JP2023170083A - Image forming apparatus, information processing system, information processing method, and program - Google Patents

Abstract

To provide a technique that, even when data cannot be directly acquired from it storage place, can indirectly acquire data from the storage place of the data via an information processing apparatus.SOLUTION: An image forming apparatus is connected to an information processing apparatus via a network. The image forming apparatus includes: a determination unit that determines if data can be directly acquired from a storage place of the data based on index information in which bibliographic information on the data and information on the storage place of the data are associated with each other; and a processing unit that, based on a result of determination made by the determination unit, indirectly acquires the data from the storage place via the information processing apparatus.SELECTED DRAWING: Figure 6

Description

The present invention relates to an image forming apparatus, an information processing system, an information processing method, and a program.

There is a printing system in which print data is stored in a cloud server, a user selects desired print data on an arbitrary image forming apparatus, and the selected print data is acquired from the cloud server and printed on the image forming apparatus. This printing method is called cloud secure print.

Further, in order to increase the security of print data, there is a system in which print data is stored in a client terminal and only index information of the print data is managed by a cloud server (for example, Patent Document 1). The index information includes print data storage location information. The image forming apparatus acquires print data from the client terminal based on the index information and prints it. This printing method is called cloud client secure print.

With Cloud Client Secure Print, the cloud server manages the print data storage location information in the latest state, so even if the print data storage location information is changed automatically or manually, the print data cannot be transferred from the client terminal. can be obtained. However, the general printing protocol is a communication protocol that assumes that the image forming apparatus and the client terminal belong to the same network. Therefore, the image forming apparatus may not be able to acquire print data from the client terminal, such as when the image forming apparatus and the client terminal belong to different networks. On the other hand, cloud secure print saves print data on a cloud server, which reduces security risks but does not eliminate them.

In view of the above points, there is a need for a technology that can indirectly obtain data from a data storage location via an information processing device even when data cannot be directly obtained from the data storage location.

Therefore, in order to solve the above problems, one aspect of the present disclosure provides an image forming apparatus that connects to an information processing apparatus via a network, the image forming apparatus including an index that associates bibliographic information of data with storage location information of the data. a determination unit that determines whether the data can be directly acquired from the storage location of the data based on information; An image forming apparatus is provided, including a processing unit that indirectly acquires data.

According to one aspect of the present disclosure, even if data cannot be directly acquired from a data storage location, data can be indirectly acquired from the data storage location via an information processing device.

1 is a diagram illustrating an example of a system configuration of an information processing system according to a first embodiment. 1 is a diagram illustrating an example of a hardware configuration of an information processing device according to a first embodiment; FIG. 1 is a diagram illustrating an example of a hardware configuration of an image forming apparatus according to a first embodiment; FIG. FIG. 2 is a diagram illustrating an example of a functional configuration of a client terminal according to the first embodiment. 1 is a diagram illustrating an example of a functional configuration of an information processing device according to a first embodiment; FIG. 1 is a diagram showing an example of a functional configuration of an image forming apparatus according to a first embodiment; FIG. It is a figure showing an example of index information for registration concerning a 1st embodiment. FIG. 3 is a diagram showing an example of a bibliographic information table according to the first embodiment. FIG. 3 is a diagram showing an example of a storage location information table according to the first embodiment. FIG. 3 is a diagram illustrating an example of job list index information according to the first embodiment. FIG. 3 is a diagram illustrating an example of an index information transmission sequence according to the first embodiment. FIG. 3 is a diagram illustrating an example of a job list acquisition sequence according to the first embodiment. FIG. 3 is a diagram illustrating an example of a print sequence according to the first embodiment. FIG. 2 is a diagram illustrating an example of a data acquisition sequence in the same network according to the first embodiment. FIG. 3 is a diagram illustrating an example of a data acquisition sequence in different networks according to the first embodiment. It is a figure which shows an example of the data acquisition flowchart based on 2nd Embodiment. FIG. 7 is a diagram illustrating an example of a secure print UI (user interface) of an image forming apparatus according to a second embodiment. FIG. 7 is a diagram illustrating an example of a functional configuration of a client terminal according to a third embodiment. FIG. 7 is a diagram illustrating an example of a functional configuration of an image forming apparatus according to a third embodiment. FIG. 7 is a diagram illustrating an example of an encrypted data acquisition sequence according to a third embodiment. FIG. 7 is a diagram showing an example of a common key setting UI of a client terminal according to a third embodiment. FIG. 7 is a diagram illustrating an example of a common key input UI of an image forming apparatus according to a third embodiment. FIG. 7 is a diagram illustrating an example of a job list UI of an image forming apparatus according to a fourth embodiment. FIG. 7 is a diagram illustrating an example of a job list UI of an image forming apparatus according to a fourth embodiment.

Embodiments of the present disclosure will be described in detail below with reference to the drawings.

(First embodiment)
The information processing system 100 according to the first embodiment will be described below.

<System configuration>
FIG. 1 is a diagram showing an example of a system configuration of an information processing system 100 according to the present embodiment. The information processing system 100 includes a client terminal 11, an image forming apparatus 12, and a service providing system 20, which are interconnected via networks N1 to N4. The service providing system 20 includes an access control device 21 and a service providing device 22.

In this embodiment, a printing system will be described as an example of the information processing system 100. The information processing system 100 includes a cloud client secure print function. That is, the information processing system 100 stores print data in the client terminal 11, manages index information of the print data in the service providing device 22, acquires the print data from the client terminal 11 based on the index information, and acquires the print data from the image forming device. Print at 12. Note that the index information is information that associates bibliographic information of print data with storage location information of print data. From the viewpoint of print data security, the image forming apparatus 12 does not save print data. The client terminal 11 is an example of a storage location for print data.

The network N1 is, for example, a private network such as an office network. The network N1 is located inside a firewall FW1, for example, and the firewall FW1 is installed at a contact point between the network N1 and the network N4. The firewall FW1 detects and blocks unauthorized access. For example, a client terminal 11 and an image forming apparatus 12 managed by a company 10 are connected to the network N1. The client terminal 11 and image forming apparatus 12 managed by the company 10 belong to the same network N1.

The network N2 is a private network such as a BYOD (Bring Your Own Device) network. The network N2 is located inside a firewall FW2, for example, and the firewall FW2 is installed at a contact point between the network N2 and the network N4. The firewall FW2 detects and blocks unauthorized access. A personal client terminal 11 used for business purposes at a residence 13, for example, is connected to the network N2. The personal client terminal 11 and the image forming apparatus 12 managed in the residence 13 belong to different networks N2 and N1.

The client terminal 11 is realized by a computer equipped with a general OS or the like. The client terminal 11 has a wireless communication means or a wired communication means. The client terminal 11 is a terminal that can be operated by a user, such as a smartphone, a mobile phone, a tablet PC (Personal Computer), or a notebook PC. The client terminal 11 stores print data. The client terminal 11 is an example of a terminal device.

The image forming device 12 is a device that performs processing related to image formation, and is realized by, for example, a copy machine, a scanner, a printer, or a multifunction device in which these devices are mounted in one housing. The image forming apparatus 12 has a wireless communication means or a wired communication means. The image forming device 12 is an example of an output device that outputs data. As described later, the output device may be a projection device such as a projector, a display device such as an electronic whiteboard, an audio output device such as a video conference terminal, or a transmitting device such as a facsimile.

The image forming apparatus 12 directly acquires print data stored in the client terminal 11 from the client terminal 11. For example, the image forming apparatus 12 directly communicates with the client terminal 11 to obtain print data from the client terminal 11 . Alternatively, the image forming apparatus 12 indirectly acquires print data from the client terminal 11 via the service providing apparatus 22. For example, the image forming apparatus 12 directly communicates with the service providing apparatus 22 and requests print data from the service providing apparatus 22. The service providing device 22 directly communicates with the client terminal 11 and provides print data acquired from the client terminal 11 to the image forming device 12. In order to increase the security of the print data, the image forming apparatus 12 prints the acquired print data without storing it within the image forming apparatus 12.

