JP2012049921A - Print managing system, print managing device, print managing method, control method and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a print managing system realizing use of a flexible device which is not bound by use authority while regular authentication and security level are maintained and having a means of unauthorized use prevention.SOLUTION: A manager terminal 104 sets charging destination information which can temporarily be selected by a user and transmits the information to a server. When receiving user log-in, a compound machine 110 acquires the charging destination information attached to user identification information of the user performing log-in from the server 106, and displays it on a display. When the charging destination information to which selection authority is temporarily given is selected from the charging destination information displayed on the display, authentication information for using the charging destination information is required.

Description

  In the present invention, printing capable of performing printing processing, image reading, communication, personal authentication, and the like via a network and these printing-related control devices are mutually connected with a PC terminal, an authentication terminal, and a management terminal (server) on the network. In particular, the present invention relates to a system for performing personal authentication and billing management in an information management system program connected and communicated with a personal computer.

  Recently, with the improvement of security and cost awareness in the enterprise, using means such as IC card, pin code, user ID etc. for the use of multi-function machine that performs printing / copying control such as printing / copying / scanning / FAX, Opportunities for personal authentication are increasing. For account management of these systems, user and group information for authentication (hereinafter referred to as user information), fee structure and classification for charging (hereinafter referred to as charging destination information), and information for linking them It is necessary to design and set the (linking information).

  In other words, these systems are premised on systems that can be used after they have been designed and set up correctly. In recent years, these systems have become efficient in order to increase economic effectiveness and cost transparency throughout the enterprise. Many systems have been devised to operate in the future.

However, even if the operation of the authentication means and user management is various such as IC card, password input, biometric authentication, etc., because cost management is based on the authority associated with the user,
(1) Billing destinations that can be used for authority (2) There are often only two types of billing destinations that cannot be used for authority, so that only billing destinations that can be used are permitted based on the authority level of the user. I can not use it. In addition, since an unusable billing destination cannot be used for the authority level of the user, it is often not displayed during normal selection.

  As one means for overcoming the fixed operation as described above, Patent Document 1 covers up to the second authentication information.

JP 2008-299798 A

  However, the invention disclosed in Patent Document 1 gives the mobile communication device the same means, the same level, that is, gives another password of the same authority to the user when moving within the region, The authentication level cannot be temporarily exceeded. Currently, only usable billing destinations set in advance according to the authority of the user information at the time of authentication are displayed when selecting the billing destination on the multifunction peripheral, causing inconveniences during the following temporary use .

  For example, it is considered that subordinate users are often requested by the supervisor user to use a multifunction device (save a copy, send a fax, etc.). The use authority is often low, such as a button for the use itself is not displayed, and there is a case where the selection authority is not given even to a billing destination that can be selected by a supervisor.

  Even if you use a multifunction device in response to a request from your boss user, or use a multifunction device on your behalf when there is no boss user, you can not manage the account without borrowing the privilege information of the subordinate's authority level boss . At this time, there is a risk that the risk of undesired use in operation, such as sharing of PW and lending / borrowing of ID cards, cannot be avoided.

  In addition, in order to support temporary use such as printing agency, even when an online authentication system is in place, temporary users are approved via pop-ups or emails when using multifunction devices. Because it is necessary, real-time approval work is necessary, and there is a fear that the burden on employees is difficult to reduce.

  In addition, since other billing destinations cannot be viewed unless user information and settings are updated, it is difficult for the user to know that there is a more suitable billing destination. For example, there is a possibility that even if you have the authority to use another billing destination for transfer, promotion, help for another project, etc., you may not be able to actively apply for a database.

  Therefore, the present invention is capable of flexible use without being restricted by the authority while maintaining a normal authentication and security level, and includes a multifunction device 110 having means for preventing unauthorized use, an authentication method thereof, a management / billing system, The purpose is to provide a program.

That is, a print management system according to the present invention includes a print management apparatus that stores at least user information, user authority information, and billing destination information for charging a cost related to a printing job, an information processing terminal, and a multifunction peripheral. In the information processing terminal, it is possible to temporarily select charging destination information for which the user does not have a selection authority in advance in the information processing terminal. Temporary selection authority information including provision means for granting temporary selection authority information to the user and billing destination information to be given to the user by the attachment means so as to be temporarily selectable is transmitted to the print management apparatus Transmitting means for receiving, in the print management apparatus, receiving means for receiving the temporary selection authority information transmitted by the transmitting means; and the temporary authority grant information received by the receiving means. Determining means for determining whether or not the user information to be given and the billing destination information are correctly received, and if the determining means determines that the temporary authority grant information is correctly received, the temporary authority grant Registration means for registering information, and notification means for notifying the information processing terminal that the temporary authority grant information has been registered by the registration means, wherein the user logs in to the print management system in the multifunction peripheral Login information receiving means for receiving user identification information for receiving, and a list of print job lists managed by being associated with the user identification information received by the login information receiving means, wherein the user is the job owner A print job list acquisition unit; and a print instruction for a specific print job in the print job list acquired by the acquisition unit. And an execution unit that executes a print instruction to the print management apparatus to print the print job received by the instruction reception unit. In the print management apparatus, the execution unit of the multifunction peripheral Confirming means for confirming whether or not a temporary selection authority for charging a print job for which a print instruction has been executed is attached, and the temporary selecting authority for charging the print job by the confirmation means Output instruction means for instructing the multi-function peripheral to output the print job.
In the print management system of the present invention, when the determination unit determines that the charging destination information is charging destination information to which temporary authority is given by the adding unit of the information processing terminal, Authentication information to the print management apparatus to determine whether or not the charging destination information can be used by the input receiving means for receiving the input of the authentication information for using the charging destination information and the authentication information received by the input receiving means. Authentication information transmission means for transmitting the authentication information, and the setting means determines that the billing destination information can be used by the print management apparatus based on the authentication information transmitted by the authentication information transmission means. The charging destination for the print job to be executed is set in the charging destination information received by the selection receiving means.
In the print management system of the present invention, the display unit includes billing destination information temporarily given a selection authority by the granting unit, and billing destination information for which the user has a selection authority in advance. Is displayed on the display unit of the multi-function peripheral in an identifiable format.
In the print management system of the present invention, the granting unit sets a period during which billing destination information for temporarily granting a selection authority to the user can be selected.
The print management system according to the present invention further includes a deletion unit that deletes the billing destination information that can be selected by the temporary authority added to the user by the adding unit.
In the print management system of the present invention, the attaching unit includes a print setting designating unit for designating a print setting when a user uses the charging destination information to be temporarily provided.
The print management apparatus of the present invention is connectable with an information processing terminal and a multifunction peripheral, and stores at least user information, user authority information, and billing destination information for charging a cost related to a printing job. The receiving means for receiving the temporary selection authority information transmitted by the transmitting means, and whether the user information and the billing destination information to which the temporary authority giving information received by the receiving means is correctly received A determination means for determining the temporary authority grant information when the determination means determines that the temporary authority grant information is correctly received, and a registration means for registering the temporary authority grant information; Notifying means for notifying the information processing terminal that the attached information has been registered, and a temporary selection authority for charging a print job for which a print instruction has been executed by the multifunction device A confirmation means for confirming whether or not the multifunction peripheral is instructed to output the print job when the user is given a temporary selection authority for charging the print job. Output instruction means.

