JP2008146202A - Authentication printing system and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve user's convenience, and to suppress the consumption of the write-in allowable frequency of an ID card in the case of adopting a framework to acquire a printing job by performing access to a job storage device based on an address read from the ID card. <P>SOLUTION: This authentication printing system is provided with a device for storing a job, a printing device installed in a room X which belongs to the same network as a storage device, and a device for reading ID information from the ID card of a user who enters/leaving the room X, and for managing entering/leaving. The printing device reads the ID information from the ID card to perform authentication, and requests a printing job corresponding to an authentication user to the storage device based on network information, and executes the authentication printing based on the printing job acquired in response to the request. The management device judges whether or not the write-in of an address in the ID card is necessary based on whether or not the printing job of a leaving user is stored in the storage device, and when write-in is necessary, the management device records the address of the holding device in the ID card of the leaving user. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to authenticated printing that executes printing on the condition that authentication has been performed.

  2. Description of the Related Art Conventionally, an authentication printing (confidential printing) system that prevents information leakage by permitting printing only to a person who has been authenticated using an authentication device is known. For example, in Patent Document 1, print data (print job) for authentication printing is stored in a server, and when authentication information is transmitted from the printer device, a corresponding print job is transmitted to the printer device. Is disclosed.

  Here, in such an authentication printing system, when the printer device does not belong to the same network segment as the print job holding device and the IP address of the print job holding device is not registered in the printer device, the printer Since the apparatus cannot voluntarily access the job holding server, it cannot acquire a print job and execute print processing.

  On the other hand, in Patent Document 2, when performing authentication printing, an IP address of a print job holding device or the like is written in a portable storage medium (USB memory, IC card, etc.) set in the client terminal, and the printer In the apparatus, a configuration is disclosed in which a print job holding apparatus or the like is accessed based on an IP address or the like read from the storage medium, a print job is acquired, and print processing is executed.

By adopting such a configuration, even if the printer device does not belong to the same network segment as the print job holding device and the IP address or the like of the print job holding device is not registered in the printer device, the printer The apparatus can acquire a print job and execute a printing process.
JP 2004-118232 A JP 2005-324497 A

  However, Patent Document 2 does not discuss the necessity of writing an IP address or the like to a storage medium. As a result, when creating a print job, the storage medium is always set in the client terminal and the print job is held. A configuration is employed in which an IP address or the like of the device is written.

  For this reason, there is no need to originally write, that is, when the print job holding device belongs to the same network segment as the printer device, or when the IP address or the like of the print job holding device is registered in the printer device. Therefore, since it is required to set a storage medium in the client terminal, it cannot be said that the framework is highly convenient for the user. In addition, the number of times allowed to write to a storage medium that normally has an upper limit is wasted in that writing to the set storage medium is performed up to the above-described case that is not originally required to be written. There was also a problem.

  Therefore, in the present invention, when adopting a framework for accessing the print job holding device based on the IP address read from the storage medium and acquiring the print job, it is determined that the writing of the IP address or the like to the storage medium is necessary. The purpose of this is to improve the user convenience and suppress the consumption of the allowable number of times of writing to the storage medium.

  The authentication printing system of the present invention is a print job holding device that holds a print job, and is installed in a room X and belongs to the same network segment as the print job holding device, or on the network of the print job holding device. The ID information is read from the first authentication printing apparatus in which the information (address information) necessary for specifying the position is registered, and the ID storage medium of the user who enters and leaves the room X, and the room X is based on the ID information. A first entry / exit management apparatus for performing entry / exit management of the first authentication printing apparatus, wherein the first authentication printing apparatus reads ID information from an ID storage medium of a user who wishes to execute printing, Means for authenticating the user based on the ID information, and based on the information of the same network segment or the registered address information, Means for requesting a print job corresponding to an authenticated user from the print job holding device, and means for executing authenticated printing based on the print job acquired in response to the request. Whether the exit management device needs to write address information to the ID storage medium based on whether the print job holding device holds the print job of the exit user when the user leaves the room X Determining means for determining whether or not writing is necessary by the determining means, and writing means for recording address information of the print job holding device on the ID storage medium of the leaving user. It is characterized by that.

  According to such a configuration, when the user leaves the room X after creating a print job in the room X, the address information is written to the ID storage medium by the first entry / exit management device. It is not necessary to set an ID card in the terminal device or the like for writing, and the convenience for the user is greatly improved. Further, when a print job is created in the room X and authentication printing is executed based on the print job without leaving the room X as it is, the address information is not written to the ID storage medium. In addition, consumption of the allowable number of writing times of the ID storage medium can be suppressed.

  Preferably, a second authentication printing apparatus that is installed in a room different from the room X, belongs to a network segment different from the print job holding apparatus, and in which address information of the print job holding apparatus is not registered, The second authentication printing apparatus includes means for reading ID information from an ID storage medium of a user who desires printing, means for authenticating the user based on the ID information, and ID from the ID storage medium of the authenticated user. Means for requesting a print job corresponding to the authenticated user to the print job holding device specified based on the address information when the address information of the print job holding device can be read in addition to the information; Means for executing authentication printing based on a print job acquired in response to the request.

  According to this configuration, even when the printer device belongs to a different network segment from the print job holding device in cooperation with the first entry / exit management device, the print job is acquired from the print job holding device and authenticated printing is performed. Can be executed.

