JP2011128907A - Image forming apparatus, authentication system, and authentication method and program for the same - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a mechanism for reducing the operation of entering authentication information when a user (for example, a user who has forgotten a card) uses an image forming apparatus (for example, multifunction peripheral). <P>SOLUTION: The image forming apparatus having a first authentication mode using a storage medium and a second authentication mode using user information entered by a user's operation includes a user list storage means for storing a user identification information list of users who cannot log in by storage medium reading, a user list display means for displaying the user identification information list in response to the designation of the second authentication mode, a selection means for selecting user identification information from the user identification information list displayed by the user list display means, a reception means for receiving a password keyed in by the user, and an authentication requesting means for requesting authentication using the user identification information selected by the selection means and the password received by the reception means. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to an image forming apparatus capable of executing keyboard authentication, an authentication system including the image forming apparatus, an authentication method thereof, and a program.

  In recent years, even when entering a floor or using a PC or multifunction device, for example, by holding the IC card over a card reader for the purpose of limiting the user, the authentication information read from the IC card is obtained as an authentication information management device. (IC card authentication server) is inquired, and if authentication information is registered, there is already a system that responds with a successful authentication and enables entry into a room or use.

In addition, in the case of a multifunction machine, there is a system that can use the multifunction machine by keyboard authentication to assist a user who cannot perform IC card authentication. There exists a system for enhancing the security of printed matter from a multifunction peripheral.
Further, Patent Document 1 discloses a system that prohibits use of a system (PC) that requires authentication if card authentication is not possible.

JP2006-072446

Generally, a company distributes an IC card (employee card) to employees, and uses the IC card to enter and leave the room.
Therefore, in the technique of Patent Document 1, if an IC card is forgotten, an in-house system cannot be used.

For these reasons, there is a case in which an IC card authentication is used instead of the IC card authentication when the IC card is forgotten in order to use the in-house system. An alternative to IC card authentication is a mechanism that allows a user to input a user ID, a password, and an authentication destination (authentication server) using a keyboard or the like, and authenticates based on the input information.
However, if the IC card is forgotten, authentication using the IC card cannot be performed for one day, which is inconvenient for the user.

  In particular, MFPs used in in-house systems often use a mechanism using IC card authentication, but unlike PCs, MFPs do not have a hardware keyboard, so a keyboard is not used. It was difficult to authenticate and input authentication information.

In order to solve such a problem, a soft keyboard is displayed on a touch panel of a multifunction peripheral, and authentication information is input using the soft keyboard.
However, since the touch panel of the multi-function device is small, there is a problem that it is difficult to operate with the soft keyboard as described above.
For this reason, inputting authentication information using a keyboard on a multi-function device has been unusable.

  SUMMARY An advantage of some aspects of the invention is that it provides a mechanism for reducing an operation of inputting authentication information when a user (for example, a user who forgets a card) uses an image forming apparatus (for example, a multifunction device).

  In order to achieve the object of the present invention, the present invention is an image forming apparatus provided with a first authentication mode using a storage medium and a second authentication mode using user information input by a user operation. A user list storage unit that stores a user identification information list of users who cannot log in by reading the storage medium, and a user list display unit that displays the user identification information list according to an instruction of the second authentication mode, A selection means for selecting user identification information from the user identification information list displayed by the user list display means, a reception means for receiving a password input by the user's key operation, and a user identification selected by the selection means An authentication requesting unit for requesting authentication using the information and the password received by the receiving unit is provided.

  Further, the user list display means displays the user identification information list when authentication fails by reading a storage medium in the first authentication mode.

  In addition, when authentication is successful according to the authentication request, the storage medium identification information obtained by reading the storage medium is registered in association with the user identification information selected by the selection unit. It further comprises registration request means for outputting a registration request including information and user identification information.

  The registration request means further comprises a deletion means for deleting the user identification information included in the registration request from the user identification information list according to the output of the registration request.

  The image forming apparatus is communicably connected to an authentication apparatus for performing authentication, and the user identification information list is a list received from the authentication apparatus.

  The user identification information list may be a list generated according to room entry information corresponding to each user identification information managed by the authentication device and login information to the information processing device.

  It is possible to reduce an operation of inputting authentication information when a user (for example, a user who has forgotten the card) uses an image forming apparatus (for example, a multifunction device).