  According to the present invention, while maintaining normal authentication and a security level, the MFP 110 that can be used flexibly without being restricted by its authority, and has a means for preventing unauthorized use, its authentication method, and management / billing system It becomes possible to provide a program.

  Further, as an operational effect, since illegal sharing and lending of IC cards and passwords can be avoided, an operational security effect is enhanced. In addition, a post-approval / accounting system is not required, reducing work and reducing costs. In addition, the approval work through the online approval system and the system itself are eliminated, reducing the burden on employees on time. In addition, it is possible to facilitate the use without changing the permanent user information, billing information, and association information, and the database management work amount for that purpose does not occur.

  A billing destination that cannot be used due to the user's privilege level cannot be used without a permission in a system that has only two billing patterns according to the authentication result corresponding to each user's privilege level that is not displayed when a billing destination is selected. Displayed when selecting the billing destination on the multifunction device from the status, displayed if permission has been granted in advance that it can be operated by performing separate authentication, and can be used, that is, temporarily but normally It provides a third billing pattern that allows operation beyond the authority of time.

  The third billing pattern exceeds the normal authority, so in order to use it, authentication by another means such as a password or authentication code that is known only to the relevant person authorized by the supervisor or administrator It is a premise to use in combination. Furthermore, in order to prevent the user from misusing the temporary authority or diverting the temporary authority to a third party, the print job itself has a function to embed the paired information, and the fraud that does not allow printing if it does not match It is possible to prevent use, detection, and tracking, and to provide a limited user to the last by providing an option for specifying a print format in advance, such as monochrome forcing on a printed material.

It is a figure which shows the basic network structure in embodiment of this invention. It is a figure which shows the hardware structure of the various terminals in embodiment of this invention. It is a figure which shows the hardware structure of the various terminals in embodiment of this invention. It is a basic functional block diagram in an embodiment of the present invention. It is an example of a screen which shows the basic user interface in the embodiment of the present invention. It is a figure which shows the table layout of the basic database in embodiment of this invention. It is a figure which shows the table layout of the basic database in embodiment of this invention. It is a figure which shows the processing flow in embodiment of this invention. It is a figure which shows the processing flow in embodiment of this invention. It is a figure which shows the processing flow in embodiment of this invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
FIG. 1 is a diagram showing the configuration of a basic network system in an embodiment of the present invention.

  In the present invention, in the network 100, a client terminal 102, an administrator terminal 104, a multifunction device 110, and a data server (hereinafter referred to as a server) 106 can be connected to each other.

  The client terminal 102 and the administrator terminal 104 are information processing terminals used by a user who issues a print command. The administrator terminal 104 is used to give or stop the authority of the administrator user to select a billing destination temporarily for a general user.

  The server 106 can transmit and receive data to and from the client terminal 102, administrator terminal 104, and multifunction peripheral 110 via the network 100 as a database.

  The multifunction device 110 performs print / copy control such as print / copy / scan / fax by a user operation. Further, it is assumed that the multi-function device 110 has a user interface (display, button, etc.) for accepting an operation by the user. Note that the administrator terminal 104 and the server 106 are shown as separate cases in the figure, but are only examples, and the administrator terminal 104 has a large storage area, or the server 106 An operation unit and a user interface may be provided.

  Note that the configuration of various terminals connected to the network 100 in FIG. 1 is an example, and it goes without saying that there are various configuration examples depending on applications and purposes.

Next, the hardware configuration of each terminal of the client terminal 102, the administrator terminal 104, and the server 106 in FIG. 1 will be described with reference to FIG.
FIG. 2 is a diagram illustrating a hardware configuration of various terminals according to the embodiment of the present invention.

  The CPU 201 comprehensively controls each device and controller connected to the system bus 204. Further, the ROM 203 or the external memory 211 is necessary for realizing a BIOS (Basic Input / Output System) or an operating system program (hereinafter referred to as an OS), which is a control program of the CPU 201, or a function executed by each server or each PC. Various programs to be described later are stored. The RAM 202 functions as a main memory, work area, and the like for the CPU 201.

  The CPU 201 implements various operations by loading a program necessary for execution of processing into the RAM 202 and executing the program.

  An input controller (input C) 205 controls input from a pointing device such as a keyboard 209 or a mouse (not shown).

  A video controller (VC) 206 controls display on a display device such as a CRT display (CRT) 210. The display device is not limited to the CRT, but may be a display using another method such as liquid crystal. These are used by the administrator as needed. A memory controller (MC) 207 is a hard disk (HD), floppy disk (registered trademark FD) or PCMCIA card slot for storing boot programs, browser software, various applications, font data, user files, editing files, various data, and the like. Controls access to an external memory 211 such as a compact flash memory connected via an adapter.

