JP2019128732A - Information processing system, information processing terminal, information processing method and program - Google Patents

Abstract

To provide an information processing system, an information processing terminal, an information processing method and a program that simplify the correspondence to an authentication method not supported by a device.SOLUTION: An information processing system comprises an image forming device 10 and an information processing terminal 20 capable of communicating with the image forming device 10. The information processing terminal 20 includes a face authentication unit 22 authenticating a user according to an input of biological information of the user, and a log-in cooperation unit 23 transmitting identification information of the user to the image forming device 10 in response to success of the user authentication by the face authentication unit 22. The image forming device 10 includes a user authentication unit 121 authenticating the user on the basis of the received identification information and releasing restricted use of the image forming device 10 for the authenticated user.SELECTED DRAWING: Figure 6

Description

  The present invention relates to an information processing system, an information processing terminal, an information processing method, and a program.

  Among devices such as printers, copiers, multifunction machines, etc. conventionally shared by a plurality of users in offices of companies etc. are used for managing the use status by each user, securing security, etc. Some have an authentication function. In such a device, in a non-logged-in state, a screen for restricting the use of the device, such as a login screen, is displayed. When the user successfully logs in, the screen is erased and the function of the device (equipped with the device is installed). Screen for accessing the application etc.).

  On the other hand, in recent years, a wide variety of authentication methods exist such as authentication by user name and password, authentication by PIN (Personal Identification Number: personal identification number), authentication by IC card, biometric authentication, and the like. Under these circumstances, each company where the equipment is to be deployed desires to adopt an authentication method suitable for the security policy of the company.

  However, in order for a manufacturer of a certain device to cope with different authentication schemes depending on customers (device users), development and manufacture of software or hardware corresponding to each authentication scheme is required. However, since there is often only one type of authentication method used by a certain customer, when a device corresponding to a plurality of authentication methods is manufactured in advance, it becomes an overspec device for each customer. Not economical.

  The present invention has been made in view of the above points, and has as its object to simplify correspondence to an authentication method which is not supported by a device.

  Therefore, in order to solve the above problem, an information processing system including a terminal capable of communicating with a device and the device, wherein the terminal authenticates the user according to an input of biometric information of the user. An authentication unit; and a transmission unit for transmitting identification information of the user to the device in response to the success of the authentication of the user by the first authentication unit, wherein the device is configured to select the user based on the identification information. The authentication is performed, and when the authentication is successful, the second authentication unit is configured to release a state in which the use of the device is restricted.

  It is possible to simplify the correspondence to the authentication method which the device does not correspond to.

FIG. 1 is a diagram showing an example of a configuration of an information processing system 1 according to a first embodiment. FIG. 2 is a diagram showing an example of a hardware configuration of the image forming apparatus 10 in the first embodiment. It is a figure showing the example of hardware constitutions of information processing terminal 20 in a 1st embodiment. It is a figure which shows an example of the external appearance of the information processing terminal 20 in 1st Embodiment. It is a figure which shows the example of the arrangement position of the information processing terminal. 2 is a diagram illustrating an example of functional configurations of an image forming apparatus 10 and an information processing terminal 20 according to the first embodiment. FIG. It is a sequence diagram for demonstrating an example of the process sequence which the information processing system 1 performs in 1st Embodiment. It is a sequence diagram for demonstrating an example of the process sequence which the information processing system 1 performs in 2nd Embodiment.

  Hereinafter, a first embodiment will be described based on the drawings. FIG. 1 is a diagram showing an example of the configuration of an information processing system according to the first embodiment. In the information processing system 1 shown in FIG. 1, the image forming apparatus 10 is connected to the information processing terminal 20 so as to be communicable. The communication between the image forming apparatus 10 and the information processing terminal 20 may be, for example, short-range wireless communication such as USB (Universal Serial Bus), Bluetooth (registered trademark), or LAN (Local Area Network) (wired or wireless). Not)). When the information processing terminal 20 and the image forming apparatus 10 are connected via a LAN, the information processing terminal 20 may be connected by wireless communication to an access point of a network to which the image forming apparatus 10 is connected.

  The image forming apparatus 10 is a multifunction peripheral that implements two or more functions of printing, scanning, copying, and fax transmission / reception by a single chassis. However, a device having any one function may be used as the image forming apparatus 10.

