JP2013175193A - Information processing system and management server and control method thereof, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a mechanism for preventing identity theft from being performed by a third person at a time of simultaneous login to multiple devices by one user and prevent a processing result such as a printed matter from being left.SOLUTION: When a user of a client 300 logs in to a compound machine 100, the compound machine transmits log-in information including a user ID to a server 200. The user selects data and causes print processing to be performed. When receiving the log-in information, the server 200 identifies the client 300 operated by the user from the user ID included in the log-in information and transmits lock instruction information including lock release information to the client 300. When receiving a request, the client 300 locks the operation until the lock release information is input. When completing the print processing on the compound machine, the user is notified of the information for releasing an operation lock state of the client 300. Then, the user inputs the information to the client 300 so as to enable operation of the client 300 again.

Description

  The present invention relates to a security technique using a network, and more particularly to a technique for logging in to a device on a network.

  In recent years, various methods have been used to manage access to multifunction peripherals and prevent leftovers in output. In particular, in the access management of a multifunction device, it is performed to manage when and who has logged in to the multifunction device by performing user authentication using an IC card or the like. Further, such access management is not limited to a multi-function peripheral, and an information processing apparatus such as a client terminal performs user authentication and logs in to use.

  When it becomes possible to log in to a plurality of devices in this way, the possibility of information leakage due to forgetting to log out increases. For example, suppose that a user X logs in to the device A and then logs in to another device B without logging out. At this time, if the devices A and B are physically separated from each other, the third party Y impersonates the user X and can operate the device A with the authority of the user X. If the user X is a network administrator, there may be an unlimited number of data files on the network.

  To deal with this problem, for example, Patent Literature 1 searches for another device logged in with the same user ID as the device currently logged in, and there is another device logged in with the same user ID. Discloses a technique for comparing the last operation time from the user and locking the screen when the device operated more recently is another device.

Japanese Patent No. 2002-342284

  When access management and login control are performed in this way, especially when the authority to use the MFP is assigned to each user, the user's IC card or the like having the authority to perform printing with special print settings is given to others. It may be lent and used. For example, it is easy to understand if the user has only monochrome printing authority and the user's supervisor has color printing use authority. In this case, there is a problem in that the user borrows a supervisor's IC card or the like to perform color printing and prints.

  If the lending / borrowing of information for user authentication is permitted, the meaning of the original use authority is lost, and there is a risk of information leakage as described above. In addition, if an IC card or the like is lent or borrowed, the output results such as the number of printed sheets cannot be collected, and the output results cannot be collected, which makes no sense.

  In addition, there is a problem that output is left unattended by lending and borrowing IC cards and the like. In general, as a measure for preventing the output matter from being left, the above-described user authentication is used to store who prints what print job when and what information is used to prevent the print matter from being left unattended. In other words, when the lending / borrowing of an IC card or the like occurs, it becomes impossible to specify who output the card.

  The present invention has been made to solve the above-described problem, and aims to provide a mechanism for preventing simultaneous login by one user to a plurality of devices and suppressing impersonation and information leakage.

  In order to achieve the above object, for example, an information processing system of the present invention comprises the following arrangement. That is, an information processing system in which a processing device, a server device, and a client device are communicably connected, and the processing device stores user information for identifying a user in order to log in to the processing device. User information transmitting means for receiving input and transmitting the user information to the server device, and receiving lock release information for receiving unlock information for unlocking the client device used by the user from the server device Means for notifying the user of the unlock information received by the unlock information receiving means, and the server device includes client information for identifying the client device and a user using the client device. Storage means for storing the user information in association with the user information transmission When receiving the user information transmitted by the stage, the unlock information generating means for generating unlock information for releasing the lock state of the client device; and the client information corresponding to the received user information Lock instruction means for transmitting from the means to the client device specified by the acquired client information, an instruction to shift to a lock state releasable by the lock release information generated by the lock release information generation means And the unlock information transmitting means for transmitting the unlock information generated by the unlock information generating means to the processing device, wherein the client device is brought into the locked state transmitted by the lock instruction means. If the transfer instruction is received, the unlock information Therefore, it is provided with: a lock unit that shifts to a releasable lock state; and a lock release unit that releases the lock state when an input of unlock information that can release the lock state is received in the lock state. Features.

  According to the present invention, it is possible to provide a mechanism that prevents simultaneous login to a client device or a processing device by one user and prevents spoofing or information leakage. According to another invention, log-off to the other processing device can be automated by performing unlocking for performing an operation on the client device.

It is a figure which shows an example of a structure of the system in embodiment. It is a figure which shows an example of the hardware constitutions of a server and a client. 2 is a diagram illustrating an example of a hardware configuration of a multifunction peripheral. FIG. It is a figure which shows an example of a module structure. 6 is a flowchart illustrating an example of a print instruction to a screen lock process in the first embodiment. 6 is a flowchart illustrating an example of print data selection to abandonment prevention ID display processing in the first embodiment. It is a flowchart which shows an example of neglect prevention ID input-management table update process in 1st Embodiment. It is a flowchart which shows an example of the logoff instruction | indication-logoff process in 1st Embodiment. It is a figure which shows an example of a management table. It is a figure which shows an example of the neglect prevention ID display screen in 1st Embodiment. It is a figure which shows an example of the neglect prevention ID input screen in 1st Embodiment. It is a flowchart which shows an example of the printing data selection-output thing acquisition button display process in 2nd Embodiment. It is a flowchart which shows an example of the output thing acquisition button press-screen lock release process in 2nd Embodiment. It is a figure which shows an example of the output thing acquisition button display screen in 2nd Embodiment.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a diagram illustrating an example of a configuration of a network system according to an embodiment of the present invention. The network system includes a multifunction device 100, a server device (hereinafter simply referred to as a server) 200, and a client device (hereinafter simply referred to as a client) 300. The multifunction device 100, the server 200, and the client 300 are connected via a network 400. Are connected to communicate. The network 400 may be a LAN (Local Area Network) or a WAN (Wide Area Network). The network 400 may be wired / wireless, or may be a mixture of them.