  A communication I / F controller (communication I / FC) 208 is connected to and communicates with an external device via a network, and executes communication control processing in the network. For example, Internet communication using TCP / IP is possible.

  Note that the CPU 201 enables display on the CRT 210 by executing outline font rasterization processing on a display information area in the RAM 202, for example. In addition, the CPU 201 enables a user instruction with a mouse cursor (not shown) on the CRT 210.

  A program 212 for realizing the present invention is recorded in the external memory 211 and is executed by the CPU 201 by being loaded into the RAM 202 as necessary. Furthermore, the definition file 213 and various information tables 214 used by the program 212 according to the present invention are stored in the external memory 211, and detailed description thereof will be described later.

Next, the hardware configuration of the MFP 110 in FIG. 1 will be described with reference to FIG.
The multifunction device 110 includes a CPU 301, RAM 302, ROM 303, HDD 304, network I / F 305, MODEM 306, operation unit I / F 307, RIP (raster image processor) 310, printer I / F 311, scanner I / F 313, image in the controller unit 320. A processing unit 317, an external I / F 317, and an IMAGE BUSI / F 320 are provided. These components are connected in the controller unit 320 via CPU buses 309 and 315. Further, 300 of the multifunction peripheral 110 includes a printer unit 312, a scanner unit 314, an operation unit 308, and a card reader 319. These operate with each I / F.

  As shown in FIG. 1, an external device (client PC or server PC or other multifunction device) in a network such as 100 is a communication network such as a LAN connected to the Network I / F or a public network connected to the MODEM 306. Send and receive data via

  The control of each component in the CPU 301 and the controller unit 320 and particularly the overall control of the image processing unit 317 and the external input unit are executed according to the program. The printer unit 312, the scanner unit 314, the operation unit 308, and the card reader 319 Execute control.

  The RAM 302 stores data received from an external device and stores image data rasterized by the RIP 310. The ROM 303 stores programs, data, and the like.

  The HDD 304 is a storage device that stores various data such as image data, user information, billing destination information, and association information.

  The network I / F 305 is an interface for connecting the LAN and the controller unit 320. The network I / F 305 sends information sent from an external device via the LAN to the IMAGE BUS I / F 320 via the CPU bus 309, and the IMAGE BUS I / F 320 receives the information.

  The MODEM 306 is an interface for connecting the telephone line and the controller unit 320.

  The operation unit I / F 307 is an interface for connecting the operation unit 308 and the controller unit 320.

  The RIP 310 converts print data described in a page description language such as PDL (Page Description Language) sent from an external device into bitmap data. PDL is a programming language for controlling the image forming apparatus.

  The image processing unit 317 performs various types of image processing on the bitmap data generated by the scanner unit 314 and the RIP 310.

  The operation unit 308 is a device that provides a UI (user interface), presents an operation screen to the user, and accepts various instructions from the user.

  The external I / F 318 is an interface for connecting an external reading device that accepts various types of information from the user, using the card reader 319 as an example.

  Next, a basic functional block diagram in the embodiment of the present invention will be introduced with reference to FIG. As described above, the client terminal 102, the administrator terminal 104, the server 106, and the multifunction device 110 are connected to each other via the network 100.

  As described with reference to FIG. 2, the client terminal 102 and the administrator terminal 104 include the input controller 205 included in the PC terminal, and the operation unit 308 and card included in the multifunction peripheral 110 as illustrated in FIG. Via the various operation screens provided by the reader 319, various processes relating to printing / copying and charging are executed. Here, the description will be divided into basic blocks of the multifunction peripheral 110. These relationships are omitted because they are inseparable in operation and are closely related.

  In order to perform printing, copying, and communication, which are the main functions of the MFP 110, the copying unit 410 has a block 411 for reading copy data and a copy data output block 412. The scan unit 420 includes a scan data reading block 421, a scan data output block 422, and a scan data storage block 423. The FAX unit 430 includes a block 431 that receives FAX data, a FAX data reading block 432, and a FAX data transmission block 433. The printer unit 440 includes a printer job data reception block 441, a printer job data reading unit 442, and a printer job output block 443.

  Further, these operate in close cooperation with a network unit 490 having a network processing block 491 and a network I / F block 492.

  In addition, there are a manual input block 451, a display input unit 450 having a read data display block 452, a storage unit 460 having a storage block such as an HDD, and a login unit 470 having a login processing block 471.

For the multifunction peripheral 110, the client terminal 102 and the administrator terminal 104 have a data reception unit 481, a data storage unit 482, and a printer data transmission unit 483.
Next, FIG. 5 is used to show a basic user interface in the embodiment of the present invention.

  Each screen in FIG. 5 is an example of an authority grant form screen that is set by an administrator user (such as a manager) account on the administrator terminal 104.

  Reference numeral 501 in FIG. 5 denotes an authority grant form screen that can temporarily grant authority based on the operation of the administrator user. Reference numeral 502 denotes an authority grant form screen that can temporarily grant authority based on the operation of the administrator user. These authority assignment / deletion form screens are provided with a selection button for “giving / suspending specific authority”, as in 501-1, so that authority is granted or stopped at any time. You can choose what to do.

  In 501-2, the administrator user sets a period for granting authority, a user, and a billing destination. In this screen example, the user displays the name “Mr. Taro Yamada”, but may be, for example, the employee ID of each employee. Similarly, the billing code may be a number that can uniquely identify the billing destination, or may be the name of the billing destination (for example, a department name for a company, or a client name for the outside).

  In 501-3, the administrator user is a check box that can select whether or not a password is required when selecting a billing destination to which authority is given this time. When the administrator user checks that a password is required, the password input text box 501-4 can be input.

