JP2009271751A - Image forming device, server and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide technology allowing suppression of security reduction by non-performance of regular logout operation, in a device having a user authentication function. <P>SOLUTION: An MFP (Multi Function Peripheral) 1 having the user authentication function has a login information acquisition part 13, a decision part 14, and an adjustment part 15. The login information acquisition part 13 acquires use information of a user related to the MFP 1. The decision part 14 decides whether occurrence frequency of automatic logout applied with automatic logout processing without being accompanied by the regular logout operation by the user is larger than a prescribed threshold value or not based on the use information. When it is decided that the occurrence frequency of the automatic logout is larger than the prescribed threshold value, the adjustment part 15 reduces a time-out time related to the automatic logout of the user. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an image forming apparatus such as a printer, a multifunction peripheral (MFP), and a related technology.

  There is an image forming apparatus having a user authentication function (see Patent Document 1). In such a device, the user can use the device by performing a login operation using a login ID, a password, and the like.

  Further, in such a device, a regular user operation is terminated when a logged-in user performs a logout operation after using the device.

JP 2006-277585 A

  By the way, among a plurality of users related to the image forming apparatus, there is a person who refrains from performing the logout operation and leaves the apparatus without performing the logout operation after using the apparatus.

  In such a case, even after the logged-in user leaves the device, the logged-in state relating to the logged-in user continues, so that another person can use the device with the authority of the logged-in user. It will be possible. Such a situation is not appropriate in terms of ensuring security.

  In addition, in order to suppress the occurrence of such a situation, it is considered that when a certain time (hereinafter also referred to as “timeout time”) elapses after the operation by the logged-in user ends, the logout is automatically (forced). It is done.

  However, even in such a case, an operation by another person can be performed with the login user authority until the predetermined time (timeout time) elapses. In particular, when the certain time is set to a relatively long time, the above situation occurs over a relatively long time. That is, it becomes possible for a person other than the login user to use the apparatus with the authority of the login user for a relatively long time. Such a situation is not appropriate in terms of ensuring security.

  Accordingly, an object of the present invention is to provide a technique capable of suppressing a decrease in security due to a normal logout operation not being performed in an apparatus having a user authentication function.

  In order to solve the above-mentioned problems, an invention according to claim 1 is an image forming apparatus having a user authentication function, wherein storage means for storing user usage information related to the image forming apparatus and a normal logout operation by the user are performed. Determining means for determining, based on the usage information, whether or not the frequency of occurrence of automatic logout for which logout processing has been automatically performed without being accompanied is greater than a first threshold; And adjusting means for shortening a timeout time related to the automatic logout of the user when it is determined that the value is larger than the first threshold value.

  According to a second aspect of the present invention, in the image forming apparatus according to the first aspect of the invention, the determination unit is a time from a logout time corresponding to a predetermined login process to a login time in a next login process for the user. It is further determined based on the usage information whether the frequency at which the re-login time is equal to or less than a predetermined value is greater than a second threshold, and the adjusting means is a frequency at which the re-login time is equal to or less than the predetermined value. Extending the time-out period for the user determined to be greater than the second threshold.

  According to a third aspect of the present invention, in the image forming apparatus according to the first or second aspect, the automatic logout is executed in response to the elapse of the time-out period from the counting start time based on a predetermined reference. Logout control means is further provided.

  According to a fourth aspect of the present invention, in the image forming apparatus according to the third aspect of the present invention, the image forming apparatus further comprises detection means for detecting that the logged-in user has left the image forming apparatus, and the automatic logout control means comprises: When the specified job by the user ends after the logged-in user leaves the apparatus, the end time of the specified job is set as the count start time.

  According to a fifth aspect of the present invention, in the image forming apparatus according to the third aspect of the present invention, the image forming apparatus further comprises detection means for detecting that the logged-in user has left the image forming apparatus, and the automatic logout control means comprises: When the user leaves the apparatus after the designated job by the logged-in user is completed, the time when the user leaves the apparatus is set as the counting start time.

  According to a sixth aspect of the present invention, in the image forming apparatus according to the third aspect of the invention, the automatic logout control means sets a time point when the last operation is performed by the logged-in user as the counting start time point. Features.

  The invention according to claim 7 is a server connected to a specific device having a user authentication function via a network, an acquisition unit for acquiring user usage information regarding the specific device, and a normal logout operation by the user. Determining means for determining, based on the usage information, whether or not the frequency of occurrence of automatic logout for which logout processing has been automatically performed without being accompanied is greater than a first threshold; And a communication unit that transmits to the specific device a shortening instruction instructing that a time-out period related to the automatic logout of the user should be shortened when it is determined that the value is larger than a first threshold value. To do.

  According to an eighth aspect of the present invention, in the server according to the seventh aspect of the invention, the determination unit is configured to re-login for the user from a logout time corresponding to a predetermined login process to a login time in a next login process. It is determined based on the usage information whether the frequency at which the time is equal to or less than a predetermined value is greater than a second threshold, and the communication means determines whether the frequency at which the re-login time is equal to or less than a predetermined value is the second value. If it is determined that the time-out time is greater than the threshold value, an extension command for instructing that the timeout time of the user should be extended is transmitted to the specific device.