  The configuration of various terminals or servers connected to the network in FIG. 1 is an example, and it goes without saying that there are various configuration examples depending on the application and purpose. In particular, the present embodiment will be described based on the multifunction peripheral 100, but any apparatus may be used as long as it can communicate with the server 200 and can notify the user of information.

  The multi-function device 100 can store the print job transmitted from the client 300, print the print job on a recording sheet, and output the print job according to an instruction from the user.

  The server 200 manages the login status of the user. The MFP 100 and the client 300 to which the user is logged in are received and stored.

  In addition to transmitting a print job to the multifunction device 100, the client 300 has a function of locking the screen when the same user who uses the client 300 uses the multifunction device 100. It should be noted that the server 200 and the client 300 may be the same device or other forms.

  Next, an example of the hardware configuration of the server 200 and the client 300 will be described with reference to FIG.

  The CPU 201 comprehensively controls each device and controller connected to the system bus 204. Further, the ROM 202 or the external memory 211 is necessary for realizing a BIOS (Basic Input / Output System) or an operating system program (hereinafter referred to as an OS), which is a control program of the CPU 201, or a function executed by the server or each device. Various programs to be described later are stored.

  The RAM 203 functions as a main memory, work area, and the like for the CPU 201. The CPU 201 implements various operations by loading a program necessary for execution of processing into the RAM 203 and executing the program.

  An input controller (input C) 205 controls input from a pointing device such as a keyboard 209 or a mouse (not shown). Note that an apparatus including a touch panel includes an input C205 on a CRT display (CRT) 210, which will be described later, and various operations can be performed by touching the CRT 210. A video controller (VC) 206 controls display on a display device such as a CRT display (CRT) 210. The display device may be a liquid crystal display as well as a CRT.

  A memory controller (MC) 207 is a hard disk (HD), floppy disk (registered trademark FD) or PCMCIA card slot for storing boot programs, browser software, various applications, font data, user files, editing files, various data, and the like. Controls access to an external memory 211 such as a CompactFlash (registered trademark) memory connected via an adapter.

  A communication I / F controller (communication I / FC) 208 is connected to and communicates with an external device via a network, and executes communication control processing in the network. For example, Internet communication using TCP / IP is possible. Note that the CPU 201 enables display on the CRT 210 by executing outline font rasterization processing on a display information area in the RAM 203, for example. In addition, the CPU 201 enables a user instruction with a mouse cursor (not shown) on the CRT 210.

  Various programs executed in the server 200 and the client 300 for realizing the present invention are recorded in the external memory 211, and are executed by the CPU 201 by being loaded into the RAM 203 as necessary. Furthermore, definition files and various information tables on the server 200 and the client 300 used by the program according to the present invention are stored in the external memory 211. A detailed description thereof will be described later.

  Next, an example of the hardware configuration of the multifunction machine 100 will be described with reference to FIG.

  The controller unit 316 is connected to the scanner unit 314 that functions as an image input device and the printer unit 312 that functions as an image output device, and inputs and outputs image data and device information by connecting to a LAN or WAN.

  The CPU 301 is a processor that controls the entire system. A RAM 302 is a system work memory for the operation of the CPU 301, and is a program memory for recording a program and an image memory for temporarily recording image data.

  The ROM 303 stores a system boot program and various control programs. A hard disk drive (HDD) 304 stores various programs for controlling the system, image data, and the like.

  An operation unit interface (operation unit I / F) 307 is an interface unit with the operation unit 308, and outputs image data to be displayed on the operation unit 308 to the operation unit 308. The operation unit I / F 307 serves to transmit information (for example, user information) input by the system user from the operation unit 308 to the CPU 301. Note that the operation unit 308 includes a display unit having a touch panel, and various instructions can be given by a user pressing (touching with a finger or the like) a button displayed on the display unit.

  A network interface (Network I / F) 305 is connected to a network (LAN) and inputs / outputs data. A modem (MODEM) 306 is connected to a public line and inputs / outputs data such as FAX transmission / reception.

  An external interface (external I / F) 318 is a USB (Universal Serial Bus), IEEE 1394 (Institut of Electrical and Electronic Engineers 1394), a printer port, an RS-232C (Recommended Standard 232) external input. A card reader 319 for reading an IC card, which is an F section and is necessary for authentication in this embodiment, is connected to the external I / F 318.

  Further, the CPU 301 can control reading of information from the IC card by the card reader 319 via the external I / F 318, and can acquire information read from the IC card. The above devices are arranged on the system bus 309.

  An image bus interface (IMAGE BUS I / F) 320 is a bus bridge that connects the system bus 309 and an image bus 315 that transfers image data at high speed and converts a data structure.

  The image bus 315 is configured by a PCI bus (Peripheral Components Interconnect bus) or IEEE1394. The following devices are arranged on the image bus 315.

