JP2010004568A - Image forming apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To add authenticating functions for responding to various purposes, to an image forming apparatus easily and alter the authenticating functions easily. <P>SOLUTION: The image forming apparatus includes an application and a system-side software which gives a system-side service to the application. Further, the image forming apparatus includes an authenticating module which makes the image forming apparatus display an authenticating image plane on its operation panel. When the authenticating data input from the authenticating image plane satisfy authenticating conditions, the module makes the image forming apparatus display the image plane for its use on its operation panel, instead of the authenticating image plane. Moreover, the image forming apparatus is constituted so as to have the authenticating module independently of the system-side software. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an image forming apparatus, and more particularly to an image forming apparatus having an authentication function.

  2. Description of the Related Art Conventionally, there is a method of canceling the use restriction by providing a user restriction mode in an image forming apparatus such as a printer or a copier, and authenticating with a user code at the time of use. In addition, a user restriction mode is also provided in an image forming apparatus in which the functions of each apparatus such as a printer, a copy, a facsimile, and a scanner are housed in one casing.

  In addition, a system that allows devices such as key cards, prepaid cards, coin racks and card readers to be connected to the image forming device described above, and allows usage restrictions to be released and billing management by inserting coins and inserting coins has become widespread. Yes.

The purpose of the above-mentioned usage restriction and the like varies depending on the user of the organization or company in which the image forming apparatus is used, and the image forming apparatus in which means for performing the usage restriction and billing management by a method according to the purpose of each user is mounted Is required to be provided quickly.
However, authentication for use restriction in the prior art has been realized by including an authentication function in the system software fixedly provided in the image forming apparatus, so the authentication function is customized according to each user's request. It couldn't be done quickly.

  Furthermore, depending on the purpose of usage restrictions and billing management, the method may need to be changed, and it is desired that the usage restrictions and billing management methods can be easily changed. However, in the conventional method in which the authentication function for restricting the use is incorporated into the system software, changing only a part of the function in the system has a great influence on other functions that are not scheduled to be changed. It was not easy.

  SUMMARY An advantage of some aspects of the invention is that it provides an image forming apparatus, an authentication method, and a program which can easily add or change an authentication function according to various purposes. And

  The above object can be achieved by the following aspects of the invention.

  The invention according to claim 1 is an image forming apparatus having an application and system-side software that provides a system-side service to the application, displaying an authentication screen on an operation panel of the image forming apparatus, and An authentication module for causing the operation panel to display a screen for using the image forming apparatus instead of the authentication screen when the authentication data input from the authentication screen satisfies the authentication condition; The authentication module is an image forming apparatus provided separately from the system-side software.

  According to the present invention, it is possible to prevent the transition from the authentication screen to the use screen of the image forming apparatus unless the authentication condition is satisfied, and use restrictions can be imposed. Accordingly, if the authentication screen and the authentication conditions are appropriately set, it is possible to restrict the use according to various purposes. Further, since the authentication module is provided separately from the system-side software fixedly provided in the ROM or the like, the authentication module can be easily added or changed.

  According to a second aspect of the present invention, in the image forming apparatus according to the first aspect, the system-side software includes an authentication function unit, and when a specific application in the image forming apparatus is selected by a user, The image forming apparatus refers to the information indicating the association between the type of application and the authentication module or the authentication function unit of the system-side software, thereby enabling the authentication module or the system-side software corresponding to the specific application. The authentication function unit is used for authentication.

  According to the present invention, the authentication function of the system side software and the additionally installed authentication module can be selectively used for each application.

  According to a third aspect of the present invention, in the image forming apparatus according to the first or second aspect, the means for executing the authentication module from a recording medium externally attached to the image forming apparatus, or the authentication module as the recording medium To the image forming apparatus.

  According to the present invention, a customized authentication module can be executed as necessary.

  According to a fourth aspect of the present invention, in the image forming apparatus according to the first or second aspect, the authentication module is downloaded and executed from a server connected to the image forming apparatus via a communication network. Have means. According to a fifth aspect of the present invention, in the image forming apparatus according to the fourth aspect, the authentication module is a Java (registered trademark) program, and the authentication module execution means includes a class library and a virtual machine. . According to such a configuration, it is possible to further easily add and change the authentication module.

  According to a sixth aspect of the present invention, in the image forming apparatus according to the first or second aspect, the image forming apparatus further includes a communication unit for performing wireless data communication with a portable terminal, and the authentication module includes: Authentication is performed using authentication data received from the portable terminal by the communication means. The invention according to claim 7 is the image forming apparatus according to claim 6, wherein the image forming apparatus generates screen data for inputting the authentication data from the portable terminal, and the screen data Is transmitted to the portable terminal.

  According to the present invention, authentication data can be input not only from the operation panel but also from a mobile terminal such as a PDA or a mobile phone.

  According to an eighth aspect of the present invention, in the image forming apparatus according to any one of the first to seventh aspects, the user is requested to input a department name or an application purpose as the authentication data. . This makes it possible to perform authentication according to various purposes.

  According to a ninth aspect of the present invention, in the image forming apparatus according to the first or second aspect, the authentication panel of the authentication module is preferentially displayed on the operation panel when the image forming apparatus starts up. Is. According to the present invention, the authentication screen can be displayed immediately after the power is turned on, and the use can be restricted.

  According to a tenth aspect of the present invention, in the image forming apparatus according to the first or second aspect, when a screen other than the authentication screen is displayed on the operation panel, a job end in the image forming apparatus, Alternatively, there is provided means for displaying the authentication screen in place of a screen other than the authentication screen when a system auto clear of the image forming apparatus or a key input for using the authentication module is performed. .

  According to the present invention, it is possible to automatically display an authentication screen even when a job is finished after leaving the spot during use of the image forming apparatus. The authentication screen can also be displayed when the system auto clear function is activated, such as when the image forming apparatus is left unattended. Further, if the key input for using the authentication module is performed while the image forming apparatus is in use, the authentication screen can be displayed. As a result, unauthorized use by others can be prevented.

  According to an eleventh aspect of the present invention, in the image forming apparatus according to the tenth aspect, the image forming apparatus activates the system auto-clear when detecting a lapse of a predetermined time after a predetermined job is completed. The authentication screen is displayed.