  According to a ninth aspect of the invention, in the server according to the seventh or eighth aspect of the invention, the specific device is an image forming device.

  According to the tenth aspect of the present invention, a) a procedure for acquiring user usage information regarding a specific device having a user authentication function; and b) a logout process is automatically performed without a regular logout operation by the user. Determining whether the frequency of occurrence of automatic logout is greater than a first threshold based on the usage information; c) determining that the frequency of occurrence of automatic logout is greater than the first threshold In this case, the program is a program for executing a procedure for transmitting to the specific device a shortening instruction instructing that a timeout time related to the automatic logout of the user should be shortened.

  According to an eleventh aspect of the present invention, in the program according to the tenth aspect of the present invention, d) a re-login time which is a time from a logout time corresponding to a predetermined login process to a login time in the next login process is predetermined A procedure for determining, based on the usage information, whether or not a frequency that is less than or equal to a value is greater than a second threshold; and e) a frequency that the re-login time is less than or equal to a predetermined value is greater than the second threshold A program for causing the computer to further execute a procedure of transmitting an extension instruction to the specific device to instruct that the timeout time of the user should be extended when it is determined that the time-out time is to be extended. To do.

  According to a twelfth aspect of the present invention, in the program according to the tenth or eleventh aspect of the invention, the specific device is an image forming device.

  According to a thirteenth aspect of the present invention, there is provided an image forming apparatus, a storage unit for storing user usage information regarding the image forming apparatus, and a period from a predetermined count start time after log-in by the user to a log-out time. The determination means for determining whether or not the occurrence frequency of the delayed logout operation is greater than a predetermined threshold based on the usage information, and the occurrence frequency of the delayed logout is determined to be greater than the predetermined threshold. And adjusting means for setting the automatic timeout time for the user to a value smaller than the predetermined threshold value.

  The invention of claim 14 is a server connected to a specific device having a user authentication function via a network, an acquisition means for acquiring user usage information related to the specific device, and a predetermined log-in by the user A determination means for determining, based on the usage information, whether or not a frequency of occurrence of a delayed logout operation in which a period from a count start time to a logout time is equal to or greater than a predetermined value is greater than a predetermined threshold; When it is determined that the frequency is greater than the predetermined threshold value, the apparatus includes: a transmission unit that transmits to the specific device a reduction command that instructs to reduce the automatic timeout time for the user. .

  According to the invention of claim 15, the computer has a) a procedure for acquiring user usage information regarding a specific device having a user authentication function, and b) a period from a predetermined count start time after log-in by the user to a log-out time. A procedure for determining, based on the usage information, whether the occurrence frequency of the delayed logout operation that is equal to or greater than a predetermined value is greater than a predetermined threshold; and c) the occurrence frequency of the delayed logout is greater than the predetermined threshold. Is determined to be a program for executing a procedure for transmitting a shortening command for instructing that the automatic timeout time for the user should be shortened to the specific device.

  According to the first to twelfth aspects of the present invention, since the time-out time for a user whose automatic logout occurrence frequency is greater than the first threshold is shortened, the security is lowered by not performing a regular logout operation. Can be suppressed.

  According to the inventions according to claims 13 to 15, the time-out time of the user whose delay logout occurrence frequency is larger than a predetermined threshold is shortened. It is possible to suppress.

  In particular, according to the invention described in claim 2, claim 8 and claim 11, since the timeout time of the user whose re-login time is less than or equal to the predetermined value is longer than the second threshold value, the timeout occurs. It is possible to prevent the time from being shortened too much.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

<1. First Embodiment>
<1-1. System configuration outline>
FIG. 1 is a schematic diagram illustrating a configuration of a logout operation adjustment system 100 including a multi function peripheral (also abbreviated as MFP) 1 and a computer 90.

  The MFP 1 has a user authentication function. The MFP 1 permits the authenticated user to execute various operations according to the authority of the user. On the other hand, the MFP 1 does not permit the user who is not authenticated to execute the operation in the MFP 1 at all, or allows the execution of a part of the operation that is extremely limited.

  The MFP 1 is connected to the computer 90 via the network NW, and data can be transmitted to and received from the computer 90. The network NW includes various networks such as a LAN (Local Area Network) and the Internet.

  Specifically, the MFP 1 transmits usage information (login information and the like) of each user regarding the own device (MFP 1) to the computer 90, and the computer 90 sets the setting information (timeout) of the MFP 1 based on the usage information. Time etc.) can be reset. More specifically, the computer 90 acquires usage information (also referred to as usage history information) of each user regarding the MFP 1 and adjusts a timeout time TM or the like in the automatic logout operation of the MFP 1 for each user based on the usage information. Is possible.

  The MFP 1 functions as an image forming apparatus. More specifically, the MFP 1 is configured as a device (also referred to as a multifunction device) having a scanner function, a printer function, a copy function, a facsimile communication function, and the like.

