JP2008108042A - Authentication apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To maintain successful authentication even if the recognition of an authentication device is interrupted except by theft. <P>SOLUTION: Even after successful authentication of the authentication device 905, an authentication device recognition part 121 periodically checks whether or not the authentication device 905 can be recognized. The successful authentication is maintained as long as the authentication device recognition part 121 can recognize the authentication device 905. If the authentication device recognition part 121 fails to recognize the authentication device 905, on the other hand, a screen for receiving the input of an emergency password 9053 is displayed on a touch panel display of an operation part 119. When the operator inputs the emergency password 9053, the emergency password 9053 received on the screen is checked. If the received emergency password 9053 is authenticated, the successful authentication is maintained to continue job execution. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to an authentication device.

  Conventionally, in a digital multi-function peripheral having a facsimile function, a copy function, a scan function, a print function, etc., authentication is performed by an authentication device such as an IC card in order to confirm whether or not the operator has a use qualification. ing.

  Patent Document 1 is a prior art document related to the present invention, and discloses a technique for performing authentication using a temporary terminal authenticator and a terminal individual key when a failure occurs in an authentication card.

JP 2000-224161 A

  However, in the conventional technique, if the authentication device is mistakenly removed during the execution of the job, it is necessary to re-execute the job after the authentication is performed again, and the paper and toner are wasted. Further, when the authentication device fails, the authentication cannot be performed again, and the job cannot be re-executed.

  The present invention has been made to solve this problem, and it is an object of the present invention to maintain a successful authentication state even when recognition of an authentication device is hindered due to reasons other than theft.

  In order to solve the above problem, the invention of claim 1 is directed to a recognition unit for recognizing an authentication device, an authentication unit for performing authentication on the authentication device recognized by the recognition unit, and after successful authentication on the authentication device. While the recognition means can recognize the authentication device, a first maintenance means for maintaining a successful authentication state, and after the authentication to the authentication device is successful, recognition of the authentication device by the recognition means is obstructed A receiving unit that receives an input of a password, a determining unit that determines whether the password received by the receiving unit is appropriate, and a password that is received by the receiving unit is determined to be appropriate by the determining unit And a second maintaining means for maintaining a state where the authentication is successful.

  The invention according to claim 2 is the authentication apparatus according to claim 1, wherein the determination unit determines that a password used in the past is inappropriate.

  According to a third aspect of the present invention, when the authentication device stores a password, and the determination unit matches the password read from the authentication device recognized by the recognition unit and the password received by the reception unit. The authentication apparatus according to claim 1, wherein the password received by the receiving unit is determined to be appropriate.

  The invention of claim 4 further comprises storage means for storing a password prior to authentication, wherein the determination means receives the password when the password read from the storage means matches the password received by the reception means. The authentication device according to claim 1, wherein the password received by the means is determined to be appropriate.

  The invention of claim 5 further comprises warning means for warning the operator when the determination means determines that the password received by the reception means is inappropriate. It is an authentication device described in the above.

  According to the first aspect of the present invention, even when recognition of the authentication device is hindered due to reasons other than theft, it is possible to maintain a state where the authentication is successful if an appropriate password is input.

  According to the invention of claim 2, it is possible to prevent fraud in which a password is repeatedly used.

  According to the invention of claim 3, it is not necessary to register the password in the authentication device prior to the authentication.

  According to invention of Claim 4, the authentication device which cannot memorize | store a password can also be utilized.

  According to the invention of claim 5, the operator can know that the password is inappropriate.

<1 Digital MFP configuration>
FIG. 1 is a block diagram showing a configuration of a digital multi-function peripheral 1 according to a preferred embodiment of the present invention. The digital multi-function peripheral 1 is also called MFP (Multi Function Peripherals) and has a facsimile function, a copy function, a scan function, a print function, and the like.

  As shown in FIG. 1, a computer 101 including a CPU 103, a ROM 105, and a RAM 107 is incorporated in the digital multifunction peripheral 1. The ROM 105 stores a program 1055, and the computer 101 executes the program 1055 to control the components 109 to 123 of the digital multi-function peripheral 1 to realize the functions of the digital multi-function peripheral 1.