System configuration diagram showing an example of a system configuration of the present invention Hardware configuration of information processing apparatus applicable to client terminal 103 and authentication server 105 Hardware configuration of MFP 106 Functional block diagram showing functions of each device Flow chart of authentication process when entering and leaving the room Flow chart of login process to client terminal 103 Flowchart of authentication process of MFP 106 Flowchart of authentication process of MFP 106 Flowchart of authentication process of MFP 106 Figure showing an example of an authentication table Screen example of card authentication screen displayed on operation unit 308 Image diagram showing an example of a user list Screen example of user list list display screen displayed on operation unit 308 Screen example of authentication information input screen displayed on operation unit 308

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
First, a system configuration diagram, a hardware configuration diagram, and a functional block diagram in the embodiment of the present invention shown in FIGS. 1 to 4 will be described.
FIG. 1 is a system configuration diagram showing an example of the configuration of the authentication system of the present invention.

  In FIG. 1, one or a plurality of multifunction peripherals 106 (image forming apparatuses), an authentication server 105 (authentication apparatus), a client terminal 103 (information processing apparatus), and an entrance / exit control apparatus 101 are connected via a local area network (LAN) 104. It is configured to be communicably connected.

  The entrance / exit control device 101 is connected to a reader / writer 102 that reads an IC card, and the multifunction device 106 is connected to a card reader 319 that reads an IC card.

  The client terminal 103 is an information processing apparatus given to each employee. A printer driver is installed in the client terminal 103, and print data generated by the printer driver is transmitted to the multifunction device 106.

  The multifunction device 106 stores the print data received from the client terminal 103. The multifunction device 106 acquires the card number from the IC card that the user holds over the card reader 319 and transmits the card number to the authentication server 105 for authentication. The multifunction device 106 receives the authentication result of the card number transmitted from the authentication server 105 (including authentication OK, authentication NG, and user name in the case of authentication OK), and executes login when the authentication is OK. When the login is performed, the print data stored in the multifunction device 106 is printed. Note that print data to be printed can be selected from print data stored in accordance with a user instruction.

  The authentication server 105 holds the authentication table of FIG. The authentication server 105 searches the authentication table and performs authentication in response to an authentication request from the entrance / exit control device 101 or the multifunction device 106. The authenticated result is transmitted to the entrance / exit control device 101 and the multifunction device 106. The authentication server 105 may be a directory service server.

  The entrance / exit control device 101 is a device that manages locking of a door installed in a building, and transmits the card number read by the reader / writer 102 to the authentication server 105 as an authentication request. When the authentication result is received from the authentication server 105 and the authentication is OK, the door is unlocked. The entry / exit control device 101 is a device having an interface connected to a CPU, ROM, and RAM network. Further, the reader / writer 102 and the entrance / exit control device 101 may be integrated with a casing.

Next, a hardware configuration of an information processing apparatus applicable to the client terminal 103 and the authentication server 105 illustrated in FIG. 1 will be described with reference to FIG.
FIG. 2 is a block diagram illustrating a hardware configuration of an information processing apparatus applicable to the client terminal 103 and the authentication server 105 illustrated in FIG.

  In FIG. 2, reference numeral 201 denotes a CPU that comprehensively controls each device and controller connected to the system bus 204. Further, the ROM 202 or the external memory 211 is necessary to realize a BIOS (Basic Input / Output System) or an operating system program (hereinafter referred to as an OS), which is a control program of the CPU 201, or a function executed by each server or each PC. Various programs to be described later are stored.

  A RAM 203 functions as a main memory, work area, and the like for the CPU 201. The CPU 201 implements various operations by loading a program or the like necessary for execution of processing from the ROM 202 or the external memory 211 into the RAM 203 and executing the loaded program.

  An input controller 205 controls input from a keyboard (KB) 209 or a pointing device such as a mouse (not shown). A video controller 206 controls display on a display device such as a CRT display (CRT) 210. In FIG. 2, although described as CRT 210, the display device is not limited to the CRT, but may be another display device such as a liquid crystal display. These are used by the administrator as needed.

  A memory controller 207 is connected to the hard disk (HD), flexible disk (FD), or PCMCIA card slot for storing a boot program, various applications, font data, user files, editing files, various data, etc. via an adapter. The access to the external memory 211 such as a compact flash (registered trademark) memory is controlled.

  A communication I / F controller 208 is connected to and communicates with an external device via a network (for example, the LAN 600 shown in FIG. 1), and executes communication control processing on the network. For example, communication using TCP / IP is possible.

  Note that the CPU 201 enables display on the CRT 210 by executing outline font rasterization processing on a display information area in the RAM 203, for example. In addition, the CPU 201 enables a user instruction with a mouse cursor (not shown) on the CRT 210.

