JP2017220146A - Information processing apparatus, information processing program, and information processing system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an information processing apparatus, an information processing program, and an information processing system in which a user who has the authority to use an image forming apparatus provides the authority to use the image forming apparatus to a user who does not have the authority to use the image forming apparatus within a range of the authority to use the image forming apparatus provided to the user who has the authority to use the image forming apparatus.SOLUTION: An information processing apparatus 2 comprises: information acquisition means 202 that is connected to a management database 3 holding authority information 315 indicating a range of the authority of a first user to use an image forming apparatus 4 and identification information 322 for authenticating a second user who does not have the authority to use the image forming apparatus 4, and acquires the authority information 315 and the identification information 322; identification information receiving means 203 that receives the identification information 322 from the second user; and authority providing means 204 that authenticates the second user on the basis of the authority information 315 and the identification information 322, and provides the second user with the authority to use the image forming apparatus 4 within the range of the authority of the first user to use the image forming apparatus.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an information processing apparatus, an information processing program, and an information processing system.

  2. Description of the Related Art Conventionally, an information processing system has been proposed that allows a user who does not have an operation authority in advance to use a device (see, for example, Patent Document 1).

  The information processing system disclosed in Patent Literature 1 is based on different conditions depending on a combination of a receiving unit that receives a request that has one of a plurality of destinations as a destination and a request destination and a request source. When the granting of the operation authority of the device is permitted, the apparatus has a generation means for generating authority identification information for identifying the operation authority and a transmission means for transmitting the authority identification information to the transmission source of the request.

Japanese Patent Laying-Open No. 2015-022617

  An object of the present invention is to give a user who does not have the authority to use the image forming apparatus to the user who has the authority to use the image forming apparatus within the range of the authority that the user has. An object is to provide an information processing apparatus, an information processing program, and an information processing system.

  In order to achieve the above object, one embodiment of the present invention provides the following information processing apparatus, information processing program, and information processing system.

[1] Information for acquiring authority information indicating the range of the authority of use of the first user for the image forming apparatus and identification information for authenticating the second user who does not have the authority of use for the image forming apparatus. Acquisition means;
Identification information receiving means for receiving the identification information from the second user;
Based on the identification information received by the identification information receiving means and the authority information and the identification information acquired by the information acquisition means, the second user is authenticated, and the second user is authenticated with respect to the second user. An information processing apparatus comprising: authority granting means for granting use authority of the image forming apparatus within a range of use authority of the first user.
[2] Identification information generating means for generating the identification information;
An identification information transmitting means for transmitting the identification information generated by the identification information generating means to the second user,
The information acquisition means stores the identification information generated by the identification information generation means in a management database,
The information processing apparatus according to [1], wherein the identification information receiving unit receives the identification information input from the image forming apparatus by the second user who has received the identification information from the identification information transmission unit.
[3] The information according to [1] or [2], further including an authority request receiving unit that receives an authority request for requesting an authority to use the image forming apparatus from the second user. Processing equipment.
[4] The information processing apparatus according to [3], wherein the authorization request received by the authorization request receiving unit includes an e-mail address that identifies the first user.
[5] The identification information is predetermined between the first user and the second user,
The information acquisition means receives the identification information from the first user,
The information processing apparatus according to [1], wherein the identification information receiving unit receives the identification information input from the image forming apparatus by the second user.
[6]
Information acquisition means for acquiring authority information indicating a range of authority of use of the first user for the image forming apparatus and identification information for authenticating a second user who does not have the authority of use of the image forming apparatus; ,
Identification information receiving means for receiving the identification information from the second user;
Based on the identification information received by the identification information receiving means, the authority information and the identification information acquired by the information acquisition means, the second user is authenticated, and the second user is authenticated with respect to the second user. As an authority granting means for granting the use authority of the image forming apparatus within the range of the use authority of the first user,
Information processing program to function.
[7] The information processing apparatus according to any one of [1] to [5];
The first user terminal device connected to the information processing device via a network;
An image forming apparatus connected to the information processing apparatus via the network, the second user requesting grant of usage authority;
An information processing system having

According to the first, sixth, and seventh aspects of the present invention, the range of use authority of the first user who has use authority for the image forming apparatus with respect to the second user who does not have use authority for the image forming apparatus. The use authority for the image forming apparatus is given.
According to the second aspect of the invention, the identification information for authenticating the second user is generated in the information processing apparatus.
According to the third and fourth aspects of the present invention, the second user makes a use authority grant request for the image forming apparatus to the information processing apparatus. In particular, according to the fourth aspect of the present invention, since the use authority grant request includes the mail address of the first user, a specific first user related to the second user is selected from the beginning.
According to the invention according to claim 5, the identification information for authenticating the second user is determined in advance between the first user and the second user, and the identification information is generated by the information processing apparatus. There is no need to send to the second user.