Network N3 is a network in which service providing system 20 exists. For example, the service providing system 20 is a cloud system that provides cloud services. The service providing system 20 is realized by an access control device 21 and a service providing device 22. The network N3 is connected to the network N4 via an access control device 21, and security is ensured by the access control device 21. An access control device 21 and a service providing device 22 are connected to the network N3.

The access control device 21 and the service providing device 22 are realized by a computer equipped with a general server OS or the like. The access control device 21 restricts the client terminal 11 or image forming device 12 that accesses the service providing device 22 .

The service providing device 22 provides an index service to the image forming device 12. The index service is a service that provides index information of print data to the image forming apparatus 12. The service providing device 22 registers index information of print data in response to an index information registration request from the client terminal 11. Further, the service providing device 22 provides index information of print data in response to an index information acquisition request from the image forming device 12.

The access control device 21 and the service providing device 22 are realized by separate information processing devices (computers). Alternatively, the access control device 21 and the service providing device 22 may be realized by one information processing device. Further, the service providing device 22 may be realized by being distributed among a plurality of information processing devices. Furthermore, the service providing device 22 may provide services in cooperation with an external service providing device existing in a network external to the network N3.

The network N4 is, for example, a WAN (Wide Area Network) or the Internet, and is a network that connects different networks N1, N2, and N3.

<Hardware configuration>
<<Information processing device>>
The hardware configuration of the information processing device (computer) will be described below. FIG. 2 is a diagram showing an example of the hardware configuration of the information processing device according to the present embodiment. The client terminal 11, the access control device 21, and the service providing device 22 are realized by an information processing device having the hardware configuration shown in FIG.

The information processing device includes a CPU 501, a ROM 502, a RAM 503, an HD 504, and an HDD controller 505. The information processing device also includes a display 506, an external device connection I/F 508, a network I/F 509, and a data bus 510. Further, the information processing apparatus includes a keyboard 511, a pointing device 512, an optical drive 514, and a media I/F 516.

The CPU 501 controls the operation of the entire information processing apparatus. The ROM 502 stores programs used to drive the CPU 501 such as IPL. The RAM 503 is used as a work area for the CPU 501. RAM 503 is an example of volatile memory. The HD 504 stores various data such as programs. The HD 504 is an example of storage. The HDD controller 505 controls reading and writing of various data to the HD 504 under the control of the CPU 501.

The display 506 displays various information such as a cursor, menu, window, characters, or images. External device connection I/F 508 is an interface for connecting various external devices. External devices include, for example, a USB (Universal Serial Bus) memory, a printer, and the like. The network I/F 509 is an interface for performing data communication using the network N. The data bus 510 includes an address bus, a data bus, etc. for electrically connecting each component such as the CPU 501.

The keyboard 511 is an example of an input means that includes a plurality of keys for inputting characters, numerical values, various instructions, and the like. The pointing device 512 is an example of an input means for selecting or executing various instructions, selecting a processing target, moving a cursor, and the like. The optical drive 514 controls reading and writing of various data to and from the removable recording medium 513. Note that the recording medium 513 includes a CD-R, CD-RW, DVD-R, DVD-RW, or the like. The media I/F 516 controls reading and writing of data to and from a medium 515 such as a flash memory. Media 515 is an example of nonvolatile memory.

<<Image forming apparatus>>
FIG. 3 is a diagram showing an example of the hardware configuration of the image forming apparatus 12 according to the present embodiment. The image forming apparatus 12 includes a controller 910, a short-range communication circuit 920, an engine control section 930, an operation panel 940, and a network I/F (interface) 950.

The controller 910 includes a CPU (Central Processing Unit) 901, MEM-P (System Memory) 902, NB (North Bridge) 903, and SB (South Bridge) 904, which are the main parts of the computer. The controller 910 includes an ASIC (Application Specific Integrated Circuit) 906 and a MEM-C (local memory) 907. Further, the controller 910 includes an HDD (Hard Disk Drive) controller 908 and an HD (Hard Disk) 909. The controller 910 connects the NB 903 and the ASIC 906 via an AGP (Accelerated Graphics Port) bus 921.

A CPU 901 controls the entire image forming apparatus. NB903 is a bridge for connecting CPU901, MEM-P902, SB904, and AGP bus 921. The NB 903 includes a memory controller that controls reading and writing from and to the MEM-P 902, a PCI (Peripheral Component Interconnect) master, and an AGP target.

The MEM-P 902 includes a ROM (Read Only Memory) 902a that is a memory for storing programs or data that implements various functions of the controller 910. The MEM-P 902 also includes a RAM (Random Access Memory) 902b used as a drawing memory for developing a program or data and printing the memory. Note that the program stored in the RAM 902b may be provided as an installable or executable file recorded on a computer-readable recording medium such as a CD-ROM, CD-R, or DVD.

The SB904 is a bridge for connecting the NB903 to PCI devices, peripheral devices, and the like. The ASIC 906 is an IC (Integrated Circuit) for image processing that includes hardware elements for image processing.

The ASIC 906 has the role of a bridge that connects the AGP bus 921, PCI bus 922, HDD controller 908, and MEM-C 907, respectively. The ASIC 906 includes a PCI target, an AGP master, an ARB (arbiter) that forms the core of the ASIC 906, a memory controller that controls the MEM-C 907, and the like. Further, the ASIC 906 includes a plurality of DMACs (Direct Memory Access Controllers) that rotate image data using hardware logic or the like.

Further, the ASIC 906 includes a PCI unit that transfers data to a scanner 931, a printer 932, and a facsimile 933 via a PCI bus 922. Note that the ASIC 906 may be connected to a USB interface or an IEEE 1394 (Institute of Electrical and Electronics Engineers 1394) interface.

MEM-C907 is a local memory used as a copy image buffer and code buffer. The HD 909 is a storage for storing image data, font data used during printing, forms, and the like. The HDD controller 908 controls data reading or writing to the HD 909 under the control of the CPU 901.

The AGP bus 921 is a bus interface for a graphics accelerator card proposed to speed up graphics processing. AGP bus 921 can accelerate graphics accelerator cards by directly accessing MEM-P 902 with high throughput.

The short-range communication circuit 920 includes a short-range communication antenna 920a. The near field communication circuit 920 is a communication circuit such as NFC (Near Field Communication) or Bluetooth (registered trademark).

The engine control unit 930 includes a scanner 931, a printer 932, a facsimile 933, and the like.

The operation panel 940 includes a display input section 940a such as a touch panel that displays current setting values, a selection screen, etc., and receives user input. The operation panel 940 also includes an operation section 940b that includes a numeric keypad that accepts setting values for conditions related to image formation, such as density setting conditions, and a start key that accepts a copy start instruction.

The controller 910 performs overall control of the image forming apparatus 12, and controls, for example, drawing, communication, input from the operation panel 940, and the like. The scanner 931 is a reading device that reads a document or the like. The printer 932 is a printing device that prints print data on a print medium. The scanner 931 or printer 932 has image processing functions such as error diffusion and gamma conversion. The facsimile 933 is a facsimile device that transmits data read by the scanner 931 by facsimile.

Note that the image forming apparatus can sequentially switch and select a document box function, a copy function, a printer function, and a facsimile function using an application switching key on the operation panel 940. When the document box function is selected, the mode becomes document box mode, when the copy function is selected, the mode becomes copy mode, when the printer function is selected, the mode becomes printer mode, and when the facsimile mode is selected, the mode becomes facsimile mode.

Further, the network I/F 950 is an interface for performing data communication using the network N. Near field communication circuit 920 and network I/F 950 are electrically connected to ASIC 906 via PCI bus 922.

<Functional configuration>
An example of the functional configuration of the information processing system 100 according to this embodiment will be described below.

