JP2008066943A - Authentication system, image forming system, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an authentication system which raises the degree of freedom of a medium to be used for authentication processing and becomes easier to use. <P>SOLUTION: An image forming system 1 reads image information from a subject (an authentication medium 12) that a user has arbitrarily selected, extracts feature information (valueless information) which does not indicate the content of an image from the read image information, and registers the extracted feature information to a database in association with a data file. When the user requests printing of the data file, the image forming system 1 reads the image information from the authentication medium 12 provided by the user, extracts the feature information from the read image information, compares the extracted feature information with the feature information registered to the database, and performs authentication processing. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an authentication system, an image forming system, and a program thereof.

For example, Patent Document 1 discloses a system that restricts image formation of a digitally signed document by performing authentication by comparing authentication data registered in advance with data input from a device connected to the network. It is disclosed.
Patent Document 2 discloses a system in which authentication is performed by using image data and incidental data registered in advance and accessing a device connected to the network with a specific authentication card.
JP 2002-368915 A JP 2004-234340 A

  The present invention has been made from the above-described background, and an object thereof is to provide an easy-to-use authentication system.

[Authentication system]
To achieve the above object, an authentication system according to the present invention includes a first image reading unit that reads image information as first authentication data, and an image obtained by reading a data file by the first image reading unit. At least one of the image information read by the first image reading means, a file recording means for recording in association with at least a part of the information, a second image reading means for reading the image information as the second authentication data And at least a part of the image information read by the second image reading unit to determine whether or not the authentication is successful, and the file recording unit according to a determination result by the determination unit Output management means for permitting or prohibiting the output of the data file recorded in the file.

  Preferably, in the same registration process, the file recording unit further includes a registration unit for registering the data file and at least a part of the image information read by the first image reading unit in the file recording unit. The means records at least part of the data file and image information registered by the registration means in association with each other.

  Preferably, the image information read by the first image reading unit and the image information read by the second image reading unit are extracted from the image information read by the first image reading unit. The second extraction means for extracting the same type of feature information as the first extraction means, the determination means includes the feature information extracted by the first extraction means, the second extraction means, The feature information extracted by the extraction means is compared to determine success or failure of authentication.

  Preferably, the first image reading unit reads image information from a subject, and the first extraction unit is information indicating the size, image density, and image density bias of the subject, At least one of the shapes is extracted as the feature information.

  Preferably, the first extraction unit extracts a plurality of types of feature information from the image information, and the second extraction unit extracts the same plurality of types of feature information as the first extraction unit. The determination unit determines whether or not the authentication has succeeded by comparing the plurality of types of feature information extracted by the first extraction unit with the plurality of types of feature information extracted by the second extraction unit, respectively. To do.

  Preferably, when the data file recorded in the file recording means is output, the deleting means for deleting the data file and the image information associated with the data file from the file recording means It has further.

[Image forming system]
The image forming system according to the present invention includes a first image reading unit that reads image information as first authentication data, and a data file that is at least part of the image information read by the first image reading unit. File recording means for recording in association with the second authentication data, second image reading means for reading image information as second authentication data, at least part of the image information read by the first image reading means, The image information read by the second image reading means is compared with at least part of the image information, and a determination means for determining success or failure of authentication is recorded in the file recording means according to a determination result by the determination means. And an image forming apparatus that performs an image forming process based on the data file.

[program]
The program according to the present invention includes a step of acquiring image information as first authentication data and a data file registered in a database in association with at least a part of the image information acquired as the first authentication data. A step of acquiring image information as second authentication data, at least part of image information registered in a database as the first authentication data, and image information acquired as the second authentication data And a step of determining whether or not the authentication is successful by comparing with at least a part of the data and a step of permitting or prohibiting the output of the data file registered in the database according to the determination result of the authentication success or failure .