  Specifically, as shown in the functional block diagram of FIG. 2, the MFP 1 includes an image reading unit 2, a print output unit 3, a communication unit 4, a storage unit 5, an input / output unit 6, a controller 9, and the like. Various functions are realized by operating these components in a complex manner.

  The image reading unit 2 is a processing unit that optically reads a document placed at a predetermined position of the MFP 1 and generates image data (also referred to as a document image) of the document.

  The print output unit 3 is an output unit that prints an image on various media such as paper based on image data related to the target image.

  The communication unit 4 is a processing unit capable of performing facsimile communication via a public line or the like. Furthermore, the communication unit 4 can perform network communication via the communication network NW. In this network communication, various protocols such as TCP / IP (Transmission Control Protocol / Internet Protocol) and FTP (File Transfer Protocol) are used. By using the network communication, the MFP 1 can communicate with a desired destination. Various types of data (including usage information data) can be exchanged between them. Note that the MFP 1 can also send and receive e-mails by using this network communication.

  The storage unit 5 includes a storage device such as a hard disk drive (HDD). The storage unit 5 stores a document image (image data) generated by the image reading unit 2 or the like. The storage unit 5 also stores user authentication information (including a user ID and password for authentication), usage information LM (including login information) of each user, and the like.

  The input / output unit 6 includes an operation input unit 61 that receives input to the MFP 1 and a display unit 62 that displays and outputs various types of information. Specifically, the MFP 1 is provided with an operation panel 63 (see FIG. 1). The operation panel 63 is configured by embedding a piezoelectric sensor or the like in a liquid crystal display panel, and functions as a part of the display unit 62 and also functions as a part of the operation input unit 61.

  The controller 9 is a control device that controls the MFP 1 in an integrated manner, and includes a CPU and various semiconductor memories (such as a RAM and a ROM). Various functions of the MFP 1 are realized by operating various processing units under the control of the controller 9. For example, by scanning a desired image optically using the image reading unit 2 under the control of the controller 9, an image obtained by scanning a document (original image) is acquired, and a scanner function is realized. The controller 9 also controls various processes as described below.

  The controller 9 implements various processing units by executing predetermined software programs (hereinafter also simply referred to as programs) stored in a ROM (for example, an EEPROM) in the CPU.

  Specifically, the controller 9 implements various processing units including an authentication unit 11, a login information management unit 12, an adjustment unit 15, and an automatic logout control unit 16.

  The authentication unit 11 manages an authentication operation regarding each user. Specifically, the authentication unit 11 determines whether the combination of the user ID and password input by the user of the MFP 1 using the operation input unit 61 matches the combination of the regular user ID and password related to each user. In response to this, the success or failure of authentication is determined. Note that the input of the user ID or the like is not limited to that using the operation input unit 61. For example, instead of (or in addition to) inputting a user ID or the like using the operation input unit 61, the user ID recorded on the ID card or the like is read by a card reader or the like provided in the MFP 1. The user ID may be input.

  The login information management unit 12 manages each time of “login time”, “logout time”, and “count start time (described later)” in the login operation of each user, and stores the history information in the storage unit 5.

  The automatic logout control unit 16 controls automatic logout processing. This automatic logout process is performed in response to the time-out time TM (setting value) having elapsed from the timing start time T2 when the user leaves the MFP 1 without a normal logout operation by the user (the time-out process). Automatically executed (when time TM has elapsed). By executing the automatic logout process, it is avoided that the MFP 1 is used as it is by a user other than the logged-in user (without a new authentication operation) after the logged-in user leaves the MFP 1. It is possible. This automatic logout operation is forcibly executed by the MFP 1 without depending on the user's intention, and is also referred to as “forced logout”. The time measurement start point T2 is also referred to as “count start point (time)”, and is set based on various criteria (described later).

  The adjustment unit 15 adjusts the “time-out time” TM through communication with the computer 90. The timeout time TM is a set time related to automatic logout, and more specifically, is a set time from the predetermined time point during login (such as the count start time point T2) to automatic logout. The timeout time TM is set to a value adjusted for each user by the adjustment unit 15 based on a predetermined standard. Specifically, the timeout time TM can be shortened for each user according to the history information in the first embodiment. In the second embodiment and the like to be described later, the timeout time TM of each user may be shortened or extended individually.

  FIG. 3 is a diagram illustrating a functional configuration of the computer 90.

  As shown in FIG. 3, the computer 90 includes a communication unit 94, a storage unit 95, an input / output unit 96, a CPU 99, and the like, and realizes various functions by operating these units in a complex manner.

  The CPU 99 implements various processing units by executing predetermined software programs stored in the storage unit 95 or the like.

  Specifically, the CPU 99 implements various processing units including a login information acquisition unit 83, a determination unit 84, and an adjustment unit 85.

  The login information acquisition unit 83 acquires the usage information LM of the MFP 1 for each user by communicating with the MFP 1 via the network NW. Specifically, the login information acquisition unit 83 acquires each time of “login time”, “logout time”, and “count start time” in the login operation.