  Various programs to be described later for realizing the present invention are recorded in the external memory 211 and executed by the CPU 201 by being loaded into the RAM 203 as necessary. Furthermore, definition files and various information tables used when executing the program are also stored in the external memory 211, and a detailed description thereof will be described later.

Next, the hardware configuration of the multifunction machine 106 shown in FIG. 1 will be described with reference to FIG.
FIG. 3 is a block diagram illustrating an example of a hardware configuration of the multifunction peripheral 106 illustrated in FIG.

  In FIG. 3, reference numeral 316 denotes a controller unit which is connected to a scanner 314 functioning as an image input device and a printer unit 312 functioning as an image output device, while being connected to a LAN (for example, the LAN 600 shown in FIG. 1) or a public line (WAN). ) (For example, PSTN or ISDN) to input / output image data and device information.

  In the controller unit 316, reference numeral 301 denotes a CPU, which is a processor that controls the entire system. A RAM 302 is a system work memory for the CPU 301 to operate, and is also a program memory for recording a program and an image memory for temporarily recording image data.

  A ROM 303 stores a system boot program and various control programs. A hard disk drive (HDD) 304 stores various programs for controlling the system, image data, and the like.

  An operation unit interface (operation unit I / F) 307 is an interface unit with the operation unit (keyboard) 308. Further, the operation unit I / F 307 serves to transmit the key information (for example, pressing of the start button) input from the operation unit 308 to the CPU 301.

  A network interface (Network I / F) 305 is connected to the network (LAN) 600 and inputs / outputs data. A modem (MODEM) 306 is connected to a public line and inputs / outputs data such as FAX transmission / reception.

  Reference numeral 318 denotes an external interface (external I / F), which is an I / F unit that accepts external inputs such as USB, IEEE 1394, printer port, and RS-232C. In this embodiment, an IC card for a portable terminal required for authentication A card reader 319 for reading (storage medium) is connected to the external I / F unit 318. The CPU 301 can control reading of information from the IC card of the mobile terminal by the card reader 319 via the external I / F 318, and can acquire information read from the IC card of the mobile terminal. The above devices are arranged on the system bus 309.

Reference numeral 320 denotes an image bus interface (IMAGE BUS I / F), which is a bus bridge that connects the system bus 309 and an image bus 315 that transfers image data at high speed and converts the data structure.
The image bus 315 is configured by a PCI bus or IEEE1394. The following devices are arranged on the image bus 315.

  A raster image processor (RIP) 310 develops vector data such as a PDL code into a bitmap image. A printer interface (printer I / F) 311 connects the printer unit 312 and the controller unit 316 and performs synchronous / asynchronous conversion of image data. A scanner interface (scanner I / F) 313 connects the scanner 314 and the controller unit 316 and performs synchronous / asynchronous conversion of image data.

  An image processing unit 317 performs correction, processing, and editing on input image data, and performs printer correction, resolution conversion, and the like on print output image data. In addition to this, the image processing unit 317 performs image data rotation and compression / decompression processing such as JPEG for multi-valued image data and JBIG, MMR, MH for binary image data.

  The scanner unit 314 illuminates an image on paper as a document and scans it with a CCD line sensor, thereby converting it into an electrical signal as raster image data. The original paper is set on the tray of the original feeder, and when the apparatus user gives a reading start instruction from the operation unit 308, the CPU 301 gives an instruction to the scanner 314, and the feeder feeds the original paper one by one to read the original image. I do.

  The printer unit 312 is a part that converts raster image data into an image on paper. The method is an electrophotographic method using a photosensitive drum or a photosensitive belt, and ink is ejected from a micro nozzle array directly on the paper. There is an inkjet method for printing an image, but any method may be used. The activation of the printing operation is started by an instruction from the CPU 301. The printer unit 312 has a plurality of paper feed stages so that different paper sizes or different paper orientations can be selected, and has a paper cassette corresponding thereto.

  The operation unit 308 has an LCD display unit, and a touch panel sheet is pasted on the LCD. The operation unit 308 displays an operation screen of the system. When a displayed key is pressed, the position information is displayed on the operation unit I / F 307. To the CPU 301 via The operation unit 308 includes, for example, a start key, a stop key, an ID key, a reset key, and the like as various operation keys.

  Note that the display unit has different display performance depending on the printer, and a printer that can be operated via a touch panel, a printer that simply has a liquid crystal screen and displays a character string (displays the print status and the name of the document being printed). Is structured.

  Here, the start key of the operation unit 308 is used when starting a document image reading operation. At the center of the start key, there are two color LEDs, green and red, which indicate whether or not the start key can be used. Further, the stop key of the operation unit 308 functions to stop the operation in operation. The ID key of the operation unit 308 is used when inputting the user ID of the user. The reset key is used when initializing settings from the operation unit.