  A raster image processor (RIP) 310 develops vector data into a bitmap image. A printer interface (printer I / F) 311 connects the printer unit 312 and the controller unit 316, and performs synchronous / asynchronous conversion of image data. A scanner interface (scanner I / F) 313 connects the scanner unit 314 and the controller unit 316, and performs synchronous / asynchronous conversion of image data. The image processing unit 317 performs correction, processing and editing on input image data, printer correction, resolution conversion, and the like on print output image data. In addition to this, the image processing unit 317 also rotates the image data, JPEG (Joint Photographic Experts Group) for multi-valued image data, and JBIG (Joint Bi-level Image Experts Group) for binary image data. And so on. The scanner unit 314 illuminates an image on paper as a document and scans it with a CCD line sensor, thereby converting it into an electrical signal as raster image data. The original paper is set on the tray of the original feeder, and when the apparatus user gives a reading start instruction from the operation unit 308, the CPU 301 gives an instruction to the scanner unit 314, and the feeder feeds the original paper one by one to read the original image. Perform the action.

  The printer unit 312 is a portion that forms raster image data as a visible image on a recording paper. The method is an electrophotographic method using a photosensitive drum or a photosensitive belt, and ink is ejected from a micro nozzle array onto a paper. There is an inkjet method for directly printing an image, but any method may be used. The activation of the printing operation is started by an instruction from the CPU 301. The printer unit 312 has a plurality of paper feed stages so that different paper sizes or different paper orientations can be selected, and includes paper cassettes corresponding to the paper feed stages.

  The operation unit 308 has an LCD (Liquid Crystal Display) display unit, and a touch panel sheet is pasted on the LCD, displays a system operation screen, and displays position information when a displayed key is pressed. This is transmitted to the CPU 301 via the operation unit I / F 307. The operation unit 308 includes, for example, a start key, a stop key, an ID key, a reset key, and the like as various operation keys.

  Here, the start key of the operation unit 308 is used when starting a document image reading operation. At the center of the start key, there are two color LEDs, green and red, which indicate whether or not the start key can be used. Further, the stop key of the operation unit 308 functions to stop the operation in operation. The ID key of the operation unit 308 is used when inputting the user ID of the user. The reset key is used when initializing settings from the operation unit.

  With the above-described configuration, the multifunction peripheral 100 transmits not only the normal copying function but also the image data read from the scanner unit 314 to the LAN (terminal, etc.) via the network I / F 305 and receives from the LAN. The printed data can be printed out from the printer unit 312 via the network I / F 305.

  Further, the image data read from the scanner unit 314 can be faxed to the public line by the modem 306, and the image data received by fax from the public line can be output by the printer unit 312.

  Next, a functional configuration diagram illustrating module configurations of the multifunction peripheral 100, the server 200, and the client 300 will be described with reference to FIG. Note that the module configurations of the various terminals or servers in FIG. 4 are merely examples, and it goes without saying that there are various configuration examples depending on applications and purposes.

  The multi-function device 100 includes a print data storage unit 401, a print data output unit 402, a transmission / reception unit 403, a screen display unit 404, and a login / logout management unit 405. The print data storage unit 401 is a module that receives the print data transmitted from the client 300, stores it for each user, and manages it. The print data output unit 402 is a module that outputs when an instruction to output the print data stored in the print data storage unit 401 is given. The transmission / reception unit 403 is a module that communicates various information with the server 200 and the client 300 to transmit / receive. The screen display unit 404 is a module that displays various screens at a predetermined timing and receives selections from the user. The login / logout management unit 405 is a module that manages login and logout in accordance with an instruction from the user. If necessary, login and logout information is appropriately transmitted to the server 200.

  Next, the server 200 includes a management table storage unit 406, an abandonment prevention ID generation unit 407, a transmission / reception unit 408, a management table management unit 409, and a screen lock instruction unit 410. The management table storage unit 406 (storage means) is a module that stores the management table (details will be described later) shown in FIG. The abandonment prevention ID generation unit 407 is a module that generates an abandonment prevention ID that can unlock the screen when the screen of the client 300 is locked. The transmission / reception unit 408 is a module that communicates various information with the MFP 100 and the client 300 to transmit / receive. The management table management unit 409 is a module that updates the management table stored in the management table storage unit 406. The screen lock instruction unit 410 is a module that instructs the client 300 to lock the screen so that the user cannot perform an operation.

  Here, a management table stored and managed by the server 200 will be described with reference to FIG. This management table is used for each user to manage which device the user is actually using, and to determine the current state of processing by the user. Therefore, the first field is a user ID, and the second and third fields are the password of the user and the ID (client ID) of the client device normally used by the user. These first to third fields are not changed unless there is a special reason. The contents after the fourth field are dynamically updated, and the fourth field stores the ID of the MFP on the network (the MFP ID) used by the user. The neglect prevention ID and the sixth field are for storing the status (status) when the multifunction machine is used. When the user is not using the multifunction machine, in other words, when the user is operating the client device, the fourth to fifth fields are left blank.

  Next, the client 300 includes a transmission / reception unit 411, a screen lock / unlock unit 412, and a screen display unit 413. The transmission / reception unit 411 is a module that communicates various information with the multifunction peripheral 100 and the server 200 to transmit / receive. The screen lock / unlock unit 412 is a module that locks the screen in accordance with an instruction from the server 200 and releases the screen lock when receiving an instruction from the server 200 or an input of an abandonment prevention ID. The screen display unit 413 is a module that displays various screens at a predetermined timing and receives selections from the user.

[First Embodiment]
Next, a first embodiment of the present invention will be described.

