JP2011049853A - Information processor, and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To reduce a time required for authentication processing related to use of various information processing functions in an information processor. <P>SOLUTION: In relation to an information processing function section becoming an object of an authentication request, user information (name list file) related to a user belonging to a group provided with the right of use is acquired from a management server by a communication section 31. An authentication section 36 determines whether a user having performed an authentication request is a member of the group provided with the right of use based on the acquired name list file, retrieves another information processing function section for providing the right of use to the group when the user is determined to be a member of the group, and authenticates use of the user regarding the information processing function section of which the user is determined to be the member of the group provided with the right of its use, and the other information processing function section retrieved as one for providing the right of use to the group in which the user is determined to be a member. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an information processing apparatus and a program.

In general, in an information processing apparatus such as an image forming apparatus that processes information such as image information, among the various information processing functions of the information processing apparatus, the user's authority to use a specific information processing function that the user intends to use Is needed.
For example, in Patent Document 1, when a user performs printing on a printer device, the printer is provided on the condition that the user receives authentication of a management server related to a use authority set for each printing function of the printer device. A printing system is described that permits the use of certain printing functions in the device.

Japanese Patent Laid-Open No. 10-161823

  An object of the present invention is to shorten the time required for authentication processing related to the use of various information processing functions in an information processing apparatus.

  According to the first aspect of the present invention, the use of a plurality of information processing function units each having a different type of information processing function and the information processing function unit to which the use authority is given in units of groups to which the user belongs is provided by the user. And receiving user information, which is information relating to a user belonging to the group to which use authority is granted with respect to the information processing function unit that is the target of the authentication request received by the receiving unit. An acquisition unit; a determination unit that determines whether the user who has made the authentication request received by the reception unit is a member of the group based on the user information acquired by the acquisition unit; and the determination When the means determines that the user is a member of the group having use authority in the information processing function unit that is the target of the authentication request, When the user is determined to be a member of the group by the search means for searching for the information processing function unit other than the information processing function unit for granting use authority to the group and the determination unit An information processing apparatus comprising: an authentication unit that authenticates use of the user with respect to the information processing function unit and the other information processing function unit searched by the search unit.

According to the second aspect of the present invention, the search unit is configured to request the authentication request from the information processing function unit other than the information processing function unit that grants use authority to the group of which the user is a member. The information processing apparatus according to claim 1, further searching for the other information processing function unit that has failed to be authenticated by the authentication request made previously.
According to a third aspect of the present invention, the acquisition unit determines whether or not the user has authority to use the information processing apparatus based on the identification information of the user who made the authentication request received by the reception unit, The user information related to users belonging to the group is acquired from a management device that transmits the user information when it is determined that the user has authority to use the information processing device via a communication unit. An information processing apparatus according to item 1.
The invention according to claim 4 further includes display means for displaying that the user can use the information processing function unit whose use by the user is authenticated by the authentication means. An information processing apparatus according to claim 1.
According to a fifth aspect of the present invention, when the use of the user is authenticated with respect to the information processing function unit that is the target of the authentication request by the authentication unit, execution of the information processing function unit from the user The information processing apparatus according to claim 1, further comprising input receiving means for setting an instruction to be receivable.

  According to the sixth aspect of the present invention, the use authority is given to the computer in units of groups to which the user belongs, and an authentication request is issued from the user for use of a plurality of information processing function units each having a different type of information processing function. Based on the function to receive, the function to acquire user information that is information related to users belonging to the group to which the use authority is granted with respect to the information processing function unit that is the target of the authentication request, and the acquired user information A function for determining whether or not a user who has made an authentication request is a member of the group, and the user is a member of the group having use authority in the information processing function unit that is the target of the authentication request A function for searching for the information processing function unit other than the information processing function unit for granting use authority to the group of which the user is a member, Realizing the information processing function unit when it is determined that the user is a member of the group and the function of authenticating the use of the user with respect to the other information processing function unit searched It is a program to do.

The invention according to claim 7 was performed before the current authentication request from among the information processing function units other than the information processing function unit that gives a use authority to the group of which the user is a member. The program according to claim 6, further realizing a function of searching for the other information processing function unit that has failed in authentication in the authentication request.
According to an eighth aspect of the present invention, the function for acquiring the user information is obtained from a management device that manages the user information related to users belonging to the group to which use authority is given with respect to the information processing function unit. The program according to claim 6, wherein the user information related to the information processing function unit as a target is acquired via a communication unit.