FIG. 1 is a configuration diagram showing an outline of an information processing system according to the first embodiment of the present invention. FIG. 2 is a block diagram illustrating a configuration example of the information processing apparatus according to the first embodiment. FIG. 3 is a block diagram illustrating a configuration example of the management database. FIG. 4 is a block diagram illustrating a configuration example of the image forming apparatus. FIG. 5 is a sequence diagram illustrating an example of the operation of the information processing system according to the first embodiment. FIG. 6 is a diagram illustrating an example of a first user table held in the management database. FIG. 7 is a diagram illustrating an example of the second user table held in the management database. FIG. 8 is a flowchart illustrating an example of a processing flow of the information processing system according to the first embodiment. FIG. 9 is a block diagram showing a configuration example of an information processing apparatus according to the second embodiment of the present invention. FIG. 10 is a flowchart illustrating an example of a processing flow of the information processing system according to the second embodiment. FIG. 11 is a configuration diagram showing an outline of an information processing system according to the third embodiment of the present invention. FIG. 12 is a flowchart illustrating an example of a processing flow of the information processing system according to the third embodiment. FIG. 13 is a flowchart showing an example of the processing flow of the information processing system according to the fourth embodiment of the present invention.

[First Embodiment]
(Configuration of information processing system)
FIG. 1 is a configuration diagram showing an outline of an information processing system according to the first embodiment of the present invention.

  As an example of the present embodiment, an information processing system 1 includes an information processing apparatus 2, an image forming apparatus 4, and a first user terminal 5 operated by a first user who has usage authority for the image forming apparatus 4. Is connected to the network 6. The network 6 is also connected to a second user terminal 7 operated by a second user who does not have the authority to use the image forming apparatus 4. The information processing apparatus 2 is connected to the management database 3. Yes.

  An example of the information processing system 1 is a system configured by connecting devices in the head office of a company through a network. In this case, the first user is, for example, an employee working at the head office, and has usage authority for the equipment in the head office. The second user is, for example, an employee working at another branch office or sales office of the same company as the first user. Therefore, when the second user visits the head office, he / she has no authority to use the equipment in the head office. Therefore, the information processing system 1 will grant the use authority within the range of the use authority of the first user to the second user who requests the use authority to be given to the equipment in the company. It is what.

(Information processing device)
The detailed configuration of the information processing apparatus 2 will be described later. The information processing apparatus 2 is an information processing apparatus including a CPU (Central Processing Unit) having a function for processing information and an electronic component such as a storage unit. Composed. The information processing apparatus 2 connects to the management database 3 and plays the role of a server. For example, the information processing apparatus 2 confirms the range of the first user's usage authority for the image forming apparatus 4, performs user authentication for the second user, and notifies the image forming apparatus 4 whether the function is valid. It plays a role such as.

(Management database)
The management database 3 is composed of a recording medium such as an HDD (Hard Disk Drive) or a flash memory, and is a storage device that stores information. The management database 3 includes a first user table 31 (see FIG. 3 or FIG. 6) including authority information 315 indicating the range of the first user's authority to use the image forming apparatus 4 and user authentication for the second user. A second user table 32 (see FIG. 3 or FIG. 7) including identification information 322 and the like for performing is held. Information is read out by the information processing apparatus 2 from the first user table 31 and the second user table 32 of the management database 3, and the range of use authority of the first user and the authentication of the second user are performed. Done. When the information processing apparatus 2 authenticates the second user, the information processing apparatus 2 validates the function of the image forming apparatus 4 within the range of the usage authority granted to the second user. As a result, the second user can use the function of the image forming apparatus 4 within the range of the granted use authority.

(Image forming device)
The image forming apparatus 4 is preferably a so-called multi-function machine having a plurality of functions such as a scanner function and a facsimile function for optically scanning a paper surface in addition to a print function, but is particularly limited to the multi-function machine. It is not a thing. In the present embodiment, a second user who does not have the authority to use the image forming apparatus 4 is granted the use authority within the range of the first user's use authority by the information processing system 1, and the user authority The function of the image forming apparatus 4 is used within the range that has been given.

(User terminal)
The first user terminal 5 is a terminal used by a first user who has authority to use the image forming apparatus 4, and is used in a place where it can be connected to the network 6. The first user logs in to the information processing apparatus 2 from the first user terminal 5 and inputs information regarding the usage authority to be given to the second user. This information includes the function and valid period of the image forming apparatus 4 that can be used by the second user. The second user terminal 7 is a terminal that is connected to the network 6 and used by a second user who does not have authority to use the image forming apparatus 4. As will be described later, the second user acquires the identification information 322 from the information processing apparatus 2 via the second user terminal 7. As the first user terminal 5 and the second user terminal 7, a personal computer (PC) is exemplified, but the present invention is not limited to this, and a PDA (Personal Digital Assistant) or a multi-function mobile phone (smart phone) Etc. can also be used.

(network)
The network 6 is a computer network such as a LAN (Local Area Network) or an intranet, and may be wired (electric cable, optical cable, etc.) or wireless (radio wave, infrared ray, etc.).

  FIG. 2 is a block diagram illustrating a configuration example of the information processing apparatus 2 according to the first embodiment. As shown in FIG. 2, the information processing apparatus 2 includes a CPU and the like, and controls each unit and executes various programs. The information processing device 2 includes a recording medium such as an HDD and a flash memory, and stores information. A storage unit 21 as an example of a storage device, and a communication unit 22 that communicates with the outside via the network 6.

  The control unit 20 executes the information processing program 210 stored in the storage unit 21, whereby the identification information generation unit 200, the identification information transmission unit 201, the information acquisition unit 202, the identification information reception unit 203, and the authority grant unit 204. And so on.