  According to a twelfth aspect of the present invention, in the image forming apparatus according to the first or second aspect, the authentication module has means for collecting log information relating to use of the image forming apparatus.

  According to a thirteenth aspect of the present invention, in the image forming apparatus according to the twelfth aspect, the authentication module collects a print completion notice as log information relating to the use, and the number of printed sheets reaches a predetermined allowable number. When this occurs, a warning is displayed on the operation panel.

  The invention described in claims 14 to 19 is an invention of an authentication method in the image forming apparatus. The invention described in claims 20 to 24 is a program corresponding to the authentication module of the image forming apparatus. The invention described in claim 25 is an invention of a recording medium on which the program is recorded.

  According to the present invention, since the authentication module is provided separately from the system-side software fixedly provided in the ROM or the like, an image forming apparatus having an authentication function that can be easily added or changed can be provided.

FIG. 2 is a diagram illustrating an external appearance example of a multifunction machine and an operation panel. 2 is a diagram illustrating a configuration in which a multifunction peripheral 100 and an authentication / billing server 150 are connected via a network. FIG. 2 is a block diagram illustrating a configuration of the multifunction peripheral 100. FIG. 2 is a block diagram illustrating a configuration of the multifunction peripheral 100. FIG. 2 is a hardware configuration diagram of the multifunction peripheral 100. FIG. 3 is a flowchart illustrating an operation when the multifunction peripheral 100 is started up. It is a figure for demonstrating an application setting file. It is a figure which shows the example of the content of an application setting file. 5 is a flowchart showing the operation of the multifunction peripheral 100 after the activation of the SCS 122. It is a figure for demonstrating the setting of a priority application. It is a screen state transition diagram of the operation panel 210 in the first embodiment. It is a sequence chart for demonstrating operation | movement of the authentication module in 1st Embodiment. It is a screen state transition diagram in a 2nd embodiment. FIG. 10 is a configuration diagram for explaining a processing flow of a multifunction peripheral 100 according to a second embodiment. 10 is a sequence chart for explaining the flow of processing of the multifunction peripheral 100 according to the second embodiment. 3 is a diagram illustrating an example of a configuration of an authentication module 117. FIG. This is a configuration example of a Java (registered trademark) execution environment 118 including an authentication module 117 (Java (registered trademark) program). It is a figure which shows the setting content of authentication mode. It is a figure for demonstrating the authentication method in 3rd Embodiment. It is the authentication screen A displayed by the system side authentication control part. It is a flowchart in the case of using the authentication screen by a system side authentication control part. It is a figure for demonstrating the authentication method in 3rd Embodiment. It is the authentication screen B displayed by the authentication module. It is a flowchart in the case of using the authentication screen by a system side authentication control part, and the authentication screen by an authentication module. 2 is a diagram illustrating a configuration in a case where a multifunction device 100, a PDA 601, a mobile phone 602, and the like communicate.

(First embodiment)
First, the outline | summary of the 1st Embodiment of this invention is demonstrated using FIG.

  An image forming apparatus (hereinafter, referred to as a multi-function peripheral) according to the present embodiment includes hardware resources used in image forming processing such as a display unit, a printing unit, and an imaging unit, and includes applications such as a printer, a copy, and a facsimile. It is equipped with multiple. In addition, various control services are provided between these applications and hardware resources to perform management of hardware resources, execution control, and image forming processing. This MFP can easily add applications compared to conventional MFPs, so develop applications that meet the needs of users and add new ones as needed to MFPs that are already operating on the user side. It is possible to add applications. The control service can be referred to as system-side software.

In this multifunction device, a common operation unit (hereinafter referred to as an operation panel) as shown in FIG. 1 is used for each application. Application switching can be performed by pressing an application switching key on the operation panel.
The multifunction machine in the present embodiment includes the authentication module according to the present invention. The authentication module is provided separately from the authentication function that is fixedly provided on the system side. When the screen by this authentication module is displayed on the operation panel, the screen cannot be switched to another application or the like unless the authentication condition is cleared. Note that the authentication information used by the authentication module may be provided in the multi-function peripheral, or the authentication information is placed on an external authentication / billing server and the authentication / billing server requests authentication via the network. It is good also as a simple structure.

  Further, in the MFP according to the present embodiment, the authentication module can be set to “priority application”. The priority application is an application that starts up with screen control authority when the power is turned on or the system is reset. The priority application has the screen control right of the operation panel when the MFP is started up. Therefore, by setting the authentication module to “priority application”, use of a desired application is limited unless the authentication condition is cleared. Note that what can be set as the “priority application” is not limited to a so-called application, and may be software on the system side. In other words, the “priority application” in this specification is used to include applications and software on the system side.

  An example of the overall configuration in the case of using an authentication / billing server is shown in FIG. FIG. 2 shows a configuration in which the MFP 100 and the authentication / billing server 150 are connected via a network.

  An outline of the operation of the multi-function peripheral in the configuration shown in FIG. 2 will be described next.

  When the authentication module is launched as a priority application, an “user code” and “password” input screen is displayed on the operation panel screen for authentication. In addition, when information is acquired from a card using a card reader provided in the multifunction device, a message such as “please pass the card” is displayed.

  An example in which a user code is used will be described. First, a user who wants to use the multifunction device 100 inputs a user code from the screen of the operation panel. The multifunction device 100 receives the input of the user code and makes an inquiry to the authentication / billing server 150 on the network. On the authentication / billing server 150 side, if there is data that matches the input user code, an authentication OK notification is returned to the authentication module. The authentication module displays “Please select the key of the application you want to use” etc. on the operation panel and validates the application switching key.

  When the user presses the copy key here, a copy screen is displayed, and a document can be set and copying can be started. When copying is completed and a certain time (timer setting: for example, idle state 30 seconds) elapses and system auto clear is activated, the authentication module screen is displayed and the usage restriction mode is restored.

  Next, the first embodiment of the present invention will be described in more detail.

  FIG. 3 is a block diagram showing a configuration of the multifunction machine according to the present embodiment. As shown in FIG. 3, the multi-function device 100 includes a monochrome line printer (B & W LP) 101, a color line printer (Color LP) 102, hardware resources 103 such as a scanner and a facsimile, and the platform 120 and applications. And a software group 110 composed of 130 and a multifunction machine starting unit 140 that is executed when the power is turned on.