The invention according to claim 1 can increase the degree of freedom of the medium used for the authentication process.
The invention according to claim 2 enables the temporary use of the authentication service by registering the authentication data for each data file requiring authentication.
The invention according to claim 3 prevents information leakage.
The invention according to claim 4 can perform the authentication process on various media while preventing information leakage.
The invention according to claim 5 can further improve the accuracy of the authentication process.
The invention according to claim 6 can prevent information leakage while enabling temporary use of the authentication service.
The invention according to claim 7 realizes the authentication process in the print service with a medium having a higher degree of freedom.
The invention according to claim 8 can increase the degree of freedom of the medium used for the authentication process.

[System configuration]
First, the overall configuration of the image forming system 1 will be described.
FIG. 1 is a diagram illustrating the configuration of the image forming system 1.
As illustrated in FIG. 1, the image forming system 1 includes a computer terminal 14, a multifunction device 20, and an authentication server 30.
The computer terminal 14 is a computer used by a user who receives a service, and is, for example, a mobile computer. The computer terminal 14 of this example transmits a data file to be printed to the multi-function device 20 in accordance with a user operation.

The multifunction machine 20 includes an image forming unit that reads an image from a medium and an image forming unit that forms an image on a sheet or the like. When receiving the data file from the computer terminal 14, the MFP 20 of this example reads an image from the authentication medium 12 provided by the user, and reads the received data file from a part of the read image information (first authentication). Data) and registering it in the authentication server 30. Note that the user can use any subject as the authentication medium 12.
In addition, when a data file print request is made by the user, the MFP 20 of this example reads an image from the authentication medium 12 provided by the user, and a part of the read image information (second authentication data). Is sent to the authentication server 30 to request authentication.

  The authentication server 30 is a server device that performs authentication processing. The authentication server 30 of this example registers the data file received from the multifunction device 20 and the first authentication data in the database. Further, when the authentication server 30 of the present example receives the second authentication data from the multi-function device 20, the authentication server 30 compares the received second authentication data with the first authentication data registered in the database and performs an authentication process. If the authentication is successful, the data file registered in the database is transmitted to the multi-function device 20 to print the data file.

  In this example, the multifunction device 20 and the authentication server 30 are connected to the LAN in advance, and the computer terminal 14 is brought in by the user and appropriately connected to this LAN. In this example, the computer terminal 14, the multi-function device 20, and the authentication server 30 are connected via a LAN. However, the present invention is not limited to this, and may be connected via another communication line such as the Internet. . In this example, the multifunction device 20 is used. However, the function of the multifunction device 20 may be realized by a combination of a printer device and a scanner device.

[File management program]
FIG. 2 is a diagram illustrating a functional configuration of the file management program 5 executed in the image forming system 1 (FIG. 1).
As illustrated in FIG. 2, the file management program 5 includes a file reception unit 500, a first image acquisition unit 510, a first extraction unit 520, a registration unit 530, a file database (file DB) 540, and a second image acquisition unit 550. , A second extraction unit 560, an authentication determination unit 570, an output management unit 580, and a deletion unit 590.
In this example, the multifunction device 20 includes a file reception unit 500, a first image acquisition unit 510, a first extraction unit 520, a registration unit 530, a second image acquisition unit 550, a second extraction unit 560, and an output management unit 580. The registration unit 530, the file DB 540, the authentication determination unit 570, and the deletion unit 590 are provided in the authentication server 30, but the distribution of these functional configurations is not limited to this.
Each functional configuration of the file management program 5 is recorded on a recording medium such as a CD-ROM, for example, and is installed in the multi-function device 20 and the authentication server 30 via this recording medium.
Although the file DB 520 has been described as a part of the program, it is actually a functional module realized by a storage area of the authentication server 30 and software for managing the storage area.

In the file management program 5, when the file reception unit 500 receives a data file registration request from the user's computer terminal 14, the file reception unit 500 outputs the data file for which the registration request is made to the registration unit 530.
When receiving the data file registration request from the computer terminal 14, the file receiving unit 500 of this example causes the computer terminal 14 to display a message instructing to read the authentication medium 12. In addition, when receiving the data file registration request, the file receiving unit 500 of the present example generates a job number for identifying the processing corresponding to the request, and the generated job number is sent to the first image acquisition unit 510. The data file received from the computer terminal 14 is output to the registration unit 530 in association with the job number.