  The card reader 319 reads information stored in an IC card provided in the mobile terminal under the control of the CPU 301 and notifies the CPU 301 of the read information via the external I / F 318.

  With the configuration described above, the multi-function peripheral 106 can transmit the image data read from the scanner unit 314 to the LAN 600 and print out the print data received from the LAN 600 by the printer unit 312.

  Further, the image data read from the scanner unit 314 can be fax-transmitted on the public line by the modem 306, and the image data received by FAX from the public line can be output by the printer unit 312.

FIG. 4 is a functional block diagram illustrating functions of the respective devices.
The authentication server 105 includes a data communication unit 1051 and an authentication unit 1052.
The data communication unit 1051 transmits / receives authentication information to / from the client terminal 103, the entrance / exit control device 101, and the multifunction device 106.

The authentication unit 1052 performs authentication by searching an authentication table held by the authentication server 105 in accordance with authentication information (for example, a card number or a user name / password) received by the data communication unit 1051. Also, if there is data that matches the authentication table as a result of the search, the authentication unit 1052 creates an authentication result of the user name authenticated as authentication OK (authentication successful).
The client terminal 103 includes a job data generation unit 1031 and an authentication communication unit 1032.
The job data generation unit 1031 generates print data to be printed by the multifunction device 106 and transmits the print data to the multifunction device 106.
The authentication communication unit transmits authentication information (user name / password) input when logging in to the client terminal 103 to the authentication server 105.

  The multifunction device 106 includes a card reader control unit 1061, a server communication unit 1062, an authentication processing unit 1063, a user information management unit 1064, and a user information display unit 1065.

The card reader control unit 1061 receives the card number read by the card reader 319, and the server communication unit 1062 transmits an authentication request including the card number to the authentication server 105, and receives an authentication result corresponding to the transmitted authentication request.
The authentication processing unit 1063 determines the authentication result, and performs control to log in to the multifunction device 106 when the authentication is OK (authentication successful).

  The user information management unit 1064 receives a user list of users who have forgotten the card from the authentication server 105 and manages it on the HDD or RAM. In addition, the user information display unit 1065 displays a list of the user list managed by the user information management unit 1064 on the keyboard authentication screen where the user name is displayed.

Next, the processing of this embodiment will be described in detail using the flowcharts of FIGS. 5, 6, 7A, 7B, and 7C.
First, the flowchart of the authentication process at the time of entrance / exit is demonstrated using FIG.

In addition, CPU201 of the entrance / exit control apparatus 101 performs step S101, step S102, and step S109-step S111. Further, the CPU 201 of the authentication server 105 executes steps S103 to S108.
In step S101, the card is read by the reader / writer 102 when entering the room and the read card number is received.
In step S <b> 102, the data communication unit 1051 transmits the received card number to the authentication server 105.
In step S <b> 103, the authentication server 105 receives the sent card number at the server communication unit 1062.
In step S104, the authentication table of FIG. 8 is searched with the card number received by the authentication unit 1052.

In step S105, the authentication unit 1052 determines whether the card number is registered in the authentication table of FIG. If registered, an authentication result is generated as authentication OK (authentication success), and the process proceeds to step S107. If not registered, an authentication result is generated as authentication NG (authentication failure), and the process proceeds to step S108. Note that the authentication is also successful when the card number matches the rented card ID 806 in FIG.
In step S107, since the user management unit 1053 has succeeded in the authentication, the entry record 804 in the authentication table in FIG. 8 is changed to a flag (◯) with entry.
In step S108, the data communication unit 1051 transmits an authentication result (authentication OK / authentication NG) to the entrance / exit control device 101.

In step S109, the data communication unit 1051 receives the authentication result, and determines whether the authentication result is an authentication success or an authentication failure. If the authentication is successful, the process proceeds to step S110. If the authentication fails, the process proceeds to step S111.
In step S110, the door is unlocked because authentication is successful, and in step S111, an error notification (sound or the like) is output without unlocking because authentication failed.

Next, the flowchart of the login process to the client terminal 103 in FIG. 6 will be described.
The CPU 201 of the client terminal 103 executes step S201, step S202, and step S208 to step S210. The CPU 201 of the authentication server 105 executes steps S203 to S207.

In step S201, the user name, password, and authentication destination authentication information input in accordance with the user operation are acquired.
In step S202, the authentication communication unit 1032 transmits the authentication information to the authentication server 105.
In step S203, the data communication unit 1051 receives the transmitted information.
In step S204, the authentication unit 1052 searches the authentication table in FIG. 8 for the received authentication information.