  The identification information generation unit 200 generates identification information 322 for authenticating a second user who does not have the authority to use the image forming apparatus 4. The identification information 322 is generated as unique information in the information processing system 1 as authenticating the second user. The generated identification information 322 is stored in the second user table 32 of the management database 3. When using the image forming apparatus 4, the second user receives the identification information 322 from the information processing system 1 or the information processing apparatus 2 via the second user terminal 7, and uses the received identification information 322. Log in to the image forming apparatus 4.

  The identification information transmission unit 201 transmits the identification information 322 generated by the identification information generation unit 200 to the second user terminal 7. Accordingly, the second user can receive the identification information 322 required when logging in to the image forming apparatus 4.

  The information acquisition unit 202 is connected to the management database 3 and acquires authority information 315 indicating the range of the first user's authority to use the image forming apparatus 4 and identification information 322 for authenticating the second user. It is. In addition, the information acquisition unit 202 uses the information input from the first user terminal 5 when the first user grants the use authority to the second user, as the second user of the management database 3. It also has a function of writing in the table 32 (see FIG. 3 or FIG. 7).

  The identification information receiving unit 203 receives the identification information 322 input from the image forming apparatus 4 when the second user uses the image forming apparatus 4 via the network 6.

  The authority granting unit 204 uses the identification information 322 acquired from the management database 3 by the information acquisition unit 202 and the identification information 322 received by the identification information receiving unit 203 and input by the second user, based on the second information. Authenticate the user. In addition, the authority granting unit 204 grants the use authority of the image forming apparatus 4 to the second user within the range of the use authority of the first user based on the authority information 315 acquired by the information acquisition unit 202 from the management database 3. To do. As a result, the second user can use the function of the image forming apparatus 4 within the range of the use authority of the given first user.

  FIG. 3 is a block diagram illustrating a configuration example of the management database 3. As shown in FIG. 3, the management database 3 includes a first user table 31 and a second user table as information for granting the usage authority to the second user within the range of the usage authority of the first user. 32. The management database 3 holds various information other than this. For example, when the information processing system 1 is configured with equipment or terminals in a main company of a company, the management database 3 holds various information regarding all employees. Here, description of information other than the first user table 31 and the second user table 32 is omitted.

  The first user table 31 is a collection of information that defines the range of use authority of the first user for each device connected to the information processing system 1 for each first user. is there. Specifically, the first user table 31 includes a mail address 310, a user ID 311 and a password 312 as information for specifying the first user. Further, the first user table 31 includes, as the authority information 315, devices that the first user has the authority to use among image forming apparatuses such as multifunction peripherals connected to the information system 1. It includes information such as the device 313 that is the information to be identified and the function 314 of the device 313 for which the first user has authority to use. The first user table 31 stores such information in advance.

  The second user table 32 includes identification information 322 for authenticating the second user and information indicating the usage authority given to the second user. Specifically, the second user table 32 includes the second user's mail address A320, the first user's mail address B321 for which the second user requests authorization, and an identification for authenticating the second user. It includes information 322, a device (image forming apparatus 4) 323 to which usage authority is granted, a function 324 thereof, a time limit 325 to which usage authority is granted, and the like. The second user table 32 is created based on information input by the first user when the second user requests to grant the authority to use the image forming apparatus 4. The second user table 32 once created is basically cleared when the second user's use of the image forming apparatus 4 is completed, but may be stored for a certain period.

  FIG. 4 is a block diagram illustrating a configuration example of the image forming apparatus 4. As illustrated in FIG. 4, the image forming apparatus 4 includes a control unit 40, a storage unit 41, an operation panel 42, and a communication unit 43.

  The control unit 40 includes a CPU and the like, and controls each unit and executes various programs. The control unit 40 includes a function execution unit 400, an authentication request transmission unit 401, and an authentication result reception unit 402. The function execution unit 400 is a main part of the image forming apparatus 4 and executes a function such as a printing function, a scanner function, or a facsimile function. The authentication request transmission unit 401 transmits identification information 322 input to the information processing apparatus 2 for the authentication of the second user to operate the image forming apparatus 4. The authentication result receiving unit 402 receives a result of authentication performed by the information processing apparatus 2 that has received the identification information 322.

  The storage unit 41 includes a recording medium such as an HDD or a flash memory, and stores a control program 410 that controls the operation of the image forming apparatus 4. The operation panel 42 is used to input various information to the image forming apparatus 4 and display various information in order to move the image forming apparatus 4. The communication unit 43 is a part that communicates with the outside via the network 6.

(Operation of information processing system)
Hereinafter, the operation of the information processing system 1 according to the first embodiment will be described.

  In the first embodiment, for example, when a second user who works at a branch office goes to the head office, he / she does not have the authority to use the equipment at the head office. When requesting the use authority of the device to one user, the use authority is given to the second user within the range of the use authority of the first user.

  FIG. 5 is a sequence diagram illustrating an operation of the information processing system 1 according to the first embodiment. The operation of the information processing system 1 will be described below using this sequence diagram.

