JP2014044601A - Image forming apparatus, authentication system, control method of the same, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent erroneous authentication when a personal authentication card is lost and therefore there are a plurality of copied personal authentication cards, in order to improve security in registration of authentication information.SOLUTION: An image forming apparatus: stores authentication data for authenticating from card information stored in an IC card in an authentication management table; reads a card identification number and issuance information that is information indicating that IC cards with the same card identification number are re-issued, from the card information stored in the IC card; and registers the read card identification number and issuance information in the authentication management table in unique association with each other as authentication data, in order to authenticate an IC card desired by a user from the IC card with the same card identification number.

Description

  The present invention relates to a technique for registering authentication information used in a user authentication process performed when using a device such as a multifunction machine.

  In recent years, in companies, etc., when employees use devices such as multifunction devices, user authentication using a storage medium such as an IC card is performed, and when user authentication is successful, the use of those devices is permitted. Is increasing.

  There is a mechanism for making a user authentication request from an MFP to an authentication server in order to perform authentication information used for authenticating a user who uses the MFP. If it is not a large-scale printing system, the authentication information is managed in the storage unit of each multi-function peripheral without using an authentication server for managing the authentication information, and the authentication information stored in the local storage unit is used. In some cases, the user who uses the MFP is authenticated.

  Prior art discloses a technique for referring to a local authentication management table and authenticating a user based on whether or not there is guard information read from an IC card (for example, Patent Document 1).

JP 2012-84082 A

  If an authentication card is reissued due to loss of an authentication card (for example, employee ID card) assigned to each individual employee, if another person picks up the lost authentication card, the picked-up authentication card is authenticated. If it is registered in the table, even a lost authentication card will be authenticated.

  That is, in the case of authentication using an IC card, it is impossible to determine who is authenticating, and therefore, if the IC card information can be registered in the authentication management table, there is a problem that anyone can authenticate even if it is not the person himself / herself.

  The present invention provides a mechanism capable of preventing erroneous authentication when a plurality of duplicate personal authentication cards are present due to loss in order to improve security at the time of personal registration of authentication information. The purpose is to do.

  The present invention is an image forming apparatus comprising: authentication data storage means for storing authentication data for authentication using card information recorded on an IC card in an authentication management table; and card information recorded on the IC card. The card identification number is duplicated in the authentication management table and the first card information reading means for reading the issuance information which is the reissued information of the IC card in which the card identification number and the card identification number are duplicated. Issuing information for uniquely registering the card identification number read by the first card information reading means and the issuing information as the authentication data in order to authenticate the user desired IC card from among the IC cards And a registration unit.

  A second card information reading means for reading the card identification number and the issuance information from the card information recorded on the IC card; the issuance information read by the second card information reading means; The IC card read by the second card information reading means is authenticated in accordance with the issuance information of the authentication management table that is registered in association with the card identification number read by the second card information reading means. An IC card authenticating unit for performing the operation, and a permitting unit for permitting the use of the image forming apparatus in accordance with an authentication result obtained by the IC card authenticating unit.

  The image forming apparatus is an authentication system that is communicably connected to an information processing apparatus. The information processing apparatus includes a first user information receiving unit that receives input of user information, and a first user information reception Login determination means for determining whether the received user information can be logged in to the information processing apparatus, and user information determined by the login determination means to be able to log in to the information processing apparatus. User information transmitting means for transmitting to the image forming apparatus as a user who can register an IC card registered as the authentication data of the forming apparatus, and the image forming apparatus uses the user information transmitted by the user information transmitting means as a user User data registration means for registering in the management table and second user information for accepting input of user information Receiving means, and user determining means for determining whether or not the user information received by the second user information receiving means is stored in the user management table, and stored by the user determining means When the determination is made, the first card information reading means reads the card identification number and the issuance information.

  The information processing apparatus further includes a driver acquisition unit that acquires a driver of the image forming apparatus installed in the information processing apparatus, and the user information transmission unit transmits the driver to the image forming apparatus from which the driver has been acquired. It is characterized by doing.

  According to the present invention, in order to improve the security at the time of personal registration of authentication information, a mechanism capable of preventing erroneous authentication when a plurality of duplicate personal authentication cards are present due to loss is provided. It becomes possible to do.

It is a system configuration figure showing an example of the system configuration of the information processing system of the present invention. 2 is a hardware configuration diagram illustrating an example of a hardware configuration of an information processing apparatus applicable to the information processing apparatus 102. FIG. 2 is a hardware configuration diagram illustrating an example of a hardware configuration of a multifunction machine 101. FIG. 2 is a diagram illustrating an example of functional configurations of a multifunction machine 101 and an information processing apparatus 102. FIG. It is a flowchart which shows an information change request process. It is a flowchart which shows a user information registration request process. It is a flowchart which shows a user information registration process. It is a flowchart which shows an authentication information registration process. It is a flowchart which shows an authentication management table change process. 5 is a flowchart illustrating print data creation / storage processing. 6 is a flowchart illustrating details of a printing process. It is a figure which shows an example of a structure of a menu screen. It is a figure which shows an example of a structure of a user information registration request | requirement screen. It is a figure which shows an example of a structure of a user confirmation screen. It is a figure which shows an example of a structure of a printing execution instruction | indication screen. 3 is a diagram illustrating an example of a data configuration of a multifunction machine information management table. FIG. It is a figure which shows an example of a data structure of a user management table. It is a figure which shows an example of a data structure of an authentication management table. It is a figure which shows an example of a data structure of a bibliographic information management table. It is a figure which shows an example of a structure of an authentication card registration screen. It is a figure which shows an example of a structure of an authentication card registration completion screen. It is a figure which shows an example of an authentication card (employee card).

Hereinafter, an example of an embodiment of the present invention will be described with reference to the drawings.
[First Embodiment]

  FIG. 1 is a system configuration diagram showing an example of the configuration of an information processing system (authentication system) according to an embodiment of the present invention. As shown in FIG. 1, the information processing system of the present invention includes a multifunction machine 101, an information processing apparatus 102, and a LAN 103.

  The multifunction machine 101 is an image forming apparatus that performs print processing of print data transmitted from the information processing apparatus 102. Even when the multi-function peripheral 101 receives the print data transmitted from the information processing apparatus 102, the multi-function peripheral 101 does not immediately perform print output but stores the print data in the storage device. Thereafter, when an execution instruction for the print processing of the print data stored in the storage device is received, the print processing of the print data is started.

  In the present invention, when the user uses the multifunction machine 101, the multifunction machine 101 performs an authentication process using an IC card held by the user. Authentication information necessary for performing this authentication process is stored in a storage device (such as an HDD 304 described later). In addition, user information transmitted from the information processing apparatus 102 necessary for registering the authentication information is also stored in the storage device.

The information processing apparatus 102 is an information processing apparatus used by a user, creates print data to be printed by the multifunction machine 101 using a printer driver, and transmits the print data to the multifunction machine 101. Further, the MFP 101 has a function of requesting the MFP 101 to register user information used for registering authentication information used for authentication processing in the MFP 101.
The LAN 103 is a network for connecting the multifunction machine 101 and the information processing apparatus 102 so that they can communicate with each other. The connection form may be wired / wireless.
The above is an example of the system configuration of the information processing system of the present invention.

  With reference to FIG. 2, an example of the hardware configuration of the information processing apparatus applicable to the information processing apparatus 102 of FIG. 1 will be described. FIG. 2 is a block diagram illustrating an example of a hardware configuration of an information processing apparatus that can be applied to the information processing apparatus 102.