  The determination unit 84 determines whether the occurrence frequency of “automatic logout” is greater than a predetermined level based on the usage information LM.

  The adjustment unit 85 of the computer 90 adjusts (shortens and / or extends) a “timeout time” that is a set time for automatic logout in cooperation with the adjustment unit 15 of the MFP 1. Specifically, the adjustment unit 85 of the computer 90 adjusts and re-determines a value related to “timeout time”, and transmits the value after the re-determination to the MFP 1. The adjustment unit 15 of the MFP 1 sets the “timeout time” after the redetermination as a new “timeout time” based on the value after the redetermination received by the communication unit 4.

<1-2. Overview of login and logout operations>
FIG. 4 is a diagram illustrating a normal logout operation. As shown in FIG. 4, in a normal logout operation, after a certain user logs in with a predetermined log-in operation (time T1), the elapsed time Δt from the count start time T2 (described later) becomes the timeout time TM. Prior to exceeding (for example, time T5), a regular logout operation by the user is performed. Then, the MFP 1 executes logout processing according to the logout operation.

  On the other hand, FIG. 5 is a diagram showing an automatic logout operation. Here, “automatic logout” means logout processing that is automatically performed without a regular logout operation by the user.

  Specifically, as illustrated in FIG. 5, the MFP 1 starts counting time from a count start time T2 (described later) after a login time T1 of a certain user (for example, a user UA). Then, when a time-out period (period) TM unique to the user has elapsed from the count start time T2 (time T6) without performing a regular logout operation, the MFP 1 automatically executes logout processing for the user. To do. In other words, when the elapsed time Δt from the count start time point T2 reaches the timeout time TM without performing a regular logout operation, the automatic logout process is forcibly executed.

  Here, as the count start time T2, for example, a time T21 when the logged-in user (operator) last operated the operation input unit 6a of the MFP 1 can be used.

  Alternatively, the time T22 at which it is detected that the logged-in user (operator) has left the MFP 1 (that is, the time when the user is unmanned) T22 may be employed as the count start time T2. Note that whether or not the logged-in user (operator) has left the MFP 1 can be determined based on, for example, a detection result by a person detection sensor (such as an infrared sensor) 65 (see FIG. 1) provided in the MFP 1. Good. According to this, the elapsed time from the time when the user leaves the apparatus (that is, the unmanned period) can be directly reflected in the timeout time.

  Alternatively, the time T23 at which the job designated by the user (designated job) is completed may be adopted as the count start time T2. In particular, when the designated job by the user ends after the logged-in user leaves the MFP 1, the measurement of the timeout time may be started from the end of the designated job (for example, a copy job). According to this, even if the unmanned period is somewhat longer, the end of the designated job is given priority, so that the automatic logout process can be prevented from being executed during the process of the designated job.

  Further, as the count start time point T2, any one of these various time points T21, T22, and T23 may be appropriately selected and employed.

  Furthermore, a different time point may be adopted as the count start time point T2 depending on the type of job.

  For example, the time T22 is used as the count start time T2 for the “copy”, “scan”, and “fax transmission” jobs, and the end time T23 of the designated job is used as the count start time T2 for the “print” job. You may do it.

  Alternatively, for the “copy”, “scan”, and “fax transmission” jobs, the times shown in FIG. 6 are adopted as the count start time T2, and for the “print” job, the designated job end time T23. May be adopted as the count start time T2.

  FIG. 6 shows a time T21 when the last operation ends (“operation end”), a time T22 when the user leaves the MFP 1 (“unmanned”), and a time T23 when the designated job ends (“job end time”). It is a figure which shows in tabular form which is employ | adopted as count start time T2. Note that the time T22 when the user leaves the MFP 1 is also expressed as “unmanned” because it is also expressed as the time when the MFP 1 is unmanned (or unmanned).

  FIG. 6 shows which time is adopted as the count start time T2 in accordance with the occurrence order of three events (“operation end”, “unmanned”, “job end”).

  For example, in the top row, it is shown that when the “operation end”, “unmanned”, and “job end” events occur in this order, the job end time T23 is adopted as the count start time T2. Yes. In the lower level (second level), when the events “operation end”, “job end”, and “unmanned” occur in this order, the unmanned time T22 is set as the count start time T2. It has been shown to be adopted. In the lower stage (third stage from the top), when the events “job end”, “operation end”, and “unmanned” occur in this order, the unmanned time T22 is counted as the count start time T2. Has been shown to be adopted. In FIG. 6, it is considered that the job operation cannot be executed after the unmanned operation, and further, the combinations below (from the fourth level to the sixth level) are excluded.

  The count start time T2 is determined based on a certain criterion among various criteria including the criteria as described above. In the following, it is assumed that the count start time point T2 is determined based on the criteria described last with reference to FIG.

<1-3. Detailed operation>
Next, the operation of the present system 100 will be described with reference to FIG.