  The second user notifies the first user in advance that he / she wants to use the image forming apparatus 4 which is a device connected to the information processing system 1. When the second user uses the image forming apparatus 4, the first user first logs in to the information processing apparatus 2 from the first user terminal 5 (S1). For example, the first user's email address, user ID, password, and the like are used for login. Note that these three are not always required for login, and only some of them may be used, or some other information specifying the first user may be used.

  When there is a login from the first user terminal 5, the information processing apparatus 2 first connects to the management database 3 when receiving a login from the first user with these email address, user ID, password, and the like. The authority of the first user is confirmed (S2). In other words, the information acquisition unit 202 acquires authority information 315 indicating the range of authority of use of the first user from the first user table 31 of the management database 3 (S3).

  FIG. 6 shows an example of the first user table 31. The first user table 31 has a mail address 310, a user ID 311 and a password 312 in order to specify the first user. In addition, as authority information 315 indicating the range of use authority for each first user, a device 313 having the use authority and its function 314 are registered.

  For example, in the first row of the first user table 31, the mail address “usera@mailaddress.co.jp” of the first user is registered as the first user shared information in the mail address 310, and the user ID 311 is set as the user ID 311. “UserA” is registered as “AAA” as the password 312. Also, as the authority information 315 for the first user A, the usage authority of “color and monochrome print function” and “color scanner function” is registered as the function 314 for each of “Device 1” and “Device 2” as the device 313. ing.

  In the second row of the first user table 31, “userb@mailaddress.co.jp” is registered as the mail address 310, “UserB” is registered as the user ID 311, and “BBB” is registered as the password 312 for the first user B. Has been. As the authority information 315 for the first user B, only the authority of “Device 1” is registered as the device 313 and the authority of “monochrome print function” is registered as the function 314 thereof. For the first user B, the color scanner function is not possible, and no usage authority is given.

  In the third row of the first user table 31, “userc@mailaddress.co.jp” is registered for the first user C, “UserC” is registered as the user ID 311, and “CCC” is registered as the password 312. Has been. As authority information 315 for the first user C, only “Device 1” and “Device 2” are registered as the device 313 and only “color and monochrome print functions” are registered as the function 314 thereof. The first user C is not allowed to use the color scanner function and is not given authority to use.

  Authority information 315 indicating the range of authority of the first user's use acquired by the information acquisition unit 202 of the information processing apparatus 2 from the management database 3 is transmitted to the first user terminal 5 and displayed on the first user terminal 5. (S4).

  The first user (for example, user A now) confirms the range of his / her use authority at the terminal 5 and grants the use authority to the second user within the range of the use authority permitted by himself / herself. In this manner, necessary information is input from the terminal 5 and an authority is requested to the information processing apparatus 2 (hereinafter also referred to as “authorization request”) (S5). Here, the information input by the first user (user A) includes, for example, a device to which the usage authority is given, its function, a time limit indicating the validity period of the usage authority, and the like.

  When the information processing apparatus 2 receives an authority request from the first user, the information processing apparatus 2 confirms from the received information that the information is surely within the usage authority range of the first user. Next, the identification information generation unit 200 generates identification information 322 for authenticating the second user. This identification information 322 is temporary information that is used only while the device to which the second user is authorized to use is used within the time limit, and is composed of random alphanumeric characters, for example.

  The information processing apparatus 2 registers the generated identification information 322 together with the information input by the first user in the management database 3 (S6). These pieces of information are registered in the second user table 32 of the management database 3 by the information acquisition unit 202.

  FIG. 7 shows an example of the second user table 32. As shown in FIG. 7, the second user table 32 includes the second user mail address A320 as the second user shared information, the first user mail address B321 as the first user shared information, the second user shared information. Identification information 322 for authenticating the user, a device 323 to which the second user is authorized to use, a function 324 and a time limit 325 thereof are registered.

  For example, in the first row of the second user table 32 in FIG. 7, “17QB” is set as identification information 322 by the system for the second user, and the first user (user A) Authority for “Device 1” is assigned as the H.323, and “color and monochrome print function” and “color scanner function” are assigned as the function 324 thereof. In this case, the usage authority is given in the entire range of the usage authority of the first user (user A). Further, the time limit 325 is “January 31, 2016”.

  Further, in the second row of the second user table 32 in FIG. 7, “3JD9” is set as identification information 322 from the system for the second user, and the first user (user B) The authority to use “Device 1” as 323 and the “monochrome print function” as its function 324 are given. Also, the scanner function is disabled. The time limit 325 is “February 15, 2016”.

  When the information for granting authority for the second user is registered in the second user table 32 of the management database 3 for the information processing apparatus 2, a response to that effect is returned from the management database 3 to the information processing apparatus 2. (S7). The information processing device 2 transmits the registration result to the first user terminal 5 (S8).

  On the other hand, the information processing device 2 transmits identification information 322 for authenticating the second user to the second user terminal 7 (S9). At this time, information about the usage authority granted to the second user is also transmitted.

  Upon confirming the received identification information 322 (S10), the second user logs in to the image forming apparatus 4 using the identification information 322 (S11).

