JP2013200611A - Information processing device, user authentication method, and user authentication program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing device which enables a user to control security of authentication without requiring installation of a special device for user authentication, and performs authentication processing at high speed.SOLUTION: An information processing device which authenticates a user of the device, comprises: connection means for connecting a portable storage medium that holds data files; authentication information holding means for holding authentication information of the user; and authentication means for authenticating the user on the basis of attribute information of data file included in the data files, and the authentication information.

Description

  The present invention relates to an information processing apparatus that authenticates a user to be used, a user authentication method, and a user authentication program.

  Currently, image data processed by electronic devices is mostly digitized data. As a result, an image printed or written on paper or the like is acquired as electronic data (scanner function), printed on a medium such as paper (printer function or copy function), and transmitted using a public line. Image data can be commonly used in a plurality of usage forms such as (facsimile function), and the versatility of image data has been expanded.

  As communication and input / output devices installed in offices and the like, there are those having a common input unit or output unit among digitized image data processing functions, so that one device has a plurality of functions, In recent years, the use of MFPs that share an input unit or output unit has been increasing.

  For example, the multifunction peripheral has two or more functions of a copy function, a scanner function, a printer function, and a facsimile function.

  In such a multi-function peripheral, usage may be managed for each user connected to the multi-function peripheral through a network, such as use of each function or management of the amount of consumables used. For example, available functions are limited for each user.

  For the purpose of management for each user, for example, a multifunction device is equipped with an authentication-dedicated device (hereinafter, an authentication device). User authentication is performed prior to the process of restricting the use function for each user. User authentication includes, for example, authentication by character input, fingerprint authentication, and card authentication such as a non-contact IC card.

  In a digital still camera that is generally widely used, captured image data includes thumbnail image data and information about image data called Exifable Image File Format (Exif), and together with compressed image data, A file called JPEG (Joint Photographic Experts Group) format is generated. Although this Exif information is included in the file as attribute information of the image data, the Exif information is not displayed when the image file is displayed on the display means as the image data.

  In Patent Document 1, image data obtained by reading a document is written in an internal storage, authentication information associated with the image data is written in a USB (Universal Serial Bus) memory, and the USB memory is used for use of the image data. Describes an image processing system for authenticating a user.

  Patent Document 2 describes an image processing apparatus that specifies type information such as a black pixel ratio and an image type for image data read and generated, and adds the image data to the image data for storage. An Exif format image file is generated based on the image data, and attribute information is added to the image data and used for managing the image file.

  Japanese Patent Application Laid-Open No. 2004-228561 is an image measuring apparatus that adds an electronic signature to image data, calculates the electronic signature from the measured image feature amount and image supplementary information, and stores the electronic signature in accordance with the format of the image data. An image measurement device is described.

Japanese Patent No. 4470957 JP 2007-272622 A Japanese Patent No. 4764536

  In a multifunction device in the related technology, when performing user authentication, user operation restriction, or individual processing for each user, an authentication device is connected, and fingerprint authentication or authentication processing using a contactless IC card dedicated to authentication is performed. An authentication operation is performed.

  However, newly installing an authentication device raises the cost of the system. In addition, the installation of the authentication device limits the usage area of the operation part of the system, and becomes an obstacle to downsizing of the device. Furthermore, in the case of card authentication and authentication processing using a non-contact IC card, it is necessary to set a standard necessary for authentication on the card side.

  The image processing system described in Patent Document 1 reads a target document with a reading unit to generate image data, and determines whether the document is a confidential document. If it is determined that the document is a confidential document, an authentication file corresponding to the image data is stored in the USB memory storing the identification data. For this reason, a USB memory insertion operation is required to display image data, and the image processing system has an interface for this purpose. In addition, the target document needs to include a pattern indicating that it is a confidential document in order to have the convenience that image data that is not a confidential document is displayed without requiring authentication. For this reason, processing necessary for authentication is also required in advance for the target document.

  The image processing apparatus described in Patent Document 2 analyzes the acquired image data, generates a value that serves as an index that characterizes the display of the image, and adds it to an image file in the Exif format. This additional information serves as a rough indication of how the image data is displayed. Further, analysis processing of image data is required, and processing time for that is required.

  The image measuring device described in Patent Document 3 calculates and stores an electronic signature in the acquired image data by using a secret key of the image measuring device from the feature amount of the incidental information of the image. That is, for the authentication of the image data, an electronic signature calculated using the private key of the image measuring device is used. Therefore, processing for calculating the electronic signature is required.