  First, in step S <b> 11, the computer 90 collects usage information (login information) related to the MFP 1 using the login information acquisition unit 83 and the like. Specifically, the computer 90 communicates with the MFP 1 via the network NW and receives usage information LM stored in the MFP 1.

  FIG. 8 is a diagram showing usage information LM of the MFP 1 regarding a certain user (for example, UA). Similar usage information LM is acquired for other users (UB, UC,...). Further, FIG. 8 shows a case where information on “timeout time” and “remarks” is obtained in addition to information on “count start time”, “logout time”, and “login time”. However, the present invention is not limited to this. For example, only information related to “count start time” and “logout time” may be acquired. Or you may make it acquire only the information regarding "count start time", "logout time", and "login time".

  Further, FIG. 8 illustrates a case where the timeout time TM is set to 2 minutes (120 seconds). For example, in the second row from the top of FIG. 8, after logging in at 10:00 am on February 1, time measurement starts at 10:05 am and 10 seconds (= count start time T2), It is shown that the automatic logout process was executed at 10:07:10 after 2 minutes. On the other hand, in the fourth row from the top of FIG. 8, after logging in at 9:05 am on February 2, time measurement starts at 9:15 am (= count start time T2), and 1 minute It is shown that the regular logout process by the operator was executed at 9:16:30 after 30 seconds.

  In the next step S13, the computer 90 determines, based on the usage information, whether or not the occurrence frequency of automatic logout is greater than the threshold Th1 for each user of the MFP 1 by the determination unit 84 or the like. As the threshold Th1, for example, a frequency value such as 10 times per month may be set.

  As a result of such determination operation, the computer 90 extracts users whose automatic logout frequency is higher than the threshold value Th1. In short, a user who regularly performs the operation of terminating the use of the apparatus without a logout operation (also referred to as “non-regular logout addict user” or simply “addictive user”) is extracted.

  For example, when automatic logout is performed for a certain user UA at a frequency exceeding the threshold Th1 (15 times per month), it is determined that the user UA is an “addictive user”. On the other hand, when the occurrence frequency of automatic logout does not exceed the threshold value Th1 for another user UB (for example, five times a month), it is determined that the user UB is not an “addictive user”.

  In step S15, the adjustment unit 85 determines that the timeout time TM of the user (“addictive user”) extracted in step S13 should be shortened. Specifically, it is determined that the timeout time TM should be halved. For example, it is determined that the timeout time TM should be halved from 120 seconds to 60 seconds.

  In the next step S17, a setting change command (shortening command) for the timeout time TM is transmitted from the computer 90 to the MFP 1 based on the determination operation in step S15. Specifically, a shortening command is transmitted that indicates that the timeout time TM related to the change target user (for example, UA) should be shortened to the current half value (specifically, 60 seconds). This shortening command is transmitted by the adjustment unit 85, the communication unit 94, and the like.

  When the MFP 1 receives such a setting change command (shortening command) by the communication unit 4 or the like, the adjustment unit 15 changes the timeout time TM related to the change target user UA of the MFP 1 based on the setting change command. (Specifically, 60 seconds).

  As described above, according to the above operation centered on the computer 90, the timeout time TM related to the addicted user (for example, the user UA) is shortened. Therefore, even when an addict user leaves the MFP 1 without performing a logout operation, immediately after that, a person other than the user does not perform an original login operation (using the login state of the addicted user as it is). It is possible to shorten the period during which the MFP 1 can be used. Therefore, it is possible to suppress a decrease in security due to a normal logout operation not being performed.

  In particular, the timeout time TM is appropriately shortened only for the addicted user among the plurality of users, while the relatively long timeout time TM is maintained for the user who performs the regular logout operation. Therefore, the operability of the user who performs the regular logout operation is not deteriorated.

  Moreover, it is preferable that the above operation is repeatedly executed at a predetermined time (for example, at regular intervals). According to this, it is possible to correct the timeout time TM related to the addicted user at any time. In particular, when automatic logout is performed again at a frequency exceeding the threshold Th1 (for example, 15 times per month) in a predetermined period after the reduction of the timeout time TM with respect to the specific user UA, the user UA The timeout time TM may be further halved (for example, set to 30 seconds). According to this, security can be further improved. Note that the half-time number may be set to an appropriate number (for example, two times) so that the value of the time-out time TM after the change does not become too small.

<2. Second Embodiment>
The second embodiment is a modification of the first embodiment. In the first embodiment, the case where the timeout time TM is only shortened is illustrated, but the present invention is not limited to this. If the timeout time TM is shortened too much, the timeout time TM may be extended.

  Here, the time-out time TM is extended for a user who is determined that the frequency at which the “re-login time” (also referred to as “re-login time interval”) is equal to or less than a predetermined value Tr2 (for example, 30 seconds) is greater than the threshold Th2. The case is illustrated. As shown in FIG. 9, the “re-login time” TL is the time (time interval) from the logout time T6 corresponding to the predetermined login process to the login time T7 in the next login process for the same user. In detail, the re-login time TL is the time from the logout time (logout time) T6 (or T5) from the log-in state corresponding to the predetermined log-in process to the log-in time T7 in the next log-in process. Expressed.