  The digital multi-function peripheral 1 includes a print unit (print unit) 109 and a reading unit 111.

  The print unit 109 forms an image related to the image data on a recording medium such as recording paper by an electrophotographic method.

  The reading unit 111 reads a document with a CCD line sensor and generates image data relating to the document. The reading unit 111 reads an original by an ADF (Automatic Document Feeder) method or an FBS (Flat Bed Scanner) method.

  Further, the digital multifunction peripheral 1 includes a modem (MODEM) 113, a coupler 115, and a network interface board (Network I / F BD) 117 as communication means. The modem 113 and the coupler 115 are used for transmission / reception of facsimile image data via the public switched telephone network 901. The modem 113 is connected to the public switched telephone network 901 through the coupler 115 and is based on a facsimile transmission control procedure according to ITU (International Telecommunication Union) -T recommendation T.30. 17, V. 27ter, V.L. The facsimile image data is modulated / demodulated according to 29 or the like. Alternatively, the modem 113 can be connected to the V.V. The facsimile image data is modulated / demodulated in accordance with No. 34. The network interface board 117 connects the digital multifunction peripheral 1 to the Ethernet (registered trademark) 903.

  In addition, the digital multifunction peripheral 1 is provided with an operation unit 119 as a user interface. The operation unit 119 is configured by a liquid crystal touch panel display, and displays information as an operation target.

  The authentication device recognition unit 121 recognizes the authentication device 905, can acquire a unique serial number for identifying each of the authentication devices 905 from the recognized authentication device 905, and from the memory area 9051 of the authentication device 905. Data can be read and written to the memory area 9051. An emergency password 9053 is stored in the memory area 9051. As the authentication device 905, an IC card, a USB token, or the like can be used.

  The flash memory 123 functions as a nonvolatile auxiliary storage device. The flash memory 123 stores a table 1235 in which the serial number of the authentication device 905 that should be successfully authenticated and the operator who is permitted to use it are linked and registered. The contents of the table 1235 can be edited by the administrator of the digital multi-function peripheral 1. Further, the usage history 1237 of the emergency password 9053 is recorded in the flash memory 123.

  The above-described components 103 to 123 of the digital multi-function peripheral 1 are connected by a bus 125 and can transmit and receive data between them.

  In the facsimile mode, the digital multifunction peripheral 1 reads a document using the reading unit 111, and uses the modem 113 and the coupler 115 to transmit the facsimile image data relating to the document to another facsimile machine via the public telephone exchange network 901. Then send. The digital multifunction peripheral 1 receives the facsimile image data transmitted from the other facsimile machine via the public switched telephone network 901 using the modem 113 and the coupler 115, and uses the print unit 109 to An image related to the facsimile image data is formed on a recording medium.

  In the copy mode, the digital multi-function peripheral 1 reads an original using the reading unit 111 and forms an image related to the original on a recording medium using the printing unit 109.

  In the scan mode, the digital multi-function peripheral 1 reads a document using the reading unit 111 and generates image data related to the document.

  In the print mode, the digital multifunction peripheral 1 receives image data transmitted from the computer 907 via the Ethernet 903 using the network interface board 117, and uses the print unit 109 to display an image related to the image data. Are formed on the recording medium.

<2 certification>
The digital multi-function peripheral 1 also functions as an authentication apparatus that determines success or failure of authentication in response to an authentication request from the authentication device 905, and is configured to be used only when authentication is successful. Of course, requesting success of authentication for all functions of the digital multifunction peripheral 1 is not essential, and success of authentication may be requested only for specific functions. Further, a part of the processing related to authentication may be performed by the computer (authentication server) 907 connected to the Ethernet 903, or the processing related to authentication may be completed inside the authentication device recognition unit 121. Good.

  Next, an authentication flow realized when the computer 101 executes the program 1055 to control the components 109 to 123 of the digital multi-function peripheral 1 will be described with reference to the flowchart of FIG.