  In FIG. 2, reference numeral 201 denotes a CPU that comprehensively controls each device and controller connected to the system bus 204. Further, the ROM 203 or the external memory 211 is necessary for realizing a function executed by the information processing apparatus 102 such as a BIOS (Basic Input / Output System), an operating system program (hereinafter referred to as OS), which is a control program of the CPU 201. Various programs to be described later are stored.

  A RAM 202 functions as a main memory, work area, and the like for the CPU 201. The CPU 201 implements various operations by loading a program necessary for execution of processing from the ROM 203 or the external memory 211 into the RAM 202 and executing the loaded program.

  An input controller 205 controls input from an input device 209 such as a keyboard and a pointing device. A video controller 206 controls display on a display device such as the display device 210. These are used by the operator as needed.

  A memory controller 207 is connected to the hard disk (HD), flexible disk (FD), or PCMCIA card slot for storing a boot program, various applications, font data, user files, editing files, various data, etc. via an adapter. The access to the external memory 211 such as a compact flash (registered trademark) memory is controlled.

  A communication I / F (interface) controller 208 is connected to and communicates with an external device via a network (for example, the LAN 103 shown in FIG. 1), and executes communication control processing in the network. For example, communication using TCP / IP is possible.

  Note that the CPU 201 enables display on the display device 210 by executing outline font rasterization processing on a display information area in the RAM 202, for example. Further, the CPU 201 enables a user instruction with a mouse cursor (not shown) on the display device 210.

The processing of each step shown in the flowchart to be described later for realizing the present invention is executed by a program that can be read and executed by a computer, and the program is recorded in the external memory 211. Then, it is executed by the CPU 201 by being loaded into the RAM 202 as necessary. Furthermore, a definition file and various information tables used when executing the program are also stored in the external memory 211, and a detailed description thereof will be described later.
With reference to FIG. 3, the hardware configuration of the multifunction peripheral 101 of FIG. 1 will be described. FIG. 3 is a block diagram illustrating an example of a hardware configuration of the multifunction peripheral 101 of FIG.

  In FIG. 3, reference numeral 316 denotes a controller unit which is connected to a scanner 314 functioning as an image input device and a printer unit 312 functioning as an image output device, while being connected to a LAN (for example, the LAN 103 shown in FIG. 1) or a public line (WAN). ) (For example, PSTN or ISDN) to input / output image data and device information.

  In the controller unit 316, reference numeral 301 denotes a CPU, which is a processor that controls the entire system. A RAM 302 is a system work memory for the CPU 301 to operate, and is also a program memory for recording a program and an image memory for temporarily recording image data.

  A ROM 303 stores a system boot program and various control programs. A hard disk drive (HDD) 304 stores various programs for controlling the system, image data, and the like. The print data with security settings received from the information processing apparatus 102 is also stored in the HDD 304.

  An operation unit interface (operation unit I / F) 307 is an interface unit with the operation unit 308. Further, the operation unit I / F 307 serves to transmit the key information (for example, pressing of the start button) input from the operation unit 308 to the CPU 301.

  A network interface (network I / F) 305 is connected to a network such as the LAN 103 and inputs / outputs data. A modem 306 is connected to a public line and inputs / outputs data such as FAX transmission / reception.

  Reference numeral 318 denotes an external interface (external I / F), which is an I / F unit that accepts external inputs such as USB, IEEE 1394, printer port, RS-232C, and the like, and is required when performing user authentication in this embodiment. A card reader 319 for reading a non-contact IC card (storage medium) is connected to the external I / F unit 318. The CPU 301 can control reading of information from the IC card by the card reader 319 via the external I / F 318, and can acquire information read from the IC card. The above devices are arranged on the system bus 309.

  An image bus interface (image bus I / F) 320 connects the system bus 309 and an image bus 315 that transfers image data at high speed, and is a bus bridge that converts a data structure. The image bus 315 is configured by a PCI bus or IEEE1394. The following devices are arranged on the image bus 315.

  A raster image processor (RIP) 310 develops vector data such as a PDL code into a bitmap image. A printer interface (printer I / F) 311 connects the printer 312 and the controller unit 316, and performs synchronous / asynchronous conversion of image data. A scanner interface (scanner I / F) 313 connects the scanner 314 and the controller unit 316 and performs synchronous / asynchronous conversion of image data.

  An image processing unit 317 corrects, processes, and edits input image data, and performs printer correction, resolution conversion, and the like on print output image data. In addition to this, the image processing unit 317 performs image data rotation and compression / decompression processing such as JPEG for multi-valued image data and JBIG, MMR, MH for binary image data. Then, the image processing unit 317 drives the scanner 314 to perform image processing on the image data that has been read, converts the image data into a file outputable format (for example, a PDF format file), and cooperates with the CPU 301 to perform network processing. A file of image data can be transmitted to an external device via the I / F 305.

  The scanner 314 illuminates an image on paper as a document and scans it with a CCD line sensor, thereby converting it into an electrical signal as raster image data. The original paper is set on the tray of the original feeder, and when the apparatus user gives a reading start instruction from the operation unit 308, the CPU 301 gives an instruction to the scanner 314, and the feeder feeds the original paper one by one to read the original image. I do.

  The printer 312 is a part that converts raster image data into an image on paper. The method is an electrophotographic method using a photosensitive drum or a photosensitive belt, and an image is directly printed on paper by ejecting ink from a minute nozzle array. There are inkjet methods for printing, but any method may be used. The activation of the printing operation is started by an instruction from the CPU 301. The printer 312 has a plurality of paper feed stages so that different paper sizes or different paper orientations can be selected, and has a paper cassette corresponding thereto.

  The operation unit 308 has an LCD display unit, and a touch panel sheet is pasted on the LCD. The operation unit 308 displays an operation screen of the system. When a displayed key is pressed, the position information is displayed on the operation unit I / F 307. To the CPU 301 via The operation unit 308 includes, for example, a start key, a stop key, an ID key, a reset key, and the like as various operation keys.

  Here, the start key of the operation unit 308 is used when starting a document image reading operation. At the center of the start key, there are two color LEDs, green and red, which indicate whether or not the start key can be used. Further, the stop key of the operation unit 308 functions to stop the operation in operation. The ID key of the operation unit 308 is used when inputting the user ID of the user or manually performing logout processing of the user. The reset key is used when initializing settings from the operation unit.

  The card reader 319 reads information stored in the non-contact IC card under the control of the CPU 301 and notifies the CPU 301 of the read information via the external I / F 318.

  With the configuration described above, the multi-function peripheral 101 can transmit the image data read from the scanner 314 to the LAN 103, and print out the print data received from the LAN 103 with the printer 312.

Also, the image data read from the scanner 314 can be faxed to the public line by the modem 306, and the image data received by fax from the public line can be printed out by the printer 312.
The above is an example of the hardware configuration of the multifunction machine 101.

Here, the outline of the authentication information registration process performed in the present invention will be briefly described. In the present invention, authentication information is registered in the following procedure. The authentication information is data in which information (user name or the like) for specifying a user is associated with an IC card identification information (IC card information) employee number held by the user.
(Step 1: Send user information to the MFP)

First, input of user information including a user name and a password is received by an information processing apparatus normally used by the user. This user information is data used as information for identifying a user when creating authentication information used for using the multifunction machine 101. The information processing apparatus 102 requests the multifunction peripheral 101 to register the user information with the multifunction peripheral. Upon receiving the user information registration request from the information processing apparatus 102, the multifunction machine 101 stores the user information in the HDD 304.
(Step 2: Input user information)

After that, when the MFP 101 receives an authentication information registration request input according to a user operation on the operation unit 308, the MFP 101 displays a user information display screen on the LCD display unit of the operation unit 308, and inputs user information via the screen. Accept.
(Step 3: IC card information registration completed)

If the multifunction peripheral 101 determines that the user information that has been accepted is already stored in the HDD 304, then the IC card information is accepted. After accepting the input of the IC card, authentication information in which the user information and the IC card are associated is registered in the HDD 304.
In the present invention, print data is printed according to the following procedure.
(Step 4: Print request)

  When the information processing apparatus 102 receives a print instruction for document data, print data is generated using a printer driver corresponding to the multifunction peripheral designated as the multifunction peripheral that performs print output, and the data is transmitted to the designated multifunction peripheral 101. Send.