  For example, when the time-out time TM is shortened too much, the use of the MFP 1 by the user may not actually end at the time T6 when the automatic logout is executed. In such a situation, it is assumed that the user immediately performs a login operation again in order to continue and complete the job in the MFP 1. Therefore, for users who frequently re-login immediately after logout, it is determined that the set time of the timeout time TM is inherently too short, and the timeout time TM is extended contrary to the above. Shall.

  Here, for example, by the same operation as described above, the timeout time TM of the user UA has already been halved to 60 seconds, and in such a situation, the “re-login operation immediately after logout” as described above. Suppose that is executed frequently.

  FIG. 10 is a flowchart showing an operation according to the second embodiment. In steps S11, S13, S15, and S17 in FIG. 10, operations similar to those in FIG. 7 are executed.

  In step S11, it is assumed that usage information LM (LM2) as shown in FIG. 11 is acquired. In FIG. 11, a “re-login time” column is added, and whether or not “re-login immediately after logout” (also simply referred to as “re-login immediately after”) is indicated in the remarks column. However, these items (that is, “re-login time” and “whether re-login is immediately after logout”) are calculated based on (previous) “logout time”, current “login time”, and the like. obtain. Therefore, the matter does not need to be transmitted in advance as explicit data, and may be calculated on the computer 90 side.

  For example, in the second row from the top of FIG. 11, after logging in at 10:00:00 on March 2, time measurement starts at 10:06:10 (= count start time T2), It is shown that the automatic logout process was executed at 10:07:10 after 1 minute. The third row from the top in FIG. 11 shows that the user logged in at 10:07:20 on March 2. Therefore, re-login is performed 10 seconds after the second logout time (10:07:10 am) (<Tr2). In other words, the re-login process is performed immediately after the logout process in the second stage. That is, “re-login immediately after logout” is executed.

  Thereafter, in step S23, the determination unit 84 extracts a user who is determined that the frequency at which the re-login time TL is equal to or less than the predetermined value Tr2 (that is, the occurrence frequency of “re-login immediately after logout”) is greater than the threshold Th2. The As the threshold Th2, the same value as the threshold Th1 may be set, or a value different from the threshold Th1 may be set. Here, it is assumed that, for example, 5 times is set for one month as the threshold Th2.

  For example, when the “re-login operation immediately after logout” is performed at a frequency exceeding the threshold Th2 (e.g., eight times a month) for the user UA, the user UA is determined to be a “user to be extended” Is done. On the other hand, regarding the user UC, if the occurrence frequency of the “re-login operation immediately after logout” does not exceed the threshold Th2 (for example, three times a month), the user UC is determined not to be an “extension target user”. Is done.

  In step S25, the adjustment unit 85 determines that the timeout time TM related to the user (extended user) extracted in step S23 should be extended. Specifically, for example, it is assumed that the timeout time TM is extended by 10 seconds. Specifically, when the timeout time TM is halved to 60 seconds, it is determined that the time-out time TM should be extended to “70 seconds” obtained by adding 10 seconds to the 60 seconds.

  In the next step S27, a setting change command (extension command) for the timeout time TM is transmitted from the computer 90 to the MFP 1 based on the determination operation in step S25. Specifically, an extension command is transmitted to instruct that the timeout time TM related to the change target user (for example, UA) should be extended by 10 seconds (specifically, to be set to 70 seconds). This extension command is transmitted by the adjustment unit 85, the communication unit 94, and the like.

  When the MFP 1 receives such a setting change command (extension command) by the communication unit 4 or the like, the MFP 1 changes the timeout time TM related to the change target user UA of the MFP 1 based on the setting change command. Set to the value of.

  According to the operation as described above, the timeout time TM related to the addicted user (for example, the user UA) is shortened, and when the timeout time TM is excessively shortened, the timeout time TM can be extended. Therefore, it is possible to adjust the timeout time TM to a more appropriate value.

<3. Third Embodiment>
The third embodiment is a modification of the second embodiment. The third embodiment exemplifies a case where the same operation as described above is executed by the MFP 1 alone without using the computer 90.

  FIG. 12 illustrates an MFP 1 according to the third embodiment. As illustrated in FIG. 12, the MFP 1 according to the third embodiment includes, in the controller 9, a login information acquisition unit 13 and a determination in addition to the authentication unit 11, the login information management unit 12, the adjustment unit 15, and the automatic logout control unit 16. The unit 14 is functionally realized.

  The login information acquisition unit 13 has the same function as the login information acquisition unit 83 (FIG. 3), and the determination unit 14 has the same function as the determination unit 84. Specifically, the login information acquisition unit 13 acquires the usage information LM of each user of the MFP 1 from the storage unit 5 of the MFP 1 (in this case, directly inside the MFP 1). Further, the determination unit 14 determines whether or not the occurrence frequency of “automatic logout” is greater than the threshold Th1 based on the usage information LM. Further, the determination unit 14 also determines whether or not the frequency at which the re-login time is equal to or less than the predetermined value Tr2 is greater than the threshold Th2, based on the usage information LM.