  Preferably, a second entrance / exit management device that reads out ID information from an ID storage medium of a user who enters and exits a specific area protected by a predetermined firewall device, and performs entrance / exit management of the specific area based on the ID information And the second entry / exit management device performs printing based on whether the print job of the leaving user is held in the print job holding device in the specific area when the user leaves the specific area. Second determination means for determining whether or not it is necessary to transfer the job and write address information to the ID storage medium; and when the second determination means determines that the job transfer and writing are necessary, the identification Instructs the print job holding device in the area to transfer the leaving user's print job to the second print job holding device outside the specific area. Characterized in that it comprises a means for recording the address information of the second print job holding apparatus in the ID storage medium of the leaving user.

  According to this configuration, even outside the specific area, the user accesses the second print job holding device using the address information recorded in the ID storage medium, reads the print job, and based on the print job Printing can be executed.

  The entrance / exit management device of the present invention is an entrance / exit management device that reads out ID information from an ID storage medium of a user entering / exiting the room X and manages entrance / exit of the room X based on the ID information. When the user leaves the room X, the exit management apparatus determines whether the exit user print job is held in a print job holding apparatus that can spontaneously communicate with the authentication printing apparatus in the room X. A determination unit that determines whether or not writing of address information to the storage medium is necessary; and when the determination unit determines that writing is necessary, the print job holding device stores the ID storage medium of the leaving user. Writing means for recording address information.

  The authentication printing method of the present invention is an authentication printing method in cooperation with an entrance / exit management device that performs entrance / exit management of a room X based on ID information read from an ID storage medium of a user entering / exiting the room X. In the entry / exit management device, when the user leaves the room X, based on whether the print job of the leaving user is held in the print job holding device that can spontaneously communicate from the authentication printing device in the room X, A determination step for determining whether or not address information needs to be written to an ID storage medium; and when the entry / exit management device determines that writing is necessary in the determination step, the ID storage of the leaving user A step of recording address information of the print job holding device on a medium, and a second authentication that is installed in a room different from the room X and cannot spontaneously communicate with the print job holding device In the printing apparatus, a step of reading ID information and address information of the print job holding apparatus from an ID storage medium of a user who desires to execute printing, and the second authenticated printing apparatus, wherein the user is based on the read ID information In the second authentication printing device, requesting the print job holding device for a print job corresponding to the authenticated user based on the read address information, and the second authentication printing device, The authentication printing apparatus according to claim 2, further comprising a step of executing authentication printing based on the print job acquired in response to the request.

  The entrance / exit management method of the present invention is an entrance / exit management method for reading out ID information from an ID storage medium of a user entering / exiting the room X and managing entrance / exit of the room X based on the ID information. When the user leaves, the address information of the ID storage medium is determined based on whether the print job of the leaving user is held in the print job holding device that can spontaneously communicate from the authentication printing device in the room X. A determination step for determining whether writing is necessary, and a writing for recording address information of the print job holding device in the ID storage medium of the leaving user when it is determined in the determination step that writing is necessary And a process.

  The authentication printing method and the entry / exit management method of the present invention can be implemented by an information processing apparatus such as a printing apparatus or an entry / exit management apparatus, and a program therefor includes a CD-ROM, a magnetic disk, a semiconductor memory, and a communication network. It can be installed or loaded through various media such as: It also includes the case where the program is recorded and distributed on a printer card or a printer option board.

  As described above, according to the present invention, when adopting a framework for accessing a print job holding apparatus based on an IP address read from a storage medium and acquiring a print job, it is necessary to write the IP address or the like to the storage medium. Only when it is determined, it is possible to improve user convenience and to suppress consumption of the number of times the storage medium can be written.

(First embodiment)
FIG. 1 is a block diagram showing a schematic configuration of an authentication printing system 1 according to an embodiment of the present invention. As shown in FIG. 1, the authentication printing system 1 includes terminal devices 10A to 10B that create an authentication print job, printer devices 20A to 20B that execute authentication print processing based on the authentication print job, and a device connection interface such as a USB. Authentication devices 100A-B respectively connected to the printer devices 20A-B, authentication print job holding devices 30A-B for spooling authentication print jobs, and entrance / exit management devices 40A-40 for managing entrance / exit of the rooms X1, X2 respectively. Among them, the terminal device 10A, the printer device 20A, and the authentication device 100A are installed in the room X1, and the terminal device 10B, the printer device 20B, and the authentication device 100B are installed in the room X2.

  The printer device 20A belongs to the same network segment N1 as the terminal device 10A, the authentication print job holding device 30A, and the entrance / exit management device 40A, and is configured to be able to directly communicate with each other. For example, the printer device 20A can spontaneously communicate with the authenticated print job holding device 30A based on the information of the network segment N1.

  However, information (IP address, host name, network address / subnet mask, etc .; hereinafter referred to as “address information”) necessary for specifying the location of the authenticated print job holding device 30B on the network is registered in the printer device 20A. Accordingly, the printer device 20A cannot spontaneously communicate with the authenticated print job holding device 30B.

  Similarly, the printer device 20B belongs to the same network segment N2 (different from the network segment N1) as the terminal device 10B, the authentication print job holding device 30B, and the entrance / exit management device 40B, and is configured to be able to directly communicate with each other. Has been. For example, the printer device 20B can spontaneously communicate with the authenticated print job holding device 30B based on the information of the network segment N2.

