JP2013018289A - Information processing device, program, and recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To appropriately perform an authentication process based on a pass word, or the like, included in print data.SOLUTION: An information processing device includes: a storage means for associating print data, user identification information and a pass word, and then storing the associated information in a print data recording device; a setting means for setting the pass word to be stored in association with the print data based on the user identification information and the user pass word stored in a user information recording device; and a retrieval means for retrieving the print data associated with the user identification information and the pass word succeeded in the user authentication from the print data recording device by using the used identification information succeeded in user authentication based on reference to the user identification information and the pass word stored in the user information recording device.

Description

  The present invention relates to an information processing apparatus, a program, and a recording medium.

  Conventionally, print data including a user name and password is transmitted from a PC (Personal Computer) to an image forming apparatus, and a print job is executed when authentication based on the user name and password is successful in the image forming apparatus. A technique is known in which the execution of a print job is rejected if it fails (for example, Patent Document 1 and Patent Document 2). According to the technique, it is possible to improve the security of a print job executed by an image forming apparatus shared in an office or the like.

  However, in the conventional technique, a password for print data is set when a print instruction is issued on the PC. In addition, a password that is collated with a password of print data in the image forming apparatus is set in the image forming apparatus as user information in advance. Thus, both passwords are set separately (at different timings). Therefore, both passwords may not match when a print job is executed. In this case, there is a disadvantage that the print job is not executed even though the user is a valid user. Specific examples in which such inconvenience may occur include, for example, the following cases.

  The first case is a case where the user inputs an old password at the time of printing without knowing that the password has been updated by an administrator or by an administrator. In this case, an old password is set in the print data and does not match the password managed as user information.

  In the second case, after print data in which a user name and password are set is spooled in the image forming apparatus, the user logs in to the image forming apparatus a few days later and instructs printing of the spooled print data. Is the case. In this case, if the password managed as the user information is updated after the password is set in the print data and before the print instruction is input in the image forming apparatus, the print data password and the user information are updated. The passwords etc. do not match.

  In the third case, after the print data in which the user name and password are set is spooled in the image forming apparatus, the user logs in to the image forming apparatus and issues a print instruction for the spooled print data. Alternatively, the print job is started several days later depending on the storage status of the print job. In this case, if the password managed as user information is updated between when the print instruction is issued and when the print job is started, the print data password and the user information password are executed when the print job is executed. Etc. do not match.

  In general, from the viewpoint of security, the occurrence of the above situation is sufficiently considered in view of the fact that passwords managed as user information are periodically changed.

  The present invention has been made in view of the above points, and provides an information processing apparatus, a program, and a recording medium that can appropriately execute an authentication process based on a password or the like included in print data. Objective.

  Therefore, in order to solve the above problem, the information processing apparatus associates the print data, the user identification information, and the password with each other and stores them in the print data recording unit, and the user identification information and password stored in the user information recording unit Based on the comparison between the setting means for setting the password stored in association with the print data in the storage means and the user identification information and password stored in the user information recording means, the user identification that has succeeded in user authentication Search means for searching for the print data associated with the user identification information and the password successfully authenticated by the user from the print data recording means using the information and password.

  Such an information processing apparatus can appropriately execute an authentication process based on a password or the like included in the print data.

  According to the present invention, it is possible to appropriately execute an authentication process based on a password or the like included in print data.