Upon receiving the print data transmitted from the information processing apparatus 102, the multi-function peripheral 101 stores the print data in the HDD 304 without immediately performing print processing. Then, bibliographic information used for specifying the print data is generated using various information acquired from the print data, and stored in the HDD 304.
In order to print the print data stored in the HDD 304 of the multifunction machine 101, the user must give a print data print instruction from the multifunction machine.
(Step 5: Authentication with IC card)

At that time, the multi-function peripheral 101 acquires the card information of the IC card held by the user and compares it with the authentication information to perform the user authentication process. Then, bibliographic information corresponding to the logged-in user authenticated by the authentication process is displayed on the LCD display unit of the operation unit 308, and designation of print data to be printed is accepted. Thereafter, when a print instruction is input, the print data Is acquired from the HDD 304 and print processing is performed.
The MFP 101 and the information processing apparatus 102 according to the present invention have the functional configuration shown in FIG. 4 in order to perform such authentication information registration processing, printing processing, and the like.
With reference to FIG. 4, an example of a functional configuration of the multifunction machine 101 and the information processing apparatus 102 will be described.

  As shown in FIG. 4, the multifunction machine 101 includes, as function units, a user information registration request receiving unit 401, a user information storage unit 402, an authentication information registration process execution unit 404, an authentication information storage unit 406, a print data receiving unit 407, and print data. A storage unit 408, a bibliographic information creation unit 409, a bibliographic information storage unit 410, a login processing unit 411, a bibliographic information acquisition unit 412, a bibliographic information designation reception unit 413, a print data acquisition unit 414, and a print processing acquisition unit 415 are provided.

  The information processing apparatus 102 also includes a multi-function peripheral information acquisition unit 421, a user information input reception unit 422, a user information registration request unit 423, a print data creation unit 426, and a print data transmission unit 427.

  The user information registration request receiving unit 401 is a functional unit that receives user information registration request data transmitted by the user information registration request unit 423 of the information processing apparatus 102. The user information storage unit 402 is a storage unit that stores user information included in the user information registration request data received by the user information registration request receiving unit 401. User information is stored and managed in a user management table 2000 (FIG. 17) described later.

  The authentication information registration process execution unit 404 is a functional unit that executes an authentication information registration process (FIG. 8) described later. The authentication information storage unit 405 is a storage unit that stores authentication information that is associated with user information and IC card information and that is used for authentication processing of a user who uses the multifunction machine 101. Authentication information is stored and managed in an authentication management table 2100 described later.

  The print data reception unit 407 is a functional unit that receives print data transmitted by the print data transmission unit 427 of the information processing apparatus 102. The print data storage unit 408 is a functional unit that stores the print data received by the print data receiving unit 407.

  The bibliographic information creation unit 409 is a functional unit that creates bibliographic information including various information (user name, print data name, etc.) acquired from the print data received by the print data reception unit 407. The bibliographic information storage unit 410 is a storage unit that stores the bibliographic information created by the bibliographic information creation unit 409. Bibliographic information is stored and managed in a bibliographic information management table 2200 (FIG. 19) described later.

  The login processing unit 411 acquires the IC card information of the IC card owned by the user via the card reader 319, and among the authentication information managed by the authentication management table 2100, the authentication in which the IC card information is registered. It is a functional unit that detects information and identifies a user indicated by the authentication information, thereby authenticating a user who uses the multifunction machine 101.

  The bibliographic information acquisition unit 412 is an acquisition unit that acquires bibliographic information corresponding to the login user authenticated by the login processing unit 411 from the bibliographic information management table 2200. The bibliographic information designation receiving unit 413 displays the bibliographic information acquired by the bibliographic information acquisition unit 412 so as to be selectable on the LCD display unit of the operation unit 308, and specifies bibliographic information input according to an operation instruction by the user to the operation unit 308. It is a functional unit that accepts instructions.

  The print data acquisition unit 414 is an acquisition unit that acquires print data corresponding to the bibliographic information received by the bibliographic information designation receiving unit 413 from the HDD 304. The print processing unit 415 is a functional unit that performs print processing of the print data acquired by the print data acquisition unit 414.

  The multifunction device information acquisition unit 421 uses the setting information of the driver software such as a printer driver stored in the external memory 211, and information on the multifunction device 101 in which the driver software such as the printer driver is installed in the information processing apparatus. (Driver acquisition means).

  The user information input receiving unit 422 is a receiving unit that receives input of user information. The user information registration request unit 423 is a functional unit that transmits user information registration request data to the designated multifunction peripheral 101 in order to make a registration request for the user information received by the user information input reception unit 422. .

The print data creation unit 426 is a functional unit that creates print data for printing out document data created by an application program from the multifunction peripheral 101 using a printer driver. The print data transmission unit 427 is a functional unit that transmits the print data created by the print data creation unit 426 to the designated multifunction peripheral 101.
The above is the description of the functional configurations of the multifunction machine 101 and the information processing apparatus 102.

Hereinafter, a first embodiment of the present invention will be described. Different user names are set for each user who uses the information processing apparatus, and the information is managed by authentication data for each information processing apparatus (not shown). When the user uses the information processing apparatus 102, authentication processing using a user name is performed. By doing so, the information processing apparatus can authenticate each user by the user name.
Details of the information change request process performed by the CPU 201 of the information processing apparatus 102 will be described with reference to FIG.

The information processing apparatus 102 receives input of user information (yamada 1234) via a login screen of the information processing apparatus (not shown) (first user information receiving means).
The information processing apparatus 102 determines whether the user information received by the first user information receiving means can log in to the information processing apparatus (login determination means).

  If it is determined that login is possible, the processing after step S501 is enabled. If it is determined that login is not possible, the processing after step S501 cannot be performed.

In this embodiment, since a different user name is set for each user, the information processing apparatus 102 can first authenticate the user using the user name. (Primary authentication)

When the CPU 201 of the information processing apparatus 102 receives an instruction to start an information change request process input according to a user's operation using the input device 209, the CPU 201 displays the menu screen 1400 shown in FIG. 12 on the display device 210 (step S501). . Then, an operation instruction input via the menu screen 1400 is accepted.
With reference to FIG. 12, a configuration of menu screen 1400 displayed on display device 210 of information processing apparatus 102 will be described.

  As shown in FIG. 12, the menu screen 1400 includes a user information registration button 1401, a user information / authentication information deletion button 1402, an end button 1403, and the like.

A user information registration button 1401 is a button used to input, to the CPU 201 of the information processing apparatus 102, an instruction to start user information registration request processing that requests the multifunction peripheral 101 to perform user information registration processing. An end button 1403 is a button used to input an instruction to end processing via the menu screen 1400 to the CPU 201.
The above is an example of the configuration of the menu screen 1400.

  Returning to the description of FIG. After displaying the menu screen 1400 on the display device 210 in step S501, the CPU 201 accepts various instructions via the menu screen 1400.

  If it is determined that the user information registration button 1401 has been pressed (YES in step S502), the CPU 201 advances the process to step S503, and performs a user information registration request process. Details of this processing will be described with reference to FIG.