  In the first embodiment of the present invention, when the MFP 100 detects a user login by operating the operation unit 308, the MFP 100 notifies the server 200 of the login. Upon receiving this notification, the server 200 considers that the user is away from the client 300, and transmits the abandon prevention ID generated by the server 200 to the client 300. When the client 300 receives the abandonment prevention ID, the client 300 locks the screen until the abandonment prevention ID is input from the keyboard or the like of the client 300, and maintains an inoperable state. A user who has logged in to the multifunction device 100 operates the operation unit 308 to select a print job (a job printed by the client 300) that can be accessed by the user in the multifunction device 100, and instructs the start of print processing. . Upon receiving this instruction, the multi-function device 100 performs print output processing for the instructed print job, and notifies the user of the abandon prevention ID when the output is completed. As a notification method, for example, an abandonment prevention ID may be displayed on the display screen of the operation unit 308. The lock of the client 300 is released when the user inputs the prevention ID by using a keyboard or the like that the client 300 has.

  Details of the above processing will be described below with reference to the flowcharts of FIGS. It should be noted that in the figure, the processes of the multifunction peripheral, the server, and the client (actually each CPU) are shown separated by broken lines in order to clarify the subject that performs each process. In the following description, it is assumed that the user has already logged in to the client 300 and that the login state is managed by the server 200 in the management table.

  Assume that the user of the client 300 issues a print instruction via an application program being executed. The client 300 detects the print instruction, activates the printer driver of the client 300, and generates data (print data or print job) that can be interpreted by the MFP 100 (step S101). In step S102, the client 300 transmits the generated print data to the multi-function peripheral 100.

  In step S103, the multi-function device 100 receives print data from the client 300. In step S104, the multifunction device 100 stores (registers) the received print data in a storage unit such as the HDD 304 of the multifunction device 100. At this time, it is stored and managed together with information (user ID) for specifying the owner of the print data or the generation source.

  Then, the user logs in by holding the IC card owned by the user over the card reader 319 of the multi-function device 100 (step S105). In step S106, the multi function device 100 reads the IC card held over the card reader 319 and acquires the user ID, thereby permitting login (step S106). Here, the user ID is information for specifying a person in a company or organization, such as an employee code. Here, login by the card reader 319 is shown, but a user ID and a password may be input from the operation unit 308. A user ID is acquired from the card reader 319, and a password is acquired from the operation unit 308. You may allow login by acquiring. In any case, when logging in including a password, it is possible to notify the server of a set of user ID and password and permit the login after receiving an authentication OK response. However, in the present embodiment, the description will be continued on the assumption that the card reader 319 can log in only with an IC card distributed to each user.

  When the user login is completed as described above, the process proceeds to step S107, and the multifunction device 100 acquires its own multifunction device ID. The MFP ID is information for specifying the MFP 100 on the network, and is an IP address, a host name, a MAC address, or the like. In step S108, the multifunction peripheral 100 transmits a login notification to the server 200 (login information transmitting unit). At that time, the user ID acquired in step S106 and the MFP ID acquired in step S107 are also transmitted. As a result, the server 200 can be notified that the user of the client 300 has moved from the client 300 to the multifunction peripheral 100, in other words, that the user is away from the client 100.

  When the server 200 receives the login notification from the multifunction device 100 in step S109, the server 200 acquires the multifunction device ID and the user ID included in the received login notification in the next step S110. Then, in step S111, the server 200 refers to a management table as shown in FIG. 9, for example, and acquires a client ID associated with the user ID acquired in step S110 in step S112. The client ID is information for specifying the client 300 used by the user on the network, and is an IP address, a host name, a MAC address, or the like.

  In step S113, the server 200 generates an abandonment prevention ID. The neglect prevention ID is an ID used for releasing the screen lock of the client 300 acquired in step S112. In this embodiment, the neglect prevention ID is four digits, but the character type and the number of digits can be arbitrarily combined, and the generation method is not limited. A fixed character string registered in advance may be used, but a character string generated at random is desirable. The reason is that, as will be understood from the explanation to be described later, the operation of the client device can be continued only after the user acquires (knows) the neglect prevention ID. This is because the lock can be immediately released without removing the printed matter, and the important printed matter may remain in the multifunction peripheral.

  In step S114, the server 200 sets the MFP ID acquired in step S110, the neglect prevention ID generated in step S113, and the status during printing, and updates the management table of the user ID acquired in step S109. . That is, before, the user ID and the client ID of the client 300 are associated with each other, but the user ID and the multifunction device ID of the multifunction device 100 are associated with each other by receiving the login notification. In step S115, the server 200 transmits a screen lock instruction to the client 300 corresponding to the client ID acquired in step S112 (lock instruction unit). At that time, the abandonment prevention ID acquired in step S113 is also transmitted.

  When the client 300 receives the screen lock instruction from the server 200 in step S116, the client 300 acquires the abandonment prevention ID included in the screen lock instruction in the next step S117. In step S118, the screen of the client 300 is locked (operation lock means). The screen lock method is not limited as long as the lock can be released by using the ID for preventing leaving in step S117, the screen lock function provided in the client 300 may be used, and the screen lock may be performed by another application. May be performed. In addition, the screen may be locked using the abandonment prevention ID. In any case, while the screen is locked, no operations other than unlocking are accepted. FIG. 11 shows an example of a screen displayed during screen lock.

  FIG. 6 is a flowchart illustrating an example of print data selection or leave prevention ID display processing according to the first embodiment.