1 is a diagram illustrating an example of a hardware configuration of an image forming apparatus according to an embodiment of the present invention. It is a figure for demonstrating the outline | summary of confidential printing. 1 is a diagram illustrating an example of a functional configuration of an image forming apparatus according to a first embodiment. FIG. 5 is a sequence diagram for explaining processing executed by the image forming apparatus according to the first embodiment. 6 is a diagram illustrating a display example of an authentication information input screen displayed by the printer driver. FIG. 6 is a diagram illustrating a display example of a login screen in the image forming apparatus. FIG. FIG. 10 is a diagram illustrating a display example of a print data list screen. It is a figure which shows the function structural example of the image forming apparatus in 2nd embodiment. FIG. 10 is a sequence diagram for explaining processing executed by an image forming apparatus according to a second embodiment. It is a figure which shows the function structural example of the image forming apparatus in 3rd embodiment. FIG. 10 is a sequence diagram for explaining processing executed by an image forming apparatus according to a third embodiment. It is a figure which shows the function structural example of the image forming apparatus in 4th Embodiment. It is a figure which shows the structural example of a login control part. It is a flowchart for demonstrating the process sequence by a login control part. It is a figure which shows the example of the corresponding information which a corresponding information management part manages. It is a figure which shows the example of a display of a password screen.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a diagram illustrating a hardware configuration example of an image forming apparatus according to an embodiment of the present invention. In FIG. 1, an image forming apparatus 10 is a multifunction machine that realizes a plurality of functions such as scanning, copying, and printing in a single housing, and includes a CPU 101, a memory 102, a recording medium 103, a network I / F 104, an image. An output unit 105, an image processing unit 106, an external device I / F 107, a display unit 108, an operation unit 109, and the like are included.

  A program that implements the functions of the image forming apparatus 10 is recorded (installed) in a non-volatile recording medium 103 such as an HDD (Hard Disk Drive). The recording medium 103 stores the installed program and stores necessary files and data. The memory 102 reads and stores the program from the recording medium 103 when there is an instruction to start the program. The CPU 101 realizes functions related to the image forming apparatus 10 in accordance with a program stored in the memory 102. The network I / F 104 is used as an interface for connecting to a network.

  The display unit 108 is configured by an LCD (Liquid Crystal Display) or the like, and displays an operation screen, a message, and the like. The operation unit 109 is configured by hardware buttons (keys) and is an input unit that receives an operation input by a user. The display unit 108 and the operation unit 109 may be integrally configured as an operation panel.

  The image processing unit 106 executes various types of image processing required when outputting (printing) image data. The image output unit 105 outputs (prints) image data.

  The external device I / F 107 is an interface for connecting to a card reader used for inputting user information for authentication, and includes, for example, a USB port (USB host interface) or a serial boat. The card reader 30 is a so-called card reader that reads information from the card 50, and includes a hardware interface (for example, a USB connector or a serial interface) that can be connected to the external device I / F 107. However, the card reader 30 may be built in the image forming apparatus 10. The card reader 30 may be either a contact type or a non-contact type. The card 50 is not limited to an IC card, and any card ID (card number) unique to at least each card 50 such as a magnetic card can be recorded. The card ID is generally referred to as a Universal ID or a Card Serial Number. Specific examples of the card 50 include a proximity card, a mifare card, a Java (registered trademark) card, and the like.

  In the present embodiment, it is assumed that the card 50 is distributed to each user. However, a single card 50 may be shared by a plurality of users according to the level of security required for operation. Note that the card 50 distributed to each user may not be limited to one type. As described above, the card reader 30 can be easily connected to the image forming apparatus 10 by USB or the like. Accordingly, a plurality of card readers 30 having different types of cards 50 (Proximity card, Mifare card, Java (registered trademark) Card, etc.) may be connected to the image forming apparatus 10 at the same time. In this case, a plurality of types of cards 50 can be used simultaneously.

  In FIG. 1, an image forming apparatus 10 is connected to a print data transmitting apparatus 20 via a network (whether wired or wireless). The print data transmission apparatus 20 converts the document data that is the target of the print instruction into print data that can be interpreted by the image forming apparatus 10 in response to the input of the print instruction by the user, and print request (print job) of the print data. ) To the image forming apparatus 10.

  In the present embodiment, the print data transmitting apparatus 20 requests the image forming apparatus 10 to execute confidential printing. FIG. 2 is a diagram for explaining an outline of confidential printing.

  When performing confidential printing, the user inputs a user name (user ID) and a password together with a print instruction to the print data transmitting apparatus 20 (S11). The print data transmitting apparatus 20 generates print data of document data to be printed, and transmits the print data including the user name and password to the image forming apparatus 10 (S12). Upon receiving the print data including the user name and password, the image forming apparatus 10 stores the print data in the recording medium 103 without executing printing immediately. Thereafter, when the user logs in to the image forming apparatus 10 and instructs printing of the stored print data (S13), the image forming apparatus 10 executes printing of the print data (S14).