According to the first aspect of the present invention, it is possible to reduce the time required for the authentication processing related to the use of various information processing functions in the information processing apparatus, compared to the case where the present invention is not adopted.
According to the invention of claim 2, since the information processing function once failed in the authentication can be authenticated by the authentication process for the other information processing function that has been successfully authenticated, the time required for the authentication process compared with the case where the present invention is not adopted. Can be shortened.
According to the third aspect of the present invention, it is possible to improve the safety against information leakage when the information processing function is executed as compared with the case where the present invention is not adopted.
According to the invention of claim 4, it can be known that the authentication has been obtained for the information processing function that the user intends to use.
According to the invention of claim 5, since the user is informed that the information processing function that has been authenticated is operable, the user uses the information processing device as compared with the case where the present invention is not adopted. Convenience can be improved.

According to the invention of claim 6, it is possible to shorten the time required for the authentication processing related to the use of various information processing functions in the information processing apparatus, compared to the case where the present invention is not adopted.
According to the invention of claim 7, since the information processing function once failed in authentication can be authenticated by the authentication processing for another information processing function that has been successfully authenticated, the time required for the authentication processing compared to the case where the present invention is not adopted. Can be shortened.
According to the eighth aspect of the present invention, it is possible to improve the safety against information leakage when the information processing function is executed as compared with the case where the present invention is not adopted.

It is a figure which shows the structural example of the information processing system of this Embodiment. 1 is a block diagram illustrating a configuration of an image forming apparatus. It is a block diagram explaining the structure of an authentication part. It is a figure explaining the content of the list (table) memorize | stored in the authority information storage part. 5 is a flowchart illustrating an example of the contents of authentication processing regarding each information processing function performed by the image forming apparatus. 5 is a flowchart illustrating an example of the contents of authentication processing regarding each information processing function performed by the image forming apparatus. It is a figure explaining the content of the table memorize | stored in the authority information storage part, when a communication error generate | occur | produces between management servers. 2 is a block diagram illustrating an internal configuration of an authentication unit of the image forming apparatus. FIG.

Embodiments of the present invention will be described below in detail with reference to the accompanying drawings.
<Description of information processing system>
FIG. 1 is a diagram illustrating a configuration example of an information processing system 1 according to the present embodiment. In the information processing system 1 illustrated in FIG. 1, for example, an image forming apparatus 3 as an example of an information processing apparatus having a plurality of information processing functions such as an image copying function and an image reading function, and use of the image forming apparatus 3 are managed. A management server 4 as an example of a management apparatus is connected so as to be capable of bidirectional communication via a network 2 such as a LAN (Local Area Network), a WAN (Wide Area Network), or the Internet as an example of a communication means. . As a communication means, a communication line such as a telephone line or a satellite communication line (for example, a spatial transmission line in digital satellite broadcasting) may be interposed.
A plurality of image forming apparatuses 3 can be normally connected on the network 2, but FIG. 1 shows a configuration in which one image forming apparatus 3 is connected as a part thereof.

<Description of Image Forming Apparatus>
Next, the image forming apparatus 3 that is a component of the information processing system 1 will be described.
In the image forming apparatus 3 according to the present embodiment, the usage authority set for each of various information processing functions such as an image copying function and an image reading function included in the image forming apparatus 3 is given in units of groups to which the user belongs. It has established. Here, as an example of the group (group) to which the user belongs, for example, “employee group” that is a group of people who are ordinary employees, and “manager group” that is a group of people who are managers Organizations / departments to which the user belongs, such as the “General Affairs Division Group”, which is a group of people belonging to the General Affairs Division, and the “Entrustment Group”, which is a group of people who are the employees of the outsourcing business, etc. Those grouped in such a range are set. From the viewpoint of grouping, other classification methods may be used, such as classification according to the work contents (task team, etc.) the user is engaged in. In this specification, the names of groups to which such users belong (hereinafter referred to as “group names”) are generalized and expressed as “group A”, “group B”, and the like.