  If the CPU 201 determines that the end button 1403 has been pressed (YES in step S506) (YES in step S506), the CPU 201 ends the process shown in FIG. The above is the description of the information change request process.

  With reference to FIG. 6, the user information registration request process in step S503 in FIG. 5 will be described in detail. The user information registration request process is a process performed by the CPU 201 of the information processing apparatus 102.

  First, the CPU 201 of the information processing apparatus 102 acquires the user name of the user who has logged in to the information processing apparatus 102 (the login user ID of the information processing apparatus 102) (step S601). Thereafter, information of the multifunction peripheral 101 in which the printer driver is installed in the information processing apparatus 102 is acquired (step S602). For example, information of the multifunction peripheral 101 in which the printer driver is installed is acquired from a registry that is an internal database stored in the external memory 211 and temporarily stored in the multifunction peripheral information management table 1900 shown in FIG.

  With reference to FIG. 16, the data configuration of the MFP information management table 1900 that is temporarily stored in the RAM 202 (or the external memory 211) of the information processing apparatus 102 will be described.

  As shown in FIG. 16, the multifunction device information management table 1900 includes data items such as a printer name 1901, an installation location 1902, a model 1903, and an IP address 1904.

A printer name 1901 is a data item in which the name (printer name) of the multifunction machine 101 is registered. The printer name can be arbitrarily set by the user. The installation location 1902 is a data item in which installation location information indicating the location where the multifunction peripheral 101 is installed is registered. The installation location information is information arbitrarily set by the user and may not be set. A model 1903 is a data item in which the model name of the multifunction machine 101 is registered. An IP address 1904 is a data item in which the IP address of the multifunction device is registered. Note that the IP address set in the multifunction device can be acquired from port information or the like associated with the multifunction device 101.
The above is an example of the data configuration of the MFP information management table 1900.

  Returning to the description of FIG. In step S602, after acquiring information of the multifunction peripheral in which the printer driver is installed, the CPU 201 of the information processing apparatus 102 acquires a department name list file stored in the HDD 304 (step S603). Then, a user information registration request screen 1500 including various information acquired in steps S601 to S603 is displayed on the display device 210 (step S604).

  An example of the configuration of the user information registration request screen 1500 will be described with reference to FIG. As shown in FIG. 15, the user information registration request screen 1500 includes a user name display unit 1501, a password input unit 1502, a password (confirmation) input unit 1503, a unit name selection unit 1504, a multifunction device list display unit 1505, and a processing result display unit. 1506, a registration button 1507, a cancel button 1508, and the like.

  The user name display unit 1501 is a display unit that displays the user name of the logged-in user of the information processing apparatus 102, and displays the user name (yamada 1234) acquired in step S601 in FIG. Here, the acquired user ID (yamada1234) is automatically displayed.

  The password input unit 1502 is an input unit that receives an input of a password to be used when newly registering authentication information in the multifunction machine 101. The password (confirmation) input unit 1503 is an input unit that receives a confirmation input of the password input to the password input unit 1502. Note that the password input unit 1502 and the password (confirmation) input unit 1503 do not display the input characters but display, for example, “*” so that the input contents cannot be recognized. Do.

  The department name selection unit 1504 is a selection part that accepts selection of a department name to which the login user belongs. In the department selection section 1504, the department names set in the department list file acquired in step S603 of FIG. 6 are set to be selectable, and the selection of the department to which the user belongs is received.

  A multifunction device list display unit 1505 is a display unit that displays a list of multifunction devices 101 in which a printer driver is installed in the information processing apparatus 102. Information on the multifunction peripheral acquired in step S602 in FIG. 6 is displayed.

  Also, a check box 1505-1 is set in the MFP list display unit 1505, and this check box is input to the MFP 101 in a selected state (“■” in the figure) via this screen. The CPU 201 of the information processing apparatus 102 makes a user information registration request to the multi-function peripheral 101 by transmitting user information registration request data created using the various types of information.

The result display unit 1506 is a display unit that displays a processing result of a user information registration process performed by the CPU 301 of the multifunction machine 101 after making a user information registration request to the multifunction machine 101. When a user information registration request is made for a plurality of multifunction devices 101, the processing result of the user information registration process performed by each multifunction device 101 is displayed. The information displayed on the result display unit 1506 allows the user to confirm whether the user information registration process has succeeded or failed.
A registration button 1507 is a button used to input a user information registration request execution instruction to the CPU 201 of the information processing apparatus 102.

  A cancel button 1508 is a button used to end the display of the user information registration request screen 1500. The above is an example of the configuration of the user information registration request screen 1500.

Returning to the description of FIG. In step S604, after the user information registration request screen 1500 is displayed on the display device 210, input of a password (including confirmation input), selection of a department name, and designation of a multifunction device for requesting user information registration are performed via the screen. Is accepted (step S605, step S606, step S607).
If the CPU 201 of the information processing apparatus 102 determines that the cancel button 1508 has been pressed (YES in step S608), the process shown in FIG.

  When the CPU 201 of the information processing apparatus 102 determines that the registration button 1507 has been pressed after accepting the input of the password, the selection of the department name, and the designation of the multifunction machine 101 that makes the user information registration request (YES in step S609). The process proceeds to step S610, and it is determined whether the password received in step S605 matches the password confirmation input (step S610).

  If the CPU 201 of the information processing apparatus 102 determines that they do not match (NO) in the determination process of step S610, the process proceeds to step S611, and an error display indicating that the input password and the password confirmation input do not match is displayed. The process is performed on the display device 210, and then the process returns to step S605.

  On the other hand, if it is determined in the determination process in step S610 that the password and the password confirmation input match (YES), the CPU 201 of the information processing apparatus 102 advances the process to step S612 to select the user name and password. The user information registration request data is created using the department or the like, and the created user information registration request data is transmitted to the multifunction peripheral 101 that has received the designation in step S607. If designation of a plurality of multifunction devices 101 is accepted in step S607, user information registration request data is transmitted to all the multifunction devices 101.

The information processing apparatus 102 uses the user information determined to be able to log in to the information processing apparatus by the login determination unit as the user (yamada 1234) who can register an IC card registered as authentication data of the image forming apparatus 101. 101 (user information transmission means).
Thereafter, the CPU 301 of the multifunction machine 101 performs user information registration processing (step S621). This user information registration process will be described with reference to FIG.
A user information registration process performed by the CPU 301 of the multifunction machine 101 will be described with reference to FIG.

When the CPU 301 of the multifunction peripheral 101 receives the user information registration request data transmitted from the client device 102 (step S701), the user information in which the same user name as the user name included in the received user information registration request data is registered. Is registered in the user management table 2000 stored in the HDD 304 (step S702).
An example of the data configuration of the user management table 2000 stored in the HDD 304 of the multifunction machine 101 will be described with reference to FIG.

  As shown in FIG. 17, the user management table 2000 includes data items such as a user name 2001, a password 2002, a department 2003, registration dates 2004, 2005, and the like.

  A user name 2001, a password 2002, and a department 2003 are data items in which the user name, password, and department included in the user information registration request data received from the information processing apparatus 102 are registered.

  Registration date and time 2004 is a data item in which the date and time information when user information is registered is registered. The deletion flag 2005 is a data item in which information indicating whether a deletion instruction for user information is accepted (TRUE) or not (FALSE) is registered. Data whose data item is TRUE is regarded as invalidated (ie invalid) data.