<<Client terminal>>
FIG. 4 is a diagram showing an example of the functional configuration of the client terminal 11 according to this embodiment. The client terminal 11 includes a data management section 31, an index information processing section 32, and a communication section 33. The data management section 31, index information processing section 32, and communication section 33 are realized by processing executed by one or more programs installed in an information processing device (computer) by a processor such as the CPU 501.

The data management unit 31 stores print data in nonvolatile memory or storage. For example, the data management unit 31 obtains a job ID of print data, associates the print data with the job ID, and writes the print data into a nonvolatile memory or storage. In addition, the data management unit 31 reads print data corresponding to the job ID from the nonvolatile memory or storage in response to data acquisition requests from various devices connected via the network, and sends a data transmission command to the communication unit 33. .

The index information processing unit 32 generates index information in which bibliographic information of the print data is associated with storage location information of the print data. The index information processing section 32 also sends a data storage command for print data to the data management section 31. The index information processing unit 32 sends an index information registration request to the communication unit 33.

The communication unit 33 performs communication control on various devices connected via the network. The communication unit 33 performs transmission control to transmit index information of print data to the service providing device 22 . The communication unit 33 also performs transmission control to transmit print data to various devices in response to data acquisition requests from various devices connected via the network.

Communication of index information uses a communication protocol that allows bidirectional communication between the client terminal 11 and the service providing device 22. HTTPS (Hypertext Transfer Protocol Secure) or Websocket is an example of a communication protocol that allows bidirectional communication. By using a protocol that allows bidirectional communication, index information registration requests can be made bidirectionally, so the service providing device 22 can manage index information in the latest state.

<<Service providing device>>
FIG. 5 is a diagram showing an example of the functional configuration of the service providing device 22 according to this embodiment. The service providing device 22 includes an index management section 41 and a communication section 42. The index management unit 41 and the communication unit 42 are realized by processing executed by a processor such as the CPU 501 by one or more programs installed in an information processing device (computer).

The index management unit 41 writes index information of print data into a nonvolatile memory or storage. Furthermore, the index management section 41 reads index information of print data from a nonvolatile memory or storage, and sends an index information transmission request to the communication section 42 . Note that the nonvolatile memory or storage that stores the index information may be an external nonvolatile memory or external storage that is connected to the service providing device 22 via a network. Further, the index management unit 41 may store the index information in a data table of a database, for example.

The communication unit 42 performs communication control on various devices connected via the network. For example, the communication unit 42 performs reception control to receive index information of print data from the client terminal 11. The communication unit 42 also performs transmission control to transmit index information of print data to the image forming apparatus 12. Furthermore, the communication unit 42 performs reception control for receiving print data from the client terminal 11 and transmission control for transmitting print data to the image forming apparatus 12 in response to a data acquisition request from the image forming apparatus 12 .

<<Image forming apparatus>>
FIG. 6 is a diagram showing an example of the functional configuration of the image forming apparatus 12 according to the present embodiment. The image forming apparatus 12 includes a processing section 51 , a printing section 52 , a communication section 53 , a UI section 54 , and a determining section 55 . The processing unit 51, the printing unit 52, the communication unit 53, the UI unit 54, and the determining unit 55 are realized by processing executed by a processor such as the CPU 501 by one or more programs installed in the information processing device (computer).

The processing unit 51 processes jobs related to print data. For example, the processing unit 51 generates job list information based on the index information and sends a job list display command to the UI unit 54. Furthermore, the processing unit 51 sends a data acquisition determination command to the determination unit 55 in response to a user's print command. The processing unit 51 sends a data acquisition request to the client terminal 11 or the service providing device 22 according to the data acquisition determination result. After acquiring the print data, the processing section 51 sends a print command to the printing section 52. The processing unit 51 is realized by, for example, a function of the image forming apparatus 12, a browser application running on a browser, an extended function (SDK (Software Development Kit) application), or the like.

The printing unit 52 controls the printer 932 to print print data in response to a print command. The printing unit 52 is realized by, for example, a printer application.

The communication unit 53 performs communication control for various devices connected via the network. For example, the communication unit 53 performs reception control to receive index information of print data from the service providing device 22 . The communication unit 53 also performs transmission control for transmitting a data acquisition request for print data to the client terminal 11 or the service providing device 22, and reception control for receiving print data from the client terminal 11 or the service providing device 22.

The UI unit 54 performs display control to display a UI for displaying information to the user or inputting information from the user on the display input unit 940a of the operation panel 940. For example, the UI unit 54 displays a job list on the display input unit 940a. The UI unit 54 is realized by, for example, a function of the image forming apparatus 12 or a browser.

The determining unit 55 determines whether print data can be directly acquired from the client terminal 11 based on the index information. The determining unit 55 determines whether print data can be directly acquired from the client terminal 11 based on, for example, whether the image forming apparatus 12 and the client terminal 11 belong to the same network. If the image forming apparatus 12 and the client terminal 11 belong to the same network N1, the determining unit 55 determines that print data can be directly acquired from the client terminal 11. On the other hand, if the image forming apparatus 12 and the client terminal 11 belong to different networks N1 and N2, respectively, the determining unit 55 determines that print data cannot be directly acquired from the client terminal 11. The determination unit 55 is realized by, for example, a function of the image forming apparatus 12, a browser application running on a browser, an extended function (SDK (Software Development Kit) application), or the like.

<Data table structure>
An example of a data table configuration used in the information processing system 100 will be described below.

<<Registration index information>>
FIG. 7 is a diagram showing an example of the registration index information I1 according to the present embodiment. The registration index information I1 is index information transmitted from the client terminal 11 to the service providing device 22. The registration index information I1 is information that associates bibliographic information I2 of print data with storage location information I3 of print data. For example, the registration index information I1 is defined in JSON (JavaScript Object Notation) or the like.

Bibliographic information I2 is information regarding print data. For example, the bibliographic information I2 includes the job ID of the print data (for example, "id":123456789"), the file name (for example, "name":document name.txt"), and the number of pages (for example, "pages":1 ")including. In addition, the bibliographic information I2 includes the number of copies (e.g. "copies":1"), double-sided information (e.g. "duplex":"off"), aggregate information (e.g. "nup":1"), and file size. (for example, "size":1024").

The storage location information I3 is information regarding the storage location of print data. For example, the storage location information I3 includes the client ID (for example, "id":987654321) of the client terminal 11 that stores the print data. Furthermore, the storage location information I3 further includes an IP address (for example, "ip":"123.45.67.89"). In addition, the storage location information I3 further includes a port number (eg, "port":"18080") and a subnet mask (eg, "subnet":"255.255.255.0"). Note that the IP address is IPv4, but may be IPv6.

The index information processing unit 32 generates registration index information I1 that associates bibliographic information I2 of the print data with storage location information I3 of the print data. The index information processing unit 32 transmits an index information registration request to the service providing device 22 via the communication unit 33. The index management unit 41 stores the registration index information I1 in the bibliographic information table and storage location information table of the database.

<<Bibliographic information table and storage location information table>>
FIG. 8 is a diagram showing an example of the bibliographic information table T1 according to the present embodiment, and FIG. 9 is a diagram showing an example of the storage location information table T2 according to the present embodiment.

The bibliographic information table T1 is a data table that uniquely identifies print data. For example, the bibliographic information table T1 includes the job ID of the print data (for example, "123456789"), the client ID of the client terminal 11 (for example, "987654321"), and the user name (for example, "userA"). The bibliographic information table T1 also includes file names (e.g. "document name.txt"), page numbers (e.g. "1"), double-sided information (e.g. "single-sided"), aggregate information (e.g. "none"), and number of copies (e.g. "one-sided"). For example, "1").

Note that the user name will be explained in the second embodiment, but when the service providing device 22 cooperates with an authentication service, the index management unit 41 acquires user identification information such as the user name at the time of user authentication. , is stored in the bibliographic information table T1 of print data. Further, the print data ("Flyer.ppt") whose client ID is "NULL" will be explained in the second embodiment, but if the client ID is "NULL", the print data will not be sent to the client terminal 11. It is stored in the service providing device 22.