The image forming apparatus 3 stores a group name having use authority for each information processing function in association with each information processing function. When the user requests the image forming apparatus 3 to authenticate to use a specific information processing function (authentication request), the image forming apparatus 3 has a use authority for the information processing function used by the user. A file in which a list of users belonging to the group is described (hereinafter, “name list file”) is acquired from the management server 4. When the name of the user (hereinafter referred to as “user name”) is included in the name list file acquired from the management server 4, the image forming apparatus 3 determines that the user is a member of this group. Then, the user is permitted (authenticated) to use the information processing function requested by the user.
In addition, the image forming apparatus 3 includes other information processing functions provided in the image forming apparatus 3 in which use authority is given to a group that the user is recognized as belonging to by the name list file acquired from the management server 4. If the information processing function exists, the use of the information processing function requested to be used and the other information processing function to which the use authority is given to the group to which the user belongs is also authenticated.

  As described above, the image forming apparatus 3 according to the present embodiment also authenticates the use of the information processing function requested by the user and other information processing functions to which the use authority is given to the group to which the user belongs. . As a result, when the image forming apparatus 3 subsequently uses another information processing function other than the information processing function requested to be used this time by the same user, the frequency of confirming whether or not the user has the right to use again is reduced. Is done. As a result, in the image forming apparatus 3 in which the use authority is set for each of a plurality of information processing functions, the number of times authentication processing is performed in response to an authentication request from the user is reduced, so that the time required for the authentication processing is reduced as a whole. The

<Description of Configuration of Image Forming Apparatus>
FIG. 2 is a block diagram illustrating the configuration of the image forming apparatus 3. As shown in FIG. 2, the image forming apparatus 3 is connected to the main control unit 30 that performs information processing such as operation control and image processing of the entire image forming apparatus 3 and the network 2. A communication unit 31 is provided as an example of an acquisition unit that acquires, from the management server 4, a name list file related to a group that has the authority to use the function.
The image forming apparatus 3 reads the reflectance data of each color component from the document and generates image data (image information) by the image reading function unit 32 and the main control unit 30 as an example of the information processing function unit. An image output function unit 33 as an example of an information processing function unit that forms an image on paper based on the processed image data, such as an information processing function unit that transmits and receives facsimile data (image information) via a public telephone line As an example, a facsimile (FAX) function unit 34 is provided. The image output function unit 33 is configured by an image forming engine such as an electrophotographic system or an inkjet system.

  Further, the image forming apparatus 3 is designated by the user through a user interface (UI) unit 35 and a UI unit 35 as an example of a reception unit that receives an instruction input from the user and displays various information to the user. In cooperation with the authentication unit 36 as an example of an authentication unit that determines whether or not the user has authority to use the information processing function, an operating system for controlling each component of the image forming apparatus 3, and the operating system An external storage unit 37 is provided for storing various programs such as application software for realizing a specific information processing function of each functional unit, and various data such as image data.

  The main control unit 30, communication unit 31, image reading function unit 32, image output function unit 33, FAX function unit 34, UI unit 35, authentication unit 36, and external storage unit 37 are connected to a bus 38. Accordingly, the main control unit 30, the communication unit 31, the image reading function unit 32, the image output function unit 33, the FAX function unit 34, the UI unit 35, the authentication unit 36, and the external storage unit 37 mutually transmit and receive signals. .

The UI unit 35 is configured by, for example, a liquid crystal touch panel or the like, and accepts input such as a print instruction input by the user, designation of user identification information and information processing function used by the user, and the like. In addition, various types of information such as a display requesting the user to input user identification information and specifying an information processing function used by the user, and a display regarding an information processing function usable by the user are displayed.
Here, as the “user identification information”, for example, a user ID for identifying a user, a password, and the like are used.
The communication unit 31 transmits the user identification information input in the UI unit 35 and the group name having the authority to use the information processing function designated by the user to the management server 4 via the network 2. In addition, the communication unit 31 acquires from the management server 4 a name list file related to users who belong to a group having use authority with respect to the information processing function designated by the UI unit 35. Then, the communication unit 31 transfers the acquired name list file to the authentication unit 36.

The main control unit 30 operates the information processing function units (the image reading function unit 32, the image output function unit 33, and the FAX function unit 34) designated by the user in the UI unit 35 on the condition that the authentication unit 32 authenticates. The operation of the information processing function unit is controlled.
When the UI unit 35 receives the input of the user identification information and the input for specifying the information processing function to be used, the main control unit 30 receives the user identification information and the group name having the authority to use the information processing function specified by the user. Is transmitted to the management server 4 via the communication unit 31. Then, a name list file in which information about users belonging to the group specified by the transmitted group name is described is acquired from the management server 4 via the communication unit 31. The main control unit 30 transfers the name list file acquired from the management server 4 to the authentication unit 36 together with the user identification information input from the UI unit 35.