Note that the row of the user information in which the deletion flag 2005 is TRUE is deleted from the user management table 2000 at a predetermined timing. In addition, user information that has passed a certain time from the date and time indicated by the date and time information registered in the registration date and time 2004 is also deleted in the same manner. By doing in this way, it is prevented suitably that the user information invalidated in the user management table 2000 and the user information which is not used continue registering.
The above is an example of the data configuration of the user management table 2000.

  Returning to the description of FIG. If it is determined NO in the determination process in step S702, the CPU 301 of the multifunction machine 101 adds a new record to the user management table 2000 (step S703), and the user name 2001, password 2002, and department 2003 of the added record. Then, the user name, password, and department included in the password registration request information received in step S701 are registered (step S704). In addition, date / time information indicating the date / time when the record (user information) was added is registered in the registration date / time 2004, and FALSE is registered in the deletion flag 2005.

  In step S704, the multifunction machine 101 registers the user information (user name 2001 and password 2002) transmitted by the user information transmission unit in the user management table 2000 (user data registration unit).

  On the other hand, if it is determined YES in the determination process in step S <b> 702, the CPU 301 of the multifunction peripheral 101 has registered the same user name as the user name included in the user information registration request data received from the information processing apparatus 102. A record for managing user information is specified as a record to be overwritten with various information included in the received user information registration request data (step S705). Then, the user name, password, and department included in the user information registration request data received in step S701 are registered in the specified record (step S706). Also, the registration date 2004 is changed to date information indicating the date when the user information was overwritten and registered, and FALSE is registered in the deletion flag.

  In step S706, the multi-function peripheral 101 registers the user information (user name 2001 and password 2002) transmitted by the user information transmission unit in the user management table 2000 (user data registration unit).

  In the above description, the user information is overwritten and registered in the existing record when it is determined YES in the determination process in step S702. However, the present invention is not limited to this, and the deletion flag 2005 of the record in which the same user name is registered. Set to TRUE, the record is invalidated, a record is newly added to the user management table 2000, and various information included in the user information registration request data received in step S701 is registered in the added record. Of course, it is possible.

  Even if there is user information in which the same user name as the user name included in the user information registration request data received in step S701 is registered, if the deletion flag 2005 of all the user information is TRUE, The CPU 301 of the multifunction machine 101 determines NO in the determination process of step S702.

When the process of step S704 or step S706 ends, the CPU 301 of the multifunction machine 101 advances the process to step S707, and transmits the user information registration process result to the information processing apparatus 102 that has transmitted the user information registration request data.
The above is the description of the user information registration process.

Returning to the description of FIG. When the CPU 201 of the information processing apparatus 102 receives the processing result of the user information registration processing transmitted from the multifunction peripheral 101 (step S613), the processing result of the user information registration request screen 1500 displayed on the display device 210 is displayed. The result is displayed on the result display unit 1506 (step S614). If designation of a plurality of multifunction devices 101 is accepted in step S607, the processing results transmitted from all the multifunction devices 101 are displayed.
The above is the detailed description of the user information registration request process.
The authentication information registration process performed by the CPU 301 of the multifunction machine 101 will be described with reference to FIG.

  First, when the CPU 301 of the multifunction peripheral 101 accepts a registration request for authentication information input in accordance with an operation instruction from the user to the operation unit 308 in a step (not shown), the user confirmation shown in FIG. A screen 1700 is displayed (step S801).

  An example of the configuration of the user confirmation screen 1700 will be described with reference to FIG. As shown in FIG. 14, the user confirmation screen 1700 includes a user name input unit 1701, a password input unit 1702, an OK button 1703, a cancel button 1704, and the like.

  A user name input unit 1701 is an input unit that receives an input of a user name. When the user name input unit 1701 is pressed, the CPU 301 of the multifunction machine 101 displays a software keyboard (not shown) on the LCD display unit, and accepts a user name input in accordance with an operation instruction for the software keyboard by the user. The user name that accepted the input is displayed in the user name input unit 1701.

  The password input unit 1702 is a reception unit that accepts input of a password. When the password input unit 1702 is pressed, the CPU 301 of the multifunction machine 101 displays a software keyboard (not shown) on the LCD display unit, and accepts a password that is input in accordance with an operation instruction for the software keyboard by the user. In order not to know the input password, it is displayed on the password input unit 1702 in a form converted to “*”, for example.

An OK button 1703 is a button used to confirm the user name and password input in the user name input field 1701 and the password input field 1702. A cancel button 1704 is a button used to end the process via this screen.
The above is an example of the configuration of the user confirmation screen 1700.

Returning to the description of FIG. After displaying the user confirmation screen 1700 on the LCD display unit in step S801, the CPU 301 of the multi-function peripheral 101 accepts input of a user name and password via the user confirmation screen 1700 (step S802).
The multifunction machine 101 accepts input of user information (user name and password) (second user information accepting means).

  If the CPU 301 of the multi-function peripheral 101 determines that the cancel button 1704 in the user confirmation screen 1700 has been pressed (YES in step S1003), the process illustrated in FIG.

  If it is determined that the OK button has been pressed after accepting the user name and password input to the user name input unit 1701 and the password input unit 1702 (YES in step S804), the CPU 301 of the multifunction peripheral 101 proceeds to step S805. The user name (yamada 1234) input to the user name input unit 1701 and the password input to the password input unit 1702 are acquired.

Thereafter, the CPU 301 of the multi-function peripheral 101 determines whether the combination of the user name and password acquired in step S805 has already been registered in the user management table 2000 by the user information registration process of FIG. 7 (step S806).
The MFP 101 determines whether the user information received by the second user information receiving unit is stored in the user management table 2000 (user determination unit).

Therefore, only the user who is determined to be stored (YES) by the user determination means, the first card information reading means reads the card identification number and the issuance information in step S812 to register the IC card.
The multifunction machine 101 can also authenticate a user using a user name. (Secondary authentication)
If it is determined NO in this determination process, the process proceeds to step S807, and after displaying an error on the LCD display unit, the process returns to step S802.

  On the other hand, if it is determined as YES (Yes) in the determination process in step S806, the CPU 301 of the multi-function peripheral 101 advances the process to step S808, and information on the user having the combination of the user name and password is stored in the user management table 2000. (Yamada1234) is acquired.

  The determination in step S806 is a user ID for logging in to the personal information processing apparatus 102 as to whether or not the user can register an IC card (information indicating that the user has logged in to the personal information processing apparatus 102). This is to allow only authorized users (YES) to register authentication information from the IC card in S809. First, other than the true owner of the authentication card The user can be prevented from registering the IC card, and security is improved.

  Thereafter, in step S809, the user is notified to hold the IC card held by the user over the card reader 319. For example, a display screen as shown in FIG. 20 is displayed on the LCD display unit, and the user is notified. Thereafter, the IC card is detected.

  If the CPU 301 of the multifunction peripheral 101 determines that the cancel button set in the display screen of FIG. 20 is pressed before the IC card is held over the card reader 319 (YES in step S810), the message display screen is displayed. And the process shown in FIG. If NO in step S810, the process proceeds to S811.

  When the CPU 301 of the multi-function peripheral 101 detects that the IC card is held over the card reader 319 while the display screen of FIG. 20 is being displayed (YES in step S811), the IC held over the card reader 319. Various information held in the card is acquired via the card reader 319 (step S812). At this time, card information (employee number) 2501, number of times of issue 2502, and information for registration in the authentication management table are acquired from the IC card.

  From the card information recorded on the IC card, the card identification number 2501 and the issue information 2502 which is information on reissuance of the IC card having the duplicate card identification number are read (first card information reading means).