The first image acquisition unit 510 controls the image reading unit of the multifunction machine 20, reads image information from the authentication medium 12 (arbitrary subject) provided by the user, and reads the read image information to the first extraction unit. Output to 520.
The first image acquisition unit 510 of this example controls the image reading unit of the multifunction machine 20 in accordance with the user's operation, reads the image information from the authentication medium 12 provided by the user, and reads the read image information. Is output to the first extraction unit 520 in association with the job number notified from the file reception unit 500.

The first extraction unit 520 extracts feature information that does not indicate the content of the image displayed on the subject from the image information input from the first image acquisition unit 510. For example, the first extraction unit 520 obtains information indicating the size of the subject (authentication medium 12), information indicating the shape of the subject, and the image density included in the image from the image information input from the first image acquisition unit 510. At least one piece of information is extracted as feature information from the information to be shown and the information to show the image bias in the image.
The first extraction unit 520 of the present example, based on the image information input from the first image acquisition unit 510, size information indicating the size of the subject, shape information indicating the shape of the subject, and an image indicating the image density included in the image. The density information and the image bias information indicating the image bias in the image are extracted as feature information, and the extracted four feature information are output to the registration unit 530 in association with the job number.

The registration unit 530 registers the data file input from the file reception unit 500 in the file DB 540 in association with the feature information input from the first extraction unit 520.
The registration unit 530 of this example registers the data file input from the input reception unit 500 in a file management table 544 (described later) in the file unit DB 540 in association with the job number, and the 4 input from the first extraction unit 520. One piece of feature information is associated with the job number and registered in a feature information table 542 (described later) of the file DB 540. That is, in this example, the data file and the feature information are associated with each other via the job number.

The file DB 540 records the data file received from the user in association with a part of the image information acquired by the first image acquisition unit 510.
The file DB 540 of this example records the data file received from the user in association with the feature information extracted by the first extraction unit 520. More specifically, the file DB 540 associates four pieces of feature information (size information, shape information, image density information, and image bias information) with the job number as illustrated in FIG. The data file is recorded as the table 542, and the data file received from the user is recorded as the file management table 544 in association with the job number as illustrated in FIG.

The second image acquisition unit 550 controls the image reading unit of the multifunction machine 20 to read image information from the authentication medium 12 provided by the user, and outputs the read image information to the second extraction unit 560.
When the user performs an operation of requesting printing of the registered data file and instructing reading of the authentication medium 12, the second image acquisition unit 550 of the present example performs an image of the multifunction device 20 according to the user's operation. The reading unit is controlled to read image information from the authentication medium 12 provided by the user, and output the read image information to the second extraction unit 560.

The second extraction unit 560 extracts the same type of feature information as the first extraction unit 520 from the image information input from the second image acquisition unit 550.
The second extraction unit 560 of the present example extracts size information, shape information, image density information, and image bias information as feature information from the image information input from the second image acquisition unit 550, and the extracted 4 Two pieces of feature information are output to the authentication determination unit 570.

The authentication determination unit 570 compares the feature information (part of the image information) input from the second extraction unit 560 with the feature information registered in the file DB 540 to determine whether or not the authentication is successful, and the determination result (Authentication success or authentication failure) is output to the output management unit 580.
The authentication determination unit 570 of this example compares the four types of feature information input from the second extraction unit 560 with the four types of feature information registered in the feature information table 542 of the data file DB. Search for job numbers with the same feature information. Here, “feature information matches” includes not only the case where the feature information completely matches, but also the case where the difference in the feature information is within a predetermined range.
When the authentication determination unit 570 in this example finds a job number that matches the feature information, the authentication determination unit 570 reads the data file corresponding to the job number with reference to the file management table 544 and outputs the read data file If it is output to the management unit 580 and a job number with matching feature information cannot be found, the fact that the authentication has failed is output to the output management unit 580.