The storage location information table T2 is a data table that uniquely identifies the client terminal 11. For example, the storage location information table T2 includes the client ID of the client terminal 11 (for example, "987654321") and the user name (for example, "userA"). Furthermore, the storage location information table T2 further includes an IP address (for example, "123.45.67.89"), a port number (for example, "18080"), and a subnet mask (for example, "255.255.255.0"). Furthermore, the storage location information table T2 further includes the last update date and time of this information (for example, 2021/8/31 0:00).

Note that the user name will be explained in the second embodiment as described above, but when the service providing device 22 cooperates with the authentication service, the index management unit 41 prints user identification information such as the user name. The data is stored in the data storage location table T2.

Further, the last update date and time is the last update date and time when the index information of all the print data stored in the client terminal 11 and the index information of the service providing device 22 are synchronized.

The index management unit 41 generates job list index information from the print data bibliographic information table T1 and the print data storage location information table T2 in response to an index information acquisition request from the image forming apparatus 12.

<<Job list index information>>
FIG. 10 is a diagram showing an example of job list index information I4 according to the present embodiment. The job list index information I4 is index information that the image forming apparatus 12 acquires from the service providing apparatus 22. The job list index information I4 is information in which bibliographic information I2 of print data and storage location information I3 of print data are associated with each other, which is repeated as many times as there are print data. For example, the job list index information I4 is defined in JSON or the like.

Specific examples of the bibliographic information I2 and storage location information I3 are substantially the same as the bibliographic information I2 and storage location information I3 of the registration index information I1 shown in FIG. However, in the example of FIG. 10, the third print data from the top (“flyer.ppt”) is stored in the service providing device 22. Therefore, the index information of the third print data does not associate the storage location information I3 with the bibliographic information I2. Cloud secure print for storing print data in the service providing device 22 will be described in a second embodiment.

When the processing unit 51 transmits an index information acquisition request to the service providing device 22 via the communication unit 53, the processing unit 51 obtains job list index information I4 from the service providing device 22 via the communication unit 53.

<Sequence>
Hereinafter, the index information registration sequence, index information acquisition sequence, print sequence, and data acquisition sequence according to this embodiment will be explained in order.

<<Index information registration sequence>>
FIG. 11 is a diagram showing an example of an index information registration sequence according to this embodiment. The user issues a print command on the client terminal 11 (step S10). The index information processing unit 32 acquires bibliographic information I2 of print data from the printer driver in response to a user's print command. The index information processing unit 32 also obtains print data storage location information I3 using an API (Application Programmable Interface) or the like (step S11). Furthermore, the index information processing unit 32 sends a data storage command for print data to the data management unit 31, and the data management unit 31 stores the print data in accordance with the data storage command (step S12).

The index information processing unit 32 generates index information I1 for registration in which bibliographic information I2 of the print data is associated with storage location information I3 of the print data, and sends an index information registration request to the communication unit 33 (step S13). The communication unit 33 transmits an index information registration request to the communication unit 42 (step S14).

The communication unit 42 sends an index information registration request to the index management unit 41 (step S15). The index management unit 41 registers the registration index information I1 in the bibliographic information table T1 and storage location information table T2 in response to the index information registration request (step S16). The index information processing section 32 obtains the index information registration notification via the communication section 42 and the communication section 33, as shown by the broken line.

<<Index information acquisition sequence>>
FIG. 12 is a diagram illustrating an example of an index information acquisition sequence according to this embodiment. When the user issues a job list acquisition command on the image forming apparatus 12 (step S20), the UI unit 54 sends the job list acquisition command to the processing unit 51 (step S21). The processing unit 51 sends an index information acquisition request to the communication unit 53 in response to the job list acquisition command (step S22).

The communication unit 53 transmits an index information acquisition request to the communication unit 42 (step S23). The communication unit 42 sends an index information acquisition request to the index management unit 41 (step S24). The index management unit 41 acquires job list index information I4 (step S25).

As shown by the broken line, the processing unit 51 acquires job list index information I4 via the communication unit 42 and communication unit 53, generates job list information based on the job list index information I4, and generates job list information. A display command is sent to the UI unit 54. The UI section 54 displays the job list on the display input section 940a of the operation panel 940.

<<Print sequence>>
FIG. 13 is a diagram illustrating an example of a print sequence according to this embodiment. When the user issues a print command for print data in the job list on the image forming apparatus 12 (step S30), the UI unit 54 sends the print command to the processing unit 51 (step S31). The processing unit 51 sends a data acquisition determination command to the determination unit 55 in response to the print command (step S32).

The determining unit 55 determines whether print data can be directly acquired from the client terminal 11 in response to the data acquisition determination command (step S33). Specifically, the determining unit 55 determines whether the image forming apparatus 12 and the client terminal 11 belong to the same network based on the storage location information I3 of the job list index information I4. If the image forming apparatus 12 and the client terminal 11 belong to the same network, the determining unit 55 determines that print data can be directly acquired from the client terminal 11. On the other hand, if the image forming apparatus 12 and the client terminal 11 belong to different networks, the determining unit 55 determines that print data cannot be directly acquired from the client terminal 11.

If the IP address is IPv4, the determination unit 55 compares the network part of the IP address of the image forming apparatus 12 and the network part of the IP address of the client terminal 11. On the other hand, if the IP address is IPv6, the determination unit 55 compares the prefix part of the IP address of the image forming apparatus 12 and the prefix part of the IP address of the client terminal 11.

For example, if the IP address of the image forming apparatus 12 is 123.45.67.10 and the subnet mask is 255.255.255.0, the network address of the image forming apparatus 12 is 123.45.67.0. On the other hand, if the IP address of the client terminal 11 is 123.45.67.89 and the subnet mask is 255.255.255.0, the network address of the client terminal 11 is 123.45.67.0. Therefore, since the image forming apparatus 12 and the client terminal 11 belong to the same network (123.45.67.0), the determining unit 55 determines that the image forming apparatus 12 can directly acquire print data from the client terminal 11. .

On the other hand, if the IP address of the client terminal 11 is 12.34.56.78 and the subnet mask is 255.255.255.0, the network address of the client terminal 11 is 12.34.56.0. Therefore, since the image forming apparatus 12 and the client terminal 11 belong to different networks (123.45.67.0 and 12.34.56.0), the determination unit 55 determines that the image forming apparatus 12 directly acquires print data from the client terminal 11. decide that it is not possible.

The processing unit 51 switches the print data acquisition sequence based on whether the image forming apparatus 12 and the client terminal 11 belong to the same network or different networks, as shown in a bold frame.

When the processing unit 51 is able to acquire print data according to the data acquisition sequence, it sends a print command to the printing unit 52 (step S50). The printing unit 52 controls the printer 932 according to the print command to print the print data (step S51). The processing unit 51 obtains the print completion notification and sends a print completion display command to the UI unit 54, as shown by the broken line. The UI section 54 displays the completion of printing on the display input section 940a of the operation panel 940.

<<Data acquisition sequence>>
FIG. 14 is a diagram illustrating an example of a data acquisition sequence in the same network according to this embodiment, and FIG. 15 is a diagram illustrating an example of a data acquisition sequence in different networks according to this embodiment.

As shown in FIG. 14, when the image forming apparatus 12 and the client terminal 11 belong to the same network, the processing unit 51 directly acquires print data from the client terminal 11. The processing unit 51 sends a data acquisition request for print data to the communication unit 53 (step S40). The communication unit 53 transmits a data acquisition request to the communication unit 33 of the client terminal 11 (step S41).

The communication unit 33 of the client terminal 11 sends a data acquisition request to the data management unit 31 (step S42). The data management unit 31 acquires print data (step S43). The processing unit 51 directly acquires print data from the client terminal 11 via the communication units 33 and 53, as shown by the broken line.