The multifunction device starting unit 140 is executed first when the multifunction device 100 is turned on, performs device initialization and diagnosis, and activates each control service, each application, and the like.
The platform 120 interprets a processing request from the application 130 and generates a hardware resource acquisition request, and a system resource that manages one or a plurality of hardware resources and arbitrates the acquisition request from the control service. A manager (SRM) 123 and a general-purpose OS 121 are included.

  The control service is formed of a plurality of service modules, and includes an SCS (system control service) 122, an ECS (engine control service) 124, an MCS (memory control service) 125, an OCS (operation panel control service) 126, and an FCS. (Fax Control Service) 127 and NCS (Network Control Service) 128. The platform 120 has an application program interface (API) that can receive a processing request from the application 130 by a predefined function.

  The general-purpose OS 121 is a general-purpose operating system such as UNIX (registered trademark). The process of the SRM 123 performs system control and resource management together with the SCS 122. The process of the SCS 122 performs application management, operation unit control, system screen display, LED display, resource management, interrupt application control, and the like, and the process of the ECS 124 controls the engine of the hardware resource 103. The SCS 122 includes a user authentication function in addition to the above management function. For example, it has a function of permitting the use of the multifunction device when the user code and password input by the user match the user code and password registered in advance.

  The process of the MCS 125 performs processing related to use of an image memory and a hard disk device (HDD). The FCS 127 process performs processing for facsimile transmission / reception. The NCS 128 is a process for providing a service that can be commonly used for applications that require network I / O. That is, the NCS 128 includes a function for performing protocol processing for data communication.

  The process of the OCS 126 controls an operation panel (operation panel) serving as information transmission means between the operator (user) and the main body control. The OCS 126 acquires a key press from the operation panel as a key event, sends a key event function corresponding to the acquired key to the SCS 122, and displays various screens on the operation panel in response to a request from the application 130 or the control service. A drawing function for drawing output, a function for controlling the operation panel, and the like are composed of pre-registered OCS library portions.

  The application 130 includes a printer application 111 that is a printer application, a copy application 112 that is a copy application, a fax application 113 that is a facsimile application, and a scanner application 114 that is a scanner application. Furthermore, it has additional applications 115 and 116 added to the multi-function peripheral as necessary. These additional applications can be installed (loaded) from a flash card, SD card, or the like as needed. It is also possible to start up from a flash card, SD card or the like. Furthermore, it is possible to install and start from another server via a network.

  Furthermore, the multi-function device 100 has an authentication module 117 according to the present invention. The authentication module 117 can be easily added to the multifunction peripheral from a flash card, an SD card, a network-connected server, or the like, in the same manner as the additional application. In addition, when the function of the authentication module is changed, a new authentication module can be easily installed. The authentication module may be provided on the control service side as shown in FIG. 3, or may be provided as an application as shown in FIG.

  Each process of the application 130 and each process of the control service execute processing while performing inter-process communication by calling a function, transmitting a return value thereof, and transmitting / receiving a message. The control service provides a common service to the application 130. The control service may be referred to as system side software. In addition, a service provided to an application by a control service may be referred to as a system side service.

  FIG. 5 is a hardware configuration diagram of the MFP 100 shown in FIGS. As shown in FIG. 5, the multifunction peripheral 100 includes a controller board 200, an operation panel 210, a fax control unit (FCU) 220, a USB device 230, an IEEE 1394 device 240, a Bluetooth device 250, and an engine unit 260. It is composed of

  The controller board 200 includes an ASIC 201, a CPU 202, a RAM 203, a ROM 204, an HDD 205, a flash card interface unit 206, and a network interface controller 209.

  The operation panel 210 is directly connected to the ASIC 201. The FCU 220, USB device 230, IEEE 1394 device 240, Bluetooth device 250, and engine unit 260 are connected to the ASIC 201 via the PCI bus.

  The network interface controller 209 communicates with other devices connected to the network 271 using a MAC address or the like. The FCU 220 is connected to the telephone network 272. The USB device 230, the IEEE 1394 device 240, and the Bluetooth device 250 can be connected to other terminals 273 to 275. The other terminals 273 to 275 may be a personal digital assistant (PDA), a mobile phone, etc. in addition to a PC. The flash card interface unit 206 is an interface for exchanging data with the inserted flash card 207. Furthermore, an SD card interface unit may be provided.

  The ROM 204 stores the above-described applications, the control services that make up the platform 120, and the programs of the SRM 123.

  In this embodiment, the authentication module 117 is activated directly from the flash card 207, but it may be installed and activated from the flash card 207 to the HDD 205. The application 130 such as the printer application 111, the copy application 112, the fax application 113, and the scanner application 114, and each control service are incorporated in the ROM 204 at the time of shipment. These applications and control services are activated by the multifunction device activation unit 140 when the multifunction device 100 is activated (when the power is turned on). That is, since the authentication function unit included in the SCS 122 is incorporated in the ROM 204 at the time of shipment, the function change is not easy. On the other hand, the authentication module 117 can be activated from a flash card, an SD card, or the like as necessary, so that it can be easily added or changed.

  Hereinafter, the operation of the multifunction peripheral 100 according to the present embodiment will be described in detail.

  FIG. 6 is a flowchart showing the operation when the multifunction peripheral 100 is started up. This process is a process executed by the multifunction machine starting unit 140.

  First, after the power is turned on or reset, an initialization process is performed (step S1). The initialization process includes BIOS (Basic Input / Output System) and boot loader startup, kernel startup, hardware initialization, diagnosis, and the like.

  Next, a ROM file (romfs format file) in a memory medium such as a ROM is searched (step S2), and an application setting file arranged at a predetermined position in the memory medium is searched (step S3). For example, as shown in FIG. 7, there are ROM files (ROM0 and ROM1) in the ROM and flash card, and an application setting file is present at the beginning of each. An example of the application setting file in the ROM is shown in FIG. 8A, and an example of the application setting file in the flash card is shown in FIG. In FIG. 8, “−2” or the like indicates the activation priority.