The output management unit 580 permits or prohibits the output of the data file registered in the file DB 540 according to the determination result by the authentication determination unit 570.
The output management unit 580 of this example controls the image forming unit of the multifunction device 20 when a data file is input from the authentication determination unit 570 (that is, when authentication is successful), and the input data file is stored. When printing is completed and printing of the data file is completed, the job number corresponding to the data file is notified to the deletion unit 590. In addition, when the authentication determination unit 570 inputs that the authentication has failed, the output management unit 580 of the present example displays a message indicating that the authentication has failed on the display panel of the multi-function device 20 and indicates that the authentication has failed. The deletion unit 590 is notified.

When the data file recorded in the file DB 540 is output, the deletion unit 590 outputs the data file output from the file DB 540 and the feature information (image information of the image information) registered in association with the data file. Part) and delete.
When the job number (job number of a data file that has been printed) is notified from the output management unit 580, the deletion unit 590 of this example is associated with the notified job number from the feature information table 542 of the file DB 540. The feature information (size information, shape information, image density information, and image bias information) is deleted, and the data file associated with the notified job number is deleted from the file management table 544 of the file DB 540.

FIG. 4 is a diagram for explaining image bias information registered in the feature information table 542 in FIG.
As illustrated in FIG. 4A, the authentication medium 12 is an object that can be arbitrarily selected by the user, but the arrangement of images displayed on the authentication medium 12 differs depending on the authentication medium 12. In this example, since a photograph image of a person is displayed on the left side of the authentication medium 12 and a character string is displayed on the upper right side of the authentication medium 12, in the image read from the authentication medium 12, the left side and the upper right side are displayed. The image is biased.
In order to evaluate the bias of the image, the first extraction unit 520 and the second extraction unit 560 (hereinafter, collectively referred to as an extraction unit) of the present example, in the read image, as illustrated in FIG. , A plurality of image regions (region 1, region 2,..., Region 6) are set, the image density in each set image region is calculated, and the order of the image regions is determined according to the calculated image density. decide.
The extraction unit of this example determines which of the image bias patterns illustrated in FIG. 4C corresponds to the determined order of the image regions, and uses the identification information of the corresponding pattern as image bias information. . For example, when the image density decreases in the order of region 1, region 2, region 3, region 4, region 5, and region 6, it corresponds to “pattern 1” in FIG. When the image density decreases in the order of region 4, region 2, region 5, region 3, and region 8, this corresponds to “pattern 2” in FIG.

[Overall operation]
Next, the overall operation of the image forming system will be described.
FIG. 5 is a sequence diagram of the print service (S10) in the image forming system 1.
As shown in FIG. 5, in step 100 (S100), the computer terminal 14 accesses the multi-function device 20 and makes a data file registration request in response to a user operation.
In response to the registration request from the computer terminal 14, the multi-function device 20 (file receiving unit 500) generates a job number and sends a message instructing to read the image of the authentication medium 12 in association with the job number. 14 is displayed.
In step 105 (S105), when the computer terminal 14 transmits the data file designated by the user to the multifunction device 20, the multifunction device 20 associates the received data file with the job number.

In step 110 (S110), the user sets an arbitrarily selected subject (authentication medium 12) in the image reading unit of the multifunction device 20 in accordance with the displayed message.
The multi-function device 20 (first image acquisition unit 510) reads image information from the set authentication medium 12, and associates the read image information with a job number.
In step 115 (S115), the multifunction device 20 (first extraction unit 520) generates size information, shape information, image density information, and image bias information from the read image information and associates them with the job number.

In step 120 (S120), the multi-function device 20 associates the data file received from the computer terminal 14 and the generated feature information (size information, shape information, image density information, and image bias information) with the job number. It transmits to the authentication server 30.
In step 125 (S125), the authentication server 30 (registration unit 530) registers the data file and feature information received from the MFP 20 in the file DB 540 in association with the job number.