  Reference numeral 503 denotes a screen for selecting a charging destination (charging code) for the printer job displayed on the display of the multifunction peripheral 110. This screen displays billing destinations that can be selected for each user who has logged in to the MFP 110. The user selects an appropriate charging destination from the displayed charging destinations. As a method for accepting a billing destination from the user on this screen, if the display of the multi-function peripheral 110 has a touch panel function, the billing destination selection is accepted by a user's panel pressing operation. Further, in the case of the multifunction machine 110 that does not have a touch panel function, the selection of the billing destination is accepted by a pressing operation of a cursor key (not shown).

  The billing destination selection screen 503 displays the billing destination set to be selectable for each user in advance and the billing destination temporarily set to be billable by the administrator user in an identifiable state. May be. According to the figure, the billing destinations from “001” to “003” are billing destination information set in advance so as to be selectable for each user, and the billing destination of “1101 first center” at the bottom is The billing destination information set by the administrator user is displayed in a different color.

  Reference numeral 504 denotes a password confirmation screen that is displayed when a password is required when using the billing destination selected on the billing destination selection screen 503. This screen is displayed when a password is set in 501-3 when the user is given temporary selection authority to a specific billing destination on the authority grant form screen 501.

  The screen described above is an example, and it goes without saying that this is not all but may be another screen. Details of the display operation will be described with reference to the flowchart of FIG.

  Although not shown in the setting screen items of FIG. 5, when temporary authority is set for a general user, printing to an account that can be temporarily selected as a billing destination (copy, FAX, etc.) The print settings may be changed. This can be a situation in which the general user cannot originally print with monochrome double-sided printing and 2 in 1 settings, and the output cannot be delivered to the customer with this setting (Proposal, Estimate, etc.) This is especially true when printing documents related to business negotiations).

  As a specific method, after selecting a general user to be granted temporary authority and billing destination information (billing code) on the 501 authority granting form in FIG. A button for “setting specification” is prepared, and when the “print setting specification” button is pressed, temporary authority is given in the above-described 501 authority grant form on the print setting specification screen (not shown). It is possible to specify print settings for printing to a billing destination. As a result, general users can perform printing or the like with special print settings that are different from the printing authority originally determined when printing or faxing to a charging destination to which temporary authority is given. Become.

  Further, even if the general user print settings are not set by the administrator user at this timing, by adding a check “permit change of print settings” to the authority grant form in FIG. When a general user performs processing using a temporary authority in the multifunction peripheral 110, a method may be used so that print settings can be changed. At this time, the print setting changeable flag information is added to the temporary authority table 607 in FIG.

  Next, a database stored and managed in the server 106 of the present invention will be described with reference to FIG. FIG. 6 is a configuration example of a data table stored and managed in the server according to the embodiment of the present invention.

  Reference numeral 602 denotes a user table indicating information on users who are authorized to use the system. The user table includes, for example, items of a user code 602-1, a login / job owner name 602-2, a user name 602-3, a password 602-4, and an authority level 602-5. desirable. The login / job owner name 602-2 is the user name on the multifunction device 110 when the user logs in to the multifunction device 110, and the same name is applied to the owner of the print job.

  Reference numeral 603 denotes a table showing authority levels respectively set in an environment in which the present system is used. In contrast to the authority level of 603-1, a user level is set in 603-2. For example, in the figure, a user having an employment form in which “level 1” is “temporary worker / part-time job” is set.

  Reference numeral 604 denotes a table representing billing codes that can be used (selected) at each authority level. For each authority level 604-1, the billing code that can be used in the initial state is different in 604-2.

  For example, in “level 1”, only the billing codes “001” to “003” can be selected. However, when the user becomes “level 2”, in addition to “001” to “003”, “011” to “003” It becomes possible to set a billing code of “013”.

  Reference numeral 605 denotes a data table indicating an affiliation table to which each user belongs in an environment in which this system is used. For example, the value of “affiliation code” 605-1 and the “affiliation name” 605-2 associated therewith. Is desirable to be set.

  Reference numeral 606 denotes a billing destination information table, in which “billing destination name” is set in 606-2 for “billing code” in 606-1. For example, new billing destination information can be added when a payment item is added, when a new project is started, or when a new client is set. The charging destination information adding method will not be described in detail in the present invention. For example, the administrator user may log in from the administrator terminal 104 and add the charging destination information from the charging destination information addition screen. It may be possible.

  Reference numeral 607 denotes a temporary permission authority table, which includes user information (607-1) to which authority is granted on the authority grant form screen in FIG. 5, an administrator user (607-2) to whom authority is assigned, and a billing code ( 607-3), a password (607-4), and the number of days (607-5) to which authority is given are desirable.

  Note that the data table in FIG. 6 is merely an example, and it is needless to say that this is not all and there is a possibility that other layouts may be changed or added.

Next, the processing outline of the present invention will be described with reference to the sequence diagrams of FIGS.
FIG. 7 is a sequence diagram showing an authorization process and a notification process of the server 106 by the authority grant / stop application from the administrator terminal 104.

  The sequence diagram illustrated in FIG. 7 represents processing between the administrator terminal 104 and the server 106. Since the operation unit in the administrator terminal 104 and the server 106 has been described with reference to FIGS. 2 and 3, only the administrator terminal 104 and the server 106 are described here.

  First, in step S711, the administrator terminal 104 receives an input of a user name and a password in response to an operation of the administrator user. The administrator terminal 104 determines whether or not the log-in request to the administrator terminal 104 is possible in step 712 and notifies the authentication determination result in step 713. If login to the terminal in step S712 is not approved, a login error warning is displayed on the terminal on the screen.

  Subsequently, the server 106 is logged in to the print management system as an administrator user. In step S714, the administrator terminal 104 accepts the input of the administrator user name and password, and in step S715, transmits an administrator login request to make a login request to the server 106. In step S716, the server 106 that has received the login request determines whether it is possible, and notifies the authentication determination result in steps S717 and S718 to complete the login process as the administrator user. If the login authentication is not approved, a login error message is displayed on the display unit of the administrator terminal 104.