  Next, referring to the application setting file in the ROM, the ROM file system (romfs) is mounted according to the mount command, and the application setting file (FIG. 8B) at the mount destination is also referred to, The order is checked (step S4), and various applications and control services including SCS are activated (step S5). In the examples of FIGS. 7 and 8, applications are activated in the order of A → C → B → D → E.

  When an application is also placed on the hard disk (HDD 205), a launcher for starting a hard disk program is started. After launching the hard disk, the launcher waits until the hard disk preparation is completed (step S6), and then searches the ROM file and application setting file, and starts the application according to the application setting file (steps S7 to S9). .

  FIG. 9 is a flowchart showing the operation of the multifunction peripheral 100 after the activation of the SCS 122, which is one of the control services.

  When the SCS process is started according to the application setting file, first, a window is displayed on the operation panel 210 (step S11), and a message such as “Please wait” is displayed. Meanwhile, application registration of each activated application (copy, printer, etc.) is performed (step S12). The SCS 122 receives an application registration request message from each application, and performs application registration by storing an application identification ID or the like in a RAM or the like.

  Subsequently, it is checked whether or not a priority application is set by referring to a predetermined area (hereinafter referred to as a priority application area) of a storage device such as the RAM 203 (step S13). If no priority application is set in the priority application area of the storage device, the default application (usually a copy application) is set as the priority application (step S14). If the authentication module is set as the priority application, the authentication module has priority. It becomes an application (step S15).

  Setting a certain application as a priority application in the priority application area means giving the application access authority to the operation panel. That is, it means giving screen control authority. Hereinafter, a case where the authentication module 117 is set as a priority application will be described. When the authentication module 117 is set as a priority application, the SCS 122 transmits a screen control authority grant notification message to the authentication module 117 (step S16).

  Upon receiving the screen control authority grant message from the SCS 122, the authentication module 117 displays a user authentication screen on the operation panel 210 (step S17). More specifically, the OCS 126 performs screen display on the operation panel 210 in response to a display request from the authentication module 117. That is, when the authentication module 117 specifies drawing information to be displayed on the OCS 126 and calls a drawing function, the OCS 126 performs display processing of the specified drawing information.

  If the input from the user on the user authentication screen satisfies the authentication condition (Y in step S18), a message indicating that an application should be selected is displayed on the operation panel together with a device usage permission message (step S19). . Note that operations such as key input and button pressing from the operation panel 210 are notified to the authentication module via the OCS 126 and the SCS 122.

  When the user selects an application from the operation panel 210, the selected application is notified to the SCS 122, and the SCS 122 changes the setting content of the priority application to the selected application. Then, a message for granting screen control authority is notified to the selected application. Thereafter, the selected application is executed and processed (step S20).

  During the execution of the application, the screen control authority is transferred to the authentication module when the system auto clear, the authentication module key is pressed, and the job of the application ends, and the authentication module displays the authentication screen.

  In the above example, the authentication module 117 is initially set as the priority application. The setting is performed as follows. A priority application setting is selected from the initial setting screen of the multifunction peripheral 100, and a priority application setting screen including an additional application (such as an authentication module) as shown in FIG. 10 is displayed. Then, a desired additional application is selected from the screen. Thereby, the selected additional application name is registered in the priority application area. When the multifunction device is activated, the SCS 122 refers to this information, so that it is possible to determine whether or not the priority application is set, and to display an authentication screen on the authentication module when the multifunction device 100 starts up.

  FIG. 11 is a screen state transition diagram of the operation panel 210 when the authentication module 117 is used. FIG. 11 is a diagram focusing on the copy application.

  As shown in the figure, when the power is turned on or restarted, the screen first transits to the authentication module screen and waits for input of the authentication condition (state 1). If the input from the user does not satisfy the authentication condition, the authentication module screen remains displayed. When the input from the user satisfies the authentication condition (in the case of authentication OK), the application selection screen is displayed and the application switching key event is waited (state 2). Move to the screen.

  For example, when a copy application is selected, a copy screen is displayed and copying is possible (state 3). Then, during the copy application operation, the screen returns to the authentication module screen by a job end, system auto clear, a key event for transitioning to the authentication module, or the like.

  Next, the operation of the authentication module 117 will be described with reference to the flowchart of FIG. The left side of FIG. 12 shows the display contents of the operation panel 210 corresponding to each operation. Although display on the operation panel and data input from the operation panel are performed via the OCS 126, FIG. 12 focuses on the SCS 122, the authentication module 117, and the copy application 112, and the OCS 126 is not illustrated.

  In the figure, the authentication module screen is initially displayed and is in a state of waiting for an authentication condition input (authentication condition input waiting period P1). In this state, if the application switching key event is notified to the SCS 122 and a screen release request is issued from the SCS 122 to the authentication module 117, the authentication module 117 does not accept it and returns NG to the SCS 122. That is, in the authentication condition input waiting period P1, the authentication module 117 returns NG to the screen release request and does not permit screen release unless there is an input that satisfies the authentication condition.

  When authentication information such as a user code or password is input from the operation panel 210, the SCS 122 notifies the authentication information to the authentication module 117, and checks whether the authentication information is valid. Is notified to the SCS 122 (authentication check).

  In the authenticated period P2, the authentication module 117 displays an application switching screen. The application switching screen display may be performed by the SCS 122. When the copy application 112 is selected while the application switching screen is displayed, a copy application switching key event is notified to the SCS 122, and a screen release request is sent from the SCS 122 to the authentication module 117. Since authentication has been completed, the authentication module 117 notifies the SCS 122 of screen release OK.

  Then, the SCS 122 sets a copy application in the priority application area, and notifies the copy application of a notification message for granting screen control authority. Then, the copy application 112 displays a copy screen.

  Thereafter, the copy application is used in the copy use period P3. Here, when the authentication module 117 is selected by pressing a predetermined key from the operation panel 210 during copying, an authentication module key event is notified to the SCS 122. When the SCS 122 issues a screen release request to the copy application, the copy application notifies the SCS 122 of the screen release OK. Then, the SCS 122 sets the priority application area to the authentication module 117 and notifies the authentication module 117 of a screen control authority grant message. Then, the authentication module 117 displays an authentication module screen and waits for authentication condition input (authentication condition input waiting period P4). In addition, by making it possible to display the authentication module screen during copying, even if the user leaves the spot during copying, it is possible to prevent copying without permission from others.