<Description of authentication unit>
When the authentication unit 36 obtains a name list file of a group having use authority with respect to the information processing function designated by the user from the main control unit 30, the user name described in the user identification information input in the UI unit 35 is stored in the management server. 4 is determined whether it is included in the name list file acquired from step 4. When the user name is included in the name list file acquired from the management server 4, this user is determined to be a member of this group. The user is permitted (authenticated) to use the information processing function requested to be used. The authentication unit 36 here functions as a determination unit.
Further, the authentication unit 36 includes other information in which use authority is given to a group that the user is recognized as belonging to by the name list file acquired from the management server 4 in the various information processing functions of the image forming apparatus 3. Search for processing functions. If there is another information processing function to which the use authority is given to the group to which the user belongs, the use of the information processing function is authenticated together with the information processing function requested to be used. The authentication unit 36 here functions as a search unit.

  The authentication unit 36 notifies the main control unit 30 of an information processing function that permits (authenticates) use. As a result, the main control unit 30 receives information specified by the user when the information processing function specified by the user in the UI unit 35 is the information processing function notified from the authentication unit 36 as authentication of use. Perform processing functions. Further, the main control unit 30 performs a display indicating that the information processing function notified from the authentication unit 36 as the one to authenticate the use can be used by the UI unit 35 that also functions as a display unit. Further, the main control unit 30 receives an execution instruction for an information processing function (information processing function unit) that can be used by authentication by the authentication unit 36, and serves as an example of an input reception unit configured in the UI unit 35. Set the button to the ready state.

<Description of authentication unit configuration>
Next, FIG. 3 is a block diagram illustrating the configuration of the authentication unit 36. As shown in FIG. 3, the authentication unit 36 includes an interface 361 that controls transmission and reception of signals with the main control unit 30 and the communication unit 31 via the bus 38, and groups that have authority to use each information processing function. An authority information storage unit 362 that stores a list (hereinafter referred to as “table”) associated with the processing function is provided.
The authentication unit 36 also includes a name file storage unit 364 that stores the name file acquired from the management server 4, and the contents of the table stored in the authority information storage unit 362 in response to a request from the main control unit 30. 30 is provided.

Further, the authentication unit 36 includes an authority determination / setting unit 363. The authority determination / setting unit 363 determines whether to authenticate the use of the information processing function requested by the user using the name list file acquired from the management server 4. Then, when the use of the information processing function requested by the user is authenticated, the table stored in the authority information storage unit 362 describes that the use of the information processing function requested by the user is permitted ( Set).
In addition, the authority determination / setting unit 363 gives the use authority to the group that the user is recognized as belonging to by the name list file acquired from the management server 4 among the various information processing functions provided in the image forming apparatus 3. Search for other information processing functions. When there is another information processing function to which usage authority is given to the group that the user is recognized as belonging to, the table stored in the authority information storage unit 362 indicates that the information processing function is used. State that it is allowed.

<Description of table stored in authority information storage unit>
FIG. 4 is a diagram for explaining the contents of a list (table) stored in the authority information storage unit 362.
As illustrated in FIG. 4, the table stored in the authority information storage unit 362 includes, for example, a black and white image copying function included in the image output function unit 33 as the “type of information processing function” included in the image forming apparatus 3. "Black-and-white copy", "Full-color copy" which is a full-color image copying function, "One-sided printing" for printing on only one side of paper, "Double-sided printing" for printing on both sides of paper, and Image reading function section “Black and white image reading” which is a monochrome image reading function of 32, “Full color image reading” which is a full color image reading function, and “facsimile transmission” which is a facsimile transmission function of the FAX function unit 34 are set. ing.

  In the table, a “group name” of a group having authority to use each information processing function is set in association with each “type of information processing function”. Further, whether or not the user (for example, the user name “user A”) has the usage authority for each information processing function (“permitted”) in correspondence with the type of each information processing function (“impossible”). “User A use authority” is set.