  In this case, whether the login owner of 602-2 in FIG. 6 and the password of 602-4 are correct when the login request of step S715 is made based on the input of the user name and password in step S714. The log-in condition is that it is input and transmitted and that the authority level of the user who logs in as an administrator is an administrator user. In the present embodiment, the login condition is that the user is a manager (section manager) or higher at the authority level “3”.

  In steps S719 and S720, the CPU 201 of the administrator terminal 104 receives a management menu screen (not shown) transmitted from the server 106 and displays it on the display unit. In step S721 and step S722, when display of the authority grant / stop form screen is selected by the user, the server 106 requests the UI of the authority grant / stop form screen. In step S723, an authority grant / stop form screen (501 and 502 in FIG. 5) is transmitted from the server 106 and displayed on the display of the administrator terminal 104. In step S724, the standby state is set in a state where user operations can be accepted. To do.

  The CPU 201 of the administrator terminal 104 accepts information input by the operation of the administrator user (step S725). The items displayed here are as shown in the above-described screen examples 501 and 502 in FIG. 5. From the administrator user, selection of grant / stop of authority, target user, billing code, grant of authority / During the suspension period, a password (if necessary) and a comment (if necessary) necessary for use are accepted, and a press of the OK button 501-5 is accepted. As a result, the accepted data is transmitted from the administrator terminal 104 to the server 106 in step S726, and it is checked whether the authority grant information or the stop information is correctly input.

  In step S727, the CPU 201 of the server 106 verifies the data input from the administrator terminal 104 in step S726. Specifically, whether there is a user who grants / stops authority (whether the user name has been entered correctly), the billing code has been entered correctly, authority, which has been accepted in step S725 described above, Check whether the grant / suspend period is correctly entered.

  In step S728 and step S729, the verification result is notified, and re-input of the place where the input is incomplete or inconsistent is accepted. If the received data is correctly input, the data in the server is updated in step S730. At the time of this update, the CPU 201 of the server 106 assigns or deletes the management number to the temporary authority grant / stop application received in step S726. The database to be updated is 607 in FIG. At this stage, the database is not fixed, and the processing of step S735 described later is awaited.

  In step S731, the CPU 201 of the server 106 notifies the administrator terminal 104 of the management number assigned or deleted from the temporary authority grant / stop application received in step S726. In step S732, a confirmation screen (not shown) is displayed on the display unit of the administrator terminal 104. When the administrator user confirms the management number and presses the OK button in step S733, the administrator terminal 104 notifies the server 106 of the information in step S734.

  In step S734, the server 106 receives the confirmation information transmitted in step S732 described above. When the CPU 201 of the server 106 receives the confirmation information, one new record is added to the temporary permission authority table 607 in FIG. 6-2 in step S735 (if the record is stopped, the corresponding record is deleted). Also, information on the presence / absence of the temporary permission authority of the corresponding user is updated in the main table 601.

  In the above processing, by registering temporary authorization information in the server 106, it is possible to select a billing code that has become temporarily usable in addition to a billing code that has been conventionally usable by the user. become. Thereafter, processing for logging out from the print management system is performed.

  As described above, according to the processing described in the sequence diagram of FIG. 7, by temporarily registering / deleting information with temporary authority to the server 106, it is temporarily used in addition to the billing code that the user can use conventionally. It becomes possible to select a billing code that has become possible. It is also possible to stop the charging authority that was temporarily attached.

  Next, a process in which the server 106 receives a print instruction, a process for receiving a billing code selection, and a process for determining whether or not to accept the print instruction by a user operation on the client terminal 102 will be described with reference to the sequence diagram 8. In the sequence diagram 8, the server 106 checks the authority and saves the job in response to a print job transmission from the client terminal 102 by a user operation.

  First, in step S811, the client terminal 102 receives an input of a user name and a password in response to an operation by a general user. In step 812, the client terminal 102 determines whether or not the login request to the client terminal 102 is possible, and notifies the general user of the authentication determination result in step 813. (If you cannot log in, an error notification will be sent.)

  In step S814, the client terminal 102 prints the document file (or web page) by the user operation while the login to the client terminal 102 is completed and the document file is edited and the connection to the Internet using a browser is performed. Receives an instruction and issues a print job execution instruction. The CPU 201 of the client terminal 102 detects the owner name of the print job. The job owner name is acquired from the user name logged in to the client terminal 102 in which the document creation application is installed.

  In step S815, the server 106 is notified. In step S816, the server 106 that has received the print job owner name checks the number of valid records registered in the temporary permission authority table 607 stored and managed in its own DB (external memory 211). Whether or not it is valid can be determined by confirming whether the printing date and time is an authority grant / stop period.

  If there is one or more records registered in step S816, the process further proceeds to step S817, in which the user table 602 stored in the DB (external memory 211) of the server 106 is called, and the print job owner name Get the user code value of. Further, the main table 601 is called to inquire whether there is a temporary permission authority number given to the corresponding user code. If the owner name of the print job does not match any authority information, and if there is corresponding authority information, the client terminal 102 is instructed to display the authority information in step S818. The client terminal 102 notifies the user by displaying the received authority information. The screen displayed on the client terminal 102 is a billing code selection screen shown at 503 in FIG.

  In step S819, the authority level and affiliation code of the user are acquired from the main table 601 based on the user code acquired in step S813, and the authority table 603, charge code table 604, and 605 affiliation are obtained. As a result of referring to the table, the permanent permission authority information obtained and the corresponding temporary permission authority information are displayed as 503 in FIG. 5 on the PC.

  At this time, all the authority given to the user is displayed, and the temporary permission authority information is displayed differently so as to be distinguishable from the always permitted authority. In step S820, the charging destination of the current job is selected from the displayed charging destination selection screen 503 in FIG. If the selected billing destination requires a password, the same input is made here to notify the data. The password input screen is indicated by reference numeral 504 in FIG.