  According to such confidential printing, printing is executed only when it is confirmed that the user who issued the print instruction is on the image forming apparatus 10 side. Therefore, it is particularly effective for preventing information leakage when printing a highly confidential document.

  In order to execute such confidential printing, the image forming apparatus 10 has the following functional configuration. FIG. 3 is a diagram illustrating a functional configuration example of the image forming apparatus according to the first embodiment. In FIG. 1, an image forming apparatus 10 includes a print data receiving unit 11, a login control unit 12, a confidential print control unit 13, a print job control unit 14, a print data authentication unit 15, a password update unit 16, a print data storage unit 17, And a user DB 18 and the like. Each of these units is realized by processing executed by the CPU 101 by a program installed in the image forming apparatus 10.

  The print data receiving unit 11 receives the print data transmitted from the print data transmitting device 20 and stores it in the print data storage unit 17. The print data storage unit 17 is a storage area for spooling print data, and is formed on the recording medium 103, for example. The login control unit 12 controls an operator (user) login process for the image forming apparatus 10. During the login process, the operator is authenticated based on the user name and password registered in the user DB 18. The user DB 18 is a database that manages user information for each user using the recording medium 103, for example. A user name and a password are included as part of the user information. The user DB 18 may be centrally managed in a computer connected to the image forming apparatus 10 via a network. The confidential print control unit 13 controls processing for accepting a print job execution request related to the print data stored in the print data storage unit 17 from the operator. The print job control unit 14 causes the image output unit 105 to print the print data in response to the print job execution request received by the confidential print control unit 13. The print data authentication unit 15 authenticates the print data by checking the user name and password included in the print data with the user name and password registered in the user DB 18. The password update unit 16 updates (rewrites) the password included in the print data as necessary with the password registered in the user DB 18. In the first embodiment, the password update unit 16 updates the password of the print data in response to the reception of the print data by the print data reception unit 11 or the storage of the print data in the print data storage unit 17. .

  Hereinafter, a processing procedure of the image forming apparatus 10 will be described. FIG. 4 is a sequence diagram for explaining processing executed by the image forming apparatus according to the first embodiment.

  In the print data transmitting apparatus 20, the printer driver 21 causes the user to input a user name and password in response to an input of a confidential print job execution request (S101). The user name and password are input via the authentication information input screen.

  FIG. 5 is a diagram illustrating a display example of an authentication information input screen displayed by the printer driver. In the figure, an authentication information input screen 410 has a user name input area 411, a password input area 412 and the like. The printer driver 21 sets the user name and password input via the authentication information input screen 410 as print data and transmits the print data to the image forming apparatus 10. However, the password does not necessarily have to be entered. If no password is entered, the printer driver 21 sets only the user name in the print data. The authentication information input screen 410 is displayed when a predetermined button on the print setting screen for setting print conditions is pressed.

  Subsequently, the printer driver 21 generates print data of document data to be printed, sets the input user name and password in the print data, and transmits the print data to the image forming apparatus 10 (S102). ).

  When receiving the print data, the print data receiving unit 11 of the image forming apparatus 10 causes the password update unit 16 to check the password set in the print data (S103). The password update unit 16 determines whether or not a password is set in the print data. If the password is not included, the password update unit 16 acquires a password corresponding to the user name set in the print data from the user DB 18. The password is set in the print data (S104). Further, when a password is set in the print data, it is determined whether or not the password matches the one corresponding to the user name set in the print data in the user DB 18. The password set in the print data is updated with the password registered in (S105). When the password check by the password update unit 16 is completed, the print data receiving unit 11 stores the print data in the print data storage unit 17. A print job relating to the stored print data is not executed synchronously in response to reception of the print data. That is, the print job is locked. The password check by the password update unit 16 may be performed according to the storage of the print data in the print data storage unit 17.

  Thereafter, when the user presses a login button arranged on the operation unit 109 as an operator of the image forming apparatus 10, the login control unit 12 causes the display unit 108 to display a login screen.

  FIG. 6 is a diagram illustrating a display example of a login screen in the image forming apparatus. In the figure, a message prompting the user to input a user name and password or set the card 50 is displayed on the login screen 510.