  Prior to using the digital multi-function peripheral 1, when the operator causes the authentication device recognition unit 121 to recognize the authentication device 905, first, the authentication device recognition unit 121 acquires a serial number from the recognized authentication device 905. If the acquired serial number is associated with the authorized operator and registered in the table 1235, the authentication to the authentication device 905 is successful ("YES" in step S101), and the emergency password After 9053 is read from the memory area 9051 of the authentication device 905 and transferred to the flash memory 123 of the digital multifunction peripheral 1 (step S102), the digital multifunction peripheral 1 becomes available. On the other hand, if it is not registered, the authentication to the authentication device 905 fails (“NO” in step S101), and the digital multi-function peripheral 1 continues in a standby state until the authentication is successful. When the digital multi-function peripheral 1 is available, the operator can cause the digital multi-function peripheral 1 to execute a job (step S103). Here, “job” refers to a series of processes in the digital multi-function peripheral 1, for example, a copy of a group of documents.

  Even after the authentication with respect to the authentication device 905 is successful and the digital multi-function peripheral 1 starts executing the job, whether or not the authentication device recognition unit 121 can recognize the authentication device 905 is checked at a predetermined time interval. The authentication device 905 should be under the monitoring of the operator even during execution of the job. If the authentication device recognition unit 121 becomes unable to recognize the authentication device 905 during execution of the job, the authentication device 905 may be stolen. This is because there is a risk.

  While the authentication device recognition unit 121 can recognize the authentication device 905 (“YES” in step S104), the state where the authentication is successful is maintained, and the job execution is continued (step S103). However, when the authentication device recognizing unit 121 cannot recognize the authentication device 905, the processing after step S105 is executed. Here, the situation in which the authentication device recognition unit 121 cannot recognize the authentication device 905 is as follows: Unless the authentication device 905 is stolen, the contact-type authentication device 905 is mistakenly removed from the authentication device recognition unit 121. If the authentication device 905 is accidentally taken out of the recognizable area of the authentication device recognizing unit 121 or if the authentication device 905 is out of order, the authentication device 905 has a factor that hinders recognition. And (2) when the authentication device recognition unit 121 has a factor that hinders recognition, such as when the external authentication device recognition unit 121 is mistakenly removed from the digital multi-function peripheral 1. sell. In step S104, not only whether or not the authentication device 905 can be recognized but also whether or not the authentication with respect to the authentication device 905 is successful may be checked.

  Subsequently, it is determined whether or not continuation of the job is necessary. If it is necessary (“YES” in step S105), the processing after step S106 is executed, and if not necessary (in step S105). NO "), the process ends.

  In step S106, a screen for accepting the input of the emergency password 9053 is displayed on the touch panel display of the operation unit 119 (step S106). When the operator inputs the emergency password 9053 using this (step S107), the screen is accepted. The suitability of the emergency password 9053 is determined (steps S108 to S109). That is, if the emergency password 9053 transferred to the flash memory 123 matches the received emergency password 9053 (“YES” in step S108), it is determined that the received emergency password 9053 is appropriate, and if it does not match ("NO" in step S108), it is determined that the accepted emergency password 9053 is inappropriate, but even if it matches, if the accepted emergency password 9053 has been used in the past (step In S109, “YES”), it is determined that the accepted emergency password 9053 is inappropriate. This is because unless the act of repeatedly using the emergency password 9053 is prohibited, fraud in which authentication is succeeded using the emergency password 9053 cannot be prevented. Here, whether or not the received emergency password 9053 has been used in the past can be specified by referring to the history 1237 stored in the flash memory 123.

  If the emergency password 9053 is stored in the authentication device 905, there is no need to register the emergency password 9053 in the digital multi-function peripheral 1, but this is an emergency for the digital multi-function peripheral 1 prior to authentication. It does not prevent the password 9053 from being prepared. For example, when the authentication device 905 cannot store the emergency password 9053, it is checked whether or not the emergency password 9053 stored in the flash memory 123 matches the received emergency password 9053. What is necessary is just to make authentication successful. In this case, it is desirable to validate the emergency password 9053 stored in the flash memory 123 after successful authentication with the authentication device 905.