  The information processing terminal 20 is a commercially available terminal such as a tablet terminal, a PC (Personal Computer), or a smartphone, and is a terminal provided with hardware and software for biometric authentication. In this embodiment, an example in which face authentication is used as an example of biometric authentication will be described. One information processing terminal 20 is fixed and installed in the vicinity of one image forming apparatus 10, for example. That is, one information processing terminal 20 corresponds to one image forming apparatus 10. Therefore, the information processing terminal 20 is installed for each image forming apparatus 10.

  FIG. 2 is a diagram illustrating a hardware configuration example of the image forming apparatus 10 according to the first embodiment. 2, the image forming apparatus 10 includes hardware such as a controller 11, a scanner 12, a printer 13, a modem 14, an operation panel 15, a network interface 16, and an SD card slot 17.

  The controller 11 includes a CPU 111, a RAM 112, a ROM 113, an HDD 114, an NVRAM 115, and the like. The ROM 113 stores various programs and data used by the programs. The RAM 112 is used as a storage area for loading a program, a work area for the loaded program, and the like. The CPU 111 realizes various functions by processing a program loaded in the RAM 112. The HDD 114 stores programs, various data used by the programs, and the like. The NVRAM 115 stores various setting information and the like.

  The scanner 12 is hardware (image reading means) for reading image data from a document. The printer 13 is hardware (printing means) for printing print data on printing paper. The modem 14 is hardware for connecting to a telephone line, and is used to execute transmission / reception of image data by FAX communication. The operation panel 15 is hardware including an input unit such as a button for receiving an input from a user, a display unit such as a liquid crystal panel, and the like. The liquid crystal panel may have a touch panel function. In this case, the liquid crystal panel also functions as an input unit. The network interface 16 is hardware for connecting to a network such as a LAN (whether wired or wireless). The SD card slot 17 is used for reading a program stored in the SD card 80. That is, in the image forming apparatus 10, not only the program stored in the ROM 113 but also the program stored in the SD card 80 can be loaded into the RAM 112 and executed. The SD card 80 may be replaced by another recording medium (for example, a CD-ROM or a USB (Universal Serial Bus) memory). That is, the type of recording medium corresponding to the positioning of the SD card 80 is not limited to a predetermined one. In this case, the SD card slot 17 may be replaced by hardware corresponding to the type of recording medium.

  FIG. 3 is a diagram illustrating a hardware configuration example of the information processing terminal 20 according to the first embodiment. In FIG. 3, the information processing terminal 20 includes a CPU 201, a memory 202, an auxiliary storage device 203, a touch panel 204, a wireless communication device 205, a camera 206, and the like.

  The auxiliary storage device 203 stores a program and the like installed in the information processing terminal 20. The memory 202 reads the program from the auxiliary storage device 203 and stores it when there is an instruction to start the program. The CPU 201 implements functions related to the information processing terminal 20 in accordance with programs stored in the memory 202.

  The touch panel 204 is an electronic component having both an input function and a display function, and performs display of information, reception of input from a user, and the like. The touch panel 204 includes a display device 211, an input device 212, and the like.

  The display device 211 is a liquid crystal display or the like, and has a display function of the touch panel 204. The input device 212 is an electronic component that includes a sensor that detects contact of a contact object with the display device 211. The contact object refers to an object in contact with the contact surface (surface) of the touch panel 204. Examples of such an object include a user's finger and a dedicated or general pen.

  The wireless communication device 205 is an electronic component such as an antenna required to perform communication in a wireless local area network (LAN) or a mobile communication network. The camera 206 is a camera (face authentication camera) suitable for face authentication, such as an infrared camera.

  FIG. 4 is a diagram illustrating an example of the appearance of the information processing terminal 20 according to the first embodiment. As shown in FIG. 4, the information processing terminal 20 has the same appearance as a general tablet terminal. The camera 206 is disposed at a position (for example, the front of the information processing terminal 20 (the surface on the touch panel 204 side)) at which the face of the user operating the touch panel 204 can be imaged.

  FIG. 5 is a diagram showing an example of the arrangement position of the information processing terminal 20. As shown in FIG. FIG. 5 shows three examples (1) to (3).