In step S205, it is determined whether or not the authentication information exists in the authentication table of FIG. 8 as a result of the search. If there is authentication information, an authentication result indicating successful authentication is generated, and the process proceeds to step S206. If there is no authentication information, an authentication failure authentication result is generated, and the process proceeds to step S207.
In step S206, the login record 805 of the user that matches the authentication table is changed to a flag (◯) indicating that the user has logged in.
In step S 207, the data communication unit 1051 transmits the authentication result (authentication success / authentication failure) to the client terminal 103.

In step S208, the authentication communication unit 1032 receives the authentication result, and determines whether the authentication result is an authentication success or an authentication failure. If the authentication is successful, the process proceeds to step S209. If authentication fails, the process proceeds to step S210.
In step S209, login is performed because authentication is successful. In step S210, since authentication has failed, an authentication error is displayed to prompt re-input.

  Next, a flowchart of authentication processing of the multifunction machine 106 will be described with reference to FIG. 7A.

In step S301, the job data generation unit 1031 of the client terminal 103 receives data from the application and generates print data. The generated print data is transmitted to the designated multifunction device 106.
In step S <b> 302, the MFP 106 receives print data from the client terminal 103.

  In step S <b> 303, the received print data is stored in the HDD 304 of the multifunction machine 106. Identification information for identifying a user name and print data is acquired from the stored print data, and the print data is managed for each user. As a result, print data corresponding to the user who has logged into the multifunction device 106 can be printed.

  In step S304, the card reader control unit 1061 determines whether or not the card number read by the card reader 319 has been received. If a card number has been accepted, the process proceeds to step S306. If a card number has not been accepted, the process proceeds to step S305. Note that the card authentication screen of FIG. 9 is displayed on the operation unit 308 of the multifunction machine 106. In this embodiment, the card authentication mode (first authentication mode using a storage medium) is initially set, and when the keyboard authentication button 901 is pressed, the keyboard authentication mode (second information using user information is used). Authentication mode). That is, the multi-function device 106 has two modes, a card authentication mode and a keyboard authentication mode.

In step S305, it is determined whether the user has pressed the keyboard authentication button 901 on the card authentication screen in FIG. If the keyboard authentication button 901 has been pressed, the process proceeds to step S314 in FIG. 7B. If the keyboard authentication button 901 is not pressed, the process waits until the card is held over or the keyboard authentication button 901 is pressed.
In step S306, the acquired card number (storage medium identification information) is stored in the RAM 302.
In step S307, the authentication request including the card number acquired by the server communication unit 1062 is transmitted to the authentication server 105.
In step S308, an authentication request including the card number received by the data communication unit 1051 is accepted.
In step S309, it is determined whether or not the card number included in the received authentication request exists in the authentication table of FIG.

  In step S310, if the card number exists in the authentication table, it is determined that the authentication is successful, and the authentication result including the user name and user ID corresponding to the card number and the authentication success flag is transmitted to the multi-function device 106. If the card number does not exist, an authentication result including an authentication failure flag is transmitted to the multifunction device 106.

  In step S311, the server communication unit 1062 receives the authentication result, and the authentication processing unit 1063 determines whether the authentication result is an authentication success or an authentication failure. If the authentication is successful, the process proceeds to step S312, and if the authentication fails, the process proceeds to step S313 in FIG. 7B.

  In step S312, the MFP 106 is logged in. The login to the multifunction device 106 is a process for enabling printing and scanning of the multifunction device 106 and other applications executed on the multifunction device 300.

  Next, processing subsequent to FIG. 7A will be described with reference to FIG. 7B.

  The CPU 301 of the multifunction machine 106 executes steps S313 to S315 and steps S317 to S322, and the CPU 201 of the authentication server 105 executes step S316.

In step S313, since authentication has failed, an authentication failure screen (not shown) is displayed on the operation unit 308 of the multifunction machine 106. If an OK button or the like is pressed on the authentication failure screen, the process proceeds to step S314.
In step S314, a keyboard authentication screen is displayed on the operation unit 308.

  In step S315, the user information management unit 1064 requests the authentication server 105 to acquire a user list (for example, a list of users who cannot authenticate a card due to forgetting a card) displayed on the user name on the keyboard authentication screen.