  The adjustment unit 15 adjusts (shortens and / or extends) the “timeout time” based on the determination result of the determination unit 14. Specifically, the adjustment unit 15 adjusts the “timeout time” according to the determination result of the determination unit 14 and sets the adjusted “timeout time” as a new “timeout time”.

  FIG. 13 is a flowchart showing the operation in the MFP 1. In steps S31, S33, S35, S43, and S45 in FIG. 13, the same operations as those in steps S11, S13, S15, S23, and S25 in FIG. 10 are performed. However, each step in FIG. 13 is different from the corresponding step in FIG. 10 in that the subject of the operation is not each function processing unit of the computer 90 but each function processing unit of the MFP 1.

  For example, in step S31, each user's usage information LM is acquired by the login information acquisition unit 13, and in step S33, the determination unit 14 of the MFP 1 performs a determination operation regarding the occurrence frequency of “automatic logout”. Is extracted. In step S <b> 35, it is determined that the timeout time for the “addicted user” should be shortened, and the shortened “timeout time” is set by the adjustment unit 15.

  Also, in step S43, the determination unit 14 extracts users (extension target users) whose re-login time is less than the predetermined value Tr2 and greater than the threshold Th2. In step S45, it is determined that the timeout time of the extension target user should be extended, and the extended “timeout time” is set by the adjustment unit 15.

  Also by such an operation, it is possible to obtain the same effect as in the second embodiment.

<4. Other>
Although the embodiments of the present invention have been described above, the present invention is not limited to the contents described above.

  For example, in each of the above embodiments, the case where it is determined whether or not the occurrence frequency of automatic logout is greater than the threshold Th1 (see Steps S13 and S33) is illustrated, but the present invention is not limited to this. Specifically, as shown in FIG. 14, the occurrence frequency of the “delayed logout” operation in which the period from the predetermined count start time T2 after log-in by the user to the logout time T5 is equal to or greater than the predetermined value Tr3 is greater than the threshold Th3. You may make it determine whether it is large. If it is determined that the occurrence frequency of “delayed logout” is greater than the value Th3, the timeout time TM related to the user may be shortened (for example, set to the value Tr3). The threshold value Th3 may be the same value as the threshold value Th1, or may be a value different from the threshold value Th1. The value Tr3 is a predetermined value that is equal to or less than the timeout time TM. The value Tr3 is set to a value that is half the timeout time TM, for example.

  Such a modification is particularly useful when the initial timeout time TM is initially set to a relatively large value. For example, when the timeout time TM is set to 5 minutes (300 seconds), when it is determined that the occurrence frequency of delayed logout is greater than a threshold Th3 (for example, 8 times / month), the timeout time TM May be halved (for example, changed to 2 minutes 30 seconds). According to this, for a user who does not forget the logout operation to the extent that automatic logout occurs frequently but is often left without logout operation for a relatively long period of time, the timeout time TM of the user is shortened. Security can be improved.

  Further, in each of the above-described embodiments, the case where the above idea is applied to the MFP 1 is illustrated, but the present invention is not limited to this, and is applicable to various devices (for example, a scanner device, a personal computer, etc.) having a user authentication function. It is also possible to do.

It is the schematic which shows the structure of a logout operation adjustment system. 2 is a functional block diagram of an MFP. FIG. It is a functional block diagram of a computer. It is a figure which shows normal logout operation | movement. It is a figure which shows an automatic logout operation | movement. It is a figure which shows count start time. It is a flowchart which shows operation | movement of this system. FIG. 6 is a diagram illustrating MFP usage information regarding a certain user. It is a figure which shows re-login time. It is a flowchart which shows the operation | movement which concerns on 2nd Embodiment. FIG. 6 is a diagram illustrating MFP usage information regarding a certain user. FIG. 10 is a schematic diagram illustrating a configuration of an MFP according to a third embodiment. It is a flowchart which shows the operation | movement which concerns on 3rd Embodiment. It is a figure which shows the operation | movement which concerns on a modification.

Explanation of symbols

1 MFP
63 Operation Panel 90 Computer 100 Logout Operation Adjustment System NW Communication Network T1 Login Time T2 Count Start Time (Time Start Time)
T5, T6 Logout time T7 Relogin time TL Relogin time TM Timeout time Δt Elapsed time

Claims (15)