In the table illustrated in FIG. 4, the “group name” column corresponding to “monochrome copy” in the “type of information processing function” column indicates that the right to use “monochrome copy” is granted to all groups. “Group_all” to be shown is described. That is, regarding “monochrome copy”, all groups such as “group_1” and “group_2” grouped in the table have use authority. The same applies to “double-sided printing” and “monochrome image reading”.
In the “group name” column corresponding to “full color copy” in the “type of information processing function” column, “group — 1” indicating that the right to use “full color copy” is granted only to “group — 1”. is described. That is, regarding “full color copy”, only “group — 1” grouped in the table has use authority. The same applies to “single-sided printing” and “full-color image reading”.
In the “group name” column corresponding to “facsimile transmission” in the “type of information processing function” column, “group_2” indicating that the authority to use “facsimile transmission” is granted only to “group_2”. It is associated. That is, regarding “facsimile transmission”, only “group_2” grouped in the table has the use authority.

  Here, it is assumed that the user A belonging to the group “group_1” makes an authentication request for using the information processing function “full color copy”. In this case, the authentication unit 36 refers to the table stored in the authority information storage unit 362. In the table illustrated in FIG. 4, the use authority regarding “full color copy” is given only to the group “group_1”. Therefore, the authentication unit 36 acquires a name list file regarding users belonging to the group “group_1” from the management server 4 via the communication unit 31. Then, the authentication unit 36 stores the name list file related to the users belonging to the acquired group “group_1” in the name list file storage unit 364.

  Subsequently, in the authentication unit 36, whether the authority determination / setting unit 363 includes the user name of the user A in the name list file stored in the name list file storage unit 364 based on the user identification information acquired from the main control unit 30. Determine whether or not. In this case, since the user A belongs to the group “group_1”, the user name of the user A is included in the name list file stored in the name list file storage unit 364. Therefore, the authority determination / setting unit 363 permits (authenticates) the use of “full color copy” that the user A has requested to use. Accordingly, the authority determination / setting unit 363 displays “permitted” indicating that the user A is permitted to use “full color copy” in the “user A usage authority” column of the table stored in the authority information storage unit 362. "Is set (hatched portion in FIG. 4).

  Further, the authority determination / setting unit 363 searches for another information processing function to which the use authority is granted to the group “group_1” that the user A is recognized as belonging to by the list file stored in the list file storage unit 364. To do. In the “group name” column of the table illustrated in FIG. 4, as another information processing function to which the use authority is granted to the group “group_1” that the user A is recognized as belonging to, all groups have the use authority. “Monochrome copy”, “Double-sided printing”, “Black-and-white image reading”, “Group-side printing”, “Single-sided printing” and “Full-color image reading” to which use authority is given to the group “group_1” are described.

Therefore, in addition to “full color copy”, the authority determination / setting unit 363 adds “monochrome copy” and “double-sided printing” to the “user A usage authority” column of the table stored in the authority information storage unit 362. ”,“ Monochrome image reading ”,“ single-sided printing ”, and“ full color image reading ”are set to“ permitted ”indicating that use is permitted (hatched portion in FIG. 4).
On the other hand, regarding the “facsimile transmission” in which the use authority is not permitted to the group “group_1” that the user A is recognized to belong to, “impossible” indicating that the use is not permitted is set.

<Description of notification unit>
The notification unit 365 of the authentication unit 36 notifies the main control unit 30 of the contents of the table in response to an inquiry about the contents of the table stored in the authority information storage unit 362 from the main control unit 30. As a result, the main control unit 30 displays on the UI unit 35 the information processing function that can be used by authentication based on the notified contents of the table. Further, the main control unit 30 sets an input button configured in the UI unit 35 that accepts an execution instruction from a user of an information processing function that can be used by authentication to a receivable state.

<Description of authentication processing in authentication unit>
Next, an authentication process related to each information processing function performed by the image forming apparatus 3 according to the present embodiment will be described.
FIG. 5A and FIG. 5B are flowcharts illustrating an example of the contents of the authentication process regarding each information processing function performed by the image forming apparatus 3.
First, as illustrated in FIG. 5A, the main control unit 30 receives input of user identification information and an input for specifying an information processing function to be used from the user in the UI unit 35 (step 101). Thereby, the main control unit 30 acquires the group name of the group having the authority to use the information processing function designated by the user from the authentication unit 36 (step 102). Then, the main control unit 30 transmits user identification information and a group name from the communication unit 31 to the management server 4 (step 103).
The main control unit 30 acquires from the management server 4 via the communication unit 31 a list file relating to users belonging to the group specified by the transmitted group name (step 104). Then, the main control unit 30 transfers the user identification information input from the UI unit 35 and the name list file acquired from the management server 4 to the authentication unit 36 (step 105).