  If an authentication module key event is not generated during copying and the MFP 100 is left for a while after copying is completed, the system auto-clear is activated by the SCS 122, and the SCS 122 transfers control authority to the authentication module 117. 117 displays an authentication module screen, and enters an authentication condition input waiting period P5.

  Note that, after the copying is completed, instead of using the authentication module 117, the use restriction function by the SCS 122 may be operated to open a warning pop-up window such as “Please pass the card” to restrict the use.

  As described above, according to the first embodiment, the authentication module 117 can restrict the use of the entire multifunction peripheral 100. In the above example, the authentication condition is matched with the user code or the like, but it is also possible to display an authentication screen that meets the authentication condition by using the authentication condition according to the application and request. For example, authentication can be performed using a company-specific employee card, fingerprint, or the like. The authentication method itself is not particularly limited. For example, any of a method in which the multifunction peripheral 100 itself checks the authentication conditions and a method in which the remote authentication / billing server checks the authentication conditions can be used. In addition, when changing the authentication conditions and the authentication method, it is only necessary to change the authentication module, and there is no need to change other applications (copy, printer, FAX, etc.) or system side software, so it can be easily customized. .

  In addition, since the screen can be changed to the authentication module screen during copying, even if a large number of copies are set and the site is left, the screen cannot be changed to another application screen unless authentication is performed again. Therefore, there is no risk of unauthorized use by others. In addition, even if you forget to switch to the application screen for authentication and leave the front of the MFP 100, the system auto-clear can be activated and the authentication screen can be displayed after the copy is completed. There is no fear of it.

(Second Embodiment)
Next, a second embodiment of the present invention will be described. In the second embodiment, the authentication module 117 counts the remaining frequency when managing the number of copies. That is, the authentication module 117 performs not only authentication but also processing related to charging.

  FIG. 13 shows screen transitions in the second embodiment. As shown in the figure, in the second embodiment, the authentication module 117 displays a warning message (state 4) when the copy application exceeds the allowable number while the copy application is being used (state 3). In this case, if the remaining number is updated, the screen returns to the copy screen, but if it is not updated, printing is canceled and the screen returns to the authentication module screen.

  With reference to the configuration diagram of FIG. 14 and the sequence chart shown in FIG. 15, the flow of processing of the multifunction peripheral 100 in the second embodiment will be described. The configuration illustrated in FIG. 14 is a configuration in which an authentication / billing server 150 is connected to the multifunction peripheral 100 via a network.

  After inputting the user code or the like on the authentication module screen, the authentication / billing server 150 performs user authentication by comparing the registered user code with the input user code. If the authentication is successful, the number of copies that can be used by the authenticated user (referred to as the remaining number) is sent to the multi-function peripheral 100 (step S101).

  The authentication module 117 receives the remaining number via the NCS 128 and stores it in a storage device such as a nonvolatile RAM or HDD (step S102). Note that this remaining number is a user unit when charging is made for each user, and the remaining number for each user is recorded in the storage device. For example, when charging is made for each department, the remaining number is recorded for each department.

  As a result of successful authentication, an application selection instruction is displayed on the operation panel as described in the first embodiment, and by selecting a copy application there, the screen control authority is transferred to the copy application 112, and the copy screen is displayed. Is displayed.

  The copy application 112 inquires of the authentication module 117 whether or not the remaining number is greater than 0, and the authentication module 117 returns a print OK if it is greater than 0 (step S103). Inquiries can also be made via the SCS 122. Further, the copy application 112 may confirm the value of the remaining frequency by checking the storage device.

  When copying is started by the user, the copy application 112 notifies the ECS 124 of a print job (step S104). Upon receiving a command from the ECS 124 according to the job, the copy engine notifies the ECS 124 of an event of printing completion every time one sheet is printed (step S105), and the event is notified via the SCS 122 to the authentication module 117. (Step S106).

  The authentication module 117 updates the remaining number by subtracting the number of printed sheets from the remaining number (step S107). The authentication module 117 notifies the remaining number to the authentication / billing server 150 via the NCS 128 periodically or in units of pages (step S108).

  When the remaining number becomes 0, the authentication module 117 notifies the copy application 112 of print cancellation (step S109). This notification can also be made via the SCS 122. Thereafter, the copy application cancels the copy job and notifies the ECS 124 of the print cancellation (step S110). Then, the authentication module 117 displays a warning to the effect that there is no remaining number on the operation panel.

  When the remaining number update is performed on the authentication / billing server 150 side, the new remaining number is notified to the authentication module 117 (step S111), and the authentication module 117 notifies the copy application 112 of the remaining number update (step S111). In step S112, the copy application 112 requests the ECS 124 to resume copying (step S113). Then, copying is resumed.

  Note that the SCS 122 can also perform a process of stopping the copy operation when the remaining count becomes 0 during use. In this case, for example, when the SCS 122 displays a pop-up window such as “please pass the key card”, the use of the application can be restricted unless the correct key card is passed.

  In the above example, the authentication module 117 collects print completion notifications to manage the remaining frequency, but in addition to this, a series of operations, printing, and reading that occur when a desired application is used. It is possible to configure such that information relating to FAX transmission is collected in association with the user ID. As a result, it is possible to manage log information about who used what and when and how much, and it is also possible to charge according to the log information.

  As described above, according to the second embodiment, the authentication module 117 collects log information such as a print completion notification. Here, unlike the control service such as the SCS 122, the authentication module 117 is a module that can be added later. Therefore, it is easy to change the method of collecting log information. It becomes possible to grasp. For example, by collecting information such as paper size, various printing conditions (double-sided printing, aggregated printing, stapling presence / absence), the number of printed sheets, and the number of jam occurrences for each user or each department, the usage status of the multifunction peripheral 100 can be grasped. . It is also possible to manage the usage status of the MFP 100 more specifically by inputting and collecting information such as who copied what document for what purpose, faxed, or scanned. It becomes. Such information can be easily collected by designing the screen so that use is not permitted unless such information is also entered in addition to the user code and password on the authentication screen.