As shown in FIG. 15, when the image forming apparatus 12 and the client terminal 11 belong to different networks, the processing unit 51 indirectly acquires print data from the client terminal 11 via the service providing apparatus 22. . The processing unit 51 sends a data acquisition request for print data to the communication unit 53 (step S44). The communication unit 53 transmits the data acquisition request to the communication unit 42 of the service providing device 22 (step S45).

The communication unit 42 of the service providing device 22 sends a storage location information acquisition command to the index management unit 41 in response to the data acquisition request, and acquires storage location information I3 from the index management unit 41 (step S46). The communication unit 42 transmits a data acquisition request to the communication unit 33 of the client terminal 11 based on the storage location information I3 (step S47). The communication unit 33 sends a data acquisition request to the data management unit 31 (step S48). The data management unit 31 acquires print data (step S49). The processing unit 51 indirectly acquires print data from the client terminal 11 via the service providing device 22, as shown by the broken line.

(Operations and effects of the first embodiment)
According to this embodiment, even when the image forming apparatus 12 cannot directly acquire print data from the client terminal 11, the service providing apparatus 22 can store the print data in the secure client terminal 11 to ensure security. Print data can be reliably obtained via This embodiment is particularly advantageous when print data cannot be directly obtained from the client terminal 11 because the image forming apparatus 12 and the client terminal 11 belong to different networks.

(Second embodiment)
The information processing system 100 according to the second embodiment will be described below. In this embodiment, the information processing system 100 has a cloud secure print function in addition to a cloud client secure print function. In other words, the information processing system 100 not only stores print data in the client terminal 11, but also stores the print data in the service providing device 22, obtains the print data from the client terminal 11 or the service providing device 22, and forms an image. The device 12 prints. Note that for security reasons, the image forming apparatus 12 does not save print data.

Furthermore, in the second embodiment, the service providing device 22 cooperates with other service providing devices that provide authentication services. Alternatively, the service providing device 22 may also have the function of an authentication service. The index management unit 41 acquires user identification information such as a user name from authentication information during user authentication, and manages the user identification information in association with index information of print data. That is, the index management unit 41 manages print data for each user, and the processing unit 51 acquires a job list of print data for each user.

The system configuration, hardware configuration, functional configuration, data table configuration, etc. of the information processing system 100 according to the present embodiment are the same as those in the first embodiment, and therefore description thereof will be omitted.

<Data acquisition flowchart>
A data acquisition flowchart according to the second embodiment will be described below. FIG. 16 is a diagram illustrating an example of a data acquisition flowchart according to this embodiment. FIG. 16 shows a processing procedure in which the image forming apparatus 12 switches and executes the cloud client secure print function and the cloud secure print function.

The user logs in to the service providing system 20 using the image forming apparatus 12 (step S60). The service providing device 22 performs user authentication in cooperation with an authentication service. The index management unit 41 acquires user identification information such as a user name from authentication information at the time of user authentication, and manages index information in which the user identification information is associated with bibliographic information I2 and storage location information I3. The index management unit 41 generates job list index information I4 corresponding to the user, and transmits it to the processing unit 51 of the image forming apparatus 12 via the communication unit 42. The UI unit 54 displays a job list for each user based on the job list index information I4.

The user selects print data from the displayed job list and issues a print command (step S61). The processing unit 51 determines whether the selected print data is stored in the client terminal 11 based on the job list index information I4 (step S62). For example, when the user selects "Flyer.ppt" in FIG. 8, the index information of "Flyer.ppt" has a client ID of "NULL" and does not have storage location information I3. Therefore, the processing unit 51 determines that "flyer.ppt" is not stored in the client terminal 11 (NO in step S62). The processing unit 51 determines that "flyer.ppt" is stored in the service providing device 22, and acquires "flyer.ppt" from the service providing device 22 (step S66).

On the other hand, for example, when the user selects "document name.txt" in FIG. 8, the index information of "document name.txt" has the client ID "987654321" and storage location information I3. . Therefore, the processing unit 51 determines that "document name.txt" is stored in the client terminal 11 (YES in step S62). If it is determined that the print data is stored in the client terminal 11, the determination unit 55 determines whether the print data can be directly acquired from the client terminal 11 (step S63).

For example, if the IP address of the image forming apparatus 12 is 123.45.67.10 and the subnet mask is 255.255.255.0, the network address of the image forming apparatus 12 is 123.45.67.0. On the other hand, for example, if the IP address of the client terminal 11 that stores "document name.txt" in FIG. 8 is 123.45.67.89 and the subnet mask is 255.255.255.0, the network address of the client terminal 11 is 123.45.67.0. Therefore, the image forming apparatus 12 and the client terminal 11 belong to the same network (123.45.67.0). Therefore, the determining unit 55 determines that "document name.txt" can be directly acquired from the client terminal 11 (YES in step S63). The processing unit 51 directly acquires "document name.txt" from the client terminal 11 (step S64).

On the other hand, for example, if the IP address of the client terminal 11 that stores "Spreadsheet 1.txt" in FIG. 8 is 12.34.56.78 and the subnet mask is 255.255.255.0, the network address of the client terminal 11 is 12.34.56.0. Therefore, the image forming apparatus 12 and the client terminal 11 belong to different networks (123.45.67.0 and 12.34.56.0). Therefore, the determining unit 55 determines that "spreadsheet 1.txt" cannot be directly acquired from the client terminal 11 (NO in step S63). The processing unit 51 indirectly acquires "spreadsheet 1.txt" from the client terminal 11 via the service providing device 22 (step S65).

<Image forming device UI>
The UI of the image forming apparatus 12 when acquiring data via the service providing apparatus 22 will be described below. FIG. 17 is a diagram illustrating an example of the secure print UI of the image forming apparatus 12 according to the present embodiment.

The UI section 54 displays a login UI 60, a job list UI 61, a standby UI 62, an acquisition route confirmation UI 63, and a print completion notification UI 64 on the display input section 940a of the operation panel 940 of the image forming apparatus 12.

The login UI 60 is a login screen to the service providing system 20. The login UI 60 includes an authentication method selection list 60a, an authentication information input box 60b, and a login button 60c. The authentication method includes a user ID and password (eg, email address and password, etc.), card authentication (eg, IC (Integrated Circuit) card, etc.), biometric authentication (eg, fingerprint, iris, etc.), and the like.

When the user selects an authentication method from the authentication method selection list 60a, enters authentication information into the authentication information input box 60b, and presses the login button 60c, the UI unit 54 transmits the authentication information to the service providing device 22. The index management unit 41 performs user authentication in cooperation with the authentication service, and when the user authentication is successful, generates job list index information I4 corresponding to the user and sends it back to the processing unit 51.

The job list UI 61 is a job list display screen that displays a job list corresponding to the user. The job list UI includes a job list table 61a, a data selection box 61b, and a start button 61c. When the user checks the desired data selection box 61b from the job list table 61a and presses the start button 61c, the UI section 54 displays the standby UI 62 on the display input section 940a.

The standby UI 62 is a standby screen displayed while acquiring print data. While the UI unit 54 is displaying the standby UI 62, the processing unit 51 determines whether print data is stored in the client terminal 11 based on the job list index information I4. If the print data is stored in the client terminal 11, the determining unit 55 determines whether the print data can be directly acquired from the client terminal 11. If print data cannot be directly acquired from the client terminal 11, the UI unit 54 displays an acquisition route confirmation UI 63 on the display input unit 940a.

The acquisition route confirmation UI 63 is an acquisition route confirmation screen for confirming to the user that print data will be indirectly acquired from the client terminal 11 via the service providing device 22. The acquisition route confirmation UI 63 includes a cancel button 63a and an agree button 63b. If the user does not agree to acquiring print data via the service providing device 22 from the viewpoint of print data security, the user presses the cancel button 63a to cancel printing. On the other hand, if the user agrees to acquire print data via the service providing device 22, the user presses the consent button 63b to agree to the acquisition route.