The authentication unit 36 stores the name list file transferred from the main control unit 30 in the name list file storage unit 364 (step 106).
Subsequently, moving to FIG. 5-2, the authority determination / setting unit 363 of the authentication unit 36 includes a name list in which the user name of the user specified by the user identification information input in the UI unit 35 is stored in the name list file storage unit 364. It is determined whether it is included in the file (step 107).
If this user name is included in the name list file (Yes in step 107), the authority determination / setting unit 363 determines that this user is a member of this group, and information requested by this user to be used. The use of the processing function is permitted (authenticated) (step 108). As a result, the authority determination / setting unit 363 sets, in the table stored in the authority information storage unit 362, permission to use the information processing function requested by the user for the user specified by the user identification information. (Step 109).
On the other hand, if the user name specified by the user identification information is not included in the name list file (No in step 107), it is determined that this user is not a member of this group, and the authority determination / setting unit 363 The use of the information processing function requested by the user is not permitted (authenticated) (step 110). Accordingly, the authority determination / setting unit 363 prohibits the use of the information processing function requested by the user for the user specified by the user identification information in the table stored in the authority information storage unit 362. Is set (step 111). Thereafter, the authentication unit 36 ends the authentication process.

Further, when the use of the information processing function requested by the user is permitted, the authority determination / setting unit 363 determines that the user is recognized as belonging by the name list file stored in the name list file storage unit 364. The other information processing function to which the use authority is granted is searched (step 112). If there is another information processing function to which use authority is given to the group to which the user belongs (Yes in step 112), the use of the information processing function is permitted (authenticated) (step 113). As a result, the authority determination / setting unit 363, in the table stored in the authority information storage unit 362, relates to the user specified by the user identification information for other information processing functions in which the usage authority is granted to the group to which the user belongs. A permission to use is set (step 114). Thereafter, the authentication unit 36 ends the authentication process.
If there is no other information processing function to which use authority is given to the group to which the user belongs (No in step 112), the authentication unit 36 ends the authentication process.

By the way, when the user identification information and the group name are transmitted from the communication unit 31 to the management server 4 in step 103 described above, a communication error (for example, due to the communication state in the network 2) ( Communication failure) may occur. In that case, since the name list file cannot be acquired from the management server 4, the authentication unit 36 cannot determine whether or not the acquiring user has the authority to use the information processing function requested to be used.
Therefore, in this case, the authority determination / setting unit 363 of the authentication unit 36 uses the information processing function requested by the user for the user specified by the user identification information in the table stored in the authority information storage unit 362. Set that there was a “communication error”.

Thereafter, for example, it is assumed that the user makes an authentication request regarding the use of an information processing function different from the previous one, succeeds in communication with the management server 4, and receives authentication for the information processing function. At that time, when the group that the user has successfully communicated this time and obtained the directory file is the same as the group that has the authority to use the information processing function that was not authenticated because of a previous communication error. The authority determination / setting unit 363 changes the setting indicating that there is a “communication error” described in the table to the setting indicating that use is permitted.
As described above, even when a communication error occurs with the management server 4 and the user cannot determine whether the user has authority to use the information processing function that the user has requested to use, the authentication unit 36 Uses the name list file acquired in the authentication process when the use of a different information processing function is requested, and determines whether or not there is a use authority for the information processing function requested for the previous use. As a result, the authentication process for the information processing function requested for the previous use is performed without performing the authentication process for requesting the use of the same information processing function again, thereby reducing the time required for the authentication process.

In addition, when the user receives authentication related to the use of an information processing function different from the previous time, the authority determination / setting unit 363 grants the use authority to the group in which the user has successfully communicated this time and acquired the name list file. It may be configured to search for an information processing function that has been set and that the previous “communication error” has been set. For the information processing function for which the right to use was granted to the same group that was successfully authenticated this time and the previous “communication error” was set, the “communication” Change the setting for “error” to the setting for permission to use.
By configuring in this way, the information processing function that the user has indicated his / her intention to use but has failed authentication and is in an unusable state can be used. Therefore, in addition to the information processing function that has been successfully authenticated this time, it is possible to use the information processing function that is assumed to be frequently used by the user. Even in this case, the time required for the authentication process is shortened because the authentication process for the information processing function that has succeeded in the authentication is performed without performing the authentication process that requires the use of the information processing function that has failed in the authentication .