As described above, in the image processing apparatus according to the related art, for the authentication of the image data,
A process for calculating and adding information necessary for authentication is required. For this reason, it is necessary to provide an authentication device, which increases the cost of the device. In addition, the processing required for calculating and registering authentication data reduces the operational efficiency of the entire system.

  The present invention has been made in view of the above points, and does not require an authentication device, is small in size, has excellent operability, can be controlled by the user, and has a high processing speed. An object of the present invention is to provide a user authentication method and a user authentication program.

  In order to achieve the above object, an information processing apparatus according to the present invention is an information processing apparatus for authenticating a user to be used, and includes a connection unit for connecting a portable storage medium holding a data file, and user authentication information. It comprises authentication information holding means for holding, and authentication means for authenticating a user based on attribute information and authentication information of a data file included in the data file.

  The user authentication method of the present invention is a user authentication method for authenticating a user who uses an information processing apparatus, the step of connecting the portable storage medium to the information processing apparatus, and data held in the portable storage medium And authenticating a user based on file attribute information and authentication information held in the information processing apparatus.

  Furthermore, the user authentication program of the present invention is a user authentication program for authenticating a user who uses an information processing apparatus, a process for reading a data file from a portable storage medium connected to the information processing apparatus, and an attribute of the data file It is characterized by having a computer perform processing for authenticating a user based on information and authentication information held in an information processing apparatus.

  According to the present invention, user authentication of a multifunction peripheral is performed based on a data file held by an external memory or a mobile phone connected to the multifunction peripheral and attribute information of the data file, so that an authentication device is newly installed. There is no need. As a result, an authentication function is added to the multifunction peripheral while reducing costs.

1 illustrates an example of a configuration of a multifunction peripheral according to a first embodiment of the present invention. 5 is a flowchart illustrating an example of processing for registering an image file in the authentication system according to the first embodiment of the present invention. It is a flowchart which shows an example of the process which performs user registration in the authentication system which concerns on the 1st Embodiment of this invention. It is a flowchart which shows an example of the process which authenticates a user in the authentication system which concerns on the 1st Embodiment of this invention. 2 illustrates an example of display on a display unit when an external memory or a mobile phone is connected in the multi-function peripheral according to the first embodiment of the present invention. 4 shows an example of display on a display unit when a JPEG file used for authentication is selected in the multifunction peripheral according to the first embodiment of the present invention. 2 shows an example of data registered in a multifunction machine according to the first embodiment of the present invention. 2 shows an example of a configuration of a multifunction peripheral according to a second embodiment of the present invention.

The best mode for carrying out the invention will be described in detail with reference to the drawings. However, the present invention is not limited to the embodiments described below.
[First Embodiment]
[Configuration of MFP]
FIG. 1 shows an example of the configuration of a multifunction machine according to the first embodiment of the present invention.

  The user authentication system according to the first embodiment of the present invention performs user authentication by connecting an external memory or a mobile phone 100 as a portable storage medium to the multi-function peripheral 1000 as a data processing apparatus.

  The MFP 1000 searches for an external memory in which a JPEG file including Exif information is stored or an external memory connection unit 101 for connecting the mobile phone 100, and a JPEG file stored in the connected external memory or the mobile phone 100. And an Exif confirmation unit 103 that reads the Exif information of the JPEG file stored in the external memory or the mobile phone 100.

  The MFP 1000 further includes an authentication information registration unit 105 in which information for user authentication is registered, and an authentication unit 104 that performs user authentication based on the registered information. The authentication information registration unit 105 registers the file name, date, capacity, Exif information, and information used for user authentication among the Exif information used for user authentication.

The MFP 1000 includes a display unit 112, an operation unit 111 for a user to operate the apparatus, a scanner unit 106 for reading a document, a LAN communication unit 107 that performs LAN (Local Area Network) communication with a network, and a facsimile communication that performs facsimile communication. Unit 108, a printer unit 109 that performs printing output from a personal computer (hereinafter referred to as a PC) and a recording output during a copying operation, and a control unit 110 that controls the overall operation of the apparatus. The display unit 112 displays the JPEG file and the read Exif information. The user operates the operation unit 111 to select a JPEG file or Exif information used for authentication. The scanner unit 106 is a functional block that can be used when the user is authenticated.
[Image data registration process]
Next, processing of the authentication system according to the first embodiment of the present invention will be described with reference to FIGS.