  In step S316, in the authentication table of FIG. 8, the user name with the entry record 804 (entrance information) “x” and the login record 805 (login information) “O” is acquired. A user who has forgotten his / her card, borrowed a card to forget his / her card, entered the personal computer, and logged in to his / her personal PC has the entry record 804 “X” and the login record 805 “O”. A user list of the acquired user names is generated and transmitted to the multifunction device 106. Since a user who has forgotten a card and has received a loan card can temporarily register the card, a user whose card ID is registered in the loan card ID 806 of the authentication table should not be included in the user list. Is also possible.

  In this embodiment, the keyboard authentication screen is displayed in step S314, and then the user list is acquired in steps S315 and S316. However, the keyboard is not limited to this order, and the keyboard is acquired after the user list is acquired. It is also possible to display an authentication screen. The user list can also be configured to be periodically requested and acquired from the multifunction device 106 to the authentication server 105. That is, the user list may be acquired at any timing.

  In step S317, the user information management unit 1064 sets the user list (FIG. 10) in the input history to be displayed on the user name (user identification information) on the keyboard authentication screen. Specifically, it is stored in the storage area of the RAM 302 that is referred to when displaying the user name (user list storage storing a user identification information list).

  In step S318, it is determined whether or not an input history list display instruction has been issued for the user name on the keyboard authentication screen by a user operation. If it is determined that there is an instruction, the process proceeds to step S319, and the user name input area is instructed so that the user can input the user name using the soft keyboard displayed on the panel of the operation unit 308. If so, the process proceeds to step S320.

  In step S319, the user information display unit 1065 acquires the user list (FIG. 10) from the RAM 302, and displays a list of user names in the user name area of FIG. 11 (user list display for displaying a user identification information list). .

  In step S320, the user information display unit 1065 displays the user name selected in accordance with the user operation from the user names displayed in a list in step S319 (selects user identification information). If the list is not displayed, the user name input using the soft keyboard displayed on the panel of the operation unit 308 is displayed.

  In step S <b> 321, an input of a password and a login destination (authentication destination) is accepted (a password is accepted) according to a user operation, and is displayed on the operation unit 308. An example in which the user name, password, and login destination are displayed is shown in FIG. Further, when the login destination is uniquely determined, it is not necessary for the user to input, and an internally held login destination may be used.

In step S322, when the login button in FIG. 12 is pressed by the user, authentication information including a user name and a password is transmitted to the authentication server 105 according to the login destination (authentication request is made).
Further, the password is input using the numeric keypad of the operation unit 308 or is input using a soft keyboard displayed on the panel of the operation unit 308.

  Next, a flowchart following FIG. 7B will be described with reference to FIG. 7C.

The CPU 301 of the multifunction machine 106 executes steps S326 to S334, and the CPU 201 of the authentication server 105 executes steps S323 to S325 and steps S335 to S336.
In step S323, the data communication unit 1051 receives the authentication information.
In step S324, the authentication unit 1052 determines whether there is a user name / password that matches the authentication table of FIG.
In step S325, the data communication unit 1051 transmits the determined authentication result (authentication success / authentication failure) to the multi-function peripheral 106.

In step S326, it is determined whether the authentication is successful according to the authentication result. If the authentication result is authentication success, the process proceeds to step S328. If the authentication result is authentication failure, the process proceeds to step S327.
In step S324, the authentication unit (105-2) collates data.
In step S327, an authentication failure screen is displayed on the operation unit 308.

In step S328, it is determined whether or not the card number is stored in the RAM 302. If the card number is stored, the user is notified whether the card number is registered in the authentication table as a lent card. It is determined whether or not an instruction to register a card is given by the operation. If there is an instruction to register a card, the process proceeds to step S329. If there is no card registration instruction or the card number is not stored in the RAM 302, the process proceeds to step S311.
In step S329, the card number stored in the RAM 302 is acquired.

In step S330, the card number (storage medium identification information) and the authenticated user name (user identification information) are transmitted to the authentication server 105 (registration request) so as to be registered in the authentication table as a rented card. The authenticated user name is the same as the user name selected from the user list.
In step S331, the MFP 106 is logged in. The login process is the same as in step S312.

In step S332, the user name to be registered as a lending card is deleted from the user list of FIG. Thereby, since it becomes possible to log in with a lending card, unnecessary users can be deleted from the user list. In particular, in the case where the user list is periodically acquired from the authentication server 105, useless users do not remain.
In step S333, a list of print data corresponding to the logged-in user name is displayed on the operation unit 308.
In step S334, the print data selected from the print data list by the user is output.
In step S335, the user name and card number are received.

  In step S336, the card number is stored in the rental card ID 806 of the user whose card number in the authentication table of FIG. As a result, it is possible to log in to the multi-function peripheral 106 with a rental card.