[Configuration of authentication module]
FIG. 16 shows an example of the configuration of the authentication module 117 described in the first and second embodiments. As illustrated in FIG. 16, the authentication module 117 includes an authentication control unit 301, an authentication data management unit 302, a usage restriction management unit 303, and a usage status management unit 304. The authentication control unit 301 includes an operation screen release determination unit 3011 and a key / event / timer monitoring unit 3012.

  The authentication control unit 301 has a function of displaying an authentication screen of the authentication module 117 after a job such as startup after power-on, system reset, or printing. In addition, the authentication control unit 301 determines whether data (for example, a user code) input from the authentication screen satisfies the authentication condition. For example, the input user code is compared with a user code registered in advance, and if both match, it is determined that the authentication is successful. Use of the application is not permitted unless authentication is successful. The operation screen release determination unit 3011 has a function of determining whether or not to release the authentication screen and releasing the screen for other applications according to the authentication result, and includes a key / event / timer monitoring unit. Reference numeral 3012 has a function of monitoring an input key, an event, and a timer timeout.

  The part of the authentication control unit 301 in the authentication module 117 can be added later to the multi-function device 100 from a storage medium such as an IC card or an SD card or by downloading from a network.

  The authentication data management unit 302 manages authentication data such as user codes and passwords, and manages information in accordance with the system. In response to the inquiry from the authentication control unit 301, the authentication data management unit 302 acquires necessary data and returns it to the authentication control unit 301. Further, the authentication data management unit 302 may determine whether the input data satisfies the authentication condition and return the determination result to the authentication control unit 301. Further, the authentication data management unit 302 has an authentication data update / edit function.

  The use restriction management unit 303 has a function of restricting use for each application in units of users and groups (organizations) separately from authentication. For example, when it is set that only a certain department is allowed to use a specific application, a department name input via the use restriction screen displayed by the authentication control unit 301 is compared with the set content, thereby specifying a specific application. Decide whether to use the application. Furthermore, in addition to usage restrictions for each application, each user and group (organization) has a function to set an upper limit on the amount of usage (for example, the number of copies) of a specific application. A function of notifying the control unit 301 is provided.

  The usage status management unit 304 has a function of managing the usage status of an application for each authenticated user and group. For example, the number of copies is managed in the case of copying, and the log of data transmission destination is managed in the case of an application using a network.

  The data managed by each management unit may be stored in the hard disk of the multifunction peripheral 100 or may be stored in an external server connected to the network. Further, instead of providing each of the above-described management units in the multifunction peripheral 100, it may be provided in an external server connected to the network.

[Other configuration examples of authentication module]
As described above, the authentication module 117 of the present invention can be easily added or changed as compared with an authentication function conventionally provided on the system side (for example, the authentication function of the SCS 122). In other words, the authentication module 117 changed according to the user's request or the like can be appropriately installed in the multifunction peripheral.

  In addition, by implementing the authentication module 117 using a Java (registered trademark) program, it is possible to download the Java (registered trademark) program from an external server as needed, and execute it immediately, and further authenticate. Module 117 can be easily added or changed.

  FIG. 17 shows a configuration example of the Java (registered trademark) execution environment 118 including the authentication module 117 (Java (registered trademark) program) in the case of using the Java (registered trademark) program. The Java (registered trademark) execution environment 118 is installed in the application layer in the configuration of the multifunction peripheral 100 shown in FIG.

  As shown in FIG. 17, the Java (registered trademark) execution environment 118 includes an authentication module 117 that is a Java (registered trademark) program, a class library 401, a virtual machine 402, and a program loader 403. FIG. 17 shows a Web server 400 that provides a Java (registered trademark) program. The MFP 100 and the Web server 400 are connected via a network.

  The class library 401 includes a class library that provides a service for operating the multi-function device 100 together with a class library necessary for executing a Java (registered trademark) program. The virtual machine 402 is for interpreting and executing a Java (registered trademark) program. The program loader 403 performs program download from the Web server 400, execution management of Java (registered trademark) programs, and the like. In such an environment, the developed Java (registered trademark) program is uploaded to the Web server 400. Then, the program loader 403 accesses the Web server 400 to download and execute a Java (registered trademark) program desired by the user.

(Third embodiment)
Next, a third embodiment of the present invention will be described. In the third embodiment, the authentication function (such as SCS122, which is hereinafter referred to as a system-side authentication control unit) fixed on the system side and the authentication module 117 according to the present invention are switched. An example of use will be described. Hereinafter, a mode in which authentication is performed using the system-side authentication control unit is referred to as a standard authentication mode, and a mode in which authentication is performed using the authentication module 117 according to the present invention is referred to as an additional authentication mode.

[Example of using the authentication screen by the system side authentication control unit]
First, a case where authentication is performed by the system side authentication control unit or the authentication module 117 using an authentication screen displayed by the system side authentication control unit will be described.

  In the present embodiment, whether to perform authentication in the standard authentication mode or in the additional authentication mode is set for each application on the system initial setting screen or the like. FIG. 18 shows an example of setting contents. In the example illustrated in FIG. 18, the standard authentication mode is set for the copy application and the additional application 2, and the additional authentication mode is set for the scanner application and the additional application 1. Note that the FAX application is set not to be restricted by authentication.

  In the case of this example, as shown in FIG. 19 schematically showing the configuration of the multifunction peripheral 100, data input from the authentication screen displayed by the system-side authentication control unit 501 in the additional authentication mode is displayed. The result is passed to the authentication module 117 and the authentication result by the authentication module 117 is notified to the system side authentication control unit 501. The authentication screen by the system side authentication control unit 501 is a screen for allowing the user to input a user code and a password as shown in FIG. This authentication screen is called an authentication screen A.

  Next, the flow of processing will be described with reference to the flowchart shown in FIG.

  After the MFP is turned on (step S201), the system side authentication control unit 501 displays the authentication screen A on the operation panel (step S202). The user selects an application to be used by depressing the application switching key on the operation panel (step S203). Further, the user inputs a user code and a password from the authentication screen by the system side authentication control unit 501 (step S204). The system-side authentication control unit 501 acquires these key information.