  (1) shows an example in which the information processing terminal 20 is installed on the back side of the image forming apparatus 10. At this time, the surface of the information processing terminal 20 on which the camera 206 is disposed (in the present embodiment, the front of the information processing terminal 20) faces substantially the front of the image forming apparatus 10, and the camera 206 is an image forming apparatus The information processing terminal 20 is installed on the back side of the image forming apparatus 10 so as not to be hidden from the user by the case 10. That is, the touch panel 204 may be hidden from the user by the housing of the image forming apparatus 10. The information processing terminal 20 is installed such that the surface on which the camera 206 is disposed faces the substantially front of the image forming apparatus 10 in order to facilitate capturing a face image of the user operating the image forming apparatus 10. The touch panel 204 may be hidden from the user because the information processing terminal 20 does not have to be operated by the user in the present embodiment. In the case of the example of (1), most of the information processing terminal 20 is hidden from the user, so that there is an advantage that the possibility of the user being aware of the presence of the information processing terminal 20 can be reduced.

  (2) shows an example in which the information processing terminal 20 is fixed to a wall or the like in contact with the back surface of the image forming apparatus 10. Also in this case, the information processing terminal 20 is installed such that the surface on which the camera 206 is disposed in the information processing terminal 20 faces substantially in front of the image forming apparatus 10. Note that the information processing terminal 20 may be supported not by a wall but by a support stand or the like. Further, in the case of the example of (2), since the entire information processing terminal 20 can be viewed by the user, there is a possibility that the information processing terminal 20 is operated by the user. In order to avoid such a possibility, a cover or the like that makes the presence of the information processing terminal 20 inconspicuous may be attached to parts other than the camera 206.

  (3) shows the image forming apparatus 10 as viewed from the side. In the example of (3), the operation panel 15 is installed to have an angle with respect to the upper surface of the case of the image forming apparatus 10, so that the back surface of the operation panel 15 and the upper surface of the case of the image forming apparatus 10 This is an example suitable for a model having a space between. In this case, the information processing terminal 20 is installed on the back of the operation panel 15 so that the front of the information processing terminal 20 faces the back of the operation panel 15 and the camera 206 is not hidden by the operation panel 15. Similarly to (1), the touch panel 204 may be hidden by the operation panel 15. In the example of (3), the camera 206 can capture a face image of the user whose eyes are directed to the operation panel 15.

  Note that the installation example of the information processing terminal 20 illustrated in FIG. 6 is an example, and the information processing terminal 20 may be installed in another mode.

  FIG. 6 is a diagram showing an example of functional configurations of the image forming apparatus 10 and the information processing terminal 20 in the first embodiment.

  In FIG. 6, the image forming apparatus 10 includes a user authentication unit 121. The user authentication unit 121 is realized by processing that the CPU 111 executes one or more programs installed in the image forming apparatus 10.

  The user authentication unit 121 authenticates the user of the image forming apparatus 10. For example, the user authentication unit 121 authenticates the image forming apparatus 10 based on the user name and password input by the user with respect to the login screen displayed on the operation panel 15 in order to make the use restricted. You may go. Alternatively, if the image forming apparatus 10 includes an IC card reader, authentication may be performed based on card information read from the IC card read by the IC card reader.

  In the present embodiment, the user authentication unit 121 has an interface (API (Application Program Interface)) for receiving an authentication request (login request) via a network. In the interface, a user name, which is an example of user identification information, is designated as input information. If the user name specified in the interface is stored in a predetermined database, the user authentication unit 121 cancels the state where the use of the image forming apparatus 10 is restricted (hereinafter referred to as “usage restricted state”). Do. The usage restriction state is, for example, a state in which a predetermined screen such as a login screen is displayed and the user can not use various functions (applications and the like) of the image forming apparatus 10. Therefore, when the usage restriction state is released, for example, the user is logged in to the image forming apparatus 10, and a screen (for example, a home screen) for accessing various functions of the image forming apparatus 10 is displayed on the operation panel 15. Is displayed. The screen may be customized for each logged-in user.

  On the other hand, the information processing terminal 20 includes an OS 21, a face authentication unit 22, a login cooperation unit 23, and the like. These units are realized by processing that one or more programs installed in the information processing terminal 20 are executed by the CPU 201.