Thereafter, authentication management table change processing is performed (step S813). Details of this processing will be described with reference to FIG. After completion of the authentication management table change process, the CPU 301 of the multifunction machine 101 displays the result of the authentication management table change process (FIG. 21) on the LCD display unit (step S814).
Here, a display screen as shown in FIG. 21 is displayed on the LCD display unit.
2401 is card information (employee number) newly registered in the authentication management table.
Reference numeral 2402 denotes the number of issuances (newest information) newly registered in the authentication management table.
The above is the description of the authentication information registration process.

  Details of the authentication management table change processing in step S813 in FIG. 8 will be described with reference to FIG. This process is a process performed by the CPU 301 of the multifunction machine 103.

First, the CPU 301 of the MFP 101 determines whether authentication information in which the same user name as the user name received in step S802 of FIG. 8 is registered is stored in the authentication management table 2100 illustrated in FIG. (Step S901).
A data configuration of the authentication management table 2100 stored in the HDD 304 of the multifunction machine 101 will be described with reference to FIG.
The multi-function peripheral 101 stores authentication data for authentication based on card information recorded on the IC card in the authentication management table 2100 (authentication data storage means).

  As shown in FIG. 18, the authentication management table 2100 includes data items such as a user name 2101, password 2102, department name 2103, IC card information 2104, registration date 2105, last use date 2106, and deletion flag 2107. Yes.

  A user name 2101 is a data item in which a user name is stored. The password 2102 is a data item in which a password is stored. Using these two pieces of information, the login process of the user who uses the multifunction machine 101 can be performed.

  The department name 2103 is a data item in which the department name to which the user managed by the record belongs is registered. The IC card information 2104 is a data item in which IC card information for specifying the IC card used by the user specified by the user name registered in the user name 2101 is registered. The CPU 301 of the multifunction machine 101 normally performs a user login process using this IC card information.

  The registration date 2105 is a data item in which date and time information indicating the date and time when the record is registered is registered. The last use date and time 2106 is a data item in which the latest date and time information when the user who uses the multi-function peripheral 101 is authenticated by the information registered in the record is registered. The deletion flag 2107 is a data item in which information indicating whether a deletion instruction for the record is accepted (TRUE) or not (FALSE) is registered. Data whose data item is TRUE is regarded as invalidated data.

Note that the authentication information of the row in which the deletion flag 2107 is TRUE is deleted from the authentication management table 2100 at a predetermined timing (for example, when the validity period 2403 has elapsed since registration). In addition, authentication information that has passed for a certain period from the date and time indicated by the date and time information registered in the last use date and time 2106 is deleted in the same manner. By doing so, it is suitably prevented that user information invalidated in the authentication management table 2100 and authentication information that has not been used for a certain period of time are continuously registered.
The above is the description of the data configuration of the authentication management table 2100.

  Returning to the description of FIG. If it is determined in step S901 that authentication information in which the same user name is registered is stored in the authentication management table 2100 (YES), the CPU 301 of the multifunction machine 101 advances the process to step S902. The deletion flag 2107 of the authentication information in which the same user name is registered is set to TRUE.

  If NO is determined in the determination process of step S901, or after the process of step S902 ends, the CPU 301 of the multifunction machine 101 advances the process to step S903, which is the same as the IC card information acquired in step S812 of FIG. It is determined whether the authentication information registered in the IC card information 2104 is stored in the authentication management table 2100.

  If it is determined YES in the determination process of step S903, the CPU 301 of the multifunction peripheral 101 advances the process to step S904, and the IC card information identical to the IC card information acquired in step S812 of FIG. The deletion flag 2107 of the registered authentication information is set to TRUE.

  If NO is determined in the determination process of step S903, or after the process of step S904 is completed, the CPU 301 of the multi-function peripheral 101 advances the process to step S905, adds a new record to the authentication management table 2100, and then adds the added record. The authentication information is registered in (Step S906). At this time, the CPU 301 is registered in the user name 2101, password 2002, and department name 2003 of the user information acquired in step S 808 of FIG. 8, respectively, in the user name 2101, password 2102, and department name 2103 of the record (authentication information). That information is registered.

In the authentication management table 2100, the card identification number 2104 and the issue information 2108 read by the first card information reading means are used to authenticate the user desired IC card from among the IC cards having the duplicate card identification numbers. The authentication data is uniquely associated and registered (issue information registration means).
In the IC card information 2104, the card information (employee number) acquired in step S812 in FIG. 8 is registered as valid authentication information.

  In the reissue number 2108, the issue number acquired in step S812 in FIG. 8 is registered as valid authentication information. In addition to the consecutive number (1, 2, 3, 4), the number of reissues is the latest information on the authentication cards (first edition, lost) so that multiple reissued authentication cards can be classified so that they are not duplicated. , Seconded, reissued, joined, changed jobs) may be registered.

  Whether the issuance count 2502 is registered in step S906 is the same as the card registered in S1321 only in the issuance count (latest information) written only in the authentication card of the true owner registered here. The card information (employee number) is duplicated due to loss, preventing incorrect authentication due to multiple authentication cards (lost cards). Security is improved.

  Further, the CPU 301 of the multifunction peripheral 101 registers date information indicating the date and time when the authentication information is added on the registration date 2105, and FALSE indicating that the deletion instruction is not accepted in the deletion flag 2107. For the last use date 2106, no information may be registered, or the date information registered on the registration date 2105 may be registered.

Thereafter, the CPU 301 of the multi-function peripheral 101 determines whether or not new registration of authentication information in step S1106 has succeeded (step S907). If it is determined to have succeeded (YES), the process proceeds to step S908. The deletion flag 2005 of the user information acquired in step S808 of FIG. 8 is set to TRUE. If the registration of authentication information is successful, the user information is no longer necessary. Therefore, the corresponding user information may be deleted from the user information table immediately after the registration of authentication information is successful.
The above is the detailed description of the authentication management table change process.

  As described above, when registering authentication information, the user enters the user name displayed on the user name display unit 1501 of the user information registration request screen 1500 displayed on the display device of the information processing apparatus, and the password input unit 1502. It is possible to register authentication information by a very simple operation of inputting the password input to the user confirmation screen 1700 displayed on the LCD display unit of the multifunction peripheral 101 and then holding the IC card over the card reader. . As a result, even a user who does not have sufficient knowledge about the system can easily register the authentication information used in the login process (authentication process) when using the multifunction machine 101 in the multifunction machine 101. Become.

  Next, an outline of the printing process will be described. As already described, even when the multi-function peripheral 101 receives print data from the information processing apparatus 102, the multi-function peripheral 101 does not immediately print the print data, and the user information of the user who has issued a print instruction for the print data. And stored in a storage device such as the HDD 304 (corresponding to bibliographic information described later).

In order to execute the print data printing process, the user needs to go to the location of the multifunction peripheral and issue a print data print instruction. At that time, the CPU 301 of the multi-function peripheral 101 first performs user authentication processing for instructing printing of print data, and displays print data associated with the authenticated user on the LCD display unit of the operation unit 308 so as to be selectable. . When a print instruction for the selected print data is received after the selection of the print data is received, the printing process is started.
An outline of the printing process will be described with reference to FIGS.

  FIG. 10 is a flowchart showing print data creation / storage processing. In the figure, the processing from step S1201 to step S1205 is performed by the CPU 201 of the information processing apparatus 102. Further, the processes in steps S1211 to S1213 are performed by the CPU 301 of the multifunction machine 101.

  The CPU 201 of the information processing apparatus 102 edits document data according to control by the application program (step S1201). When a print instruction for the edited document data is received (YES in step S1202), a user interface (UI: not shown) of the printer driver is displayed on the display device 210, and designation of a multifunction device to perform print output or printing is performed. Input of print settings such as the number of copies, double-sided / single-sided printing, page layout, printing paper size, etc. is received (step S1203).