  FIG. 8 is a diagram illustrating an example of an authentication table stored in the external memory 211 of the authentication server 105.

  The authentication table is managed in association with data of a user name 801, a user ID 802, an IC card ID 803, a room entry record 804, a login record 805, a lending card ID 806, and a user password 807.

FIG. 9 is a screen example of a card authentication screen displayed on the operation unit 308 of the multifunction machine 106 when performing card authentication.
FIG. 10 is an image diagram illustrating an example of a user list stored in the RAM 302 of the multifunction machine 106.
FIG. 11 is a screen example of a user list list display screen in which the user list is displayed on the operation unit 308 of the multifunction machine 106.
FIG. 12 is a screen example of an authentication information input screen that is displayed when a user name, a password, and a login destination are input to the operation unit 308 of the multifunction machine 106.

  In this embodiment, the MFP 106 and the authentication server 105 are configured to be separated from each other. However, the MFP 106 has a function of the authentication server 105, and each of the authentication servers 105 in FIGS. It is also possible to execute steps.

As described above, according to the present embodiment, it is possible to reduce an operation of inputting authentication information when a user (for example, a user who forgets a card) uses an image forming apparatus (for example, a multifunction device).
In particular, when a user who has forgotten his / her card uses the multifunction device, he / she does not have to input the user name by operating the keyboard every time.

  Also, by temporarily registering the loan card, it is not necessary to register each time. Furthermore, when a rental card is registered, the user name is deleted from the user list, so that unnecessary user names are not displayed.

  Although one embodiment has been described above, the present invention can take an embodiment as, for example, a system, apparatus, method, program, or recording medium, and specifically includes a plurality of devices. The present invention may be applied to a system including a single device.

  Further, the program according to the present invention is a program that can execute the processing method of FIGS. 5 to 7C, and the storage medium of the present invention stores a program that can execute the processing method of FIGS. 5 to 7C. ing. In addition, the program in this invention The program for every processing method of each apparatus of FIGS. 5-7C may be sufficient.

  As described above, a recording medium that records a program that implements the functions of the above-described embodiments is supplied to a system or apparatus, and a computer (or CPU or MPU) of the system or apparatus stores the program stored in the recording medium. It goes without saying that the object of the present invention can also be achieved by executing the reading.

  In this case, the program itself read from the recording medium realizes the novel function of the present invention, and the recording medium storing the program constitutes the present invention.

  As a recording medium for supplying the program, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, DVD-ROM, magnetic tape, nonvolatile memory card, ROM, EEPROM, silicon A disk or the like can be used.

  Further, by executing the program read by the computer, not only the functions of the above-described embodiments are realized, but also an OS (operating system) operating on the computer based on an instruction of the program is actually Needless to say, a case where the function of the above-described embodiment is realized by performing part or all of the processing and the processing is included.

  Further, after the program read from the recording medium is written in the memory provided in the function expansion board inserted into the computer or the function expansion unit connected to the computer, the function expansion board is based on the instructions of the program code. It goes without saying that the CPU or the like provided in the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  Further, the present invention may be applied to a system composed of a plurality of devices or an apparatus composed of a single device. Needless to say, the present invention can be applied to a case where the present invention is achieved by supplying a program to a system or apparatus. In this case, by reading a recording medium storing a program for achieving the present invention into the system or apparatus, the system or apparatus can enjoy the effects of the present invention.

Furthermore, by downloading and reading a program for achieving the present invention from a server, database, etc. on a network by a communication program, the system or apparatus can enjoy the effects of the present invention.
In addition, all the structures which combined each embodiment mentioned above and its modification are also included in this invention.

101 Entrance / exit control device 102 Reader / writer 103 Client terminal 104 Network (LAN)
105 Authentication server 106 MFP 201 CPU
203 RAM
211 External memory 301 CPU
302 RAM
303 HDD
308 Operation unit 319 Card reader

Claims (11)