  The OS 21 is an operating system (Operating System) such as general Windows (registered trademark).

  The face authentication unit 22 performs face authentication on the user of the information processing terminal 20 based on the face image of the user input from the camera 206. When the face authentication is successful, the OS 21 releases the usage restriction state of the information processing terminal 20. When the OS 21 is Windows (registered trademark), Windows (registered trademark) Hello corresponds to the face authentication unit 22. However, an OS other than Windows (registered trademark) may be used. In this case, the face recognition function corresponding to the OS may be used.

  When the face authentication by the face authentication unit 22 succeeds and the usage restriction state is released (when the user logs in to the information processing terminal 20), the login cooperation unit 23 logs in to the user authentication unit 121 of the image forming apparatus 10. Send a request (authentication request). In the login request, the user name of the user authenticated on the information processing terminal 20 is designated. When the authentication corresponding to the login request is successful, the image forming apparatus 10 is released from the restricted state and becomes operable. As a result, users who can use the image forming apparatus 10 can be limited to users who have succeeded in face authentication by the information processing terminal 20. For example, the login cooperation unit 23 is realized by causing the CPU 201 to execute an application program (hereinafter, referred to as “login cooperation application”) installed on the information processing terminal 20 for the present embodiment. That is, the information processing terminal 20 is an information processing terminal (computer) capable of installing a login cooperation application.

  If the OS 21 is Windows (registered trademark), the login collaboration application is registered in the startup in order to enable the login collaboration unit 23 to automatically send the login request according to the login of the user to the information processing terminal 20. Be done. When the OS 21 is another type of OS 21, the login cooperation application may be registered for the mechanism corresponding to the startup. The mechanism corresponding to startup is, for example, a mechanism in which a specific application is activated in response to login, or a mechanism in which notification of login to a specific application is made.

  Hereinafter, a processing procedure executed in the information processing system 1 will be described. FIG. 7 is a sequence diagram for explaining an example of the processing procedure executed by the information processing system 1 in the first embodiment.

  For example, when a user who wants to operate the image forming apparatus 10 stands in front of the image forming apparatus 10, the face image of the user is captured by the camera 206 of the information processing terminal 20. In step S100, the face authentication unit 22 executes face authentication based on the face image input from the camera 206. Information (for example, a face image or the like) necessary for face authentication of a user who can use the information processing terminal 20 (thus, the image forming apparatus 10) is set in the information processing terminal 20 in advance. What kind of face image is input to execute face authentication depends on the specification of the face authentication unit 22 (for example, Windows (registered trademark) Hello). If face authentication is executed when a front face image is input to the camera 206, in the example of FIG. 5A, a user standing in front of the image forming apparatus 10 is behind the operation panel 15. Face recognition is performed with the line of sight directed toward. In the example of (2) of FIG. 5, the user standing in front of the image forming apparatus 10 faces in a state in which the line of sight is directed upward from the case of (1), or the line of sight is directed substantially in front. Authentication is performed. In the example of (3), a user standing in front of the image forming apparatus 10 performs face authentication in a state where the user looks at the operation panel 15.

  If the face authentication is successful, the face authentication unit 22 requests the OS 21 to log in the user (S110). At this time, the user name specified by the face authentication unit 22 may be notified to the OS 21 as a login user name. In response to the log-in request, the OS 21 releases the usage restriction state of the information processing terminal 20 and starts each application registered in the startup (S120). As a result, the login cooperation unit 23 is realized based on the activation of the login cooperation application registered in the startup.

  When the login cooperation unit 23 inquires of the OS 21 about the user name of the login user in response to the activation of the login cooperation application (that is, according to the user login to the information processing terminal 20) (S130), the OS 21 The user name is returned (S140).