  After completing the login notification process in step S <b> 108, the multifunction peripheral 100 displays a list of print data that can be printed by the logged-in user and accepts a selection from the user via the operation unit 308. In step S202, output of the print data selected in step S201 is started. In this way, when the MFP 100 starts the printing process, it transmits an output start notification to the server 200 in step S203. At that time, the user ID acquired in step S106 and the MFP ID acquired in step S107 are also transmitted. In step S <b> 204, the multifunction peripheral 100 actually outputs the print data to the printer unit 312.

  When the server 200 receives the output start notification from the multifunction device 100 in step S205, the server 200 acquires the multifunction device ID and the user ID included in the output start notification in step S206. In step S207, the server 200 refers to the management table. In step S208, the server 200 acquires the MFP ID acquired in step S206 and the neglect prevention ID associated with the user ID from the management table. At this time, the corresponding status is changed to “printing” and the management table is updated. In step S209, the server 200 transmits the acquired abandonment prevention ID to the multifunction device 100. Note that the timing for transmitting the abandonment prevention ID to the multifunction device 100 is not limited to S209. In short, what is necessary is that after S113, for example, the timing of S115 may be used.

  In step S210, the multi-function device 100 receives the abandonment prevention ID from the server 200 (unlock information receiving means). In step S211, the multifunction apparatus 300 waits until the print data output in step S204 is completed. When the output of the print data is completed, the multifunction peripheral 100 transmits an output end notification to the server 200 in step S212. At that time, the user ID acquired in step S106 and the MFP ID acquired in step S107 are also transmitted.

  When the server 200 receives the output end notification from the multi-function device 100 in step S213, the server 200 acquires the multi-function device ID and the user ID included in the output end notification in step S214. In step S215, the server 200 changes the status associated with the MFP ID and the user ID acquired in step S214 to “printed” and updates the management table.

  On the other hand, when the MFP 100 finishes the print data output process, it displays an abandonment prevention ID such as that shown in FIG. 10 (notification means) in step S216. Note that the display method of the abandonment prevention ID in the multifunction device 100 is not limited to this, and it is sufficient that the multifunction device 100 can notify the user. That is, if notification can be made even to the user, it may be notified by voice without displaying. In this embodiment, the neglect prevention ID is displayed after the completion of output, but it may be displayed during output. The display timing is not limited to this. However, as will be understood from the description to be described later, if the condition that the user operates the client 300 to continue the operation again is that the user possesses the printed matter, the timing for informing the neglect prevention ID Is preferably when the printing process is finished.

  FIG. 7 is a flowchart showing an example of an abandonment prevention ID input or management table update process in the first embodiment.

  For example, the client 300 accepts the input of the abandonment prevention ID in step S301 while displaying the screen unlock screen as shown in FIG. When the client 300 detects that the user provided on the screen unlocking screen has pressed the OK button, in step S302, the client 300 collates the neglect prevention ID input in step S301 with the neglect prevention ID acquired in step S117. . If they do not match, the process returns to step S301, and if they match, the process proceeds to step S303.

  When the processing proceeds to step S303, the client 300 releases the screen lock of the client 300 and returns to the operation screen immediately before the screen lock (operation lock release means). In step S304, the client 300 acquires a client ID, and transmits a screen unlock notification to the server 200 in step S305. At that time, the client ID acquired in step S304 is also transmitted.

  Upon receiving the screen unlock notification from the client 300 in step S306, the server 200 acquires the client ID included in the received screen unlock notification in the next step S307. In step S308, the server 200 deletes the multifunction machine ID, the abandonment prevention ID, and the status associated with the client ID acquired in step S307 from the management table (updates the management table).

  In this way, when the user logs in to the multifunction device 100, the abandonment prevention ID is generated by the server, and the client 300 performs screen lock that can be released by using the generated retention prevention ID, and printing in the multifunction device 100 After completion, the user is notified of the abandonment prevention ID, and the client 300 can unlock the screen when the notified abandonment prevention ID is input by the user. Accordingly, it is possible to prevent the user from logging in to a plurality of apparatuses at the same time, and the MFP 100 notifies the neglect prevention ID for releasing the lock of the client 300, so that the user can return to the client 300 while performing printing. It can be expected to prevent printing and to prevent neglected printing.

  FIG. 8 is a flowchart showing an example of a logoff instruction or a logoff process in the first embodiment.

  When the server 200 receives the screen lock release notification from the client 300 and updates the management table (S306 to S308), a logoff instruction is transmitted from the server 200 to the multi-function device 100 in step S401. At that time, the user ID associated with the client ID acquired in step S308 is also transmitted.

  In step S402, when the MFP 100 receives a logoff instruction from the server 200, the MFP 100 acquires a user ID from the logoff instruction in step S403. In step S <b> 404, the multifunction device 100 also acquires the user ID of the user who has logged into the multifunction device 100. Next, the MFP 100 collates the user ID acquired in step S403 with the user ID acquired in step S404. If they match, the process proceeds to step S406. If they do not match, the process ends. In step S406, the MFP 100 is logged off.

  As a result, even when the user forgets to log out from the multifunction device 100, the user can be automatically logged out from the multifunction device 100 when the user login is detected in the client 300.