  When the image forming apparatus 4 receives a login from the second user, the authentication request transmitting unit 42 transmits the identification information 322 to the information processing apparatus 2 to make an authentication request (S12). The authentication request from the authentication request transmission unit 42 of the image forming apparatus 4 is received by the identification information receiving unit 203 of the information processing apparatus 2. Then, the information acquisition unit 202 connects to the management database 3 (S13), and acquires identification information 322 from the second user table 32 (S14). The authority granting unit 204 authenticates the second user based on the identification information 322 received by the identification information receiving unit 203 and the identification information 322 acquired by the information acquisition unit 202.

  Here, normally, the identification information 322 received from the image forming apparatus 4 by the identification information receiving unit 203 and the identification information 322 acquired from the management database 3 by the information acquisition unit 202 should be exactly the same. This is because the identification information 322 received by the identification information receiving unit 203 is received by the second user from the information processing apparatus 2 and input from the image forming apparatus 4. However, when the second user receives what the information processing apparatus 2 has transmitted the identification information 322 or when the second user inputs from the image forming apparatus 4, the usage authority other than the second user is used. A case where a person who does not have the second user logs in is also conceivable. In order to prevent such an error, the second user is authenticated by confirming that these two pieces of identification information 322 are the same.

  The authority granting unit 204 authenticates the second user and then transmits the authentication result to the image forming apparatus 4 to determine whether the function of the image forming apparatus 4 for which the second user is requesting authorization is valid. The second user is notified (S15). This notification is received by the authentication result receiving unit 43 of the image forming apparatus 4.

  As a result, when the function of the image forming apparatus 4 is valid, the second user operates the image forming apparatus 4 to execute the function (S16).

  The above is the rough operation of the information processing system 1, which will be described again using a flowchart.

  FIG. 8 is a flowchart illustrating an example of a processing flow of the information processing system 1 according to the first embodiment. Note that the flowchart of FIG. 5 includes some human actions in order to facilitate understanding of the flow of processing (the same applies to other flowcharts).

  First, the first user who is requested by the second user to grant the authority to use the image forming apparatus 4 logs in to the information processing apparatus 2 from the first user terminal 5 (S100). Then, the information processing apparatus 2 connects to the management database 3 and confirms the range of the first user's usage authority for the image forming apparatus 4 (S101). That is, the information acquisition unit 202 of the information processing apparatus 2 acquires the authority information 315 from the first user table 31 of the management database 3 and transmits it to the first user terminal 5. The first user terminal 5 displays the range of authority for use of the first user on the display unit.

  The first user determines whether or not to grant the usage authority requested by the second user within the range of the usage authority for the image forming apparatus 4 notified from the information processing apparatus 2 (S102). For example, when the usage authority for the function of the image forming apparatus 4 requested by the second user is not within the range of the usage authority of the first user, the authority cannot be given to the second user. Or it may be impossible to grant authority for another reason. When it is determined that the first user cannot grant the use authority to the second user (S102; No), the first user notifies the second user via the information processing apparatus 2 to that effect. (S103).

  On the other hand, when it is determined that the second user can be given authority within the range of the first user's usage authority (S102; Yes), the first user sends information necessary for granting authority to the terminal 5 The information is input to the information processing apparatus 2 to give the second user the use authority (S104). Here, the information necessary for granting the authority is, for example, the function of the image forming apparatus 4 to which the authority is granted and the time limit for which the authority is given.

  Next, the identification information generation means 200 of the information processing device 2 generates identification information 322 for authenticating the second user (S105). The generated identification information 322 is registered in the second user table 32. Further, the information acquisition unit 202 of the information processing apparatus 2 registers information such as the device 323, the function 324, and the time limit 325 input by the first user in the second user table 32. Thereby, the second user table 32 of the management database 3 is created.

  Next, the identification information transmission unit 201 of the information processing device 2 transmits the identification information 322 to the second user terminal 7 (S106). The second user who has received the identification information 322 logs in to the image forming apparatus 4 using the identification information 322 (S107).

  The authentication request transmission unit 42 of the image forming apparatus 4 transmits the identification information 322 to the information processing apparatus 2 and makes an authentication request (S108). The identification information 322 transmitted from the image forming apparatus 4 is received by the identification information receiving unit 203. The received identification information 322 is transferred to the authority assigning unit 204, and the authority assigning unit 204 determines whether or not authentication is possible (S109).

  At this time, the information acquisition unit 202 acquires the identification information 322 from the second user table 32 of the management database 3. The authority assigning unit 204 authenticates the second user based on the identification information 322 received from the second user by the identification information receiving unit 203 and the identification information 322 acquired from the management database 3 by the information acquisition unit 202. I do.

  As a result, when it is determined that the second user cannot be authenticated (S109; No), the second user is notified that the authentication is impossible via the image forming apparatus 4 (S110). When the second user is authenticated (S109; Yes), the second user is notified via the image forming apparatus 4 that the second user is authenticated (S111).

  The second user who has received the notification that the authentication is permitted uses the function of the image forming apparatus 4 within the range of the granted authority (S112). As described above, according to the first embodiment, the use authority of the first user who has the use authority for the image forming apparatus 4 with respect to the second user who does not have the use authority for the image forming apparatus 4. Usage authority is granted within the scope of. At this time, identification information 322 for authenticating the second user is generated in the information processing system 1.

[Second Embodiment]
Next, a second embodiment of the present invention will be described. The overall configuration of the information processing system of the second embodiment is the same as that of the first embodiment shown in FIG. The second embodiment is different from the first embodiment in that the first user does not log in to the information processing apparatus 2 first, but the second user first makes the second user terminal 7 The user logs in to the information processing apparatus 2 and requests authority.