  Thereafter, when it is determined that the print execution button set in the UI of the printer driver is pressed, print data is created using the printer driver of the multifunction machine 101 designated as the multifunction machine that performs print output in step S1203 (step S1204). The created print data is transmitted to the multi-function peripheral 101 that has received the designation in step S1203 (step S1205). The print data includes the user name of the login user of the information processing apparatus 102, the document name of the document data (print job name), print setting information, and the like.

  When receiving the print data transmitted from the information processing apparatus 102, the CPU 301 of the multifunction machine 101 stores the print data in the HDD 304 (step S1211). Then, when the print data is created from the print data, the user name of the login user who used the information processing apparatus 102 that transmitted the print data, the print settings such as the print job name, the number of copies, etc. Obtain (step S1212).

After that, a new record is added to the bibliographic information management table 2200 shown in FIG. 19, and the user name, print job name, number of copies acquired in step S1212, path information for specifying the print data saved in step S1211, save date and time Information or the like is registered in the newly added record (step S1213).
The above is the description of the print data creation / storage process.

  An example of the data structure of the bibliographic information management table 2200 will be described with reference to FIG. As shown in FIG. 19, the bibliographic information management table 2200 includes data items such as a user name 2201, a print data name 2202, the number of copies 2203, a save date / time 2204, a file path 2205, and a print date / time 2206.

  A user name 2201 is a data item in which a user name of a user who has issued a print execution instruction for print data corresponding to the bibliographic information (a login user of the information processing apparatus 102) is registered. The user name of the user who has issued the print execution instruction is set in the print data received from the information processing apparatus 102, and the CPU 301 of the multifunction peripheral 101 acquires the information and sets the user name 2201.

  The print data name 2202 is a data item in which information indicating whether the print data corresponding to the bibliographic information has been created by receiving a print execution instruction for which document data is registered. Since the document name of the document data is set in the print data, the CPU 301 of the multifunction peripheral 101 acquires the information and sets it as the print data name 2202.

  The number of copies 2203 is a data item in which the number of copies of print data corresponding to the bibliographic information is registered. The storage date / time 2204 is a data item in which date / time information indicating the date / time when the print data managed by the bibliographic information is stored in the HDD 304 is registered. Note that date / time information indicating other date / time, such as date / time information indicating the date / time when the print data was created, may be registered.

A file path 2205 is a data item in which a file path of print data corresponding to the bibliographic information is registered. The multifunction peripheral 101 acquires print data corresponding to bibliographic information using information registered in the file path 2205 when printing the print data.
A print date / time 2206 is a data item in which date / time information indicating the date / time when the print data corresponding to the bibliographic information is printed is registered.

  Note that the data configuration shown in FIG. 19 is merely an example, and it is of course possible to include other data items or not include some data items.

Each bibliographic information managed by the bibliographic information management table 2200 is deleted when a certain time elapses after the print data corresponding to the bibliographic information is printed. At that time, the print data associated with the bibliographic information is also deleted. Such a method is employed in order to facilitate reprinting of printed print data. Further, even when a certain time has elapsed from the date and time indicated by the date and time information registered as the save date and time, the bibliographic information and the print data corresponding to the bibliographic information are deleted.
Note that when the printing execution of the printing data is normally completed, the printing data and the bibliographic information corresponding to the printing data may be immediately deleted.
The data structure of the bibliographic information management table 2200 has been described above.
A print execution process performed by the CPU 301 of the multifunction machine 101 will be described with reference to FIG.

When the CPU 301 of the multi-function peripheral 101 detects that an IC card is held over the card reader 319 (YES in step S1301), it acquires IC card information via the card reader 319 (step S1302).
The card identification number 2501 and the issue information 2502 are read from the card information recorded on the IC card (second card information reading means).

  In step S1320, it is determined whether or not the authentication management table 2100 has a card identification number 2502 (employee number) read by the second card information reading unit. If it is determined that there is (YES), the process proceeds to S1321. If not, the process returns to S1301 as authentication NG.

  In step S1321, whether or not the number of times of issue (issue information) uniquely associated with the card identification number 2502 (employee number) determined to be S1320 matches the issue information read by the second card information reading means. Judging. If it is determined that they match (YES), the process can proceed to S1303 as authentication OK. If they do not match, the process returns to S1301 as authentication NG.

  Here, the MFP 101 has an authentication management table that is uniquely registered in association with the issuance information 2502 read by the second card information reading means and the card identification number 2501 read by the second card information reading means. The IC card read by the second card information reading unit is authenticated (IC card authenticating unit).

  Here, if the registered number of times of issue (issue information) matches, it is determined as positive (authentication OK), and therefore the validity of the number of times of issue (whether the number of issues is the last) is not particularly considered. In other words, in order to increase the convenience of the true owner, the purpose is to simplify the registration of the latest card that the true owner has now without thinking. For example, when a lost card is found and returned to the true owner, the true owner can register a plurality of IC cards. In this case, the registration can be completed smoothly even if the number of issued cards is not the last card, and a plurality of cards cannot be registered at the same time. Only one card can be registered at any time.

  The use of the image forming apparatus is permitted according to the result of authentication by the IC card authenticating unit (when authentication is OK) (together with the permitting unit). Thereafter, using the IC card information acquired here and the authentication management table 2200, the user holding the IC card specified by the IC card information is specified (step S1303). When the user is identified in step S1303, the multifunction device 101 may permit the identified user to log in to the multifunction device 101.

  If the CPU 301 of the multi-function peripheral 101 determines in step S1303 that the user holding the IC card could not be specified (NO in step S1304), it displays a message to that effect on the LCD display unit, and this figure The processing shown in FIG.

  On the other hand, if it is determined in step S1303 that the user has been specified (YES in step S1304), login of the user is permitted, the process proceeds to step S1305, and the bibliographic information stored in the bibliographic information management table 2200 is stored. Among them, the bibliographic information in which the user name of the user specified in step S1303 is set in the user name 2201 is acquired (step S1305). Thereafter, it is determined whether or not the bibliographic information is acquired from the bibliographic information management table 2200 in step S1305 (step S1306).

  If it is determined in step S1306 that the bibliographic information has not been acquired (NO), the processing shown in FIG. Prior to the end of the processing, it is of course possible to warn the user that no printable data is stored in the multifunction device by displaying a warning on the LCD display unit.

  On the other hand, if it is determined in step S1306 that the bibliographic information has been acquired (YES), the process proceeds to step S1307, and the print execution instruction screen 1800 shown in FIG. 15 is displayed on the LCD display unit. A list of the bibliographic information acquired is displayed.

An example of the configuration of the print execution instruction screen 1800 will be described with reference to FIG. As shown in FIG. 15, the print execution instruction screen 1800 includes a login user name display unit 1801, a bibliographic information list display unit 1802, a print button 1803, and the like.
The login user name display unit 1801 is a display unit that displays a user name of a user who has logged in to the multifunction machine 101.

  The bibliographic information list display unit 1802 is a display unit that displays a list of bibliographic information corresponding to print data that can be printed by the login user. A check box 1802-1 is set in the bibliographic information list display unit 1802, and the CPU 301 of the multifunction peripheral 101 prints corresponding to the bibliographic information in which this check box is checked (“■” in the figure). Set the data as print data to be printed.

  In addition, the print data name 1802-2, the storage date and time 1802-3, the number of copies 1802-4, and the like are displayed on the bibliographic information list display unit 1802, so that the user can execute print data (correctly, the bibliography corresponding to the print data). Information) is easy to select.

