is a figure which shows the example of the message format of a Probe message. 6 is a flowchart illustrating a driver installation operation when a client device receives a Probe Match message. 10 is a flowchart showing a flow of scheduling setting for notifying an available user after resetting an upper limit value in a Probe response limiting operation in a network-compatible device. It is a figure which shows the example of a list waiting for Probe Match transmission conditions of WSDiscovery. It is a flowchart which shows the notification process to the client at the time of authority matching in the authority confirmation module of a network corresponding | compatible device. It is a flowchart which shows the flow of the installation process at the time of a Hello message reception in a client device.

Explanation of symbols

100: Client device 200: Network-compatible device 1, 11: TCP / UDP / IP protocol stack 2, 12: HTTP
3, 13: SOAP processor 4: Installation assist utility 5, 15: WSD module 6, 17: Memory controller 7: Plug and play controller 8, 18: Storage device 16: Printer controller 20: User authentication module 21: Authority confirmation module

Claims (12)

An information processing apparatus connected to an external device via a communication line,
Receiving means for receiving search information for searching for the information processing device including identification information of a user who uses the external device;
Authority confirmation means for confirming whether or not the user has the authority to receive a service provided by the information processing device, based on the identification information of the user;
The information processing apparatus for installing the software corresponding to the service by the external apparatus in response to a request from the external apparatus when the authority determination unit determines that the user has the authority to receive the service An information processing apparatus comprising: transmission means for transmitting information related to the above to the external apparatus.   The authority confirmation means confirms the authority of the user by comparing upper limit value information related to the use of the service registered in association with the user and use result value information of the service by the user. The information processing apparatus according to claim 1.   The upper limit value information relating to use of the service includes upper limit value information on the number of printed sheets, and the actual use value information on the service includes actual number of printed sheet values. The information processing apparatus described.   4. The upper limit value information related to the use of the service includes print page number upper limit value information, and the service use result information includes print page number actual value information. The information processing apparatus according to any one of the above.   The upper limit value information related to the use of the service includes charging upper limit value information related to the use of the service, and the usage record information of the service includes charging actual value information related to the use of the service. The information processing apparatus according to any one of claims 1 to 4, wherein the information processing apparatus is characterized in that:   The said authority confirmation means confirms the said user's authority by collating the information which shows the said user's identification information and a legitimate user, The any one of Claim 1 thru | or 5 characterized by the above-mentioned. Information processing device.   The authority confirmation unit confirms the authority of the user by comparing the identification information of the user with information indicating a user who has an access right to the information processing apparatus. The information processing apparatus according to any one of claims.   The information processing apparatus according to claim 1, wherein the authority confirmation unit confirms the authority of the user by referring to the service availability time information by the user. .   9. The authority confirmation unit according to claim 1, wherein the authority confirmation unit reconfirms the authority of the user to receive the service for the user once determined not to be authorized to receive the service. The information processing apparatus according to item. An information processing method by an information processing device connected to an external device via a communication line,
A receiving step of receiving search information for searching for the information processing device including identification information of a user who uses the external device;
An authority confirmation step for confirming whether the user has an authority to receive a service provided by the information processing apparatus based on the identification information of the user;
The information processing apparatus for the external apparatus to install software corresponding to the service in response to a request from the external apparatus when it is determined in the authority confirmation step that the user has the authority to receive the service The information processing method characterized by including the transmission step which transmits the information which concerns on the said external device.   A program for causing a computer to execute the information processing method according to claim 10.   The computer-readable recording medium which recorded the program of Claim 11.

Images