  In the above-described embodiment, the abandonment prevention ID is displayed on the display unit (touch panel) of the operation unit 308 included in the multifunction peripheral 100. However, the present invention is not limited to this. For example, it is assumed that the card reader 319 has a memory area that is not read-only, can be written, and can be written to an IC card. It is assumed that the client 300 is also equipped with a similar card reader. In this case, when printing is completed in the multifunction device 100, the multifunction device 100 displays a message that prompts the user to hold the IC card over the card reader 319. Then, after confirming that the user ID stored in the IC card is the owner of the print data that has been printed, the multifunction peripheral 100 writes the abandonment prevention ID into the IC card. The user holds the IC card over the card reader facilitated by the client 300. The client 300 releases the screen lock when the abandonment prevention ID read from the card reader matches the abandonment prevention ID notified from the server 200. In this way, after all, the user does not need to memorize the neglect prevention ID. The user can log in and operate only on one device logged in with an IC card. Also, in the above embodiment, the MFP 100 displays the abandonment prevention ID when the printing process is completed. However, when the user cancels the printing operation for any reason and explicitly logs out, it is left as it is. The prevention ID is displayed.

[Second Embodiment]
Next, a second embodiment of the present invention will be described. In the second embodiment of the present invention, an output acquisition button is displayed when the output of print data is completed, and the screen of the client 300 is unlocked when the output acquisition button is pressed. In this form, an instruction is issued from the server 200.

  The management table (FIG. 9), print instruction to screen lock process (steps S101 to S118), and logoff instruction to logoff process (steps S401 to S406) described in the first embodiment are the same. Description is omitted.

  FIG. 12 is a flowchart illustrating an example of print data selection or output acquisition button display processing according to the second embodiment. FIG. 12 is easy to understand if it is said that it replaces FIG.

  Following step S108, the multifunction peripheral 100 displays a list of print data that can be printed in step S501, accepts selection of print data to be output, and starts output in step S502. In step S503, the multi-function device 100 transmits an output start notification to the server 200. At that time, the user ID acquired in step S106 and the MFP ID acquired in step S107 are also transmitted. In step S504, the multifunction peripheral 100 actually outputs the print data to the printer unit 312.

  When the server 200 receives the output start notification from the multifunction device 100 in step S505, the server 200 acquires the multifunction device ID and the user ID included in the received output start notification in the next step S506. In step S507, the server 200 changes the status associated with the MFP ID and the user ID acquired in step S506 to “printing” and updates the management table.

  In step S508, the multi-function device 100 waits until the print data output in step S504 is completed. When the output of the print data is completed, the multifunction peripheral 100 transmits an output end notification to the server 200 in step S509. At that time, the user ID acquired in step S106 and the MFP ID acquired in step S107 are also transmitted.

  When the server 200 receives the output end notification from the multi-function device 100 in step S510, the server 200 acquires the multi-function device ID and the user ID included in the output end notification in the next step S511. In step S512, the server 200 updates the management table by changing the status associated with the MFP ID and user ID acquired in step S511 to “printed”.

  When the MFP 100 finishes the print data output process and finishes printing all the pages of the designated print data, in step S513, for example, an output product acquisition button as shown in FIG. 14 is displayed. In this embodiment, the output material acquisition button is pressed to notify the server 200 that the output material has been acquired. For example, a finisher provided in the multifunction peripheral 100 detects the acquisition of the output material, and responds accordingly. The server 200 may be notified.

  FIG. 13 is a flowchart illustrating an example of output product acquisition button pressing to screen lock release processing according to the second embodiment. This figure is a process subsequent to FIG.

  When the multifunction peripheral 100 detects that the user output acquisition button has been pressed in step S601, the multifunction peripheral 100 transmits a screen lock release request in step S602 to the server 200. At that time, the user ID acquired in step S106 and the MFP ID acquired in step S107 are also transmitted together.

  In step S603, when the server 200 receives the screen lock release request from the multifunction device 100, the server 200 acquires the multifunction device ID and the user ID included in the received screen lock release request in step S604. In step S605, the server 200 acquires a status associated with the MFP ID and user ID acquired in step S604. In step S606, if the status acquired in step S605 is “printed”, the process proceeds to step S607. If the status is other than “printed”, the process ends. When the process proceeds to step S607, the server 200 transmits a screen unlock request to the corresponding client 300 from the client ID associated with the user ID acquired in step S604 (unlocking unit). At that time, the data including the neglect prevention ID generated in step S113 is transmitted.

  When the client 300 receives the screen lock release request from the server 200 in step S608, the client 300 releases the screen lock of the client 300 in step S609 using the abandon prevention ID.

  As described above, when it is detected that the output product is acquired in the multi-function device 100, the user can log in to a plurality of devices at the same time by adopting a mode in which the server 200 unlocks the screen for the client 300. It is possible to prevent this, and to prevent leaving the output.

  As described above, according to the first and second embodiments, when logging in to the multifunction device with a certain user ID, the client screen corresponding to the user ID is locked to prevent impersonation of the multifunction device. In addition, there is an effect that it is possible to suppress the leaving of the output matter by using the leaving prevention ID displayed by the multi-function peripheral after outputting the print job.

  In the embodiment, the multifunction peripheral is taken as an example of a processing apparatus operated by an unspecified number of humans, but is not limited to this. For example, in addition to the client 300 that the user normally uses, for example, an image editing terminal that performs specific processing (for example, image editing) and that can be used by an unspecified number of people can be understood. In this case, the image editing terminal serves as the multifunction device 100 in the above embodiment. Here, the timing for notifying the user of the neglect prevention ID (S216) and the timing for transmitting the screen unlock request (S602) may be the time when the user logs out from the image editing terminal.

  Although the embodiment has been described in detail above, the present invention can take an embodiment as a method, a program, a recording medium, or the like.

  The program according to the present invention is a program that allows a computer to execute (read) each processing method, and the recording medium according to the present invention stores a program that allows the computer to execute each processing method.

  The program in the present invention may be a program for each processing method of each device.