In step 130 (S130), when the user wants to print the data file registered in the image forming system 1, the user sets the authentication medium 12 in the multi-function device 20, and instructs the image reading of the authentication medium 12. .
In step 135 (S135), the multi-function device 20 (second image acquisition unit 550) reads image information from the set authentication medium 12 in accordance with a user instruction.
In step 140 (S140), the multi-function device 20 (second extraction unit 560) generates size information, shape information, image density information, and image bias information from the read image information.

  In step 145 (S145), the multi-function device 20 transmits the generated feature information (size information, shape information, image density information, and image bias information) to the authentication server 30, and requests authentication processing.

In step 150 (S150), the authentication server 30 (authentication determination unit 570) compares the feature information received from the multifunction machine 20 with the feature information registered in the feature information table 542 of the file DB 540.
In step 155 (S155), the authentication server 30 (authentication determination unit 570) refers to the file management table 544 and stores data corresponding to the job number when there is a job number that matches all feature information. Read the file.
If there is no job number that matches all the feature information, the authentication server 30 displays on the multifunction device 20 that the authentication has failed.

In step 160 (S160), the authentication server 30 transmits the read data file to the multi-function device 20.
In step 165 (S165), when the multifunction device 20 (output management unit 580) receives the data file from the authentication server 30, it prints the received data file on paper.

In step 170 (S170), when the printing of the received data file is completed, the multi-function device 20 transmits a job number corresponding to the data file to the authentication server 30.
In step 175 (S175), upon receiving the job number from the multi-function device 20, the authentication server 30 (deleting unit 590) deletes the feature information and data file corresponding to the received job number from the file DB 540.

Next, the processing after S130 in the sequence diagram will be described in more detail.
FIG. 6 is a flowchart of authentication processing and output processing (S20) by the file management program 5 (FIG. 2).
As shown in FIG. 6, in step 200 (S200), the second image acquisition unit 550 of the multi-function device 20 reads image information from the authentication medium 12 in accordance with a user instruction, and reads the read image information. 2 is output to the extraction unit 560.
In step 210 (S210), the second extraction unit 560 extracts size information, shape information, image density information, and image bias information from the read image information as feature information, and uses the extracted feature information as an authentication server. 30 authentication determination units 570.

  In step 220 (S220), the authentication determination unit 570 receives the four types of feature information (size information, shape information, image density information, and image bias information) received from the second extraction unit 560, and the feature information table 542 of the file DB 540. Are compared with the four types of feature information registered.

  In step 230 (S230), when the feature information that matches the four types of feature information received from the second extraction unit 560 is registered in the feature information table 542, the authentication determination unit 570 proceeds to the process of S240. If the matching feature information is not registered in the feature information table 542, the process proceeds to S270.

In step 240 (S240), if there is a job number that matches all four types of feature information, the authentication determination unit 570 reads the data file corresponding to the job number with reference to the file management table 544. The read data file is transmitted to the output management unit 580 of the multifunction machine 20.
In step 250 (S250), when the output management unit 580 of the multifunction device 20 receives the data file from the authentication determination unit 570, the output management unit 580 prints the received data file on paper.
In step 260 (S260), when the printing of the received data file is completed, the output management unit 580 transmits the job number corresponding to this data file to the deletion unit 590 of the authentication server 30.
When receiving the job number from the output management unit 580, the deletion unit 590 deletes the feature information and the data file corresponding to the received job number from the file DB 540. Further, the second image acquisition unit 550, the second extraction unit 560, and the authentication determination unit 570 delete the image information read from the authentication medium 12 and the feature information extracted from the image information.

In step 270 (S270), the authentication determination unit 570 notifies the output management unit 580 of the multifunction device 20 that the authentication has failed.
The output management unit 580 displays that the authentication has failed on the display panel.
In step 280 (S280), the second image acquisition unit 550, the second extraction unit 560, and the authentication determination unit 570 delete the image information read from the authentication medium 12 and the feature information extracted from the image information. .