  When the card 50 is set in the card reader 30 by the user while the login screen 510 is displayed on the display unit 108, or when a user name and password are input by the user via the login screen 510 (S106). The login control unit 12 collates the user name and password specified based on the card ID of the card 30 or the user name and password input by the user with a list of user names and passwords registered in the user DB 18. Thus, the user is authenticated (S107). If the authentication fails, the login control unit 12 rejects the user login and causes the display unit 108 to display an error screen.

  When the authentication is successful, the confidential printing control unit 13 prints data in which a user name that matches the user name of the authenticated user (hereinafter referred to as “login user”) is set (that is, the login user performs confidential printing). The requested print data) is searched from the print data storage unit 17, and a print data list screen including the search result is displayed on the display unit 108 (S108).

  FIG. 7 is a diagram illustrating a display example of the print data list screen. In the figure, the print data list screen 520 has a print data list display area 521, a print button 522, a delete button 523, and the like.

  The print data list display area 521 displays a list of print data (document names) related to the login user among the print data stored in the print data storage unit 17. When the delete button 523 is pressed, the confidential print control unit 13 deletes the print data selected in the print data list display area 521 from the print data storage unit 17. Therefore, in this case, the print job related to the print data is canceled.

  When the print button 522 is pressed, the confidential print control unit 13 requests the print job control unit 14 to execute a print job related to the print data selected in the print data list display area 521 (S109).

  The print job control unit 14 causes the print data authentication unit 15 to execute authentication of print data targeted for the print job (S110). The print data authentication unit 15 authenticates the print data by comparing the user name and password included in the print data with a list of user names and passwords registered in the user DB 18. When the print data is authenticated, the print job control unit 14 causes the image output unit 105 to print the print data (S111). Note that when the authority relating to the print job is set for each user in the user DB 18, the print job control unit 14 may restrict the execution of the print job according to the authority. For example, if the login user does not have print job execution authority, the print job control unit 14 refuses to execute the print job even if the print data is authenticated. For example, if the login user does not have color printing execution authority and the print data relates to color printing, the print job control unit 14 rejects execution of the print job.

  As described above, according to the image forming apparatus 10 in the first embodiment, the password of the print data is registered in the user DB 18 in response to the reception of the print data or in response to the storage in the print data storage unit 17. Consistency with existing passwords. Therefore, even if the user accidentally sets the old password in the print data without knowing that the password has been updated by the administrator, the print data authentication is successful and the print job is smoothly executed. The possibility of being executed can be increased.

  Next, a second embodiment will be described. FIG. 8 is a diagram illustrating a functional configuration example of the image forming apparatus according to the second embodiment. 8, the same parts as those in FIG. 3 are denoted by the same reference numerals, and the description thereof will be omitted as appropriate. In the second embodiment, the image forming apparatus 10 will be described as an image forming apparatus 10a.

  The main difference between the second embodiment and the first embodiment is the timing of updating the password included in the print data. In the second embodiment, the password included in the print data is updated in response to a successful login by the user to the image forming apparatus 10a (at the time of login). That is, the password update unit 16 in FIG. 8 is configured to update the password in response to a request from the confidential print control unit 13.

  Hereinafter, a processing procedure of the image forming apparatus 10a will be described. FIG. 9 is a sequence diagram for explaining processing executed by the image forming apparatus according to the second embodiment.

  In step S201, as in step S101, the printer driver 21 of the print data transmitting apparatus 20 causes the user to input a user name and password via the authentication information input screen 410 (see FIG. 5). Subsequently, the printer driver 21 generates print data of document data to be printed, sets the input user name and password in the print data, and transmits the print data to the image forming apparatus 10 (S202). ). When receiving the print data, the print data receiving unit 11 of the image forming apparatus 10 a stores the print data in the print data storage unit 17.

  Thereafter, when the user presses a login button arranged in the operation unit 109 as an operator of the image forming apparatus 10a, the login control unit 12 causes the display unit 108 to display a login screen 510 (see FIG. 6). When the card 50 is set in the card reader 30 by the user while the login screen 510 is displayed on the display unit 108, or when the user name and password are input by the user via the login screen 510 (S203). The login control unit 12 collates the user name and password specified based on the card ID of the card 30 or the user name and password input by the user with a list of user names and passwords registered in the user DB 18. Thus, the user is authenticated (S204). If the authentication fails, the login control unit 12 rejects the user login and causes the display unit 108 to display an error screen.