When the user presses the consent button 63b and agrees to the print data acquisition route, the processing unit 51 transmits a data acquisition request to the service providing device 22. The service providing device 22 further transmits a data acquisition request to the client terminal 11 with reference to the print data storage location information table T2. The data management unit 31 acquires print data and transmits the print data to the processing unit 51 via the service providing device 22. The processing unit 51 sends the acquired print data to the printing unit 52, and the printing unit 52 controls the printer 932 to print the print data. When printing is completed, the UI unit 54 displays a print completion notification UI 64 on the display input unit 940a.

The print completion notification UI 64 is a print completion notification screen that notifies the completion of printing.

(Modified example of second embodiment)
A modification of this embodiment will be described. The service providing device 22 may cooperate with an authentication service that performs tenant authentication. The index management unit 41 may acquire tenant identification information such as a tenant name from authentication information during tenant authentication, and manage index information in which the tenant identification information is associated with bibliographic information I2 and storage location information I3 of print data. . Note that a tenant is an organization such as a company, department, training class, etc. that has a service contract. That is, the index management unit 41 manages print data for each tenant, and the processing unit 51 acquires a job list of print data for each tenant. User identification information or tenant identification information is an example of account information.

(Operations and effects of the second embodiment)
According to this embodiment, it is possible to provide an information processing system 100 that has two functions: cloud client secure print and cloud secure print. In other words, print data with relatively high confidentiality is stored in the client terminal 11, and print data with relatively low confidentiality is stored in the service providing device 22, thereby ensuring security according to the importance of the print data. can be secured.

Furthermore, since the service providing device 22 cooperates with the authentication service, print data can be managed for each user, so the security of print data can be ensured for each user.

Furthermore, since the acquisition route confirmation UI 63 is displayed to confirm that print data is indirectly acquired via the service providing device 22, it is convenient for users who think that printing via the service providing device 22 itself is undesirable for security reasons. Improves sex.

(Third embodiment)
The information processing system 100 according to the third embodiment will be described below. In this embodiment, when the image forming apparatus 12 indirectly acquires print data from the client terminal 11 via the service providing apparatus 22, the client terminal 11 encrypts the print data and transmits it. In this embodiment, a public key cryptosystem or the like is used as the encryption method.

The system configuration, hardware configuration, data table configuration, etc. of the information processing system 100 according to this embodiment are the same as those in the first embodiment, and therefore descriptions thereof will be omitted.

<Functional configuration>
An example of the functional configuration of the information processing system 100 according to this embodiment will be described below.

<<Client terminal>>
FIG. 18 is a diagram showing an example of the functional configuration of the client terminal 11 according to this embodiment. The client terminal 11 further includes an encryption processing section 34. The cryptographic processing unit 34 is realized by one or more programs installed in an information processing device (computer) that causes a processor such as the CPU 501 to execute the process.

The encryption processing unit 34 performs encryption processing on print data when the print data is transmitted from the client terminal 11 to the image forming apparatus 12 via the service providing device 22 . For example, the cryptographic processing unit 34 obtains a public key from the service providing device 22 and encrypts print data using the public key.

<<Image forming apparatus>>
FIG. 19 is a diagram showing an example of the functional configuration of the image forming apparatus 12 according to this embodiment. The image forming apparatus 12 further includes an encryption processing section 56. The cryptographic processing unit 56 is realized by one or more programs installed in the image forming apparatus 12 (computer) that cause a processor such as the CPU 901 to execute the process.

The cryptographic processing unit 56 performs cryptographic processing on the print data when indirectly acquiring the print data from the client terminal 11 via the service providing device 22 . For example, the cryptographic processing unit 56 generates a public key/private key pair, publishes the public key, and stores the private key. The cryptographic processing unit 56 discloses the public key to, for example, the service providing device 22. The encryption processing unit 56 decrypts the encrypted print data using the secret key.

<Sequence>
The encrypted data acquisition sequence according to this embodiment will be described below. FIG. 20 is a diagram illustrating an example of an encrypted data acquisition sequence according to this embodiment. The encrypted data acquisition sequence of this example is a process subsequent to step S33 in FIG. 13. In other words, the encrypted data acquisition sequence of this example is performed after the determination unit 55 determines that print data cannot be directly acquired from the client terminal 11 because the image forming apparatus 12 and the client terminal 11 belong to different networks. This shows the processing of

The processing unit 51 sends a key generation command to the encryption processing unit 56 in order to indirectly obtain print data from the client terminal 11 via the service providing device 22 (step S60). The cryptographic processing unit 56 generates a public key/private key pair every time print data is indirectly acquired from the client terminal 11 via the service providing device 22. The processing unit 51 sends a data acquisition request including the public key to the communication unit 53 (step S44). The communication unit 53 transmits a data acquisition request including the public key to the communication unit 42 of the service providing device 22 (step S45).

The communication unit 42 sends a storage location information acquisition command to the index management unit 41 in response to the data acquisition request, and acquires storage location information I3 from the index management unit 41 (step S46). The communication unit 42 transmits a data acquisition request including the public key to the communication unit 33 of the client terminal 11 based on the storage location information I3 (step S47). The communication unit 33 sends a data acquisition request to the data management unit 31 (step S48).

The communication unit 33 sends an encryption command including the public key to the encryption processing unit 34 (step S61). The cryptographic processing unit 34 encrypts the print data using the public key in accordance with the encryption command (step S62). The processing unit 51 indirectly acquires encrypted print data from the client terminal 11 via the service providing device 22, as shown by the broken line.

The processing unit 51 sends a decryption command to the encryption processing unit 56 (step S63). The cryptographic processing unit 56 decrypts the print data using the secret key (step S64).

(Modification of third embodiment)
A modification of this embodiment will be described. The information processing system 100 encrypts print data using a common key cryptosystem instead of a public key cryptosystem.

FIG. 21 is a diagram showing an example of the common key setting UI of the client terminal 11 according to the present embodiment. When the user issues a print command using the printer driver UI 70 of the client terminal 11, the encryption processing unit 34 displays on the display 506 a common key setting UI 71 for setting a password (common key) for secure printing.

The common key setting UI 71 includes a common key setting box 71a. When the user sets a password (common key) in the common key setting box 71a, the encryption processing unit 34 stores the common key in a nonvolatile memory or storage. The encryption processing unit 34 encrypts the print data using the common key when the print data is transmitted from the client terminal 11 to the image forming apparatus 12 via the service providing apparatus 22. When the index information processing unit 32 transmits the registration index information I1 to the service providing device 22, the index information processing unit 32 displays a print data registration completion UI 72.

FIG. 22 is a diagram illustrating an example of the common key input UI of the image forming apparatus 12 according to the present embodiment. When the user logs in to the service providing system 20 using the login UI 60 of the image forming apparatus 12, the UI section 54 displays the job list UI 61 on the display input section 940a. When the user checks the data selection box 61b on the job list UI 61 and presses the start button 61c, the UI section 54 displays the standby UI 62 on the display input section 940a.

While the UI unit 54 is displaying the standby UI 62, the determining unit 55 determines whether print data can be directly acquired from the client terminal 11. If print data cannot be directly acquired from the client terminal 11, the UI unit 54 displays an acquisition route confirmation UI 63 on the display input unit 940a. Only when the user presses the consent button 63b on the acquisition route confirmation UI 63 and agrees to change the acquisition route, the processing unit 51 transmits a data acquisition request to the service providing device 22, and sends the data acquisition request to the client via the service providing device 22. Print data is acquired indirectly from the terminal 11.

The cryptographic processing unit 34 encrypts the print data using the common key in response to the data acquisition request. The communication unit 33 transmits the encrypted print data to the processing unit 51 via the service providing device 22. When the processing unit 51 obtains encrypted print data, it sends a decryption command to the encryption processing unit 56 .