  The system-side authentication control unit 501 confirms the authentication mode for the selected application from the setting contents shown in FIG. 18 (step S205). If the authentication mode is the standard authentication mode, the system-side authentication control unit 501 manages in advance on the system side of the MFP 100. The system-side authentication control unit 501 performs authentication by comparing the registered data with the input data (step S206). If the authentication is successful, the screen of the selected application is displayed instead of the authentication screen A (step S207).

  If the setting content of the authentication mode is the additional authentication mode, the system side authentication control unit 501 passes the user code and password to the authentication module 117 (step S208).

  The authentication module 117 performs authentication by referring to the authentication data and use restriction data managed by the authentication module 117 based on the user code and password passed from the system side authentication control unit 501 (step S209). If the application can be used by the user, an availability notification is returned to the system-side authentication control unit 501 (step S210). When the authentication module 117 makes an inquiry by transmitting a user code and password to an external server, the authentication module 117 waits for a result from the server and notifies the system-side authentication control unit 501. The system-side authentication control unit 501 that has received the notification of successful authentication permits the display of the application screen instead of the authentication screen A that was initially displayed, and the application screen is displayed (step S211).

[Example of using the authentication screen by the system side authentication control unit and the authentication screen by the authentication module]
Next, a case where both the authentication screen A by the system side authentication control unit 501 and the authentication screen by the authentication module 117 are used will be described. The setting contents of the authentication mode in this example are as shown in FIG. 18 as described above.

  In the case of this example, as shown in FIG. 22, the authentication module 117 performs authentication using the authentication screen displayed by the authentication module 117 for the application set in the additional authentication mode according to the setting content. For the application set in the standard authentication mode, authentication is performed by the system side authentication control unit 501 using the authentication screen A displayed by the system side authentication control unit 501. In addition, information related to screen release and the like is exchanged between the system-side authentication control unit 501 and the authentication module 117. An example of an authentication screen displayed by the authentication module 117 is shown in FIG. This screen is called an authentication screen B.

  Next, the flow of processing will be described with reference to the flowchart shown in FIG. The following processing is an example in the case where the authentication module is set as a priority application in advance.

  First, after the MFP 100 is turned on (step S301), the authentication module 117 displays the authentication screen B on the operation panel (step S302). When the user selects an application to be used by pressing the application switching key on the operation panel (step S303), the authentication module 117 confirms the setting contents of the authentication mode, and the selected application supports the additional authentication mode. It is determined whether it corresponds to the standard authentication mode (step S304).

  When the selected application corresponds to the standard authentication mode, since the application is not managed by the authentication module 117, the control authority of the screen display unit of the operation panel is passed to the system side authentication control unit 501 (step S305). Thereby, the system side authentication control part 501 displays the authentication screen A (step S306).

  Then, the system-side authentication control unit 501 performs authentication using the user code and password input from this screen (step S307), and if the authentication is successful, the screen of the selected application is displayed (step S308). ), Allowing users to use the application.

  On the other hand, when the selected application corresponds to the additional authentication mode, since the application is a management target of the authentication module 117, the authentication module 117 is based on the data input from the authentication screen B of the authentication module 117 already displayed. Authentication is performed (step S309). If the authentication is successful, the screen of the selected application is displayed (step S311), and the user can use the application.

  When using each application, as described in the first embodiment, the screen returns to the authentication screen of the authentication module 117 with a job completion such as printing, system auto clear, etc. as triggers.

  Further, when switching to another application is performed in a state where the authentication screen A or the application screen is displayed by the system side authentication control unit 501, if the application is a management target of the authentication module 117, the switching is performed. Is performed, the screen changes to the authentication screen B of the authentication module 117.

(Fourth embodiment)
Next, a fourth embodiment of the present invention will be described.

  In the embodiments described so far, data input from the user is performed from the operation panel of the multifunction peripheral 100, but authentication is performed from a PDA (personal digital assistant) or a mobile phone having a data communication function. It is possible to enter data for. In this embodiment, a case where data is input from a PDA or a mobile phone will be described.

  FIG. 25 shows a configuration in the case where the MFP 100, the PDA 601, the mobile phone 602, and the like communicate. As shown in FIG. 25, the multifunction peripheral 100 is connected to a network 603 (LAN or WAN such as the Internet). The connection may be wired or wirelessly via a wireless LAN card 604. Further, the MFP 100 may be provided with a function of directly connecting to the PDA 601 using an ad hoc network. Further, the multifunction device 100 may be provided with a function that enables communication with the mobile phone 602 through an extension.

  The multi-function device 100 also includes a data communication protocol processing function 605, a Web server function 606, and a screen data generation function 607 that generates authentication screen data. The screen data generation function 607 is provided in the authentication module 117, for example. Other configurations of the multifunction peripheral 100 are the same as those described in the above embodiments. With such a configuration, data communication can be performed between the PDA 601 or the mobile phone 602 and the multifunction peripheral 100. The operation at the time of authentication will be described below. In the following description, the PDA 601 and the mobile phone 602 are collectively referred to as a mobile terminal.

  First, the mobile terminal accesses the multifunction device 100 by designating the URL or IP address of the multifunction device 100. Upon receiving the access, the multi-function device 100 generates HTML data or XML data corresponding to a screen requesting information necessary for authentication, and returns it to the mobile terminal.

  The mobile terminal that has received the screen data displays a screen as shown in FIG. 20 or FIG. 23 on the screen display unit of the mobile terminal. Then, the user of the portable terminal inputs necessary authentication data and transmits the data to the multifunction device 100.

  In addition, once authentication data is registered in the mobile terminal, the operation from the next time becomes easy. In addition, when the mobile phone and the multifunction device 100 communicate with each other by extension, it is even easier if an extension number is allocated to the multifunction device 100 in advance and authentication data is added when the call is made to the multifunction device 100. Authentication work can be performed.

  The multifunction device 100 that has received the authentication data performs authentication by the method described in the third embodiment, for example. If the authentication is successful, the screen of the multifunction device 100 is switched to the application screen, and the application can be used. Become. The application may be selected on the multifunction device 100 side or may be performed from a mobile terminal.

  The present invention is not limited to the above-described embodiments, and various modifications and applications can be made within the scope of the claims.