  If the authentication is successful, the confidential print control unit 13 receives the print data in which the user name that matches the user name of the authenticated user (login user) is set (that is, the print data requested by the login user for the confidential print). A search is made from the print data storage unit 17 (S205). Subsequently, the password update unit 16 determines whether a password is set in the print data for each searched print data. For print data that does not include a password, the password update unit 16 acquires a password corresponding to the user name set in the print data from the user DB 18, and sets the password in the print data (S206). . For print data for which a password has been set, it is determined whether or not the password matches that corresponding to the user name set in the print data in the user DB 18. The password set in the print data is updated with the registered password (S207). Subsequently, the confidential print control unit 13 causes the display unit 108 to display the print data list screen 520 (see FIG. 7) including the search result in step S205 (S208).

  Steps S209 to S211 may be the same as steps S109 to S111 in FIG.

  As described above, according to the image forming apparatus 10a in the second embodiment, the password of the print data is consistent with the password registered in the user DB 18 in response to the user login. Therefore, for example, even when the password in the user DB 18 is changed between when the user issues a print instruction at the print data transmission apparatus 20 and when the user logs in to the image forming apparatus 10a, the authentication of the print data is successful. In addition, it is possible to increase the possibility that the print job is executed smoothly.

  Subsequently, a third embodiment will be described. FIG. 10 is a diagram illustrating a functional configuration example of the image forming apparatus according to the third embodiment. In FIG. 10, the same parts as those in FIG. 3 or FIG. In the third embodiment, the image forming apparatus 10 will be described as an image forming apparatus 10b.

  The main difference between the third embodiment and the first or second embodiment is the update timing of the password included in the print data. In the third embodiment, the password included in the print data is updated when the print job is executed. That is, the password update unit 16 in FIG. 10 is configured to execute a password update in response to a request from the print job control unit 14.

  Hereinafter, the processing procedure of the image forming apparatus 10b will be described. FIG. 11 is a sequence diagram for explaining processing executed by the image forming apparatus according to the third embodiment.

  In step S301, as in step S101 or S201, the printer driver 21 of the print data transmission apparatus 20 causes the user to input a user name and password via the authentication information input screen 410 (see FIG. 5). Subsequently, the printer driver 21 generates print data of the document data to be printed, sets the input user name and password in the print data, and transmits the print data to the image forming apparatus 10b (S302). ). When receiving the print data, the print data receiving unit 11 of the image forming apparatus 10 stores the print data in the print data storage unit 17.

  Thereafter, when the user presses a login button arranged on the operation unit 109 as an operator of the image forming apparatus 10b, the login control unit 12 causes the display unit 108 to display a login screen 510 (see FIG. 6). When the card 50 is set in the card reader 30 by the user while the login screen 510 is displayed on the display unit 108, or when a user name and password are input by the user via the login screen 510 (S303). The login control unit 12 collates the user name and password specified based on the card ID of the card 30 or the user name and password input by the user with a list of user names and passwords registered in the user DB 18. Thus, the user is authenticated (S304). If the authentication fails, the login control unit 12 rejects the user login and causes the display unit 108 to display an error screen.

  If the authentication is successful, the confidential print control unit 13 receives the print data in which the user name that matches the user name of the authenticated user (login user) is set (that is, the print data requested by the login user for the confidential print). A search is made from the print data storage unit 17, and a print data list screen 520 (see FIG. 7) including the search result is displayed on the display unit 108 (S305). When the print button 522 is pressed on the print data list screen 520, the confidential print control unit 13 requests the print job control unit 14 to execute a print job related to the print data selected in the print data list display area 521.

  The print job control unit 14 causes the password update unit 16 to check the password set in the print data (S307). The password update unit 16 determines whether or not a password is set for the print data. For print data that does not include a password, the password corresponding to the user name set for the print data is set to the user DB 18. And the password is set in the print data (S308). For print data for which a password has been set, it is determined whether or not the password matches that corresponding to the user name set in the print data in the user DB 18. The password set in the print data is updated with the registered password (S309).