  However, the address information of the authenticated print job holding device 30A is not registered in the printer device 20B, and therefore the printer device 20B cannot spontaneously communicate with the authenticated print job holding device 30A.

  As shown in FIG. 1, the network segments N1 and N2 are connected via a router or the like. In FIG. 1, the terminal device 10, the printer device 20, the authentication device 100, the authentication print job holding device 30, and the entrance / exit management device 40 are shown one by one for each room (network segment). Thus, the authentication printing system 1 may be configured so that there are one or more of each. The number of rooms can be freely determined according to the design.

  Hereinafter, the configuration of each apparatus will be described. If it is not necessary to distinguish between A and B, they are collectively referred to as a terminal device 10, a printer device 20, an authentication device 100, and an authentication print job holding device 30, respectively. Further, when it is not necessary to distinguish between X1 and X2, they are collectively referred to as a room X.

  The terminal device 10 includes hardware such as a CPU (processor), a ROM, a RAM, a user interface, a communication interface, and an HDD (see FIG. 2A).

  The terminal device 10 has the same function as an information processing device such as a normal personal computer. For example, the terminal device 10 includes an input / output unit 11 that inputs / outputs various information via a user interface, a communication unit 12 that transmits / receives various data to / from other devices via a communication interface, and a printer device. The printer driver means 13 to be controlled is provided (see FIG. 2B). Each of these means is functionally realized by the CPU executing a program stored in the ROM, RAM, HDD, external storage medium, or the like in the terminal device 10.

  The printer driver unit 13 supports authentication printing by the printer device 20 and the authentication print job holding device 30, and, like a normal printer driver, creates a print job in a format that can be processed by the corresponding printer device. Is provided.

  The printer device 20 has a configuration similar to that of a normal printer device (see FIG. 2C).

  For example, the printer device 20 includes a power supply mechanism that includes a paper feed mechanism that supplies paper into the printer device, a print engine that performs printing, and a paper discharge mechanism that discharges paper outside the printer. A print engine is usually configured to include a paper feed mechanism, a carriage mechanism, a print head, and the like. A serial printer that prints in units of characters, such as an inkjet printer or a thermal transfer printer, a line printer that prints in units of lines, and a page unit. Various print engines corresponding to a page printer or the like for printing can be used.

  Further, for example, the printer device 20 includes an information processing unit including a user interface such as a CPU, a ROM, a RAM, a communication interface, and a console panel.

  In principle, the information processing unit of the printer device 20 has the same function as the information processing unit of the conventional printer device. For example, the receiving means 21 that receives a print job, analyzes the print job, generates a raster-format print image for one band or one page, stores it in the image buffer, and prints a predetermined unit (for example, one pass). A print control unit 22 or the like is provided that transfers an image from the image buffer to the print engine and executes printing while controlling the print engine.

  Further, the functional means as the authentication printing apparatus, for example, the printer apparatus 20A will be described as an example. The ID reading means 23 for reading out the ID information from the ID card of the user who wishes to execute the authentication printing using the authentication device 100A, An authentication unit 24 for authenticating the user, a job request unit 25 for requesting an authenticated print job corresponding to the authenticated user (authenticated user) to the authenticated print job holding device 30A based on the information of the network segment N1. Provided (see FIG. 2D). The ID card is a readable / writable type storage medium and stores ID information (user name, user ID, employee number, etc.), depending on the configuration of the authentication device 100. It can be freely selected from existing modes such as a magnetic card and an IC card.

  However, the ID reading unit 23 in the present embodiment is different from the ID reading unit of a normal authentication printing apparatus in that the address information of the authentication print job holding device is recorded on the ID card. Yes. In addition, when the address information is read, the job request unit 25 of the present embodiment requests an authenticated print job corresponding to the authenticated user from the authenticated print job holding device specified based on the address information. This is different from a job request unit of a normal authentication printing apparatus.

  Each of these means is functionally realized by the CPU executing a program stored in a ROM or RAM in the printer device 20, an external storage medium, or the like.

  The authentication device 100 is, for example, a magnetic card reader, a barcode reader, an RFID reader, or the like, and various existing authentication devices can be used depending on the design.

  The authentication print job holding device 30 includes hardware such as a CPU (processor), ROM, RAM, user interface, communication interface, and HDD (see FIG. 3A).

  The authentication print job holding device 30 will be described using the same function as that of a normal authentication print job holding device, for example, the authentication print job holding device 30A as an example. Authenticated print job storage means 31 stored in association with an authenticated print execution authority holding user (authorized user), and authenticated print that transmits a corresponding authenticated print job to the printer apparatus 20A based on an authenticated print job request received from the printer apparatus 20A Job providing means 32 and the like are provided (see FIG. 3B).

  However, as shown in FIG. 3B, the authentication print job holding device 30 according to the present embodiment corresponds to the authentication print job of the corresponding user in response to a request from the entry / exit management device 40 (described later). It differs from the conventional configuration in that it includes a job presence / absence answering unit 33 that determines whether or not the data is stored in the storage unit 31 and transmits the determination result to the entrance / exit management device 40.

  Each of these means is functionally realized by the CPU executing a program stored in the ROM or RAM in the authentication print job holding apparatus 30 or an external storage medium.