DESCRIPTION OF SYMBOLS 100 MFP 101 Monochrome line printer 102 Color line printer 110 Software group 111 Printer application 112 Copy application 113 Fax application 114 Scanner application 115, 116 Additional application 117 Authentication module 118 Java execution environment 120 Platform 121 General-purpose OS
122 SCS
123 SRM
124 ECS
125 MCS
126 OCS
127 FCS
128 NCS
130 Application 140 MFP Starter 150 Authentication / Billing Server 200 Controller Board 201 ASIC
202 CPU
203 RAM
204 ROM
205 HDD
206 Flash card interface unit 207 Flash card 209 Network control interface 210 Operation panel 220 FCU
230 USB
240 IEEE 1394
250 Bluetooth 260 Engine unit 301 Authentication control unit 302 Authentication data management unit 303 Usage restriction management unit 304 Usage status management unit 400 Web server 401 Class library 402 Virtual machine 403 Program loader 501 System side authentication control unit 601 PDA
602 Mobile phone 603 Network 604 Wireless LAN card 605 Data communication processing function 606 Web server function 607 Screen data generation function

JP 2002-149362 A JP 2002-108583 A

Claims (25)

An image forming apparatus having an application and system-side software that provides a system-side service to the application,
An authentication screen is displayed on the operation panel of the image forming apparatus, and a screen for using the image forming apparatus is displayed when the authentication data input from the authentication screen satisfies the authentication condition. It has an authentication module to be displayed on the operation panel instead of the screen,
The authentication module is provided separately from the system-side software. The system side software includes an authentication function unit,
When a specific application in the image forming apparatus is selected by the user, the image forming apparatus refers to information indicating a correspondence between the type of application and the authentication function unit of the authentication module or the system-side software The image forming apparatus according to claim 1, wherein authentication is performed by using the authentication module corresponding to the specific application or an authentication function unit of the system-side software.   The means for executing the authentication module from a recording medium externally attached to the image forming apparatus, or means for executing the authentication module by loading it from the recording medium to the image forming apparatus. Image forming apparatus.   The image forming apparatus according to claim 1, further comprising an authentication module executing unit that downloads and executes the authentication module from a server connected to the image forming apparatus via a communication network.   The image forming apparatus according to claim 4, wherein the authentication module is a Java (registered trademark) program, and the authentication module execution unit includes a class library and a virtual machine. The image forming apparatus further includes a communication unit for performing wireless data communication with the mobile terminal,
The image forming apparatus according to claim 1, wherein the authentication module performs authentication using authentication data received from the portable terminal by the communication unit.   The image forming apparatus according to claim 6, wherein the image forming apparatus includes means for generating screen data for inputting the authentication data from the portable terminal and transmitting the screen data to the portable terminal.   The image forming apparatus according to claim 1, wherein a user inputs a department name or a purpose of use of an application as the authentication data.   3. The image forming apparatus according to claim 1, further comprising: a unit that preferentially displays an authentication screen of the authentication module on the operation panel when the image forming apparatus starts up. 4.   When a screen other than the authentication screen is displayed on the operation panel, a job end in the image forming apparatus, a system auto clear of the image forming apparatus, or a key input for using the authentication module is performed. 3. The image forming apparatus according to claim 1, further comprising means for displaying the authentication screen instead of the screen other than the authentication screen when it is made.   The image forming apparatus according to claim 10, wherein the image forming apparatus activates the system auto clear and displays the authentication screen when it detects that a predetermined time has elapsed after a predetermined job ends.   The image forming apparatus according to claim 1, wherein the authentication module includes means for collecting log information regarding use of the image forming apparatus.   The image forming apparatus according to claim 12, wherein the authentication module collects a print completion notice as log information relating to the use, and displays a warning on the operation panel when the number of printed sheets reaches a predetermined allowable number. An authentication method in an image forming apparatus having an application and system-side software that provides a system-side service to the application,
The image forming apparatus includes an authentication module separately from the system-side software, and the authentication module displays an authentication screen on the operation panel of the image forming apparatus, and authentication data input from the authentication screen is an authentication condition. When the above condition is satisfied, a screen for using the image forming apparatus is displayed on the operation panel instead of the authentication screen. The system side software includes an authentication function unit,
When a specific application in the image forming apparatus is selected by the user, the image forming apparatus refers to information indicating a correspondence between the type of application and the authentication function unit of the authentication module or the system-side software The authentication method according to claim 14, wherein authentication is performed by using the authentication module corresponding to the specific application or an authentication function unit of the system-side software. 16. The authentication method according to claim 14, wherein the authentication module is executed from a recording medium externally attached to the image forming apparatus, or the authentication module is loaded from the recording medium to the image forming apparatus and executed. The authentication method according to claim 14, wherein the authentication module is downloaded from a server connected to the image forming apparatus via a communication network and executed. The image forming apparatus further includes a communication unit for performing wireless data communication with the mobile terminal,
The authentication method according to claim 14 or 15, wherein the authentication module performs authentication using authentication data received from the portable terminal by the communication unit. When the image forming apparatus displays a screen other than the authentication screen on the operation panel, the image forming apparatus terminates a job, uses the system auto-clear of the image forming apparatus, or uses the authentication module. 16. The authentication method according to claim 14, wherein the authentication screen is displayed in place of a screen other than the authentication screen when a key input for performing is performed. The authentication method according to claim 14, wherein the authentication module collects log information related to use of the image forming apparatus. An image forming apparatus having an application and system-side software that provides system-side services to the application.
An authentication screen is displayed on the operation panel of the image forming apparatus, and a screen for using the image forming apparatus is displayed when the authentication data input from the authentication screen satisfies an authentication condition. A program for executing an authentication procedure to be displayed on the operation panel in place of the system-side software, provided in the image forming apparatus. The image forming apparatus further includes a communication unit for performing wireless data communication with the mobile terminal,
The program according to claim 21, wherein the program causes the image forming apparatus to execute the authentication procedure using authentication data received from the portable terminal by the communication unit.   The program according to claim 21, which causes the image forming apparatus to execute a procedure of collecting log information relating to use of the image forming apparatus.   24. The program according to claim 23, wherein a print completion notification is collected as log information relating to the use, and the image forming apparatus executes a procedure for displaying a warning on the operation panel when the number of printed sheets reaches a predetermined allowable number. .   A computer-readable recording medium on which the program according to any one of claims 21 to 24 is recorded.