  FIG. 9 is a block diagram illustrating a configuration example of the information processing apparatus according to the second embodiment of this invention. As described above, since the information processing apparatus 2 according to the second embodiment first receives an authorization request from the second user, it has an accepting unit for that purpose. In other words, the control unit 20 according to the present embodiment is obtained by adding an authority request receiving unit 205 that receives an authority request from the second user to the control unit 20 according to the first embodiment. Yes. Since the configuration other than the control unit 20 of the present embodiment is the same as that of the first embodiment, description thereof is omitted.

  FIG. 10 is a flowchart illustrating an example of a process flow of the information processing system 1 according to the second embodiment. Hereinafter, an example of the operation of the information processing system 1 according to the second embodiment will be described with reference to a flowchart.

  First, the second user requests the information processing apparatus 2 from the second user terminal 7 to grant the authority to use the image forming apparatus 4 and makes an authority request (S200). The authority grant request inputs the email address of the first user, specifies the first user to whom authority is granted, and inputs the image forming apparatus 4 for which the authority to use is requested, its function, etc. Done.

  Note that the method of specifying the first user for which authorization is requested is not limited to the input of the first user's mail address in this way. For example, when the second user logs in to the information processing apparatus 2 from the terminal 7, the first user list is displayed on the second user terminal 7, and the second user is given authority from the list. One user may be selected. In this case, when the number of displayed first users is too large, the second user may narrow down the data by applying some condition.

  The authorization request is received by the authorization request receiving unit 205 of the information processing apparatus 2. When the authorization request is received, the information acquisition unit 202 connects to the management database 3 and acquires the authority information 315 for the first user specified by the mail address or the like from the first user table 31. Then, the authority grant unit 204 confirms the authority of the first user (S201).

  The authority granting unit 204 determines whether or not the authorization may be granted in response to the authorization request from the second user (S202). For example, when the first e-mail address input by the second user does not exist in the first user table 31, or when the usage authority required by the second user is not within the range of the usage authority of the first user. For example, it is determined that no authorization can be given. As described above, when the information processing system can make the determination, the processing may be performed only by the information processing system without notifying the first user that there has been an authorization request.

  When the authority granting unit 204 determines that the authority cannot be granted (S202; No), the authority granting means 204 is transmitted to the second user terminal 7 and the second user is notified of the fact (S203).

  When the authority granting unit 204 determines that the authority can be granted (S202; Yes), the authority range of the first user is presented to the first user terminal 5, and the authority grant request from the second user is notified. (S204).

  The first user determines in which range the authority to use is granted to the second user or not to grant the authority at all (S205). If it is determined that the first user does not grant authority (S205; No), when the information is returned to the information processing apparatus 2, the information processing apparatus 2 sends a message indicating that no authority can be granted. Then, the second user is notified (S206).

  In addition, when it is determined that authority is given to the second user (S205; Yes), the first user associates the second user's mail address as shared information of the second user, The image forming apparatus 4 to which the use authority is given, its function, a time limit, and the like are input, and the authority is given to the second user within the range of the first user's use authority (S207).

  When the information processing apparatus 2 receives input of information related to authorization from the first user, the identification information generating unit 200 generates identification information 322 for authenticating the second user. Then, the information processing apparatus 2 registers the identification information 322 together with other information in the second user table 32 of the management database 3 and creates the second user table 32 (S208).

  Next, the identification information transmission unit 201 of the information processing device 2 transmits the identification information 322 to the second user terminal 7 (S209). Then, the second user logs in to the image forming apparatus 4 using the received identification information 322 (S210).

  When the image forming apparatus 4 receives the input of the identification information 322, the authentication request transmission unit 42 transmits the identification information to the information processing apparatus 2 to make an authentication request for the second user (S211). The identification information receiving unit 203 of the information processing apparatus 2 receives the identification information 322 from the image forming apparatus 4. The information acquisition unit 202 acquires the identification information 322 from the second user table 32 of the management database 3. The acquisition authority giving unit 204 authenticates the second user based on the identification information 322 received from the image forming apparatus 4 and the identification information 322 acquired from the second user table 32 (S212).

  As a result, when the authentication is impossible (S212; No), the information processing apparatus 2 transmits a message indicating that the authentication is impossible to the image forming apparatus 4. The fact that the authentication is impossible is received by the authentication result receiving unit 43 of the image forming apparatus 4 and notified to the second user (S213). If the authentication is successful (S212; Yes), the information processing apparatus 2 transmits a notification indicating that the authentication is possible to the authentication result receiving unit 43 of the image forming apparatus 4 and notifies the second user (S214). .

  The second user who has received the authentication permission notification operates the image forming apparatus 4 with the granted authority and executes the function (S215).

  As described above, in the second embodiment, since the second user specifies the first user by the first user's e-mail address or the like and requests authorization, the first user is contacted in advance. There is no need to keep it.

[Third Embodiment]
Next, a third embodiment of the present invention will be described. In the third embodiment, the second user directly operates the function of the image forming apparatus 4 and requests authorization. Therefore, in the third embodiment, the second user terminal 7 is not necessary.