  The entrance / exit management device 40 includes hardware such as a CPU (processor), ROM, RAM, user interface, communication interface, and HDD (see FIG. 3C).

  The entrance / exit management device 40 has the same function as the conventional entrance / exit management device, for example, reads ID information from an ID card of a user entering / exiting the room X, and performs entrance / exit management of the room X based on the ID information. An entry / exit management means 41 is provided (see FIG. 3D).

  However, the entrance / exit management device 40 of the present embodiment will be described by taking the entrance / exit management device 40A as an example, as shown in FIG. 3D, for example, when the user leaves the room X1, the print job holding device 30A. On the basis of whether the authentication print job of the leaving user is held or not, writing judgment means 42 for judging whether writing of address information to the ID card is necessary, and writing judgment means 42 require writing. Is different from the conventional configuration in that it includes address writing means 43 for recording the address information of the print job holding device 30A on the user's ID card.

  The authentication printing framework in the authentication printing system 1 will be described below with reference to the flowcharts shown in FIGS. In addition, in this specification, each process shown in a flowchart etc. (including a partial process to which no reference numeral is assigned) is arbitrarily changed or executed in parallel within a range that does not contradict the processing contents. Can do.

(Authentication print job storage processing: FIG. 4)
When a user who wishes to perform authentication printing creates an authentication print job by using the terminal device 10 in the room X, the following authentication print job storage process is executed. Hereinafter, a case where an authentication print job is created by the terminal device 10A in the room X1 will be described as an example.

  First, when the printer driver means 13 of the terminal device 10A accepts a print request designating the printer device 20A from an application program or the like running on the outside or the terminal device 10A (S100), the printer device 20A can interpret it. An authenticated print job is created based on a predetermined printer control language (S101), and is output to the authenticated print job holding device 30A (S102).

  The authenticated print job can include, for example, information such as a job ID, output destination printer model information, job creation user ID information, authority user ID information, document name, and print setting information. The authorized user may be different from the job creation user, and a plurality of authorized users may be designated by one authenticated print job.

  Upon receiving the authentication print job from the terminal device 10A (printer driver means 13) (S103), the authentication print job holding device 30A extracts the authority user ID information and the like from the authentication print job, and performs authentication printing in association with these. The job is stored in the job storage unit 31 (S104). FIG. 8 shows an example of the data structure of the authenticated print job storage unit 31.

(Leaving process: Fig. 5)
When a user who wishes to perform authentication printing creates an authentication print job using the terminal device 10 in the room X and leaves the room X without executing authentication printing based on the authentication print job in the printer device 20, the following exit processing is performed. Is executed. Hereinafter, a case where an authentication print job is created by the terminal device 10A in the room X1 will be described as an example.

  First, the entrance / exit management means 41 of the entrance / exit management device 40A acquires ID information from the ID card of the user who wants to perform authentication printing who wants to leave the room X1, and stores the ID information of the room X1 stored in the memory based on the ID information. A predetermined entrance / exit management process such as updating the room occupant list is executed (S200).

  Various configurations of the entrance / exit management means 41 can be considered by using existing technology. For example, an RFID reader / writer installed near the entrance / exit room door of the room X1 allows the user to approach the RFID reader / writer. It is conceivable to read the ID information from the ID card (RFID compatible IC card).

  Next, the writing determination unit 42 creates a job presence / absence confirmation request so as to include the acquired ID information, and transmits it to the print job holding apparatus 30A (S201).

  When the job presence / absence answering unit 33 of the print job holding device 30A receives a job presence / absence confirmation request from the entry / exit management device 40A (S202), the ID information is extracted from the request, and the authenticated print job storage unit 31 is referred to The authentication print job that has not been executed by the authorized user corresponding to the ID information is searched, and the result is transmitted to the entrance / exit management device 40A (S203).

  When receiving the search result as a response to the job presence / absence confirmation request from the print job holding device 30A (S204), the writing determination unit 42 determines whether or not it is necessary to write address information to the ID card based on the search result (S204). S205).

  Specifically, there is an authenticated print job whose search result has not been executed (that is, the print job holding device 30A holds the authenticated print job of the user who wants to execute authenticated printing leaving the room X1). , The write determination means 42 determines that it is necessary to write address information to the ID card.

  In this case, the address writing means 43 records the address information of the print job holding device 30A on the ID card of the user who wants to perform authentication printing and wants to leave (S206), and then the exit processing ends.

  On the other hand, when the search result indicates that there is no unauthenticated authentication print job (that is, the print job holding device 30A does not hold the authentication print job of the user who wants to execute authentication print leaving the room X1). The write determination means 42 determines that it is not necessary to write address information to the ID card. In this case, the leaving process is finished as it is.

(Authentication printing process: FIGS. 6 and 7)
When the printer device 20 receives an authentication print execution instruction from a user who wishes to execute authentication print, the following authentication print processing is executed.

  First, the ID reading means 23 of the printer device 20 reads ID information from the ID card of the user who wishes to execute authentication printing via the authentication device 100 and attempts to read address information of the authentication print job holding device 30 (S300).

  Various configurations of the ID reading unit 23 can be considered depending on the type of the authentication device 100. Here, the same method as the entrance / exit management unit 41 is used so that the exit process and the authentication process can be executed using the same ID card. It is assumed that ID information is read out using.