A print button 1803 displays a print data print instruction corresponding to bibliographic information in a selected state (checkbox 1802-1 is checked) out of the bibliographic information displayed in the bibliographic information list display unit 1802. It is a button used for inputting to the CPU 301.
The above is the description of the configuration of the print execution instruction screen 1800.

  Returning to the description of FIG. In step S1807, the print execution instruction screen 1800 is displayed on the LCD display unit, and the bibliographic information corresponding to the login user is displayed on the bibliographic information list display unit 1802. Then, the bibliographic information corresponding to the print data to be printed is selected. Accept (step S1308).

  Thereafter, when a print execution instruction input by pressing the print button 1803 on the print execution instruction screen 1800 is received (YES in step S1309), the print data corresponding to the bibliographic information received in step S1308 is changed to the print data. The file path information set in the file path 2205 of the bibliographic information is acquired from the HDD 304 (step S1310), and the acquired print data is printed by the printer 312 (step S1311).

Thereafter, date / time information indicating the date / time when the print data corresponding to the bibliographic information is printed is registered in the print date / time 2206 of the bibliographic information selected in step S1308 (step S1312). Thereafter, the print log data is stored in the HDD 304 (step S1313). At this time, information such as the user name, the user's affiliation, the paper size, the number of printed pages, the color / monochrome setting, and the duplex / single-sided setting are registered in the print log data. Using this print log data, it is possible to perform usage of the multifunction device of each user, billing for use of the multifunction device to the department to which each user belongs, and the like.
The above is the description of the print execution process.

  In the invention according to the first embodiment, by configuring as described above, a user who creates authentication information sets a password to be input when registering authentication information in the information processing apparatus 102 used by the user. Then, after transmitting to the multifunction device 101, the user can input the user name and password and then register the authentication information by a simple operation of holding the IC card over the card reader. Accordingly, even a user who does not have knowledge about the system, such as a system administrator, can easily register authentication information, and the load on the system administrator related to the authentication information Dongguan can be reduced.

  In addition, the present invention can be implemented as, for example, a system, apparatus, method, program, storage medium, or the like. Specifically, the present invention may be applied to a system including a plurality of devices. You may apply to the apparatus which consists of one apparatus.

  Note that the present invention includes a software program that implements the functions of the above-described embodiments directly or remotely from a system or apparatus. The present invention also includes a case where the system or the computer of the apparatus is achieved by reading and executing the supplied program code.

  Accordingly, since the functions of the present invention are implemented by computer, the program code installed in the computer also implements the present invention. In other words, the present invention includes a computer program itself for realizing the functional processing of the present invention.

  In that case, as long as it has the function of a program, it may be in the form of object code, a program executed by an interpreter, script data supplied to the OS, and the like.

  Examples of the recording medium for supplying the program include a flexible disk, hard disk, optical disk, magneto-optical disk, MO, CD-ROM, CD-R, and CD-RW. There are also magnetic tape, nonvolatile memory card, ROM, DVD (DVD-ROM, DVD-R) and the like.

  As another program supply method, a browser on a client computer is used to connect to an Internet home page. The computer program itself of the present invention or a compressed file including an automatic installation function can be downloaded from the homepage by downloading it to a recording medium such as a hard disk.

  It can also be realized by dividing the program code constituting the program of the present invention into a plurality of files and downloading each file from a different homepage. That is, a WWW server that allows a plurality of users to download a program file for realizing the functional processing of the present invention on a computer is also included in the present invention.

  In addition, the program of the present invention is encrypted, stored in a storage medium such as a CD-ROM, distributed to users, and key information for decryption is downloaded from a homepage via the Internet to users who have cleared predetermined conditions. Let It is also possible to execute the encrypted program by using the downloaded key information and install the program on a computer.

  Further, the functions of the above-described embodiments are realized by the computer executing the read program. In addition, based on the instructions of the program, an OS or the like running on the computer performs part or all of the actual processing, and the functions of the above-described embodiments can also be realized by the processing.

  Further, the program read from the recording medium is written in a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer. Thereafter, the CPU of the function expansion board or function expansion unit performs part or all of the actual processing based on the instructions of the program, and the functions of the above-described embodiments are realized by the processing.

  The above-described embodiments are merely examples of implementation in carrying out the present invention, and the technical scope of the present invention should not be construed as being limited thereto. That is, the present invention can be implemented in various forms without departing from the technical idea or the main features thereof.

101 MFP (image forming device)
102 Information processing device (client terminal)
2000 User management table 2100 Authentication management table

Claims (6)

Authentication data storage means for storing authentication data for authentication using card information recorded in the IC card in the authentication management table;
A first card information reading means for reading, from card information recorded on the IC card, issue information that is information on re-issue of an IC card having a duplicate card identification number and card identification number;
In the authentication management table, the card identification number read by the first card information reading means and the issuance information are used to authenticate a user desired IC card from among IC cards having duplicate card identification numbers. Issuance information registration means for uniquely associating and registering as authentication data,
An image forming apparatus comprising: A second card information reading means for reading the card identification number and the issuance information from the card information recorded on the IC card;
Issuance information of the authentication management table registered in association with the issue information read by the second card information reading means and the card identification number read by the second card information reading means. IC card authentication means for authenticating the IC card read by the second card information reading means,
Permission means for permitting use of the image forming apparatus according to an authentication result by the IC card authentication means;
The image forming apparatus according to claim 1, further comprising: The image forming apparatus is an authentication system that is communicably connected to an information processing apparatus,
The information processing apparatus includes:
First user information accepting means for accepting input of user information;
Login determination means for determining whether the received user information can be logged into the information processing apparatus by first user information reception means;
User information that is transmitted to the image forming apparatus as a user who can register an IC card registered as the authentication data of the image forming apparatus with user information determined to be able to log in to the information processing apparatus by the login determination unit A transmission means;
The image forming apparatus includes:
User data registration means for registering the user information transmitted by the user information transmission means in a user management table;
Second user information receiving means for receiving input of user information;
User determining means for determining whether or not the user information received by the second user information receiving means is stored in the user management table;
Further comprising
The said 1st card information reading means reads the said card | curd identification number and the said issue information, when it determines with memorize | stored by the said user determination means, The Claim 1 or Claim 2 characterized by the above-mentioned. Authentication system. The information processing apparatus includes:
A driver acquisition unit that acquires a driver of the image forming apparatus installed in the information processing apparatus;
The authentication system according to claim 3, wherein the user information transmission unit transmits the driver to the acquired image forming apparatus. An image forming apparatus control method comprising authentication data storage means for storing authentication data for authentication using card information recorded in an IC card in an authentication management table,
The first card information reading means of the image forming apparatus obtains issue information that is information obtained by reissuing an IC card having a duplicate card identification number and card identification number from the card information recorded on the IC card. A first card information reading step for reading;
The issuance information registration unit of the image forming apparatus reads the first card information reading step in order to authenticate the user desired IC card from the IC cards having duplicate card identification numbers in the authentication management table. An issuance information registration step for registering the card identification number and the issuance information uniquely associated with the authentication data;
The control method characterized by including. A program that can be read and executed by an image forming apparatus including an authentication data storage unit that stores authentication data for authentication using card information recorded on an IC card in an authentication management table,
The image forming apparatus;
A first card information reading means for reading, from card information recorded on the IC card, issue information that is information on re-issue of an IC card having a duplicate card identification number and card identification number;
In the authentication management table, the card identification number read by the first card information reading means and the issuance information are used to authenticate a user desired IC card from among IC cards having duplicate card identification numbers. Issuance information registration means for uniquely associating and registering as authentication data,
A program characterized by making it function.

Images