  As described above, a recording medium that records a program that implements the functions of the above-described embodiments is supplied to a system or apparatus, and a computer (or CPU or MPU) of the system or apparatus stores the program stored in the recording medium. It goes without saying that the object of the present invention can also be achieved by performing reading.

  In this case, the program itself read from the recording medium realizes the novel function of the present invention, and the recording medium storing the program constitutes the present invention.

  As a recording medium for supplying the program, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, DVD-ROM, magnetic tape, nonvolatile memory card, ROM, EEPROM, silicon A disk or the like can be used.

  Further, by executing the program read by the computer, not only the functions of the above-described embodiments are realized, but also an OS (operating system) operating on the computer based on an instruction of the program is actually It goes without saying that a case where the function of the above-described embodiment is realized by performing part or all of the processing and the processing is included.

  Furthermore, after the program read from the recording medium is written in a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer, the function expansion board or It goes without saying that the CPU or the like provided in the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  Further, the present invention may be applied to a system composed of a plurality of devices or an apparatus composed of a single device.

  Needless to say, the present invention can be applied to a case where the present invention is achieved by supplying a program to a system or apparatus. In this case, by reading a recording medium storing a program for achieving the present invention into the system or apparatus, the system or apparatus can enjoy the effects of the present invention.

  Furthermore, by downloading and reading a program for achieving the present invention from a server, database, etc. on a network by a communication program, the system or apparatus can enjoy the effects of the present invention.

  In addition, all the structures which combined each embodiment mentioned above and its modification are also included in this invention.

Claims (14)