  Next, the authentication unit 24 determines whether the user who acquired the ID information is an authorized user based on the ID information acquired in S300 (performs an authentication process) (S301).

  For example, when the authentication unit 24 is a client of the LDAP authentication service, the acquired ID information is notified to a directory server (not shown) that provides the LDAP authentication service, and authentication performed in the directory server based on the notification is performed. It is conceivable to receive and judge the result. Also, a simple configuration for user authentication when ID information can be acquired from an ID card can be considered.

  If it is not possible to authenticate that the user who acquired the ID information is an authorized user (S302: NO), the authentication printing process ends.

  On the other hand, if the authentication is successful (S302: YES), the job request unit 25 generates an authentication print job request so as to include the ID information of the authenticated authorized user (S303).

  Next, the job request unit 25 determines whether or not the ID reading unit 23 could read the address information in addition to the ID information in S200 (S304).

  If it is determined that the address information could not be read (S305: NO), the job request unit 25 sends the generated authentication print job request to the authentication print job holding device 30 in the network segment to which the own device belongs. Transmit (S306). Such a request can be made by broadcast or multicast.

  On the other hand, if it is determined that the address information can be read (S305: YES), the job request unit 25 erases the address information from the ID card via the authentication device 100 and is specified based on the address information. The generated authenticated print job request is transmitted to the authenticated print job holding apparatus 30 (S307).

  When the acquired ID information and the ID information associated with the authentication print job in the authentication print job holding device 30 are different types (for example, the authentication print job holding device 30 assigns the authentication print job to the authorized user). If the ID information acquired from the ID card is the employee number of the authorized user), the job request means 25 is a table in which different types of ID information corresponding to the same user are associated in advance. The ID information used in the authenticated print job holding device 30 is acquired with reference to the above, and an authenticated print job request is generated using the ID information. The ID information conversion may be executed by the authenticated print job holding apparatus 30.

  When the authenticated print job providing unit 32 of the authenticated print job holding device 30 receives the authenticated print job request from the printer device 20 (S308), the authenticated print job providing unit 32 extracts the ID information from the authenticated print job request and stores the authenticated print job storage unit 31. The authorized user's authenticated print job corresponding to the ID information is searched for (S309).

  If the corresponding authenticated print job is found by the search, it is read out and transmitted to the requesting printer device 20 (S310).

  Note that it may be configured such that the list information of the corresponding authenticated print job is first created and transmitted to the printer device 20, and the user is allowed to select the authenticated print job desired to be printed based on the list information. The authenticated print job that has been transmitted to the printer device 20 is sent from the authenticated print job storage unit 31 at a predetermined timing (for example, when a print end notification is received from the printer device 20 or after a certain period of time has passed). It is desirable to delete it.

  When the receiving unit 21 of the printer device 20 receives the authenticated print job from the authenticated print job holding device 30 (S311), the print control unit 22 executes the printing process based on the authenticated print job as in the conventional case (S311). S312). That is, the authentication print job is analyzed, a raster-format print image for one band or one page is generated and stored in an image buffer, and a predetermined unit (for example, one pass) is stored based on a control command in the authentication print job. ) Is transferred from the image buffer to the print engine, and printing is executed while controlling the print engine. Thereby, the authentication printing process is completed.

(Example 1)
In the following, a case will be described in which the user P creates an authentication print job with the terminal device 10A in the room X1, and then executes authentication printing with the printer device 20A based on the authentication print job without leaving the room X1.

  In this case, the ID reading unit 23 of the printer apparatus 20A reads out the ID information from the ID card of the user P via the authentication device 100A and tries to read the address information of the authentication print job holding apparatus 30 in S300.

  Next, in S301, the authentication unit 24 executes an authentication process for the user P based on the acquired ID information. Here, it is assumed that the user P is authenticated as an authorized user.

  Next, the job request unit 25 generates an authentication print job request so as to include the ID information of the user P in S303.

  Next, in S304, the job request unit 25 determines whether the address information has been read from the ID card of the user P by the ID reading unit 23. As described in the leaving process, the address information is written to the ID card when the user creates an authentication print job in the room X and leaves the room X without executing the authentication printing based on the authentication print job. To be executed. Since the user P creates an authentication print job in the room X1 and executes authentication printing by the printer device 20A based on the authentication print job without leaving the room X1, the address information is written in the ID card. Not.

  Accordingly, the ID reading unit 23 cannot read the address information from the ID card of the user P. As a result, the job request unit 25 sends the authentication print job holding device 30A in the same network segment to the authentication print job holding device 30A in S306. The generated authentication print job request is transmitted.

(Example 2)
In the following, after the user P creates an authentication print job with the terminal device 10A in the room X1, the user P leaves the room X1 without executing authentication printing based on the authentication print job, and then enters the room X2, A case where authenticated printing based on the authenticated print job is executed in the printer apparatus 20B will be described.

  In this case, the ID reading unit 23 of the printer apparatus 20B reads out the ID information from the ID card of the user P via the authentication device 100B and tries to read the address information of the authentication print job holding apparatus 30 in S300.

  Next, in S301, the authentication unit 24 executes an authentication process for the user P based on the acquired ID information. Here, it is assumed that the user P is authenticated as an authorized user.