[Modification]
Next, a modification of the above embodiment will be described.
In the above embodiment, the multi-function device 20 and the authentication server 30 are provided separately. However, the present invention is not limited to this. For example, the function of the authentication server 30 may be assigned to the multi-function device 20. In this case, since the multi-function device 20 performs data file registration processing, authentication processing, and data file printing processing, the amount of data transmitted and received on the network can be reduced.

1 is a diagram illustrating a configuration of an image forming system 1. FIG. It is a figure which illustrates the function structure of the file management program 5 performed with the image forming system 1 (FIG. 1). It is a figure which illustrates the information registered into file DB540. It is a figure explaining the image bias information registered into the characteristic information table 542 (FIG. 3). 6 is a sequence diagram of a print service (S10) in the image forming system 1. FIG. It is a flowchart of the authentication process and output process (S20) by the file management program 5 (FIG. 2).

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Image forming system 14 ... Computer terminal 20 ... Multifunction machine 30 ... Authentication server 5 ... File management program 500 ... File reception part 510 ... 1st image acquisition part 520. .. First extraction unit 530 ... Registration unit 540 ... File database 550 ... Second image acquisition unit 560 ... Second extraction unit 570 ... Authentication determination unit 580 ... Output management unit 590 ... Deleting part

Claims (8)

First image reading means for reading image information as first authentication data;
File recording means for recording a data file in association with at least part of the image information read by the first image reading means;
Second image reading means for reading image information as second authentication data;
A determining unit that compares at least a part of the image information read by the first image reading unit with at least a part of the image information read by the second image reading unit to determine whether authentication is successful. When,
An authentication system comprising: an output management unit that permits or prohibits output of the data file recorded in the file recording unit according to a determination result by the determination unit. In the same registration process, it further comprises registration means for registering the data file and at least a part of the image information read by the first image reading means in the file recording means,
The authentication system according to claim 1, wherein the file recording unit records at least a part of the data file and the image information registered by the registration unit in association with each other. First extraction means for extracting feature information not showing the content of the image from the image information read by the first image reading means;
A second extracting means for extracting feature information of the same type as the first extracting means from the image information read by the second image reading means;
The authentication according to claim 1, wherein the determination unit determines whether the authentication is successful by comparing the feature information extracted by the first extraction unit with the feature information extracted by the second extraction unit. system. The first image reading means reads image information from a subject,
The authentication according to claim 3, wherein the first extraction unit extracts at least one of information indicating the size, image density, and image density bias of the subject or the shape of the subject as the feature information. system. The first extraction means extracts a plurality of types of feature information from the image information,
The second extracting means extracts the same plurality of types of feature information as the first extracting means,
The determination unit compares the plurality of types of feature information extracted by the first extraction unit with the plurality of types of feature information extracted by the second extraction unit, and determines success or failure of authentication. The authentication system according to claim 3 or 4. And a deletion unit that deletes the data file and the image information associated with the data file from the file recording unit when the data file recorded in the file recording unit is output. Item 4. The authentication system according to Item 1. First image reading means for reading image information as first authentication data;
File recording means for recording a data file in association with at least part of the image information read by the first image reading means;
Second image reading means for reading image information as second authentication data;
A determining unit that compares at least a part of the image information read by the first image reading unit with at least a part of the image information read by the second image reading unit to determine whether authentication is successful. When,
An image forming system comprising: an image forming apparatus that performs an image forming process based on a data file recorded in the file recording unit according to a determination result by the determining unit. Obtaining image information as first authentication data;
Registering a data file in a database in association with at least a portion of the image information acquired as the first authentication data;
Obtaining image information as second authentication data;
Comparing at least a part of the image information registered in the database as the first authentication data with at least a part of the image information acquired as the second authentication data, and determining success or failure of the authentication; ,
A program for causing a computer to execute a step of permitting or prohibiting output of a data file registered in the database according to a result of determination of success or failure of authentication.

Images