  When the password check by the password update unit 16 is completed, the same processing as steps S110 to S111 in FIG. 4 is executed (S310, S311).

  As described above, according to the image forming apparatus 10b in the third embodiment, the consistency of the password of the print data with the password registered in the user DB 18 is achieved according to the login of the user. Therefore, for example, even when the password in the user DB 18 is changed between when the user issues a print instruction at the print data transmission apparatus 20 and when the print job is executed on the image forming apparatus 10b, the print data Authentication is successful, and the possibility that the print job is executed smoothly can be increased.

  Subsequently, a fourth embodiment will be described. FIG. 12 is a diagram illustrating a functional configuration example of the image forming apparatus according to the fourth embodiment. In FIG. 12, the same parts as those in FIG. In the fourth embodiment, the image forming apparatus 10 will be described as an image forming apparatus 10c.

  The main difference between the fourth embodiment and the first embodiment is that the password is updated by the password update unit 16. That is, in the fourth embodiment, the password of the user DB 18 is updated with the password included in the print data.

  The processing procedure of the fourth embodiment may be substantially the same as that of the first embodiment (FIG. 4). However, in step S104, the password update unit 16 determines whether or not a password corresponding to the user name included in the print data is registered in the user DB 18, and if the password is not registered, the printing is performed. The password set in the data is registered in the user DB 18. In step S105, the password update unit 16 determines whether or not the password included in the print data matches that corresponding to the user name set in the print data in the user DB 18, and does not match. In this case, the password registered in the user DB 18 is updated with the password set in the print data.

  As described above, according to the image forming apparatus 10c in the fourth embodiment, the password of the user DB 18 can be updated with the transmission of the print data (with the print instruction). Therefore, security can be easily improved.

  By the way, in the image forming apparatus 10 according to the present embodiment, the operator can log in by setting the card 50 in the card reader 30. Hereinafter, the configuration and processing procedure of the login control unit 12 for realizing login (card authentication) using the card 50 will be described.

  FIG. 13 is a diagram illustrating a configuration example of the login control unit. In the figure, the login control unit 12 includes a card ID acquisition unit 121, a user information acquisition unit 122, an authentication control unit 123, a password registration unit 124, a correspondence information management unit 125, and the like.

  The card ID acquisition unit 121 acquires the card ID read from the card 50 by the card reader 30 from the card reader 30. The user information acquisition unit 122 acquires a user name corresponding to the card ID acquired by the card ID acquisition unit 121 from the correspondence information management unit 125, and inputs a password input by the user to the operation unit 109. Get more. The correspondence information management unit 125 is a storage area in the recording medium 103 that manages correspondence information between a card ID and user information. The authentication control unit 123 executes an operator (user) authentication process based on the user name and password acquired by the user information acquisition unit 122 based on the user information registered in the user DB 18. The password registration unit 124 registers the password in the correspondence information management unit 125 in association with the card ID for the purpose of eliminating the complexity of inputting the password every time during authentication. Therefore, when the password is registered in the correspondence information management unit 125, the user information acquisition unit 122 acquires the password corresponding to the card ID from the correspondence information management unit 125, not from the operation unit 109.

  Hereinafter, a processing procedure of the login control unit 12 will be described. FIG. 14 is a flowchart for explaining a processing procedure by the login control unit.

  When the user information acquisition unit 122 displays the login screen 510 (see FIG. 6) on the display unit 108, if the user sets the card 50 in the card reader 30 (Yes in S501), the card ID acquisition unit 121 acquires the card ID read from the card by the card reader 30 from the card reader 30 (S502). The setting of the card 50 to the card reader 30 means that the card reader 30 can read the information recorded on the card 50, such as inserting the card 50 into the card reader 30 or deceiving the card 50. To do.

  Subsequently, the user information acquisition unit 122 acquires a user name corresponding to the acquired card ID (hereinafter referred to as “current card ID”) from the correspondence information management unit 125 (S503).