  The billing destination information (billing code) selected by the user and its password (when set) are transmitted to the server 106 from the client terminal 102 in step S821, and the CPU 201 of the server 106 receives the received information in step S822. The billing code is checked against the record of the temporary permission authority table 605 in FIG. 6 to verify whether they match.

  In step S822, the authority check of the permanent / temporary permission authority table is completed, and the process proceeds to step S823 to notify the client terminal 102 of the result of the authority check. In step S824, the client terminal 102 displays the result to the user.

Thereafter, the client terminal 102 transmits a print job to the server 106 in step S825 based on the authentication result received in step S823. In step S825, the CPU 201 of the server 106 adds the authority information selected by the user to the received print job, and stores the job in a state where the job and the restriction information are combined in step S826. Apart from this process, the general user completes the logout process from the client terminal 102 through the exchange of step S827 and step S828.
As described above, according to the processing of FIG. 8, it is possible to select a charging code temporarily attached and transmit a print job.

Next, with reference to the sequence diagram 9, a user login process to the multifunction peripheral 110, a print job execution, a billing code selection authority process for multiplying the cost of the print job, and the possibility determination process will be described. FIG. 9 illustrates a process from when the user logs in to the multifunction device 110 until the server 106 checks the authority and collects usage logs such as copying and scanning performed by the multifunction device 110.

  First, in step S911, the multifunction device 110 accepts a user ID and password by user input, and in step S912, the server 106 detects a login request transmitted from the multifunction device 110. In step S913, the server 106 authenticates the user to the database held in its own DB, and then confirms the number of valid registration records in the temporary permission authority table 607 in step S914.

In step S915, the information introduced by the server 106 is notified to the multifunction peripheral 110, and the multifunction peripheral 110 displays a menu screen or an authentication judgment error result to the user in step S916 based on the information acquired in step S915. To do. In step S917, a document to be printed is selected and received from the print job list in which the logged-in user displayed in the displayed menu screen is a jobner. The multi-function peripheral 110 notifies the server 106 that holds the print job and authority selected in step S918 as a set.
The server 106 confirms the status and authority of the job stored in step S919. In step S920, the print job is transmitted to the multifunction peripheral 110, and the received multifunction peripheral 110 outputs the print job to the user in step S920-2. After output, the printer log is sent to the server 106 in step S921. The server 106 updates the status of the job output in step S922, and saves the log received from the multifunction device in step S923.
Based on the user code, authority level and affiliation code are obtained from the main table 601 and the authorization information is always obtained as a result of referring to the authority level, 603 authority table, 604 authority level and accounting code table, and 605 affiliation table Together with applicable temporary permission authority information,

The user can use the functions of the MFP main body such as copying and scanning instead of the printer after logging in to the MFP 110. This time, I will explain the flow by copying.
In step S924, when the selection of the copy operation is accepted, the multifunction device 110 notifies the server 106 of information instructed to the multifunction device 110 in step S925. In step S926, the server 106 checks the temporary authority and the permanent authority of the charging destination associated with the user, and notifies the MFP 110 of the result and the charging destination information usable with the authority in step S927. In step S928, the multifunction peripheral 110 displays the billing destination information that can be used for the user.
A billing destination for the current copy work (or scan work) is selected from the displayed 503 in FIG. The user selects an appropriate authority for operations such as copying and scanning from the displayed 503 in FIG. If the password is required to use the billing destination, the password request UI is displayed on the 307 operation unit I / F of the multi-function peripheral 110 and the user is prompted to input information. In S <b> 929, the data is input to the multifunction machine 110.
The billing destination information and password selected by the user are transmitted to the server 106 in step S930. In S931, the server 106 collates the temporary authority data table 607 in FIG. 6-2, notifies the MFP 110 of the data collation result in Step S932, and displays it for the user in Step S933. An error notification is displayed if the password is incorrect.

  If charging to the selected charging destination information is permitted, the multifunction peripheral 110 accepts a copy instruction from the user in step 934 and copies the document. In step S935, the multifunction peripheral 110 notifies the server 106 of the copy log in step S936. The server 106 saves the log in step S937, and the flow of copying as an example ends. Steps S924 to S935 describe the case where a specific charge code is charged for the copy job. For example, the charge destination information is set not for the copy job but for the scan job, and the same process is used for charging. It is also possible to do this.

In addition to this process, the user completes the logout process from the multi-function peripheral 110 through the exchange of step S938 and step S939.

  According to the present invention, while maintaining normal authentication and security level, the MFP can be used flexibly without being restricted by its authority, and has a means for preventing unauthorized use, its authentication method, management / billing system, It becomes possible to provide a program.

  Further, as an operational effect, since illegal sharing and lending of IC cards and passwords can be avoided, an operational security effect is enhanced. In addition, a post-approval / accounting system is not required, reducing work and reducing costs. In addition, the approval work through the online approval system and the system itself are eliminated, reducing the burden on employees on time. In addition, it is possible to facilitate the use without changing the permanent user information, billing information, and association information, and the database management work amount for that purpose does not occur.

  A billing destination that cannot be used due to the user's privilege level cannot be used without a permission in a system that has only two billing patterns according to the authentication result corresponding to each user's privilege level that is not displayed when a billing destination is selected. Displayed when selecting the billing destination on the multifunction device from the status, displayed if permission has been granted in advance that it can be operated by performing separate authentication, and can be used, that is, temporarily but normally It provides a third billing pattern that allows operation beyond the authority of time.

  The third billing pattern exceeds the normal authority, so in order to use it, authentication by another means such as a password or authentication code that is known only to the relevant person authorized by the supervisor or administrator It is a premise to use in combination. Furthermore, in order to prevent the user from misusing the temporary authority or diverting the temporary authority to a third party, the print job itself has a function to embed the paired information, and the fraud that does not allow printing if it does not match It is possible to prevent use, detection, and tracking, and to provide a limited user to the last by providing an option for specifying a print format in advance, such as monochrome forcing on a printed material.