FIG. 6 is a diagram for explaining the contents of the table stored in the authority information storage unit 362 when a communication error occurs with the management server 4.
In FIG. 6, it is assumed that the user A belonging to the group “group_1” requests authentication for using the information processing function “full color copy”. In this case, when a communication error occurs with the management server 4, as shown in FIG. 6A, the authentication unit 36 performs authentication processing related to “full-color copy” in the “user A use authority” column. A “communication error” indicating that the communication with the management server 4 was not successful is set (hatched portion in FIG. 6A).

  Thereafter, it is assumed that the user A makes an authentication request for using “single-sided printing” different from “full-color copying” and succeeds in communication with the management server 4. In this case, since the user A belongs to the group “group_1” to which the use authority is given for “single-sided printing”, as shown in FIG. Allow (authenticate) the use of “single-sided printing”. Furthermore, the authentication unit 36 adds “monochrome copy”, “full-color copy”, “double-sided printing” in which the usage authority is given to the group “group_1” in addition to “single-sided printing” in the “user A usage authority” column. ”,“ Monochrome image reading ”, and“ full color image reading ”are set to“ permitted ”indicating that the use is permitted. As a result, “full color copy” for which “communication error” has been set is also rewritten to “permitted” indicating that use is permitted (authenticated) in the “user A use authority” column. (The hatched portion in FIG. 6B).

<Description of Internal Configuration of Authentication Unit of Image Forming Apparatus>
FIG. 7 is a block diagram showing an internal configuration of the authentication unit 36 of the image forming apparatus 3. As shown in FIG. 7, the authentication unit 36 executes the digital arithmetic processing according to a predetermined processing program when executing the authentication processing related to the information processing function requested by the user, and the work memory of the CPU 101 RAM 102 used as a memory, ROM 103 storing various setting values used for processing in the CPU 101, nonvolatile memory such as a flash memory backed up by a battery, which can be rewritten and can retain data even when power supply is interrupted A memory (NVM) 104, a main control unit 30 connected to the authentication unit 36, a communication unit 31, and an interface (I / F) 105 for controlling input / output of signals with each functional unit such as an external storage unit 37 ing.
Then, the CPU 101 reads the processing program from the external storage unit 37 into the main storage device (RAM 102), and realizes each function in the authentication unit 36.

  In addition, as another provision form regarding this processing program, there is a form that is provided in a state stored in the ROM 103 in advance and loaded into the RAM 102. Further, when the rewritable ROM 103 such as an EEPROM is provided, there is a form in which only the program is installed in the ROM 103 and loaded into the RAM 102 after the CPU 101 is set. Further, there is a form in which a program is transmitted to the authentication unit 36 via a network such as the Internet, installed in the ROM 103 of the authentication unit 36, and loaded into the RAM 102. Furthermore, there is a form in which the RAM 102 is loaded from an external recording medium such as a DVD-ROM or a flash memory.

<Description of management server>
Next, the management server 4 that is a component of the information processing system 1 will be described.
The management server 4 according to the present embodiment is a so-called LDAP (Lightweight Directory Access Protocol) server. Then, the management server 4 includes the names (user names) of users belonging to the groups (groups) to which the use authority is granted for each information processing function such as the image copying function and the image reading function provided in the image forming apparatus 3 and mail. A “name list file” as an example of user information that is information about the user such as an address is stored in association with the group name of each group.

When the management server 4 acquires the user identification information and the group name having the authority to use the information processing function designated by the user from the image forming apparatus 3, first, the management server 4 is specified by the user identification information based on the user identification information. It is determined whether the user has authority to use the image forming apparatus 3.
As a result, when it is determined that the user specified by the user identification information has the authority to use the image forming apparatus 3 and the user is authenticated regarding the use of the image forming apparatus 3, the management server 4 A name list file relating to users belonging to the group having the acquired group name is transmitted to the image forming apparatus 3.
On the other hand, if it is determined that the user does not have authority to use the image forming apparatus 3 and the user's use of the image forming apparatus 3 is not authenticated, an empty name list file in which no user name is described is stored in the image forming apparatus 3. Send to.
As described above, when the user specified by the user identification information has the authority to use the image forming apparatus 3, the management server 4 transmits the name list file requested to be transmitted from the image forming apparatus 3 to the image forming apparatus 3. To do. Thereby, safety against information leakage from the image forming apparatus 3 is enhanced.