  FIG. 11 is a configuration diagram showing an outline of an information processing system according to the third embodiment of the present invention.

  As shown in FIG. 11, the information processing system 1 according to the third embodiment includes an information processing apparatus 2, a management database 3 connected to the information processing apparatus 2, an image forming apparatus 4, and a first user terminal 5. It is configured to be connected to the network 6. Similarly to the second embodiment, the information processing apparatus 2 according to the third embodiment receives an authorization request from the second user, and as shown in FIG. Means 205 is included. Since other components are the same as those in the first or second embodiment, detailed description thereof is omitted.

  FIG. 12 is a flowchart illustrating an example of a processing flow of the information processing system 1 according to the third embodiment. Hereinafter, an example of the operation of the information processing system 1 according to the third embodiment will be described along the flowchart of FIG.

  First, the second user logs in from the image forming apparatus 4 using information (in-house user shared information) specifying the first user such as the mail address of the first user, and the print or scanner of the image forming apparatus 4 Are operated (S300).

  When the second user operates a function of the image forming apparatus 4, a request for granting the right of the second user regarding the function is transmitted from the image forming apparatus 4 to the information processing apparatus 2 (S <b> 301). The authorization request is received by the authorization request receiving unit 205 of the information processing apparatus 2. Then, the information acquisition unit 202 acquires the corresponding first user authority information from the first user table 31 of the management database 3 using the information for specifying the first user included in the authority grant request. Then, the authority range is confirmed (S302). At this time, the information acquisition unit 202 acquires information specifying the first user such as an e-mail address from the authorization request as identification information 322 for identifying the second user, and the second user table 32 of the management database 3. To store.

  Then, the authority granting unit 204 determines whether or not authority can be given to the second user (S303). This determination is made, for example, when there is no information in the first user table 31 of the management database 3 that corresponds to the information specifying the first user in the authorization request transmitted from the second user, When the function of the image forming apparatus 4 for which the second user requests the authorization (currently being operated by the second user) is outside the authority range of the first user, it is mechanically determined whether the authorization can be granted. In such a case, the system side determines whether or not the authority can be granted.

  When the authority granting unit 204 of the information processing apparatus 2 determines that the authority cannot be granted to the second user (S303; No), the authority granting unit 204 indicates that the authority cannot be granted. 4 is notified to the second user (S304).

  On the other hand, when it is determined that the right can be granted to the second user (S303; Yes), the first user terminal 5 is notified of a request for granting the right to use the second user ( S305). In response to the usage authority grant request, the first user determines whether or not to grant authority to the second user, and to what extent authority is granted if granted (S306).

  When it is determined that the first user does not grant the use authority to the second user (S306; No), the second user (the image operated by the second user) via the information processing apparatus 2 The forming apparatus 4) is notified that the authorization cannot be granted (S307).

  If it is determined that the first user grants the usage authority to the second user (S306; Yes), information necessary for granting the usage authority (function, time limit, etc. of the image forming apparatus 4) is obtained. The information is transmitted to the information processing apparatus 2, and the use authority is given to the second user within the range of the use authority of the first user (S308).

  When the first user grants the use authority to the second user, the authority granting unit 204 of the information processing apparatus 2 notifies the image forming apparatus 4 operated by the second user of whether or not the function is valid ( S309). Accordingly, the second user can use the image forming apparatus 4 and executes the function (S310).

  As described above, according to the third embodiment, the second user directly operates the image forming apparatus 4 to request authorization for the system, and all exchanges with the system including the first user are performed. This is performed by the image forming apparatus 4. Therefore, although the second user's stay in front of the image forming apparatus 4 is somewhat longer, there is no need to prepare means for notifying the second user (terminal such as a mail server), and the second user However, it is not necessary to confirm the identification information when using the function of the image forming apparatus 4.

[Fourth Embodiment]
Next, a fourth embodiment of the present invention will be described. In the fourth embodiment, the system configuration is the same as that of the third embodiment just described, and the identification information is determined in advance by the first user or the second user.

  FIG. 13 is a flowchart illustrating an example of a processing flow of the information processing system according to the fourth embodiment. Hereinafter, an example of the operation of the information processing system according to the fourth embodiment will be described with reference to this flowchart.

  First, the identification information 322 is determined in advance by the first user or the second user, and is shared between the first user and the second user (S400). Then, the first user who has received a request for authorization from the second user logs in to the information processing apparatus 2 using the predetermined identification information 322 (S401).

  As in the previous embodiments, the information processing apparatus 2 connects to the management database 3 to acquire necessary information and confirms the authority range of the first user (S402). In response to this, the first user associates the second user's shared information such as the second user's mail address, and designates the function, valid period, valid date, etc. of the image forming apparatus 4 to which authority is granted. Then, the user authority is granted to the second user within the range of the user authority (S403). At this time, the information input by the first user to give authority to the second user is written in the second user table 32 of the management database 3 via the information processing apparatus 2 including the identification information 322. .

  Next, the second user logs in to the image forming apparatus 4 with the predetermined identification information 322 (S404). When the second user logs in, identification information 322 is transmitted from the authentication request transmission unit 42 of the image forming apparatus 4 to the information processing apparatus 2, and an authentication request is made to the information processing apparatus 2 (S405).