  Subsequently, the login cooperation unit 23 transmits a login request including the user name to the user authentication unit 121 of the image forming apparatus 10 (S140). The address information (for example, IP address) of the image forming apparatus 10 corresponding to a certain information processing terminal 20 is set in advance in the information processing terminal 20. Therefore, the login cooperation unit 23 transmits the login request to the address information set in the information processing terminal 20. Further, in the present embodiment, an example in which the account (each user name) in the information processing terminal 20 and the account (each user name) in the image forming apparatus 10 correspond (coincident) will be described. You do not have to. In this case, for example, the auxiliary storage device 203 of the information processing terminal 20 may store correspondence information between the user name of the information processing terminal 20 and the user name of the image forming apparatus 10. The login cooperation unit 23 may transmit the user name associated with the user name of the login user to the information processing terminal 20 in the correspondence information to the user authentication unit 121. In the above, “user name in image forming apparatus 10” may be replaced with card information of an IC card or the like.

  When the login request is received, the user authentication unit 121 of the image forming apparatus 10 performs authentication on the user name included in the login request (S160). The authentication method may be the same as when a user name or the like is input via the operation panel 15, for example. When the authentication is successful, the user authentication unit 121 cancels the use restriction state of the image forming apparatus 10. Subsequently, the user authentication unit 121 transmits a response including information (login result) indicating success or failure of authentication to the login cooperation unit 23 of the transmission source of the login request (S170).

  In response to receiving the login result, the login cooperation unit 23 requests the OS 21 to log out (S180). That is, in response to the reception of the login result, the login cooperation unit 23 performs control to return the information processing terminal 20 to the usage restriction state. Note that logout may be requested regardless of the success or failure of login to the image forming apparatus 10. Therefore, the login cooperation unit 23 may request the OS 21 to log out without waiting for the reception of the login result. Subsequently, the OS 21 executes logout in response to the request (S190). As a result, the information processing terminal 20 returns to the use restriction state.

  In the information processing terminal 20, the logout is executed after the transmission of the log-in request to the image forming apparatus 10 in order to prepare for the face authentication of the next user. That is, assume that the user A stands in front of the image forming apparatus 10 after the user A logs in to the image forming apparatus 10 after face authentication by the information processing terminal 20 and uses the image forming apparatus 10. In this case, while the login state of the user A continues in the information processing terminal 20, face authentication by the face authentication unit 22 for the user B is not started, and the user B can not use the image forming apparatus 10.

  Another reason why logout is executed after transmission of a log-in request to the image forming apparatus 10 is to avoid the operation of the information processing terminal 20 by the user. For example, when the information processing terminal 20 is disposed as illustrated in (2) of FIG. 5, the user who operates the image forming apparatus 10 (or any other user while the login state of the information processing terminal 20 continues) ) Makes it possible to operate the information processing terminal 20. In that case, there is also a possibility that the present embodiment may not operate properly, for example, when an operation not intended by the administrator is performed, such as a login cooperation application is deleted from the startup.

  As described above, according to the first embodiment, the image forming apparatus 10 can divert (borrow) the authentication function implemented in the external terminal (the information processing terminal 20). Therefore, the login cooperation application is installed on a terminal capable of realizing the authentication method desired by the customer of the image forming apparatus 10, and the login cooperation application is activated in response to the success of the login to the terminal. Thus, login to the image forming apparatus 10 can be realized using an authentication method that can be realized by the terminal. As a result, it is possible to simplify the correspondence to an authentication method that is not supported by the device.

  In the above description, the example in which the authentication method of the information processing terminal 20 is face authentication has been described. However, the information processing terminal 20 performs biometric authentication based on biometric information other than the face (fingerprint, iris, vein, etc.). You may have a function part. In this case, the image forming apparatus 10 can use biometric authentication that can be realized by the information processing terminal 20.

  Further, the information processing terminal 20 may perform authentication using information other than biometric information such as a user name and password, PIN (Personal Identification Number: personal identification number), or card information of an IC card. In this case, a keyboard or a card reader may be connected to the information processing terminal 20. By doing so, devices that have difficulty in inputting character strings such as user names, passwords, and PINs (for example, devices with poor operability such as a virtual keyboard displayed on the operation panel) and an IC card authentication function Login control by authentication using a user name and a password, a PIN, or card information can be realized for an apparatus or the like that is not provided.

  In the situation where the administrator wants to perform maintenance or setting change of the information processing terminal 20, if the processing procedure of FIG. 7 is executed in response to the administrator facing the information processing terminal 20, the information processing terminal Since the logout is immediately executed after the successful login to the T.20, it is impossible to obtain the timing at which the administrator operates the information processing terminal 20. Therefore, the login cooperation application may not be registered in the startup corresponding to the specific user such as the administrator. By doing so, the manager can operate the information processing terminal 20 as usual when face authentication is successful.