  Next, the job request unit 25 generates an authentication print job request so as to include the ID information of the user P in S303.

  Next, in S304, the job request unit 25 determines whether the address information has been read from the ID card of the user P by the ID reading unit 23. After the user P creates an authentication print job in the room X1, the user P leaves the room X1 without executing authentication printing based on the authentication print job. Address information of the print job holding device 30A is written.

  Therefore, the ID reading unit 23 can read the address information from the ID card of the user P, and as a result, the job requesting unit 25 is authenticated printing specified based on the read address information in S307. The generated authentication print job request is transmitted to the job holding device 30A.

  As described above, according to the configuration of the present embodiment, even when the printer device 20 belongs to a different network segment from the authenticated print job holding device 30 in cooperation with the entry / exit management device 40, the authenticated print job holding is performed. An authentication print job can be acquired from the apparatus 30 and authentication printing can be executed.

  Further, when the user creates an authentication print job in the room X and then leaves the room X without executing authentication printing based on the authentication print job, the address information is written into the ID card by the entrance / exit management device 40. Since it is configured, it is not necessary to set an ID card in the terminal device 10 or the like for writing address information, and the convenience for the user is greatly improved. In addition, when an authentication print job is created in the room X and authentication printing is executed based on the authentication print job without leaving the room X, the address information is not written to the ID card. Therefore, it is possible to suppress consumption of the ID card write permission count.

(Modification)
In this modification, the authenticated print job holding device 30A is protected by the firewall device 50 (specific area where each device belonging to a network segment protected by the firewall device 50 is installed) Y. Consider the case where it is installed in

  In this case, since the firewall device 50 prevents access to the authenticated print job holding device 30A from the outside of the specific area Y, the user who has left the specific area has the address of the authenticated print job holding device 30A on the ID card. Even if information is written, it is not possible in principle to execute authentication printing based on the authentication print job held in the authentication print job holding device 30A.

  Therefore, in the present modification, in the above embodiment, the ID information is further read from the ID storage medium of the user who enters and exits the specific area Y, and the entrance and exit management of the specific area Y is performed based on the ID information. A withdrawal management device 60 is provided (see FIG. 9).

  As shown in FIG. 10A, the second entry / exit management device 60 includes the same hardware as the entry / exit management device 40.

  Also, as shown in FIG. 10 (b), an entrance / exit management means 61 that reads out ID information from an ID card of a user who enters or exits the specific area Y, and manages entrance / exit of the specific area Y based on the ID information, When the user leaves the specific area Y, the authentication print job is transferred to the ID storage medium based on whether or not the authentication print job of the exit user is held in the print job holding device 30A in the specific area Y. When the transfer / write determining means 62 for determining whether or not the address information needs to be written and the transfer / write determining means 62 determine that the job transfer and writing are necessary, the print job holding apparatus 30A is notified. And instructing to transfer the authentication print job of the leaving user to the second authentication print job holding device 70 outside the specific area Y, and A function unit such as a transfer / address writing means 63 for recording the address information of the second authentication print job holding device 70.

  Hereinafter, the specific area leaving process in this modification will be described.

  As the firewall device 50, various existing firewall devices can be used depending on the design. The second authenticated print job holding device 70 has the same configuration as the print job holding device 30 in principle, but functions as a so-called external public server because it is located outside the protection range of the firewall device 50. To do.

(Specific area exit processing: FIG. 11)
When a user who wishes to perform authentication printing creates an authentication print job with the terminal device 10A in the room X1, and exits from the specific area Y without executing authentication printing based on the authentication print job with the printer device 20A, the following specification Area exit processing is executed.

  First, similarly to the entry / exit management unit 41, the entry / exit management unit 61 of the second entry / exit management device 60 acquires the ID information from the ID card of the user who wishes to perform authentication printing, who wants to leave the specific area Y. Based on the ID information, a predetermined entrance / exit management process such as updating a staying user list of the specific area Y stored in the memory is executed (S400).

  Next, the transfer / write determination unit 62 creates a job presence / absence confirmation request so as to include the acquired ID information, and transmits it to the print job holding apparatus 30A (S401).

  When the job presence / absence reply unit 33 of the print job holding device 30A receives a job presence / absence confirmation request from the second entry / exit management device 60 (S402), it extracts ID information from the request and refers to the authenticated print job storage unit 31. Then, an unauthenticated authentication print job of the authorized user corresponding to the ID information is searched, and the result is transmitted to the second entry / exit management device 60 (S403).

  When the transfer / write determination unit 62 receives the search result as a reply to the job presence / absence confirmation request from the print job holding device 30A (S404), the transfer of the authenticated print job and the writing of the address information to the ID card are performed based on this search result. It is determined whether or not it is necessary (S405).

  Specifically, there is an authenticated print job for which the search result has not been executed (that is, the print job holding device 30A holds an authenticated print job of a user who wants to perform authentication printing to leave the specific area Y). In this case, the transfer / write determination unit 62 determines that it is necessary to transfer the authentication print job and write the address information to the ID card.

  In this case, the transfer / address writing unit 63 transfers the authentication print job of the user who wishes to perform authentication printing to leave the print job holding device 30A to the second authentication print job holding device 70 outside the specific area Y. And the address information of the second authentication print job holding device 70 is recorded on the ID card of the user who wishes to execute authentication printing (S406).