  FIG. 15 is a diagram illustrating an example of correspondence information managed by the correspondence information management unit. In the figure, correspondence information 170 is information that holds a user name, a card ID, a password, and a card effect in association with each other for each user. Therefore, in step S503, the user information acquisition unit 122 acquires the user name associated with the current card ID from the correspondence information management unit 125 in the correspondence information management unit 125. The card effect refers to information indicating the validity of the card 50. When the card 50 is valid, authentication using the card I is valid. When the card 50 is invalid, authentication using the card 50 is invalid.

  Here, the password is not necessarily registered in the correspondence information management unit 125. When a password is registered for the current ID, the user information acquisition unit 122 displays a symbol (for example, “******” indicating that it is not necessary to input a password in the password input field on the login screen 510. *** ”is displayed.

  When the user name cannot be acquired (No in S504), the user information acquisition unit 122 determines that an authentication error has occurred. When the user name can be acquired (Yes in S504), the user information acquisition unit 122 refers to the card validity value (valid or invalid) associated with the current card ID in the correspondence information management unit 125, and the card It is determined whether or not 50 is valid (S505). When the card 50 is invalid (No in S505), the user information acquisition unit 122 determines that an authentication error has occurred.

  If the card 50 is valid (Yes in S505), the user information acquisition unit 122 determines whether a password is registered for the current card ID in the correspondence information management unit 125 (S506). When the password is not registered (No in S506), the user information acquisition unit 122 displays the password screen 550 shown in FIG. 16 on the display unit 108 (S507). After the input button 551 is pressed by the user on the password screen 550 and the password is input (Yes in S508), when the OK button 552 is pressed instead of the Cancel button 553 (No in S509) (Yes in S510), The authentication control unit 123 executes authentication processing by collating the user name acquired in step S503 and the password input in step S508 with the user name and password registered in the user DB 18 (S512).

  On the other hand, when a password is registered for the current card ID in the correspondence information management unit 125 (Yes in S506), the user information acquisition unit 122 acquires the password (S511). Subsequently, the authentication control unit 123 executes an authentication process by comparing the user name and the password acquired in step S503 with the user name and password registered in the user DB 18 (S512).

  When the authentication is successful (Yes in S516), the password registration unit 124 determines whether or not registration (saving) of the password input on the password screen 550 is necessary based on the state of the check button 554 on the password screen 550 ( S517). When the check button 554 is checked (Yes in S517), the password registration unit 124 registers the password in the correspondence information management unit 125 in association with the current card ID (S518). On the other hand, when the check button 554 is not checked (No in S517), the password registration unit 124 deletes the password registered for the current card ID in the correspondence information management unit 125 (S519). However, if no password is registered for the current card ID, deletion is not necessary.

  On the other hand, after the login screen 510 is displayed, the card 50 is not set in the card reader 30 (No in S501), and a user name and a password as required are input in the login screen 510 (in S513). Yes), the case where the Login button 511 is pressed (Yes in S514) will be described. In this case, the user information acquisition unit 122 acquires the user name and password input on the login screen 510 (however, if a password is registered for the current ID, the password is acquired), and authentication control is performed. The unit 123 executes the authentication process by checking the user name and password against the user name and password registered in the user DB 18 (S515). Subsequently, the processing after step S516 described above is executed.

  In step S516, when the authentication fails (No in S516), the user information acquisition unit 122 determines whether the password used for the authentication is registered in the correspondence information management unit 125 ( S520). This determination is made based on the information recorded in the memory 102 when the password registered in the correspondence information management unit 125 (hereinafter referred to as “registered password”) is used. Just do it. If the password used for authentication is not a registered password (No in S520), the authentication control unit 123 determines that an authentication error has occurred.

  When the password used for authentication is a registered password (Yes in S520), the user information acquisition unit 122 displays the password screen 550 on the display unit 108 again, and causes the user to input a new password (S521). Here, when authentication fails with the registered password, the user is prompted to input the password again for the following reason.

  In recent years, passwords have been regularly changed to improve security. Therefore, inconsistency may occur such that the password registered in the correspondence information management unit 125 is old although the password of the user DB 18 is updated. In order to easily cope with such inconsistency, the user is given an opportunity to input a new password (changed password) in step S521.

  When a password is input to the newly displayed password screen 550, the user information acquisition unit 122 acquires the password input to the password screen 550, and the authentication control unit 123 acquires the user name acquired in step S503. And the authentication process is performed by collating the said password with the user name and password registered into user DB18 (S522).