  Alternatively, the login collaboration application may be installed on a recording medium (for example, an SD card or the like) that can be inserted into and removed from the information processing terminal 20. In this case, by removing the recording medium from the information processing terminal 20, the activation of the login cooperation application can be suppressed.

  By the way, as described in FIG. 7, in the information processing terminal 20, when face authentication is successful for a certain user and login is performed, logout is performed after a login request is transmitted to the image forming apparatus 10. . After logging out, the information processing terminal 20 is ready to perform face authentication. Then, depending on the arrangement position of the information processing terminal 20, login to the image forming apparatus 10 is already successful, and the face image of the user who is operating the image forming apparatus 10 is captured by the camera 206, and face authentication is executed again. There is a possibility that a loop will occur. In this case, the login request in step S150 is repeatedly transmitted to the image forming apparatus 10. Therefore, the user authentication unit 121 may return a response indicating neglect or failure for a login request received when a certain user is logging in. By doing so, on the image forming apparatus 10 side, it is possible to prevent the integrity of the login state from being broken.

  On the other hand, it is also conceivable to suppress the occurrence of the loop itself. As a first method, the arrangement position of the information processing terminal 20 is devised. For example, it is considered that the user operating the image forming apparatus 10 takes a posture to face the operation panel 15. Therefore, it is conceivable to dispose the information processing terminal 20 at a position or an angle at which it is difficult to capture a face in a state in which the operation panel 15 faces the operation panel 15. By doing so, it is possible to prevent login to the information processing terminal 20 according to whether face authentication is performed or success in face authentication, and the occurrence of the above-described loop can be avoided. For example, in the examples of (1) and (2) of FIG. 5 (especially, the example of (2)), the camera 206 is disposed in a direction different from that of the operation panel 15, and thus it is suitable for the first method. Conceivable.

  The second method for suppressing the occurrence of the above loop itself will be described as a second embodiment. In the second embodiment, points different from the first embodiment will be described. Therefore, points that are not particularly mentioned may be the same as in the first embodiment.

  FIG. 8 is a sequence diagram for explaining an example of the processing procedure executed by the information processing system 1 in the second embodiment. In FIG. 8, the same steps as those in FIG. 7 are denoted by the same step numbers, and the description thereof is omitted.

  In the second embodiment, when the login result (S170) transmitted from the image forming apparatus 10 indicates that the login is successful, the login cooperation unit 23 immediately logs in without requesting the OS 21 to log out. The state is repeatedly inquired (for example, periodically) to the user authentication unit 121 (S171). If the user authentication unit 121 is implemented so that the login result is not returned when the login is successful, the login cooperation unit 23 changes the login state to the user authentication unit after transmitting the login request (S150). An inquiry is repeatedly made to 121 (S171). The inquiry of the login state is an example of the inquiry as to whether or not the use is restricted.

  In response to the login state inquiry, the user authentication unit 121 sends back a response indicating the login state (presence or absence of a login user) of the image forming apparatus 10 at that time (S172). The response indicating that the login user exists indicates that the usage is not restricted, and the response indicating that the login user does not exist indicates that the usage is restricted.

  When the returned login status indicates that a login user exists, the login cooperation unit 23 does not request the OS 21 to log out. If the returned login status indicates that there is no login user, the login cooperation unit 23 requests the OS 21 to log out (S180).

  In the above description, the example in which the inquiry in step S171 is repeated (polling is performed) has been described. However, in response to the inquiry in step S171, the user authentication unit 121 returns a response until the image forming apparatus 10 logs out. You may hold When logout is performed in the image forming apparatus 10, the user authentication unit 121 may return a response indicating that there is no Guin user. In this case, the inquiry in step S171 need not be repeated.

  As described above, according to the second embodiment, no logout occurs in the information processing terminal 20 while login to the image forming apparatus 10 continues. Therefore, it is possible to prevent the face authentication from being repeatedly executed while a certain user operates the image forming apparatus 10.