  When the print job holding device 30A receives the above instruction from the second entry / exit management device 60, the print job holding device 30A reads the unexecuted authenticated print job found by the search from the authenticated print job storage unit 31, and the second authenticated print job holding device 70. (S407). This transfer process needs to be registered in advance so as not to be blocked by the firewall device 50.

  When the second authenticated print job holding device 70 receives the authentication print job from the print job holding device 30A, the second authenticated print job holding device 70 stores it in the memory in association with the ID information of the authorized user (S408).

  On the other hand, the search result indicates that there is no unexecuted authenticated print job (that is, the print job holding device 30A does not hold the authenticated print job of the user who wants to perform authentication printing to leave the specific area Y). In this case, the transfer / write determination unit 62 determines that it is not necessary to transfer the authentication print job and write the address information to the ID card. In this case, the specific area leaving process is terminated as it is.

  According to this configuration, the specific area Y protected by the firewall in which the authentication print job holding device 30A that holds the authentication print job is installed by the user who wants to execute the authentication print in cooperation with the second entry / exit management device 60. Since the authentication print job is transferred to the second authentication print job holding device 70 outside the firewall and the address information of the second authentication print job holding device 70 is written to the ID card when exiting from Even outside the specific area Y, the address information recorded on the ID card is used to access the second authentication print job holding device 70 to read out the authentication print job and execute the authentication print based on the authentication print job It becomes possible to do. Since the second authenticated print job holding device 70 is located outside the firewall, it is desirable that only the authorized user can read out his / her authenticated print job with a password, for example.

(Other variations)
The present invention can be applied with various modifications without being limited to the above-described embodiments and modifications. For example, in the above-described embodiment, an authentication printing system including a printer device as a printing apparatus has been described. However, the present invention is also applicable to an authentication printing system including a printing apparatus such as a copying machine, a facsimile machine, or a multifunction machine. .

  In the above-described embodiment, the terminal device 10, the printer device 20, the authentication print job holding device 30, and the entry / exit management device 40 are described as separate units. (An apparatus other than the above 10 to 40 may be included). For example, the printer device 20 may be configured to include the authentication print job storage unit 31.

  In the above-described embodiment, for example, the printer device 20A belongs to the same network segment N1 as the authenticated print job holding device 30A, and transmits an authenticated print job request to the authenticated print job holding device 30A based on the network segment N1. Although configured, the present invention is not limited to such a configuration. For example, if the address information of the authenticated print job holding device 30A is registered in the printer device 20A in advance, the authenticated print job holding device 30A can be identified based on the address information and the authenticated print job request can be sent spontaneously. In this case, the printer device 20A does not necessarily belong to the same network segment N1 as the authenticated print job holding device 30A.

  In the above embodiment, the authentication printing system A including, for example, the terminal device 10A, the printer device 20A, the authentication print job holding device 30A, the entrance / exit management device 40A, and the terminal device 10B, the printer device 20B, and the authentication print job holding device. When grasped as an authentication printing system B including 30B, the entrance / exit management device 40B, etc., the present invention can also be regarded as a framework for linking two authentication printing systems. Such a framework is useful, for example, when an authentication printing system is constructed for each department.

  In the above embodiment, the case where an ID card is used as an example of a storage medium (ID storage medium) for storing ID information has been described. However, other portable read / write operations such as a USB memory and a mobile phone are possible. A configuration using a storage medium may also be used. Moreover, in the said embodiment, although it is set as the structure which reads ID information from the same ID card by leaving process and authentication process, you may comprise so that a different ID card may be used for each process. In this case, for example, after performing the authentication process, it may be configured to try to read the address information from the ID card used in the leaving process.

  In the above-described embodiment, the writing determination unit 42 creates a job presence / absence confirmation request and sends it to the authenticated print job holding device 30 during the exit process. However, the present invention is not limited to such a configuration. Not limited to. For example, the entrance / exit management device 40 periodically checks whether or not an authentication print job is held in the authentication print job holding device 30 for the user in the room X, and refers to this check result during the exit process. Then, it may be configured to determine whether it is necessary to write address information to the ID card. According to such a configuration, since it is not necessary to confirm the presence or absence of the authentication print job in the authentication print job holding device 30 during the process of the exit process, the time required for the exit process can be shortened.

  In the above embodiment, when the user leaves the room X while the authentication printing process is being executed or temporarily stopped, the authentication print interruption information (for example, how many pages have been printed, etc.) along with the address information on the ID card is displayed. A writing configuration may be used. In this case, when restarting the authentication printing process using the ID card information in the printer device in another room, for example, a flexible restarting method of printing only the unprinted page can be selected.