An information processing system in which a processing device, a server device, and a client device are communicably connected,
The processor is
User information transmission means for receiving input of user information for identifying a user and logging the user information to the server device in order to log in to the processing device;
Unlock information receiving means for receiving from the server device unlock information for releasing the lock state of the client device used by the user;
Notification means for notifying a user of the unlock information received by the unlock information receiving means,
The server device
Storage means for associating and storing client information for specifying the client device and the user information of a user who uses the client device;
When receiving the user information transmitted by the user information transmitting means, unlock information generating means for generating unlock information for releasing the lock state of the client device;
Client information corresponding to the received user information is acquired from the storage means, and can be released by the lock release information generated by the lock release information generation means for the client device specified by the acquired client information A lock instruction means for transmitting an instruction to shift to a secure lock state;
Unlocking information transmitting means for transmitting the unlocking information generated by the unlocking information generating means to the processing device;
The client device is
A lock unit that shifts to a lock state that can be released by the lock release information when receiving an instruction to shift to the lock state transmitted by the lock instruction unit;
An information processing system comprising: a lock release unit that releases the lock state when an input of unlock information that can be released in the lock state is received in the lock state. The client device is
A lock release notification means for transmitting to the server device information indicating that the user information and the lock state are to be released when the lock state is released by the lock release means;
The server device
When receiving the information indicating that the locked state is released by the unlock notification means, the processing device is identified based on the user information included in the received information, and the processing device in the login state is identified by the user information. Logoff request transmission means for transmitting a logoff request for shifting from a login state using the user information to a logoff state,
The processor is
The information processing system according to claim 1, further comprising logoff means for executing logoff processing of the user when the logoff request transmitted by the logoff request transmission means is received. The logoff request transmitting means further transmits a logoff request including the user information;
When the logoff unit receives the logoff request transmitted by the logoff request transmission unit, whether or not the user information included in the logoff request matches the user information of the user who is logged in to the processing device. If it matches, logoff processing of the user who is logged in to the processing device is executed, and if not, logoff of the user who is logged in to the processing device is not performed. The information processing system according to claim 2. The processor is
A processing end notification means for transmitting a processing end notification including the user information to the server device when an end instruction of a predetermined processing is detected from the user;
The server device
When the process end notification notified by the process end notification means is received, client information corresponding to the user information included in the process end notification is acquired from the storage means, and the client terminal specified by the client information is acquired. On the other hand, in order to release the lock state, further comprising a lock release instruction means for transmitting a lock release instruction,
The information according to any one of claims 1 to 3, wherein the release unit releases the lock state when the lock release instruction is received by the lock release instruction unit in the locked state. Processing system.   5. The notification unit according to claim 1, wherein the notification unit notifies the user of the unlock information received by the unlock information receiving unit after execution of a predetermined process instructed by the user. The information processing system described.   6. The notification unit according to claim 1, wherein the notification unit notifies the user of the unlock information received by the unlock information receiving unit while the user is logged in to the processing apparatus. The information processing system according to claim 1.   The information according to any one of claims 1 to 6, wherein the notifying unit displays the unlocking information received by the unlocking information receiving unit so that the user can view the unlocked information. Processing system. The processing device is a device having a network printing function for printing according to print data from a client on the network,
The notifying unit notifies the user of unlock information received by the unlock information receiving unit when printing processing based on the print data is completed in accordance with an instruction of a logged-in user. The information processing system according to any one of 1 to 7.   The information processing system according to any one of claims 1 to 8, wherein the unlock information is a numeric character string generated by a random number. In order to log in to the processing device, an input of user information for identifying the user is received, and a user information transmitting unit that transmits the user information to the server device and a client device used by the user for releasing the lock state A processing device comprising: lock release information receiving means for receiving unlock information from the server device; and a notification device for notifying the user of the lock release information received by the lock release information receiving device; and transmitted by the server device. When the received instruction to shift to the locked state is received, the lock unit that shifts to the locked state that can be released by the unlocking information and the input of unlocking information that can be released in the locked state are accepted. A lock release means for releasing the locked state when Which is communicably connected with the winding device is a server device,
Storage means for associating and storing client information for specifying the client device and the user information of a user who uses the client device;
When receiving the user information transmitted by the user information transmitting means, unlock information generating means for generating unlock information for releasing the lock state of the client device;
Client information corresponding to the received user information is acquired from the storage means, and can be released by the lock release information generated by the lock release information generation means for the client device specified by the acquired client information A lock instruction means for transmitting an instruction to shift to a secure lock state;
Unlock information transmitting means for transmitting the unlock information generated by the unlock information generating means to the processing device;
A server device comprising: Information processing in which a client device is communicably connected to a server device including a storage unit that stores a processing device, client information that identifies the client device, and user information of a user who uses the client device in association with each other A system control method comprising:
A user information transmitting unit for receiving user information for identifying a user, and transmitting the user information to the server device, in order for the user information transmitting means of the processing device to log in to the processing device;
The unlock information receiving means of the processing device receives from the server device unlock information for unlocking the lock state of the client device used by the user; and
A notification step of notifying the user of the unlock information received by the unlock information receiving step by a notification means of the processing device;
An unlock information generating step for generating unlock information for unlocking the client device when the unlock information generating means of the server device receives the user information transmitted by the user information transmitting step. When,
The lock instruction unit of the server device acquires client information corresponding to the received user information from the storage unit, and generates the lock information generation step for the client device specified by the acquired client information. A lock instruction step for transmitting an instruction to shift to a lock state that can be unlocked by the unlocked information,
The unlock information transmitting means of the server device transmits the unlock information generated by the unlock information generating step to the processing device to transmit the unlock information,
When the lock unit of the client device receives the transition instruction to the lock state transmitted by the lock instruction step, the lock step shifts to the lock state that can be released by the unlock information;
The lock release unit of the client device includes an unlocking step of releasing the lock state when receiving an input of unlock information that can release the lock state in the lock state. A processing system control method. In order to log in to the processing device, an input of user information for identifying the user is received, and a user information transmitting unit that transmits the user information to the server device and a client device used by the user for releasing the lock state A processing device comprising: lock release information receiving means for receiving unlock information from the server device; and a notification device for notifying the user of the lock release information received by the lock release information receiving device; and transmitted by the server device. When the received instruction to shift to the locked state is received, the lock unit that shifts to the locked state that can be released by the unlocking information and the input of the unlocking information that can be released in the locked state are accepted. A lock release means for releasing the locked state when A server device communicably connected to a client device, comprising: storage means for storing client information for specifying the client device and the user information of a user who uses the client device in association with each other. A control method,
An unlock information generating step for generating unlock information for releasing the lock state of the client device when the unlock information generating unit of the server device receives the user information transmitted by the user information transmitting unit. When,
The lock instruction unit of the server device acquires client information corresponding to the received user information from the storage unit, and generates the lock information generation step for the client device specified by the acquired client information. A lock instruction step for transmitting an instruction to shift to a lock state that can be unlocked by the unlocked information,
The unlock information transmitting means of the server device transmits the unlock information generated by the unlock information generating step to the processing device to transmit the unlock information,
A control method for a server device, comprising: Information processing in which a client device is communicably connected to a server device including a storage unit that stores a processing device, client information that identifies the client device, and user information of a user who uses the client device in association with each other A computer readable and executable program for causing a computer to execute a system control method,
The processing device;
User information transmission means for receiving input of user information for identifying a user and logging the user information to the server device in order to log in to the processing device;
Unlock information receiving means for receiving from the server device unlock information for releasing the lock state of the client device used by the user;
Function as notification means for notifying the user of the unlock information received by the unlock information receiving means;
The server device,
When receiving the user information transmitted by the user information transmitting means, unlock information generating means for generating unlock information for releasing the lock state of the client device;
Client information corresponding to the received user information is acquired from the storage means, and can be released by the lock release information generated by the lock release information generation means for the client device specified by the acquired client information A lock instruction means for transmitting an instruction to shift to a secure lock state;
Causing the unlock information generated by the unlock information generating means to function as an unlock information transmitting means for transmitting to the processing device;
The client device;
A lock unit that shifts to a lock state that can be released by the lock release information when receiving an instruction to shift to the lock state transmitted by the lock instruction unit;
A program that can be read and executed by a computer, causing the computer to function as a lock release unit that releases the lock state when an input of unlock information that can be released is received in the lock state. In order to log in to the processing device, an input of user information for identifying the user is received, and a user information transmitting unit that transmits the user information to the server device and a client device used by the user for releasing the lock state A processing device comprising: lock release information receiving means for receiving unlock information from the server device; and a notification device for notifying the user of the lock release information received by the lock release information receiving device; and transmitted by the server device. When the received instruction to shift to the locked state is received, the lock unit that shifts to the locked state that can be released by the unlocking information and the input of the unlocking information that can be released in the locked state are accepted. A lock release means for releasing the locked state when A server device communicably connected to a client device, comprising: storage means for storing client information for specifying the client device and the user information of a user who uses the client device in association with each other. A computer-readable program for causing a computer to execute a control method,
The server device,
When receiving the user information transmitted by the user information transmitting means, unlock information generating means for generating unlock information for releasing the lock state of the client device;
Client information corresponding to the received user information is acquired from the storage means, and can be released by the lock release information generated by the lock release information generation means for the client device specified by the acquired client information A lock instruction means for transmitting an instruction to shift to a secure lock state;
A computer-readable and executable program that causes the unlock information generated by the unlock information generating means to function as an unlock information transmitting means for transmitting to the processing device.

Images