The encryption processing unit 56 displays a common key input UI 73 for inputting a password (common key) for printing (decoding) print data on the display input unit 940a. The user inputs the password (common key) set on the client terminal 11 into the common key input box 73a. The cryptographic processing unit 56 decrypts the print data using the common key. The processing unit 51 sends the decoded print data to the printing unit 52, and the printing unit 52 controls the printer 932 to print the print data. When printing is completed, the UI unit 54 displays a print completion notification UI 64 on the display input unit 940a.

Note that the information processing system 100 may encrypt print data using a hybrid encryption method that combines a public key encryption method and a common key encryption method.

(Operations and effects of the third embodiment)
According to this embodiment, even when print data is indirectly acquired from the client terminal 11 via the service providing device 22, the service providing device 22 cannot decrypt the print data, so the security of the print data can be improved.

Furthermore, when using public key cryptography, a pair of public key and private key is generated every time print data is indirectly obtained from the client terminal 11 via the service providing device 22, so the private key may be leaked. Even if this happens, the damage can be kept to a minimum.

On the other hand, when using a common key encryption method, the user sets a password (common key) for the print data, so there is a security risk that a malicious person could print the print data without permission due to leakage of the login password or loss of the IC card. can be reduced.

Note that when a hybrid cryptosystem is used, the effects of both the public key cryptosystem and the common key cryptosystem can be enjoyed.

(Fourth embodiment)
The information processing system 100 according to the fourth embodiment will be described below. In this embodiment, when the client terminal 11 is offline, the image forming apparatus 12 displays a job list that does not allow selection of print data stored in the client terminal 11.

Note that the offline state means a state in which the service providing device 22 cannot communicate with the client terminal 11. For example, a case where the power of the client terminal 11 is not turned on or a case where the software (index information processing unit 32) of the client terminal 11 is not started are examples of an offline state.

Note that the client terminal 11 needs to periodically synchronize the index information of all stored print data with the index information of the service providing device 22. It is preferable that the client terminal 11 synchronizes index information with the service providing device 22 only when printing data is stored. In other words, the client terminal 11 notifies the service providing apparatus 22 of the connection state (online state) of the client terminal 11 to the network only when print data is stored. Note that the connection state to the network does not mean a physical connection state but a software connection state (communication state).

The service providing device 22 determines that the client terminal 11 is in an offline state if there is no index information synchronization processing (notification of connection state) from the client terminal 11 for a predetermined period. For example, the index management unit 41 manages the connection state of the client terminal 11 to the network in association with index information. The image forming apparatus 12 determines the connection status of the client terminal 11 to the network based on index information that associates the connection status of the client terminal 11 with the connection status of the client terminal 11 .

FIG. 23 is a diagram illustrating an example of the job list UI 61 of the image forming apparatus 12 according to the present embodiment. When the client terminal 11 is offline, the processing unit 51 generates a job list that does not allow the print data 61d ("50.txt") stored in the client terminal 11 to be selected. The UI unit 54 displays a job list UI 61 that does not allow selection of the print data 61d by graying out the print data 61d ("50.txt") stored in the client terminal 11.

Further, the UI unit 54 preferably displays an offline icon 61e indicating that the client terminal 11 is in an offline state in association with the print data 61d of the job list. Further, the UI unit 54 may display an offline notification UI 61f that notifies that the client terminal 11 is in an offline state. For example, the offline notification UI 61f is an offline notification dialog. The offline notification UI 61f may include a message that notifies the user that the client terminal 11 will be connected to the network.

(Modified example of the fourth embodiment)
FIG. 24 is a diagram illustrating an example of a job list UI 61 of the image forming apparatus 12 according to a modification of the present embodiment. In this example, when the client terminal 11 is offline, the UI unit 54 displays a job list that does not allow selection of the print data 61d by not displaying the print data 61d ("50.txt") stored in the client terminal 11. Display UI.

Further, the UI unit 54 may display an offline notification UI 61f that notifies that the client terminal 11 is in an offline state. For example, the offline notification UI 61f is an offline notification dialog. The offline notification UI 61f may include a message prompting the client terminal 11 to connect to the network.

(Operations and effects of the fourth embodiment)
According to the present embodiment, when the client terminal 11 is offline, the image forming apparatus 12 prevents the selection of the print data 61d ("50.txt") stored in the client terminal 11, thereby preventing errors during printing. can be prevented. As a result, user convenience is improved.

Further, by displaying the offline icon 61e in association with the print data 61d, the user can easily recognize that the client terminal 11 storing the print data 61d is in an offline state.

Furthermore, by displaying the offline notification UI 61f that notifies that the client terminal 11 is offline, the user can easily recognize that the print data 61d can be printed by connecting the client terminal 11 to the network.

Further, since the client terminal 11 notifies the connection state to the network (that is, synchronizes the index information) only when it stores print data, the load on the service providing device 22 can be reduced.

(Fifth embodiment)
The information processing system 100 according to the fifth embodiment will be described below. In this embodiment, the determining unit 55 repeatedly attempts to actually acquire print data from the client terminal 11 to determine whether print data can be directly acquired from the client terminal 11 .

For example, the determination unit 55 attempts to actually acquire print data from the client terminal 11 a predetermined number of times at predetermined time intervals (trial and error). If the determining unit 55 is unable to directly acquire the print data from the client terminal 11 even after repeating the trial a predetermined number of times, the processing unit 51 acquires the print data indirectly via the service providing device 22.

(Operations and effects of the fifth embodiment)
Even if the image forming apparatus 12 and the client terminal 11 belong to the same network, if the client terminal 11 is restricted from using general printing protocols, print data may be obtained directly from the client terminal 11. Can not. For example, this applies when the printing protocol of the client terminal 11 is restricted by a firewall or the like. However, according to the present embodiment, even if the client terminal 11 is restricted from using the print protocol, print data can be indirectly acquired from the client terminal 11 via the service providing device 22. Note that the general printing protocol is a protocol that assumes communication between devices belonging to the same network, and excludes IPP (Internet Printing Protocol) and the like that can communicate via the Internet.

(Sixth embodiment)
The information processing system 100 according to the sixth embodiment will be described below. The information processing system 100 is not limited to the printing system described above. The information processing system 100 may be any output system that outputs data stored in the client terminal 11. The output system includes, for example, a projection system, a display system, an audio output system, or a transmission system.

In the case of a projection system, the information processing system 100 includes, for example, a projector instead of the image forming device 12. The client terminal 11 stores projection data projected by a projector, and the projector acquires the projection data from the client terminal 11 and projects it. When the projector cannot directly acquire projection data from the client terminal 11, the projector indirectly acquires the projection data via the service providing device 22 and projects the data. For security reasons, the projector does not store projection data.

In the case of a display system, the information processing system 100 includes, for example, an electronic whiteboard or a video conference terminal instead of the image forming device 12. The client terminal 11 stores image data (still images or moving images) to be displayed on the electronic blackboard or video conference terminal, and the electronic blackboard or video conference terminal acquires the image data from the client terminal 11 and displays it. When the electronic blackboard or the video conference terminal cannot directly acquire image data from the client terminal 11, the electronic blackboard or the video conference terminal acquires the image data indirectly via the service providing device 22 and displays the image data. For security reasons, electronic whiteboards or video conferencing terminals do not store image data.

In the case of an audio output system, the information processing system 100 includes, for example, a video conference terminal instead of the image forming device 12. The client terminal 11 saves the audio data to be output as audio by the video conference terminal, and the video conference terminal acquires the audio data from the client terminal 11 and outputs the audio data as audio. When the video conference terminal cannot directly obtain audio data from the client terminal 11, the video conference terminal indirectly obtains and displays audio output data via the service providing device 22. For security reasons, video conferencing terminals do not store audio data.

In the case of a transmission system, the client terminal 11 stores transmission data transmitted by, for example, a facsimile 933 of the image forming apparatus 12, and the image forming apparatus 12 acquires the transmission data from the client terminal 11 and transmits it by facsimile. When the image forming apparatus 12 cannot directly acquire the transmission data from the client terminal 11, the image forming apparatus 12 indirectly acquires the transmission data via the service providing apparatus 22 and transmits the data by facsimile. For security reasons, the image forming device 12 does not save transmitted data.