  FIG. 2 is a flowchart showing an example of processing for registering a JPEG file including Exif information as image data in the external memory or the mobile phone 100 used for authentication in the multi-function apparatus 1000 shown in FIG. Assume that the JPEG file is stored in the user's PC, for example. The image data registration process will be described with reference to FIG.

  Either an external memory or a mobile phone is selected as a medium for storing a JPEG file including Exif information (step S201). When the external memory is selected (S201 YES), the external memory is connected to the PC (step S202), and the JPEG file including the Exif information is stored in the external memory (step S203).

  The above file storage operation is repeated until the storage of the required number of files of data is completed (step S204). When the storage is completed (YES in S204), the external memory is removed from the PC (step S205).

  When the mobile phone is selected as the storage medium (NO in S201), the user selects one of connecting the mobile phone to the PC and registering the file, and registering the image data using the camera provided in the mobile phone. (Step S206). When registering from the PC (S206 YES), the same processing as the processing of storing from the PC to the external memory (steps S203 to S205) is performed.

  When saving using the camera of the mobile phone (NO in S206), the image data is displayed and a picture is taken (step S207). The photographed data is stored in the mobile phone (step S208). The photographing operation is repeated until the storage of the required number of files is completed (step S209). In recent years, most mobile phones have a camera function, but a JPEG file to which Exif information is added is generated by the camera function of the mobile phone. Usually, as Exif information, shooting date / time, shooting device manufacturer name, shooting device model name, overall image resolution, horizontal / vertical resolution, shooting direction, shutter speed, aperture (F value), ISO sensitivity, photometry mode, flash Presence / absence / exposure correction step value / focal length / color space (color space) / GPS information / thumbnail are added to the JPEG file.

The JPEG file registered in the external memory or the mobile phone 100 is not limited to the file stored in the user's PC, but may be held in a device having a means for storing the file and a connection interface. Alternatively, the file may be acquired from a file held by the MFP 1000 via the LAN communication unit 107. Furthermore, the file acquired using the communication function of the mobile phone may be used.
[User registration process]
FIG. 3 is a flowchart illustrating an example of processing in which the user registers user information in the multi-function peripheral 1000. 5 and 6 are diagrams showing an OPE (Operation Equipment, operation terminal) of the multifunction machine. The OPE includes an operation unit 111 and a display unit 112. The user information registration process will be described below with reference to FIGS.

  First, the MFP is activated, and the external memory or the mobile phone 100 is connected to the external memory connection unit 101 (step S301).

  Next, a JPEG file to be used for registration processing is searched from the connected external memory or mobile phone 100 (step S302), and the JPEG file is displayed on the display unit 112 (step S303). The OPE information at this time is shown in FIG. FIG. 5 shows a state in which information on the JPEG file stored in the memory or the mobile phone 100 is displayed on the display unit 112.

  Here, 12 JPEG files are registered. The user selects a JPEG file to be used for authentication from these JPEG files from the OPE (step S304).

  When the JPEG file is selected, the Exif information of the selected file is displayed on the display unit 112 (step S305). The OPE information at this time is shown in FIG. In FIG. 6, the Exif information of the selected JPEG file is displayed.

  The user selects Exif information used for authentication (step S306). When registering a plurality of Exif information, the above operation is repeated (step S307).

  When the selection is completed (YES in S307), the selected Exif information is registered in the authentication information registration unit 105 of the multifunction machine 1000 (step S308).

  When a plurality of JPEG files are used, the JPEG file is added repeatedly from the selection of the JPEG file (S309 YES). For the JPEG file to be used, Exif information is registered in the authentication information registration unit 105. When registration is completed (NO in S309), the process ends and the process returns to the initial state.

  Note that as information used for user authentication, authentication may be performed using only a JPEG file and Exif information registered in advance, but the level of authentication may be changed according to a user instruction. That is, the user may select the Exif information to be used, or the user may specify the order of a plurality of JPEG files and Exif information.

Also, using the LAN communication unit provided in the multifunction machine 1000, the operation unit 111 and the display unit 112 of the multifunction machine 1000 are emulated, and user registration processing is performed from a terminal device connected to the multifunction machine 1000 via the network. May be.
[Authentication Registration Information]
The data registered in the authentication information registration unit 105 will be described with reference to FIG. FIG. 7 is a table describing parameters when registering authentication data. The table of FIG. 7 includes identification information of a user who uses the MFP 1000, authentication JPEG file identification information and authentication Exif information as authentication parameters used for each user, and permission operation information for each user ( Facsimile, copy, print and scanner) are registered.