  If it is determined that the received emergency password 9053 is appropriate (“YES” in step S108 and “NO” in step S109), the successful authentication state is maintained and job execution continues ( Step S110). As a result, even if recognition of the authentication device 905 is hindered due to reasons other than theft, if the appropriate emergency password 9053 is entered, the authentication can be maintained successfully, and the job is interrupted and paper and toner are wasted. Can be prevented. If it is determined that the received emergency password 9053 is appropriate and the job can be continuously executed, it is not desirable to reuse the emergency password 9053. Therefore, after the job is completed, the usage history 1237 is updated, Re-use is prohibited by recording that the emergency password 9053 has been used (step S111). Of course, the reuse of the emergency password 9053 may be prohibited by writing information indicating that the reuse is prohibited in the memory area 9051 or deleting the emergency password 9053 from the memory area 9051.

  On the other hand, when it is determined that the received emergency password 9053 is inappropriate (“NO” in step S108 or “YES” in step S109), a message indicating that is displayed as a warning to the operator on the operation unit 119. Is displayed on the touch panel display, and the user is prompted to re-enter the emergency password 9053 (step S112). This is to make the operator know that the emergency password 9053 is inappropriate. On the other hand, if the operator desires to re-enter the emergency password 9053 (“YES” in step S113), the operator can return to step S106 to re-enter the emergency password 9053, and if not desired (step S113). "NO"), the job ends without being resumed.

  If the authentication device recognition unit 121 is re-recognized by the authentication device recognition unit 121 in a state where the job is interrupted, a new job can be executed without restarting the interrupted job.

<3 other>
In the digital multi-function peripheral 1, after the emergency password 9053 is transferred from the memory area 9051 to the flash memory 123 (after the emergency password 9053 becomes valid), a valid period during which the emergency password 9053 can be used is set. You may do it. This is to prevent the emergency password 9053 from being usable for a long time.

  Further, when the same authentication device 905 is used in common in a plurality of digital multifunction devices 1, the emergency password 9053 used in one digital multifunction device 1 cannot be used in other digital multifunction devices 1. It is desirable to do so.

  Furthermore, when the emergency password 9053 can no longer be used, it is preferable that the administrator sets a new emergency password 9053 so that the new emergency password 9053 can be used again.

  In the above description, the case where the present invention is applied to user authentication of the digital multi-function peripheral 1 has been described. However, the present invention can also be applied to other uses.

1 is a block diagram illustrating a configuration of a digital multifunction peripheral 1 according to a preferred embodiment of the present invention. It is a flowchart explaining the flow of authentication.

Explanation of symbols

1 Digital MFP 101 Computer 121 Authentication Device Recognition Unit 905 Authentication Device

Claims (5)

A recognition means for recognizing the authentication device;
Authentication means for authenticating the authentication device recognized by the recognition means;
A first maintaining means for maintaining a successful authentication while the recognition means can recognize the authentication device after the authentication to the authentication device is successful;
Accepting means for accepting an input of a password when recognition of the authentication device by the recognition means is inhibited after successful authentication with respect to the authentication device;
Determining means for determining the suitability of the password received by the receiving means;
A second maintaining means for maintaining a successful authentication state when the determination means determines that the password received by the receiving means is appropriate;
An authentication device comprising:   The authentication apparatus according to claim 1, wherein the determination unit determines that a password used in the past is inappropriate. The authentication device stores a password;
The determination unit determines that the password received by the reception unit is appropriate when the password read from the authentication device recognized by the recognition unit matches the password received by the reception unit. The authentication device according to claim 1 or 2. Storage means for storing passwords prior to authentication;
Further comprising
The determination unit determines that the password received by the reception unit is appropriate when the password read from the storage unit matches the password received by the reception unit. Or the authentication apparatus of Claim 2. Warning means for giving a warning to the operator when the determination means determines that the password received by the reception means is inappropriate;
The authentication apparatus according to claim 1, further comprising:

Images