  If the authentication fails (No in S523), the authentication control unit 123 determines that an authentication error has occurred. When the authentication is successful (Yes in S523), the processes after Step S517 are executed. Therefore, when the check button 554 is checked, the password registered in the correspondence information management unit 125 is updated with a new password.

  As described above, the image forming apparatus 10 manages correspondence information between the card ID and the user name, and can determine the user name based on the card ID. Further, the authentication in the image forming apparatus 10 requires not only the setting of the card ID but also the input of a password. Therefore, even with the card 50 in which only the card ID is recorded, authentication processing with a security level equivalent to that of a highly functional IC card using a PIN (Personal Identification Number) can be realized.

  Further, since the image forming apparatus 10 can store a password corresponding to the card ID and can use the password for authentication, it is possible to save the trouble of inputting the password when using the card 50. And convenience can be improved.

  Even if there is a mismatch between the registered password and the password managed in the user DB 18, the user is given an opportunity to input a new password in the series of authentication processes. It is possible to easily maintain the consistency of the system.

  As mentioned above, although the Example of this invention was explained in full detail, this invention is not limited to such specific embodiment, In the range of the summary of this invention described in the claim, various deformation | transformation・ Change is possible.

10, 10a, 10b Image forming apparatus 11 Print data receiving unit 12 Login control unit 13 Confidential print control unit 14 Print job control unit 15 Print data authentication unit 16 Password update unit 17 Print data storage unit 18 User DB
20 Print Data Transmitting Device 30 Card Reader 50 Card 101 CPU
102 Memory 103 Recording medium 104 Network I / F
105 Image output unit 106 Image processing unit 107 External device I / F
108 Display unit 109 Operation unit 121 Card ID acquisition unit 122 User information acquisition unit 123 Authentication control unit 124 Password registration unit 125 Corresponding information management unit

JP-A-10-207661 JP 2006-018654 A

Claims (9)

A storage unit that stores the print data, the user identification information, and the password in association with each other in the print data recording unit;
A setting unit configured to set the password to be stored in association with the print data in the storage unit based on the user identification information and the password stored in the user information recording unit;
The user identification information and password successfully authenticated from the print data recording means using the user identification information and password successfully authenticated based on the comparison with the user identification information and password stored in the user information recording means. Search means for searching for the print data associated with
An information processing apparatus comprising: Receiving means for receiving print data and user identification information, or print data, user identification information and a password;
The setting means receives the password stored in the print data recording means in association with the print data received by the receiving means by the receiving means among the user identification information stored in the user information recording means. The information processing apparatus according to claim 1, wherein a password associated with the user identification information that matches the user identification information is set. Determining means for determining whether or not the password has been received by the receiving means;
The user identification that matches the user identification information received by the receiving means among the user identification information stored by the user information recording means when the setting means determines that the user identification recording means has not received the setting information. Set a password that corresponds to the information,
A password associated with the user identification information that matches the user identification information received by the receiving means among the user identification information stored by the user information recording means when it is determined that the information is received by the determining means The information processing apparatus according to claim 2, wherein the information processing apparatus is updated.   The information processing apparatus according to claim 1, wherein the setting unit sets the password to be stored in the print data recording unit at a predetermined timing.   5. The information processing apparatus according to claim 4, wherein the predetermined timing is when the print data received by the reception unit is stored in the print data recording unit by the storage unit.   The information processing apparatus according to claim 4, wherein the predetermined timing is when user authentication is successful based on verification of the user identification information and password stored in the user information recording unit.   The information processing apparatus according to claim 1, wherein the information processing apparatus is an image forming apparatus. A storage procedure for storing the print data, the user identification information, and the password in association with each other in the print data recording unit;
A setting procedure for setting the password to be stored in association with the print data in the storage procedure based on the user identification information and password stored by the user information recording means;
The user identification information and password successfully authenticated from the print data recording means using the user identification information and password successfully authenticated based on the comparison with the user identification information and password stored in the user information recording means. A search procedure for searching for the print data associated with
A program that causes a computer to execute.   A computer-readable recording medium on which the program according to claim 8 is recorded.

Images