An image forming apparatus including a first authentication mode using a storage medium and a second authentication mode using user information input by a user operation,
User list storage means for storing a list of user identification information of users who cannot log in by reading the storage medium;
User list display means for displaying the user identification information list in accordance with an instruction of the second authentication mode;
Selecting means for selecting user identification information from the user identification information list displayed by the user list display means;
Accepting means for accepting a password input by the user's key operation;
An image forming apparatus comprising: authentication requesting means for requesting authentication using the user identification information selected by the selecting means and the password received by the receiving means.   2. The image forming apparatus according to claim 1, wherein the user list display unit displays the user identification information list when authentication fails by reading a storage medium in the first authentication mode. . In order to register the storage medium identification information obtained by reading the storage medium in association with the user identification information selected by the selection unit when the authentication is successful according to the authentication request, The image forming apparatus according to claim 2, further comprising a registration request unit that outputs a registration request including user identification information. The image forming apparatus according to claim 3, further comprising a deletion unit that deletes the user identification information included in the registration request from the user identification information list in accordance with an output of the registration request by the registration request unit. The image forming apparatus is communicably connected to an authentication apparatus for performing authentication,
The image forming apparatus according to claim 1, wherein the user identification information list is a list received from the authentication apparatus.   6. The user identification information list is a list generated according to room entry information corresponding to each user identification information managed by the authentication device and login information to the information processing device. The image forming apparatus according to claim 1. An authentication server that stores authentication information associated with user information including user identification information and a password, and storage medium identification information, a first authentication mode using a storage medium, and user information input by a user operation An authentication system including an image forming apparatus having the second authentication mode used,
The image forming apparatus includes:
User list storage means for storing a list of user identification information of users who cannot log in by reading the storage medium;
User list display means for displaying the user identification information list in accordance with an instruction of the second authentication mode;
Selecting means for selecting user identification information from the user identification information list displayed by the user list display means;
Accepting means for accepting a password input by the user's key operation;
Using the user identification information selected by the selection means and the authentication request means for making an authentication request using the password received by the reception means;
The authentication device
List transmission means for transmitting the user identification information list to the image forming apparatus;
Authentication request receiving means for receiving the authentication request from the image forming apparatus;
An authentication system comprising authentication means for authenticating using user identification information and a password included in the authentication request. An authentication method for an image forming apparatus, comprising: a first authentication mode using a storage medium; and a second authentication mode using user information input by a user operation,
A user list storage step of storing a list of user identification information of users who cannot log in by reading the storage medium;
A user list display step of displaying the user identification information list in accordance with an instruction of the second authentication mode;
A selection step of selecting user identification information from the user identification information list displayed in the user list display step;
An accepting step for accepting a password input by the user's key operation;
An image forming apparatus comprising: an authentication requesting step for making an authentication request using the user identification information selected in the selecting step and the password received in the receiving step. An authentication server that stores authentication information associated with user information including user identification information and a password, and storage medium identification information, a first authentication mode using a storage medium, and user information input by a user operation An authentication method in an authentication system including an image forming apparatus having a second authentication mode used,
The image forming apparatus includes:
A user list storage step of storing a list of user identification information of users who cannot log in by reading the storage medium;
A user list display step of displaying the user identification information list in accordance with an instruction of the second authentication mode;
A selection step of selecting user identification information from the user identification information list displayed in the user list display step;
An accepting step for accepting a password input by the user's key operation;
Using the user identification information selected in the selection step and the password received in the reception step, an authentication request step for requesting an authentication,
The authentication device is
A list transmission step of transmitting the user identification information list to the image forming apparatus;
An authentication request receiving step of receiving the authentication request from the image forming apparatus;
An authentication method comprising: performing an authentication step of authenticating using user identification information and a password included in the authentication request. A program executable by an image forming apparatus including a first authentication mode using a storage medium and a second authentication mode using user information input by a user operation,
The image forming apparatus;
User list storage means for storing a list of user identification information of users who cannot log in by reading the storage medium;
User list display means for displaying the user identification information list in accordance with an instruction of the second authentication mode;
Selecting means for selecting user identification information from the user identification information list displayed by the user list display means;
Accepting means for accepting a password input by the user's key operation;
A program that functions as an authentication request unit that makes an authentication request using the user identification information selected by the selection unit and the password received by the reception unit. An authentication server that stores authentication information associated with user information including user identification information and a password, and storage medium identification information, a first authentication mode using a storage medium, and user information input by a user operation An authentication system program including an image forming apparatus having the second authentication mode used,
The image forming apparatus;
User list storage means for storing a list of user identification information of users who cannot log in by reading the storage medium;
User list display means for displaying the user identification information list in accordance with an instruction of the second authentication mode;
Selecting means for selecting user identification information from the user identification information list displayed by the user list display means;
Accepting means for accepting a password input by the user's key operation;
Using the user identification information selected by the selection means and the password accepted by the acceptance means, function as an authentication request means for making an authentication request,
The authentication device;
List transmission means for transmitting the user identification information list to the image forming apparatus;
Authentication request receiving means for receiving the authentication request from the image forming apparatus;
A program which functions as an authenticating means for authenticating using user identification information and a password included in the authentication request.

Images