  In the second embodiment, for example, when the information processing terminal 20 is arranged as shown in (2) of FIG. 5 and the touch panel 204 may be visually recognized by the user, the user can In the period in which 10 is logged in, the operation of the information processing terminal 20 becomes possible. Therefore, in order to avoid such an operation, the login cooperation unit 23 may display a predetermined image (screen) on the entire surface of the display device 211 of the touch panel 204 so that the operation of the touch panel 204 is not accepted. An example of the predetermined image is an image in which the entire surface is filled with an inconspicuous (or non-operational) color such as black. Alternatively, the login cooperation unit 23 may display the image of the screen displayed by the information processing terminal 20 in the usage restriction state (that is, the state in which the user is not logged in) on the display device 211. In this case, the information processing terminal 20 can appear to the user as if waiting for login.

  Note that the display of the predetermined image by the login cooperation unit 23 may be performed in the first embodiment.

  Further, in each of the embodiments described above, an example in which the image forming apparatus 10 is an example of a device has been described. However, other devices having an authentication function, such as a projector, a video conference system, or a digital camera. The above embodiments may be applied.

  In each of the above embodiments, the information processing terminal 20 is an example of a terminal. The face authentication unit 22 is an example of a first authentication unit. The login cooperation unit 23 is an example of a transmission unit. The user authentication unit 121 is an example of a second authentication unit. The OS 21 is an example of a release unit. The display device 211 is an example of a display unit.

  Although the embodiments of the present invention have been described in detail above, the present invention is not limited to such specific embodiments, and various modifications can be made within the scope of the gist of the present invention described in the claims. Modifications and changes are possible.

Reference Signs List 1 information processing system 10 image forming apparatus 11 controller 12 scanner 13 printer 14 modem 15 operation panel 16 network interface 17 SD card slot 20 information processing terminal 21 OS
22 face authentication unit 23 login cooperation unit 80 SD card 111 CPU
112 RAM
113 ROM
114 HDD
115 NVRAM
121 User authentication unit 201 CPU
202 Memory 203 Auxiliary Storage Device 204 Touch Panel 205 Wireless Communication Device 206 Camera 211 Display Device 212 Input Device

JP 2017-062678 A

Claims (7)

An information processing system including a terminal capable of communicating with a device and the device,
The terminal is
A first authentication unit for authenticating the user in response to input of the user's biometric information;
And a transmitter configured to transmit identification information of the user to the device in response to the success of user authentication by the first authentication unit.
The device is
And a second authentication unit configured to authenticate the user based on the identification information, and release the restricted state of the device when the authentication is successful.
An information processing system characterized by this. The terminal is
And a release unit configured to release the restricted state of the terminal according to the success of the user authentication by the first authentication unit,
After the transmission of the identification information, the transmission unit returns the state in which the use of the terminal is restricted.
The information processing system according to claim 1, characterized in that: The transmission unit inquires the device whether or not the use of the device is restricted after transmitting the identification information, and a response indicating that the use is restricted is returned from the device. Return to a state where usage is restricted for the device,
The information processing system according to claim 1 or 2, characterized in that: The transmission unit displays a predetermined screen on the display unit of the terminal in response to the success of the authentication of the user by the first authentication unit.
The information processing system according to any one of claims 1 to 3. An information processing terminal capable of communicating with a device,
On the computer,
An authentication procedure for authenticating the user in response to the input of the biometric information of the user;
An information processing terminal capable of installing a program for executing a transmission procedure for transmitting identification information of the user to the device that authenticates the user based on the identification information in response to success of user authentication in the authentication procedure . A terminal that can communicate with the device
A first authentication procedure for authenticating the user according to the input of the biometric information of the user;
Executing a transmission procedure of transmitting identification information of the user to the device according to the success of the authentication of the user according to the first authentication procedure;
The device
Performing authentication of the user based on the identification information, and performing a second authentication procedure for releasing the restricted state of the device when the authentication is successful;
An information processing method characterized by the above. In the information processing terminal that can communicate with the device,
An authentication procedure for authenticating the user in response to the input of the biometric information of the user;
A transmission procedure for transmitting identification information of the user to the device that authenticates the user based on the identification information according to the success of the authentication of the user in the authentication procedure;
A program characterized by causing

Images