  FIG. 7 displays the authentication result of each user. That is, with respect to the table illustrated in FIG. 7, as a result of authentication, users B, C, and D are permitted to use the MFP 1000. On the other hand, since the user A has failed in authentication, the MFP 1000 cannot be used.

Among the registration information shown in FIG. 7, the user identification information and the permitted operation information are registered in advance by the user or the administrator of the multifunction machine 1000. These pieces of information may be added or changed according to an instruction from a user or an administrator.
[User authentication processing]
Next, user authentication processing will be described with reference to the flowchart shown in FIG.

  First, the external memory or mobile phone 100 used for authentication is connected to the external memory connection unit 101 (step S401). A JPEG file stored in the connected external memory or mobile phone 100 is searched (step S402), and the searched JPEG file is displayed on the OPE unit (step S403). The user selects a file to be used for authentication from the displayed JPEG file (step S404). Next, the Exif information of the selected JPEG file is displayed on the OPE unit (step S405). The user selects Exif information used for authentication from the displayed Exif information from the operation unit 111 (step S406). The user selects the same Exif information and JPEG file as the information selected at the time of user registration. At this time, if a plurality of Exif information and JPEG files are necessary, the selection operation is repeated (steps S407 and S408). With reference to the information registered in the authentication information registration unit 105, the authentication unit 104 determines whether or not the user can be authenticated (step S409). If the user can be authenticated (YES in S409), the authentication is completed and the permitted operations (facsimile, copy, print, scanner) are enabled (step S410), and the screen returns to the initial screen and enters a standby state. , Complete the process. If the user is not authorized (NO in S409), an error is displayed (step S411), and the screen returns to the initial screen and enters a standby state.

  In this embodiment, the operation unit 111 and the display unit 112 are separated in FIGS. 5 and 6, but may be integrated. That is, the display unit 112 may be configured to be operable like a touch panel.

  In the first embodiment of the present invention, a multi-function peripheral having at least a plurality of functions of a copy function, a scanner function, a printer function, and a facsimile function performs user authentication prior to a user operation. The user authentication restricts the operation of the multifunction device by the user, and the individual operation is handled for each user. The multifunction peripheral according to the first embodiment of the present invention does not include a dedicated device for user authentication, and is based on Exif information of a JPEG file stored in a memory connected to the user or the mobile phone 100. Perform user authentication.

  Exif information is included as attribute data in a still image file according to the standard, but is normally not displayed on the display means as image data.

  In the MFP according to the first embodiment of the present invention, this existing Exif information is used for user authentication. In other words, the Exif information is displayed on the display means, and the user authenticates the MFP by operating the Exif information. Thereby, it is not necessary to newly generate data for user authentication, and it is not necessary to add a device for user authentication. Further, the generation processing time for the authentication data and the memory area for storing the authentication data are unnecessary.

  Accordingly, leakage of confidential information and leakage of personal information can be prevented while suppressing costs, and each of a plurality of functions provided in the multi-function peripheral can be made to correspond to the user.

In the first embodiment of the present invention, the JPEG file used for user authentication is not limited to the JPEG file stored in the external memory or the mobile phone 100, and is captured and acquired by the camera function of the mobile phone. It is also possible to use the JPEG file. That is, a JPEG file necessary for authentication can be updated, replaced, or added according to a user instruction. Thereby, the security of user authentication can be maintained or changed by the user.
[Second Embodiment]
A second embodiment of the present invention will be described with reference to FIG.

  FIG. 8 shows an example of the configuration of a multifunction machine 2000 according to the second embodiment of the present invention. In an MFP 2000 according to the second embodiment, an Exif additional image processing unit 113 is added to the MFP 1000 according to the first embodiment. Since the other configuration is the same as that of the first embodiment, the same reference numerals as those of the first embodiment are given and description thereof is omitted.

  In the second embodiment, a JPEG file used for user authentication is created from image data acquired using the scanner function of the multifunction peripheral. That is, an image printed or written on a medium such as paper is read by the scanner unit 106 to generate image data. Exif information as attribute information of image data is added to the image data by the Exif additional image processing unit 113, and a JPEG file is created through data processing on the image display information. This JPEG file may be held in the multi-function peripheral 2000 or transferred to an external memory connected to the external memory connection unit 101 or the mobile phone 100.