In the information processing system 1 according to the present embodiment, a name list file related to users belonging to the group specified by the group name is acquired from the management server 4, but the image forming apparatus 3 itself holds the name list file. You may comprise. Furthermore, the image forming apparatus 3 may be configured to transmit the name list file to the other image forming apparatus 3 in response to a transmission request from the other image forming apparatus 3.
In the information processing system 1 according to the present embodiment, the name list file related to the users belonging to the group specified by the group name is acquired from the management server 4, but it is not always necessary to acquire it in the file format. That is, it is only necessary to configure so as to acquire information about users belonging to a group specified by a group name, not limited to a file format.

  As described above, in the information processing apparatus (image forming apparatus 3) constituting the information processing system 1 according to the present embodiment, the use authority is given to the group to which the user belongs together with the information processing function requested by the user. The use of other information processing functions that have been granted is also authenticated. As a result, when the information processing apparatus subsequently uses another information processing function other than the information processing function requested to be used by the same user, the frequency with which the information processing apparatus confirms whether or not the user has the right to use again is reduced. The As a result, in the information processing apparatus in which the use authority is set for each of the plurality of information processing functions, the number of times authentication processing is performed in response to an authentication request from the user is reduced, so that the time required for authentication processing is reduced as a whole. .

DESCRIPTION OF SYMBOLS 1 ... Information processing system, 2 ... Network, 3 ... Image forming apparatus, 4 ... Management server, 30 ... Main control part, 36 ... Authentication part, 362 ... Authority information storage part, 363 ... Authority determination / setting part, 364 ... Name list File storage

Claims (8)

A plurality of information processing function units each having a different type of information processing function;
Accepting means for accepting an authentication request from a user for use of the information processing function unit to which use authority is given in units of groups to which the user belongs;
Obtaining means for obtaining user information, which is information relating to a user belonging to the group to which use authority is given with respect to the information processing function unit that is the target of the authentication request received by the receiving means;
A determination unit that determines whether the user who has made the authentication request received by the reception unit is a member of the group based on the user information acquired by the acquisition unit;
When it is determined by the determination means that the user is a member of the group having use authority in the information processing function unit that is the target of the authentication request, the user is used for the group of which the user is a member. Search means for searching for the information processing function unit other than the information processing function unit to which authority is given;
Authentication of the user's use with respect to the information processing function unit when the determination unit determines that the user is a member of the group and the other information processing function unit searched by the search unit An information processing apparatus comprising: an authenticating unit that performs authentication.   The search means is configured to respond to the authentication request made before the current authentication request from among the information processing function units other than the information processing function unit that grants use authority to the group of which the user is a member. The information processing apparatus according to claim 1, further searching for the other information processing function unit that has failed authentication.   The acquisition unit determines whether the user has authority to use the information processing apparatus based on the identification information of the user who made the authentication request received by the reception unit, and the user uses the information processing apparatus. The information processing apparatus according to claim 1, wherein the user information regarding users belonging to the group is acquired via a communication unit from a management apparatus that transmits the user information when it is determined that the user information is authorized.   The information processing apparatus according to claim 1, further comprising display means for displaying that the user can use the information processing function unit for which use of the user is authenticated by the authentication means.   An input reception that sets an execution instruction from the user to the information processing function unit when the use of the user is authenticated with respect to the information processing function unit that is the target of the authentication request by the authentication unit The information processing apparatus according to claim 1, further comprising means. On the computer,
A function of accepting an authentication request from a user for use of a plurality of information processing function units, each of which has a use authority given to a group to which the user belongs, and each has a different type of information processing function;
A function of acquiring user information, which is information related to users belonging to the group to which use authority has been given with respect to the information processing function unit that is the target of the authentication request;
Based on the acquired user information, a function for determining whether the user who made the authentication request is a member of the group;
When the information processing function unit targeted for the authentication request determines that the user is a member of the group having the use authority, the user is granted a use authority to the group of which the user is a member. A function of searching for the information processing function unit other than the information processing function unit;
The information processing function unit when the user is determined to be a member of the group, and the function of authenticating the use of the user with respect to the other information processing function unit searched for are realized. Program to do.   Authentication failed in the authentication request made before the current authentication request from among the information processing function units other than the information processing function unit that grants the use authority to the group of which the user is a member The program according to claim 6, further realizing a function of searching for the other information processing function unit.   The function of acquiring the user information is the information processing function unit that is the target of the authentication request from a management device that manages the user information related to the user belonging to the group to which use authority is given with respect to the information processing function unit. The program according to claim 6, wherein the user information related to the information is acquired via a communication unit.

Images