  The identification information 322 input from the image forming apparatus 4 by the second user is received by the identification information receiving unit 203 of the information processing apparatus 2. On the other hand, the information acquisition unit 202 acquires the second user identification information 322 from the second user table 32 of the management database 3. Then, the authority granting unit 204 determines whether authentication is possible based on the identification information 322 acquired by the information acquisition unit 202 and the identification information 322 received by the identification information receiving unit 203 (S406).

  If the authority assigning unit 204 determines that authentication is not possible (authorization is not possible) (S406; No), a message indicating that authentication is not possible is transmitted to the image forming apparatus 4. The fact that the authentication is impossible is received by the authentication result receiving unit 43 of the image forming apparatus 4, and the second user who is operating the image forming apparatus 4 is notified that the authentication is impossible (S407).

  If the authority granting unit 204 determines that authentication is possible (authorization is possible) (S406; Yes), the fact that authentication is possible is transmitted to the image forming apparatus 4, and the authentication result receiving unit 43 of the image forming apparatus 4 is authenticated. Received by. As a result, the second user who is operating the image forming apparatus 4 is notified that authentication is possible (S408). Then, the second user who has received the authentication permission operates the image forming apparatus 4 within the range of the granted authority and uses the function.

  As described above, in the fourth embodiment, since the first user or the second user determines the identification information in advance, it is not necessary to generate the identification information in the system.

  While various embodiments of the present invention have been described above, the present invention is not limited to the above embodiments, and various modifications can be made without departing from the spirit of the present invention. For example, in the above embodiment, the information processing program is stored in the storage unit 21 of the information processing apparatus 2, but the information processing program may be stored in a recording medium such as a CD-ROM and provided. Also, the means 200 to 205 that the control unit 20 of the information processing apparatus 2 has functionally are partly or entirely reconfigurable circuits (FPGA: Field Programmable Gate Array) and application specific integrated circuits (ASIC: Application Specific). You may comprise by hardware circuits, such as Integrated Circuit.

  In addition, replacement, deletion, addition, and the like of the above-described steps described in the above embodiment are possible within a range that does not change the gist of the present invention. For example, in step S202 in the flowchart according to the second embodiment or step S303 in the flowchart according to the third embodiment, the information processing system determines whether to grant authority to the second user, but this step is omitted. Thus, the first user may determine the authorization.

DESCRIPTION OF SYMBOLS 1 ... Information processing system, 2 ... Information processing apparatus, 3 ... Management database, 4 ... Image forming apparatus,
5 ... 1st user terminal, 6 ... Network, 7 ... 2nd user terminal, 20 ... Control part,
21 ... Storage unit, 22 ... Communication unit, 200 ... Identification information generation means, 201 ... Identification information transmission means,
202 ... Information acquisition means, 203 ... Identification information reception means, 204 ... Authority grant means,
205 ... Authorization request receiving means, 31 ... first user table,
32 ... second user table, 40 ... control unit, 41 ... storage unit, 42 ... operation panel,
43: Communication unit, 400: Function execution unit, 401: Authentication request transmission unit, 402: Authentication result reception unit

Claims (7)

Information acquisition means for acquiring authority information indicating a range of authority of use of the first user for the image forming apparatus and identification information for authenticating a second user who does not have the authority of use of the image forming apparatus; ,
Identification information receiving means for receiving the identification information from the second user;
Based on the identification information received by the identification information receiving means, the authority information and the identification information acquired by the information acquisition means, the second user is authenticated, and the second user is authenticated with respect to the second user. Authority granting means for granting use authority of the image forming apparatus within the range of use authority of the first user;
An information processing apparatus comprising: Identification information generating means for generating the identification information;
An identification information transmitting means for transmitting the identification information generated by the identification information generating means to the second user,
The information acquisition means stores the identification information generated by the identification information generation means in a management database,
The identification information receiving unit receives the identification information input from the image forming apparatus by the second user who has received the identification information from the identification information transmitting unit.
The information processing apparatus according to claim 1. Authorization request receiving means for receiving an authorization request for requesting authorization of use of the image forming apparatus from the second user;
The information processing apparatus according to claim 1, further comprising: The authorization request received by the authorization request receiving unit includes an email address that identifies the first user.
The information processing apparatus according to claim 3. The identification information is predetermined between the first user and the second user,
The information acquisition means receives the identification information from the first user,
The identification information receiving means receives the identification information input from the image forming apparatus by the second user;
The information processing apparatus according to claim 1. Computer
Information acquisition means for acquiring authority information indicating a range of authority of use of the first user for the image forming apparatus and identification information for authenticating a second user who does not have the authority of use of the image forming apparatus; ,
Identification information receiving means for receiving the identification information from the second user;
Based on the identification information received by the identification information receiving means, the authority information and the identification information acquired by the information acquisition means, the second user is authenticated, and the second user is authenticated with respect to the second user. As an authority granting means for granting the use authority of the image forming apparatus within the range of the use authority of the first user,
Information processing program to make it function. The information processing apparatus according to any one of claims 1 to 5,
The first user terminal device connected to the information processing device via a network;
An image forming apparatus connected to the information processing apparatus via the network, the second user requesting grant of usage authority;
Information processing system with

Images