  The multi-function machine 2000 according to the second embodiment of the present invention acquires image data using a scanner unit, and generates a JPEG file including Exif information.

  In the second embodiment of the present invention, the user can create a JPEG file necessary for authentication using the scanner function of the multifunction machine 2000. Thereby, the user can update or add a JPEG file used for authentication.

  In the user authentication system of the multifunction peripheral according to the embodiment of the present invention, authentication is performed using an external memory or a mobile phone owned by the user, so that it is not necessary for the user to prepare a medium for authentication. For this reason, the scale of the system can be kept small, and the increase in cost is suppressed.

  Furthermore, since the user can arbitrarily select the number of JPEG files and the number of Exif information used for authentication, the order of selection can be arbitrarily determined, and those parameters can be arbitrarily selected. Therefore, confidentiality and simplicity can be achieved. Can be compatible.

  As mentioned above, although this invention was demonstrated with reference to embodiment, this invention is not limited to said each embodiment and Example. Various changes that can be understood by those skilled in the art can be made to the configuration and details of the present invention. Further, the present invention includes a combination of some or all of the configurations of the above-described embodiments as appropriate.

  In the embodiment of the present invention, processing for authenticating a user has been described as an example for a multi-function peripheral having a plurality of functions for processing image data, but the present invention is not limited to this. The present invention can be suitably applied to any device provided with a connection unit for connecting an external memory or a mobile phone, an operation unit for accepting user operations, a display unit, a data holding unit, and an authentication unit.

  In the embodiment of the present invention, a JPEG file including Exif information is used as an image file used for user authentication. However, the present invention is not limited to this. The present invention can be suitably applied to attribute data that is added when an electronic file is generated based on digital data.

  A program for executing the above-described processing operations is stored and distributed in a computer-readable recording medium such as a flexible disk, a CD-ROM (Compact Disk Read-Only Memory), and an MO (Magneto-Optical disk). A device that executes the above-described processing operation may be configured by installing the program in a computer.

  The present invention is not limited to the above-described embodiment, and can be suitably applied to a user authentication system that is shared and used by a plurality of users.

DESCRIPTION OF SYMBOLS 100 External memory or mobile phone 101 External memory connection part 102 File search part 103 Exif confirmation part 104 Authentication part 105 Authentication information registration part 106 Scanner part 107 LAN communication part 108 Facsimile communication part 109 Printer part 110 Control part 111 Operation part 112 Display unit 113 Exif additional image processing unit 1000 MFP 2000 MFP

Claims (10)

An information processing apparatus for authenticating a user to use,
Connection means for connecting a portable storage medium holding the data file;
Authentication information holding means for holding the authentication information of the user;
An information processing apparatus comprising: authentication means for authenticating the user based on attribute information of the data file included in the data file and the authentication information. The information processing apparatus according to claim 1, further comprising an operation unit in which the user registers the authentication information in the authentication information holding unit based on the data file and the attribute information. Scanner means for reading a document and generating image data;
Attribute information adding means for adding attribute information to the image data;
The information processing apparatus according to claim 1, wherein the data file includes the image data to which the attribute information is added. The portable storage medium is a mobile phone having imaging means,
4. The information processing apparatus according to claim 1, wherein the data file includes an image file generated by being imaged by the imaging unit. 5. The data file is a JPEG file,
The information processing apparatus according to claim 1, wherein the attribute information is Exif information. A user authentication method for authenticating a user who uses an information processing apparatus,
Connecting a portable storage medium to the information processing apparatus;
A user authentication method comprising: authenticating the user based on attribute information of a data file held in the portable storage medium and authentication information held in the information processing apparatus. The user authentication method according to claim 6, further comprising the step of the user registering the authentication information in the information processing apparatus based on the data file and the attribute information.   8. The data file includes at least one of an image file generated by reading an original by the information processing apparatus and an image file generated by imaging the portable storage medium. The user authentication method described in 1. The data file is a JPEG file,
The user authentication method according to claim 6, wherein the attribute information is Exif information. A user authentication program for authenticating a user who uses an information processing apparatus,
A process of reading a data file from a portable storage medium connected to the information processing apparatus;
A user authentication program that causes a computer to perform processing for authenticating the user based on attribute information of the data file and authentication information held in the information processing apparatus.

Images