An image forming apparatus having a user authentication function,
Storage means for storing user usage information relating to the image forming apparatus;
A determination unit that determines whether or not the frequency of occurrence of automatic logout that has been automatically logged out without a regular logout operation by the user is greater than a first threshold, based on the usage information;
If it is determined that the frequency of occurrence of the automatic logout is greater than the first threshold value, an adjustment unit that shortens a timeout time related to the automatic logout of the user;
An image forming apparatus comprising: The image forming apparatus according to claim 1.
Whether the determination means has a frequency that the re-login time, which is the time from the logout time corresponding to a predetermined login process to the login time in the next login process, is less than or equal to a predetermined value for the user, is greater than a second threshold value. Is further determined based on the usage information,
The image forming apparatus, wherein the adjusting unit extends the time-out period for the user who is determined that the frequency at which the re-login time is equal to or less than the predetermined value is greater than the second threshold value. The image forming apparatus according to claim 1, wherein:
Automatic logout control means for executing the automatic logout in response to the elapse of the timeout time from the count start time based on a predetermined criterion;
An image forming apparatus further comprising: The image forming apparatus according to claim 3.
Detecting means for detecting that the logged-in user has left the image forming apparatus;
Further comprising
The automatic logout control means sets the end point of the specified job as the count start point when the specified job by the user ends after the logged-in user leaves the apparatus. Image forming apparatus. The image forming apparatus according to claim 3.
Detecting means for detecting that the logged-in user has left the image forming apparatus;
Further comprising
The automatic logout control means sets the time when the user leaves the device as the counting start time when the user leaves the device after the designated job by the logged-in user is completed. An image forming apparatus. The image forming apparatus according to claim 3.
The image forming apparatus, wherein the automatic logout control unit sets a time point when the last operation is performed by the logged-in user as the counting start time point. A server connected via a network to a specific device having a user authentication function,
Obtaining means for obtaining user usage information relating to the specific device;
A determination unit that determines whether or not the frequency of occurrence of automatic logout that has been automatically logged out without a regular logout operation by the user is greater than a first threshold, based on the usage information;
If it is determined that the frequency of occurrence of the automatic logout is greater than the first threshold value, a communication for transmitting to the specific device a shortening instruction that instructs the user to shorten a time-out period related to the automatic logout Means,
A server comprising: The server according to claim 7,
Whether the determination means has a frequency that the re-login time, which is the time from the logout time corresponding to a predetermined login process to the login time in the next login process, is less than or equal to a predetermined value for the user, is greater than a second threshold value. Whether or not based on the usage information,
When it is determined that the frequency at which the re-login time is equal to or less than a predetermined value is greater than the second threshold, the communication unit issues an extension command that instructs to extend the timeout time of the user. A server that transmits to the specific device. In the server according to claim 7 or 8,
The server characterized in that the specific device is an image forming device. On the computer,
a) a procedure for acquiring user usage information regarding a specific device having a user authentication function;
b) a procedure for determining, based on the usage information, whether or not the frequency of occurrence of automatic logout in which logout processing is automatically performed without a regular logout operation by the user is greater than a first threshold; ,
c) If it is determined that the frequency of occurrence of the automatic logout is greater than the first threshold, a shortening instruction is sent to the specific device instructing that a timeout time for the automatic logout of the user should be shortened. And the steps to
A program for running The program according to claim 10, wherein
d) Whether or not the frequency at which the re-login time that is the time from the logout time corresponding to the predetermined login process to the login time in the next login process is less than or equal to a predetermined value is greater than the second threshold for the user A procedure for determining based on the usage information;
e) If it is determined that the frequency at which the re-login time is equal to or less than a predetermined value is greater than the second threshold value, an extension command for instructing that the timeout time of the user should be extended is specified in the specific device To send to
A program for causing the computer to further execute. In the program according to claim 10 or 11,
The program is characterized in that the specific device is an image forming device. An image forming apparatus,
Storage means for storing user usage information relating to the image forming apparatus;
Determination based on the usage information as to whether or not the occurrence frequency of a delayed logout operation in which a period from a predetermined count start time after log-in by the user to a logout time is equal to or greater than a predetermined value is greater than a predetermined threshold Means,
When it is determined that the frequency of occurrence of the delayed logout is greater than the predetermined threshold, an adjustment unit that sets an automatic timeout time for the user to a value smaller than the predetermined threshold;
An image forming apparatus comprising: A server connected via a network to a specific device having a user authentication function,
Obtaining means for obtaining user usage information relating to the specific device;
Determination based on the usage information as to whether or not the occurrence frequency of a delayed logout operation in which a period from a predetermined count start time after log-in by the user to a logout time is equal to or greater than a predetermined value is greater than a predetermined threshold Means,
If it is determined that the frequency of occurrence of the delayed logout is greater than the predetermined threshold, a transmission unit that transmits to the specific device a shortening instruction that indicates that the automatic timeout period related to the user should be shortened;
A server comprising: On the computer,
a) a procedure for acquiring user usage information regarding a specific device having a user authentication function;
b) Based on the usage information, whether or not the occurrence frequency of a delayed logout operation in which a period from a predetermined count start time after log-in by the user to a logout time is equal to or greater than a predetermined value is greater than a predetermined threshold value And the steps to
c) when it is determined that the frequency of occurrence of the delayed logout is greater than the predetermined threshold, a procedure for transmitting a shortening instruction instructing that the automatic timeout time for the user should be shortened to the specific device;
A program for running

Images