  As mentioned above, although embodiment and the specific example were mainly explained in full detail, this invention can take the embodiment as a system, an apparatus, a method, a program, a storage medium, etc., for example, specifically, multiple The present invention may be applied to a system composed of a single device or an apparatus composed of a single device.

  The program according to the present invention is a program that can be executed by the computer as the client terminal 102, the administrator terminal 104, the server 106, and the multifunction peripheral 110 according to the processing of the flowcharts shown in FIGS. 7 to 9, and the storage medium according to the present invention is illustrated in FIG. 7 to 9 store programs that can be executed by the client terminal 102, the administrator terminal 104, the server 106, and the multifunction peripheral 110. Note that the program in the present invention may be a separate independent program for each processing method of each apparatus in FIGS.

  As described above, a recording medium that records a program that implements the functions of the above-described embodiments is supplied to a system or apparatus, and a computer (or CPU or MPU) of the system or apparatus stores the program stored in the recording medium. It goes without saying that the object of the present invention can also be achieved by executing the reading.

  In this case, the program itself read from the recording medium realizes the novel function of the present invention, and the recording medium storing the program constitutes the present invention.

  As a recording medium for supplying the program, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, DVD-ROM, magnetic tape, nonvolatile memory card, ROM, EEPROM, silicon A disk or the like can be used.

  Further, by executing the program read by the client terminal 102, the administrator terminal 104, the server 106, and the multifunction peripheral 110, not only the functions of the above-described embodiments are realized, but also on the computer based on the instructions of the program. It goes without saying that the OS (operating system) or the like running on the system performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  Furthermore, after the program read from the recording medium is written to the memory provided in the function expansion board inserted into the computer or the function expansion unit connected to the computer, the function expansion board is based on the instructions of the program code. It goes without saying that the case where the CPU or the like provided in the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  Further, the present invention may be applied to a system composed of a plurality of devices or an apparatus composed of a single device. Needless to say, the present invention can be applied to a case where the present invention is achieved by supplying a program to a system or apparatus. In this case, by reading a recording medium storing a program for achieving the present invention into the system or apparatus, the system or apparatus can enjoy the effects of the present invention.

Furthermore, by downloading and reading a program for achieving the present invention from a server, database, etc. on a network by a communication program, the system or apparatus can enjoy the effects of the present invention.
In addition, all the structures which combined each embodiment mentioned above and its modification are also included in this invention.

  In addition, each process realized by the above-described software can be realized as firmware or hardware configuration, and each process can be realized as each means. The technical scope of the present invention is realized by such firmware or hardware configuration. Is also included.

100 LAN
102 Client terminal 104 Administrator terminal 106 Data server 110 MFP

Claims (11)