1 is a block diagram illustrating a schematic configuration of an authentication printing system 1. FIG. 2 is a block diagram illustrating configurations of a terminal device 10 and a printer device 20. FIG. 3 is a block diagram illustrating configurations of an authenticated print job holding device 30 and an entrance / exit management device 40. FIG. 6 is a flowchart for explaining an authentication print job accumulation process; It is a flowchart for demonstrating a leaving process. It is a flowchart for demonstrating an authentication printing process. It is a flowchart for demonstrating an authentication printing process. 6 is a diagram illustrating an example of a data structure of an authentication print job storage unit 31. FIG. It is a block diagram which shows schematic structure of the authentication printing system 1 in a modification. It is a block diagram which shows the structure of the 2nd entrance / exit management apparatus. It is a flowchart for demonstrating a specific area leaving process.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Authentication printing system, 10 Terminal device, 11 Input / output means, 12 Communication means, 13 Printer driver means, 20 Printer apparatus, 21 Reception means, 22 Print control means, 23 ID reading means, 24 Authentication means, 25 Job request means, 30 Authenticated Print Job Holding Device, 31 Authenticated Print Job Storage Unit, 32 Authenticated Print Job Providing Unit, 33 Job Presence / Answer Response Unit, 40 Entry / Exit Management Device, 41 Entry / Exit Management Unit, 42 Write Judgment Unit, 43 Address Write Unit , 100 Authentication device

Claims (7)

A print job holding device for holding a print job;
Information (hereinafter referred to as “address information”) that is installed in the room X and belongs to the same network segment as the print job holding device or for specifying the position of the print job holding device on the network A registered first authentication printing device;
An authentication printing system comprising: a first entrance / exit management device that reads ID information from an ID storage medium of a user entering / exiting the room X and performs entrance / exit management of the room X based on the ID information,
The first authentication printing apparatus includes:
Means for reading ID information from an ID storage medium of a user who wishes to execute printing;
Means for authenticating the user based on the ID information;
Means for requesting a print job corresponding to an authenticated user to the print job holding device based on the same network segment information or the registered address information;
Means for executing authentication printing based on the print job acquired in response to the request,
The first entry / exit management device includes:
When the user leaves the room X, a determination is made as to whether or not writing of address information to the ID storage medium is necessary based on whether or not the print job of the leaving user is held in the print job holding device. Means,
Authentication printing, comprising: writing means for recording address information of the print job holding device on the ID storage medium of the leaving user when the determination means determines that writing is necessary. system. A second authentication printing apparatus that is installed in a room different from the room X, belongs to a network segment different from the print job holding apparatus, and in which address information of the print job holding apparatus is not registered;
The second authentication printing apparatus includes:
Means for reading ID information from an ID storage medium of a user who wishes to execute printing;
Means for authenticating the user based on the ID information;
When the address information of the print job holding device can be read in addition to the ID information from the authenticated user's ID storage medium, the authenticated user is notified to the print job holding device specified based on the address information. Means for requesting a corresponding print job;
The authenticated printing system according to claim 1, further comprising: a unit that executes authenticated printing based on a print job acquired in response to the request. A second entry / exit management device that reads out ID information from an ID storage medium of a user entering / exiting a specific area protected by a predetermined firewall device, and performs entry / exit management of the specific area based on the ID information;
The second entry / exit management device includes:
When the user leaves the specific area, the print job transfer and the address information to the ID storage medium are transferred based on whether the print job of the leaving user is held in the print job holding device in the specific area. Transfer / write determination means for determining whether writing is necessary;
When the transfer / write determination unit determines that job transfer and writing are necessary, the print job of the leaving user is sent to the print job holding device in the specific area by the second printing outside the specific area. 3. The apparatus according to claim 1, further comprising: an instruction to transfer to the job holding device, and recording address information of the second print job holding device on the ID storage medium of the leaving user. Authentication printing system. An entrance / exit management apparatus that reads out ID information from an ID storage medium of a user entering / exiting the room X and manages entrance / exit of the room X based on the ID information,
The entrance / exit management device
When the user leaves the room X, the address to the ID storage medium is determined based on whether the print job of the leaving user is held in a print job holding device that can spontaneously communicate from the authentication printing device in the room X. A determination means for determining whether writing of information is necessary;
Writing means for recording address information of the print job holding device on the ID storage medium of the leaving user when the judging means judges that writing is necessary. Management device. An authentication printing method in cooperation with an entrance / exit management device that performs entrance / exit management of a room X based on ID information read from an ID storage medium of a user entering / exiting the room X,
In the entry / exit management device, when the user leaves the room X, based on whether the print job of the leaving user is held in a print job holding device that can spontaneously communicate from the authentication printing device in the room X. A determination step of determining whether writing of address information to the ID storage medium is necessary;
A step of recording address information of the print job holding device in the ID storage medium of the exiting user when the entry / exit management device determines that writing is necessary in the determination step;
In a second authentication printing apparatus that is installed in a room different from room X and cannot communicate spontaneously with the print job holding apparatus, the ID information and the address information of the print job holding apparatus from the ID storage medium of the user who wishes to execute printing A process of reading
A step of authenticating the user based on the read ID information in the second authentication printing apparatus;
Requesting a print job corresponding to the authenticated user from the print job holding device based on the read address information in the second authenticated printing device;
And a step of executing authentication printing based on a print job acquired in response to the request in the second authentication printing apparatus. An entrance / exit management method for reading out ID information from an ID storage medium of a user entering / exiting the room X and managing entrance / exit of the room X based on the ID information,
When the user leaves the room X, the address to the ID storage medium is determined based on whether the print job of the leaving user is held in a print job holding device that can spontaneously communicate from the authentication printing device in the room X. A determination step for determining whether writing of information is necessary;
And a writing step of recording address information of the print job holding device in the ID storage medium of the leaving user when it is determined that writing is necessary in the determination step. Management method.   A program for causing a computer to execute the entrance / exit management method according to claim 6.

Images