The aforementioned projector, electronic whiteboard, video conference terminal, facsimile, and the like are examples of output devices.

(Operations and effects of the sixth embodiment)
According to this embodiment, the information processing system 100 of the present disclosure can be applied to various output systems.

Various functions of the embodiments described above can be realized by one or more processing circuits. Here, the "processing circuit" in this specification includes a processor programmed to execute each function using software, such as a processor implemented using an electronic circuit. Alternatively, the "processing circuit" includes a device such as an ASIC (Application Specific Integrated Circuit) or a DSP (Digital Signal Processor) designed to execute each function. Furthermore, the "processing circuit" includes devices such as FPGAs (Field Programmable Gate Arrays) or conventional circuit modules.

Aspects of the present disclosure are, for example, as follows.
<1> An image forming apparatus connected to an information processing apparatus via a network,
a determination unit that determines whether the data can be directly acquired from the data storage location based on index information that associates bibliographic information of the data with storage location information of the data;
a processing unit that indirectly acquires the data from the storage location via the information processing device based on a determination result of the determination unit;
An image forming apparatus including:
<2> The storage location of the data is a terminal device connected to the information processing device via the network, and the determination unit determines that the image forming device and the terminal device belong to the same network. The image forming apparatus according to <1>, wherein the image forming apparatus determines that the data can be directly acquired from the terminal device.
<3> When the storage location of the data is a terminal device connected to the information processing device via the network, and the determination unit is configured such that the image forming device and the terminal device belong to different networks. In the image forming apparatus according to <1>, the image forming apparatus determines that the data can be indirectly acquired from the terminal device via the information processing apparatus.
<4> The above <2> or <3>, further including a UI unit that displays a job list user interface (UI) that does not allow selection of the data stored in the terminal device when the terminal device is in an offline state. The image forming apparatus described in .
<5> The method according to <2> to <4> above, further including, when the terminal device is in the offline state, a UI unit that displays an offline notification user interface (UI) for notifying that the terminal device is in the offline state. The image forming apparatus according to any one of the above.
<6> Any one of <1> to <5> above, further including an encryption processing unit that performs encryption processing on the data when the data is indirectly acquired from the storage location via the information processing device. An image forming apparatus according to the invention.
<7> The cryptographic processing unit generates a public key/private key pair to be used in a public key cryptosystem each time the data is indirectly acquired from the storage location via the information processing device. The image forming apparatus according to <6> above.
<8> The cryptographic processing unit displays a common key input UI for inputting a common key to be used in a common key encryption method when indirectly acquiring the data from the storage location via the information processing device. The image forming apparatus according to <6> above.
<9> The method from <1> to < further includes a UI unit that displays an acquisition route confirmation user interface (UI) for confirming whether to indirectly acquire the data from the storage location via the information processing device. 8>.
<10> An information processing system including an information processing device and an image forming device connected to the information processing device via a network,
The information processing device includes:
an index information management unit that manages index information that associates bibliographic information of data with storage location information of the data;
The image forming apparatus includes:
a determination unit that determines whether the data can be directly acquired from the data storage location based on the index information;
a processing unit that indirectly acquires the data from the storage location via the information processing device based on a determination result of the determination unit;
It is an information processing system that includes.
<11> The storage location of the data is a terminal device connected to the information processing device via the network, and the terminal device stores the index information of the data only when the data is stored. The information processing system according to <10>, which is synchronized with the information processing device.
<12> An information processing method executed by an image forming apparatus connected to an information processing apparatus via a network,
determining whether the data can be directly acquired from the data storage location based on index information that associates bibliographic information of the data with storage location information of the data;
indirectly acquiring the data from the storage location via the information processing device based on the determined result;
It is an information processing method including.
<13> A program that causes a computer to execute the method described in <12> above.

100 Information Processing System 11 Client Terminal 12 Image Forming Device 20 Service Providing System 21 Access Control Device 22 Service Providing Device 31 Data Management Unit 32 Index Information Processing Unit 33 Communication Unit 34 Encryption Processing Unit 41 Index Management Unit 42 Communication Unit 51 Processing Unit 52 Printing section 53 Communication section 54 UI section 55 Judgment section 56 Encryption processing section 60 Login UI
60a Authentication method selection list 60b Authentication information input box 60c Login button 61 Job list UI
61a Job list table 61b Data selection box 61c Start button 61d Print data 61e Offline icon 61f Offline notification UI
62 Standby UI
63 Acquisition route confirmation UI
63a Cancel button 63b Agree button 64 Print completion notification UI
70 Printer driver UI
71 Common key setting UI
72 Print data registration completion UI
73 Common key input UI
I1 Index information for registration I2 Bibliographic information I3 Storage location information I4 Index information for job list T1 Bibliographic information table T2 Storage location information table FW1 Firewall FW2 Firewall N1 to N4 Network

Japanese Patent Application Publication No. 2015-152937

Claims (13)

An image forming apparatus connected to an information processing apparatus via a network,
a determination unit that determines whether the data can be directly acquired from the data storage location based on index information that associates bibliographic information of the data with storage location information of the data;
a processing unit that indirectly acquires the data from the storage location via the information processing device based on a determination result of the determination unit;
An image forming apparatus including: The storage location of the data is a terminal device connected to the information processing device via the network, and the determination unit determines that when the image forming device and the terminal device belong to the same network, The image forming apparatus according to claim 1, wherein the image forming apparatus determines that the data can be directly acquired from the terminal device. The storage location of the data is a terminal device connected to the information processing device via the network, and the determination unit determines that when the image forming device and the terminal device belong to different networks, The image forming apparatus according to claim 1, wherein the image forming apparatus determines that the data can be acquired indirectly from the terminal device via an information processing apparatus. The image forming apparatus according to claim 2 or 3, further comprising a UI unit that displays a job list user interface (UI) that does not allow selection of the data stored in the terminal device when the terminal device is in an offline state. . The image forming apparatus according to claim 2 or 3, further comprising a UI unit that displays an offline notification UI that notifies that the terminal device is offline when the terminal device is offline. The image forming apparatus according to any one of claims 1 to 3, further comprising a cryptographic processing unit that performs cryptographic processing on the data when the data is indirectly acquired from the storage location via the information processing device. Device. 6. The cryptographic processing unit generates a public key/private key pair for use in a public key cryptosystem each time the data is indirectly acquired from the storage location via the information processing device. The image forming apparatus described in . The cryptographic processing unit displays a common key input UI for inputting a common key to be used in a common key encryption method when indirectly acquiring the data from the storage location via the information processing device. Item 6. The image forming apparatus according to item 6. The image forming apparatus according to any one of claims 1 to 3, further comprising a UI unit that displays an acquisition route confirmation UI for confirming whether to acquire the data indirectly from the storage location via the information processing device. Device. An information processing system including an information processing device and an image forming device connected to the information processing device via a network,
The information processing device includes:
an index information management unit that manages index information that associates bibliographic information of data with storage location information of the data;
The image forming apparatus includes:
a determination unit that determines whether the data can be directly acquired from the data storage location based on the index information;
a processing unit that indirectly acquires the data from the storage location via the information processing device based on a determination result of the determination unit;
information processing systems, including The storage location of the data is a terminal device connected to the information processing device via the network, and the terminal device changes the connection state of the terminal device to the network only when the data is stored. The information processing system according to claim 10, wherein the information processing system notifies the information processing device. An information processing method executed by an image forming apparatus connected to an information processing apparatus via a network, the method comprising:
determining whether the data can be directly acquired from the data storage location based on index information that associates bibliographic information of the data with storage location information of the data;
indirectly acquiring the data from the storage location via the information processing device based on the determined result;
information processing methods, including A program that causes a computer to execute the method according to claim 12.

Images