Print management in which user information, user authority information, and charge management information for charging costs related to printing work are stored, an information processing terminal, and a multifunction peripheral can be connected to each other via a network A system,
In the information processing terminal,
An appending means for granting to the user temporary selection authority information that allows the user to temporarily select charging destination information that the user does not have selection authority in advance among the charging destination information;
Transmitting means for transmitting temporary selection authority information including charging destination information to be temporarily selectably provided to the user by the attaching means to a print management apparatus;
In the print management apparatus,
Receiving means for receiving the temporary selection authority information transmitted by the transmitting means;
Determining means for determining whether or not the user information and billing destination information to which the temporary authority grant information received by the receiving means is correctly received;
When it is determined that the temporary authority grant information is correctly received by the determination means, a registration means for registering the temporary authority grant information;
Notification means for notifying the information processing terminal that the temporary granting information has been registered by the registration means,
In the MFP,
Login information receiving means for receiving user identification information for the user to log in to the print management system;
A print job list acquisition unit that acquires a list of print job lists that are managed in association with the user identification information received by the login information reception unit and in which the user is a job owner;
Instruction accepting means for accepting a print instruction for a specific print job in the print job list obtained by the obtaining means;
Execution means for executing a print instruction to the print management apparatus to print the print job received by the instruction reception means;
Furthermore, in the print management apparatus,
Confirmation means for confirming whether or not a temporary selection authority for charging a print job for which a print instruction has been executed by the execution means of the multifunction peripheral is attached;
An output instruction means for instructing the MFP to output the print job when the confirmation means grants the user a temporary selection right to charge the print job. Print management system. Authentication information for using the charging destination information when the determination means determines that the charging destination information is charging destination information to which temporary authority is given by the granting means of the information processing terminal. Input accepting means for accepting input,
Authentication information transmitting means for transmitting the authentication information to the print management apparatus in order to determine whether or not the billing destination information can be used with the authentication information received by the input receiving means;
The setting unit selects a billing destination for a printing job executed by the user when the print management apparatus determines that the billing destination information is available based on the authentication information transmitted by the authentication information transmitting unit. The print management system according to claim 1, wherein the print management system sets the billing destination information received by the receiving unit.   The display means is configured to identify the billing destination information temporarily given the selection authority by the granting means and the billing destination information to which the user has the selection authority in advance. The print management system according to claim 1, wherein the print management system is displayed on a display unit.   4. The print management system according to claim 1, wherein the assigning unit sets a period during which billing destination information for temporarily granting a selection authority to the user can be selected. 5. . 5. The printing according to claim 1, further comprising: a deleting unit that deletes the billing destination information that can be selected by the temporary authority given to the user by the giving unit. Management system.   6. The adding unit according to claim 1, further comprising a print setting specifying unit for specifying a print setting when a user uses the billing destination information to be temporarily added. Print management system. In a print management apparatus that is connectable to an information processing terminal and a multifunction peripheral, and stores at least user information, user authority information, and billing destination information for charging a cost related to a printing job,
Receiving means for receiving the temporary selection authority information transmitted by the transmitting means;
Determining means for determining whether or not the user information and billing destination information to which the temporary authority grant information received by the receiving means is correctly received;
When it is determined that the temporary authority grant information is correctly received by the determination means, a registration means for registering the temporary authority grant information;
Notification means for notifying the information processing terminal that the temporary granting information has been registered by the registration means;
Confirmation means for confirming whether or not a temporary selection authority for charging a print job for which a print instruction has been executed by the multifunction peripheral is attached;
An output instruction means for instructing the MFP to output the print job when the confirmation means grants the user a temporary selection right to charge the print job. Print management device. Print management in which user information, user authority information, and charge management information for charging costs related to printing work are stored, an information processing terminal, and a multifunction peripheral can be connected to each other via a network A system print management method comprising:
In the information processing terminal,
The granting means of the information processing terminal adds temporary selection authority information that allows the user to temporarily select charging destination information for which the user does not have a selection authority in advance among the charging destination information. Granting steps to give,
A transmission step of transmitting information on temporary selection authority including charging destination information to be provided to the user so as to be temporarily selectable to the user in the granting step.
In the print management apparatus,
A receiving step in which the receiving means of the print management apparatus receives the temporary selection authority information transmitted in the transmitting step;
A determination step of determining whether or not the determination unit of the print management apparatus correctly accepts the user information and charging destination information to which the temporary authority grant information received in the reception step is received;
A registration step of registering the temporary authority grant information when the registration means of the print management apparatus determines that the temporary authority grant information is correctly received in the determination step;
A notification step of notifying the information processing terminal that the notification means of the print management apparatus has registered the temporary authority grant information in the registration step;
In the MFP,
A login information receiving step for receiving user identification information for the user to log in to the print management system;
The print job list of the MFP is managed in association with the user identification information received in the login information reception step, and a print job list for acquiring a list of print job lists for which the user is the job owner An acquisition step;
An instruction receiving step for receiving an instruction to print a specific print job in the print job list acquired in the acquiring step by the instruction receiving unit of the multifunction peripheral;
An execution step of executing a print instruction to a print management apparatus so as to print the print job received in the instruction reception step.
Furthermore, in the print management apparatus,
A confirmation step of confirming whether or not the confirmation means of the print management apparatus is given a temporary selection authority for charging a print job for which a print instruction has been executed in the execution step of the multifunction peripheral;
The output instruction means of the print management apparatus instructs the multifunction device to output the print job when the user is given a temporary selection authority for charging the print job in the confirmation step. A print management method comprising: an output instruction step. Print management in which user information, user authority information, and charge management information for charging costs related to printing work are stored, an information processing terminal, and a multifunction peripheral can be connected to each other via a network A program for controlling the system,
The information processing terminal
An appending means for granting to the user temporary selection authority information that allows the user to temporarily select charging destination information that the user does not have selection authority in advance among the charging destination information;
Functioning as a transmission means for transmitting temporary selection authority information including billing destination information to be provided to the user so as to be temporarily selectable by the attachment means to the print management apparatus;
The print management device;
Receiving means for receiving the temporary selection authority information transmitted by the transmitting means;
Determining means for determining whether or not the user information and billing destination information to which the temporary authority grant information received by the receiving means is correctly received;
When it is determined that the temporary authority grant information is correctly received by the determination means, a registration means for registering the temporary authority grant information;
Function as a notification means for notifying the information processing terminal that the temporary granting information has been registered by the registration means;
The multifunction device,
Login information receiving means for receiving user identification information for the user to log in to the print management system;
A print job list acquisition unit that acquires a list of print job lists that are managed in association with the user identification information received by the login information reception unit and in which the user is a job owner;
Instruction accepting means for accepting a print instruction for a specific print job in the print job list obtained by the obtaining means;
Functioning as an execution unit for executing a print instruction to the print management apparatus to print the print job received by the instruction reception unit;
Further, the print management device is
Confirmation means for confirming whether or not a temporary selection authority for charging a print job for which a print instruction has been executed by the execution means of the multifunction peripheral is attached;
The confirmation unit is configured to function as an output instruction unit for instructing the MFP to output the print job when the user is given a temporary selection authority for charging the print job. A program that can be read and executed by a computer. A control method for a print management apparatus that is connectable to an information processing terminal and a multifunction peripheral, and stores at least user information, user authority information, and billing destination information for charging a cost related to a printing job,
In the print management apparatus,
A receiving step in which the receiving means of the print management apparatus receives the temporary selection authority information transmitted by the information processing terminal;
A determination step of determining whether or not the determination unit of the print management apparatus correctly accepts the user information and charging destination information to which the temporary authority grant information received in the reception step is received;
A registration step of registering the temporary authority grant information when the registration means of the print management apparatus determines that the temporary authority grant information is correctly received in the determination step;
A notification step of notifying the information processing terminal that the notification means of the print management apparatus has registered the temporary authority grant information in the registration step;
A confirmation step for confirming whether or not the confirmation means of the print management apparatus is given a temporary selection authority for charging a print job for which a print instruction has been executed by the multifunction device;
The output instruction means of the print management apparatus instructs the multifunction device to output the print job when the user is given a temporary selection authority for charging the print job in the confirmation step. A print management apparatus comprising: an output instruction step. A program for controlling a print management apparatus that can be connected to an information processing terminal and a multifunction peripheral and stores at least user information, user authority information, and billing destination information for charging a cost related to a printing job,
The print management device;
Receiving means for receiving the temporary selection authority information transmitted by the transmitting means;
Determining means for determining whether or not the user information and billing destination information to which the temporary authority grant information received by the receiving means is correctly received;
When it is determined that the temporary authority grant information is correctly received by the determination means, a registration means for registering the temporary authority grant information;
Notification means for notifying the information processing terminal that the temporary granting information has been registered by the registration means;
Confirmation means for confirming whether or not a temporary selection authority for charging a print job for which a print instruction has been executed by the multifunction peripheral is attached;
The confirmation unit is configured to function as an output instruction unit for instructing the MFP to output the print job when the user is given a temporary selection authority for charging the print job. A program that can be read and executed by a computer.

Images