JP4100566B2 - Department management system - Google Patents

Description

  The present invention relates to an image processing apparatus having a department management system, and in particular, when managing the use of various office equipment for each department, all functions can be centrally managed, and parallel processing of each equipment can be performed. The present invention relates to a department management system that can be managed without any influence.

  In recent years, especially in corporations, in order to save the installation space for various office equipments, not only copier functions but also digital multifunction peripherals equipped with image scanner functions, facsimile functions, printer functions, etc., are often used. I came. This digital multi-function device is usually connected to a computer (PC) or server of each department by a local area network (LAN) or the like, and further executes input / output processing of image data to an external storage device via various interfaces. In the digital multi-function peripheral, once received or inputted image data is stored in an image memory, and thereafter output processing such as print output and data transfer is performed.

  On the other hand, these digital MFPs are often shared by multiple departments because of their excellent capabilities. From the viewpoints of budget and environmental impact, printer functions, copier functions, etc. With respect to the number of sheets output to the paper accompanying the use of this printing function, operation management is performed so as to prevent the wasteful consumption of paper and toner by setting a limit for each department to prevent unlimited output. For example, when using the printing function, a limit count value is set in advance for the amount of paper used and the amount of toner consumed, and when the cumulative number of printed sheets and the cumulative amount of toner used reach this limit count value, By controlling to stop the printing operation, appropriate operation management is performed for each department for the use of printing functions such as a printer function and a copier function.

Here, the contents disclosed in Patent Documents 1 and 2 as the prior art according to the present invention will be described below.
In the print number management system disclosed in Patent Document 1, the print management process and the inquiry module are directly connected by function call or message transmission / reception, and in this case, a response waiting occurs due to reception of the inquiry window and exclusive control of the response. Is a print processing system that eliminates the occurrence of
A print record recording means for preliminarily registering the print limit number for each user and additionally accumulating the number of printed pages of the user corresponding to the job after finishing the print output;
A printing non-execution control unit that searches the printing result recording unit for the number of completed printings of a user who desires printing, and performs control not to perform printing when the number of completed printings exceeds the printing limit number;
Is provided.

The print charging method and the file transfer charging method disclosed in Patent Document 2 have a problem that charging management is complicated on a horizontally distributed system in which a plurality of servers, clients, or network printers are provided on one network. In order to solve this problem, a billing server independent of the conventional print server is provided, and billing management of data to be printed by a network printer is performed centrally by this billing server. In the print billing method and the file transfer billing method, a print request sending step in which a client requesting printing sends a print data file to be printed and a print request file including printing parameters to a billing server. When,
A print permission file reply step in which the accounting server generates a print permission file based on the transmitted print data file and the transmitted print request file, and transmits the print permission file to the client; ,
A billing information storage step in which the billing server stores billing information of the client that sent the file here based on the transmitted print data file and the transmitted print request file;
A print permission file sending step in which the client sends the returned print permission file to a print server in advance of a print data file;
The print charging method includes a printing step in which the print server prints the print data file only when the print permission file is transmitted prior to the print data file.

JP 2002-108587 A JP-A-11-242576

  By the way, the department management system for managing the use of each office device represented by the current digital multifunction peripherals basically performs department code check processing and department limit value management for each machine alone. A method of centrally managing the contents managed by each image processing apparatus by setting up a management server is used. In the method disclosed in Patent Document 1, the print number management system is configured using a server computer, and the method disclosed in Patent Document 2 also uses a server computer as a billing server.

  However, in the department management system as described above, centralized management of image processing apparatuses cannot be performed unless a server computer is separately provided. Therefore, a server computer must be purchased, and an individual server without providing a server. When managing individual departments, department limit value management can only be applied to individual image processing devices, so when centralized management is performed, only the summation processing of the restriction processing results of each image processing device is performed. As a result, if a user in the same department performs output with a plurality of image processing apparatuses, there is a problem that output restriction for each department cannot be performed.

  Furthermore, companies frequently register new departments, delete departments, and change department contents. In such cases, all the devices on the network that are being used are temporarily stopped. Change processing must be performed afterwards, and registration of new departments, deletion of departments, and modification of department contents cannot be performed when department information is used on any device on the network. As a result, it has become troublesome that the devices on the network are temporarily unavailable.

  In view of the problems as described above, the present inventor can centrally manage devices on the network and does not incur unnecessary costs such as separately providing a server computer. As a result of various examinations of department management systems that do not make the devices on the network unusable when departments are deleted and department contents are changed, a server function is added to one image processing apparatus on the network. When centrally managing output restrictions for each department by function, when accessing the department data centralized management section that is this server function from multiple image processing devices in the network, the department data concentration that is this server function It is economical by setting two types of access rights in the management unit and restricting access according to the contents of access requests from image processing devices, etc. It has found that to be obtained without permission a good department management system, it was led to the present invention.

  That is, an object of the present invention is to provide a department management system that does not require a server computer and that does not need to stop devices on the network when registering a new department, deleting a department, or changing the contents of a department. It is to be.

In order to achieve the above object, the department management system according to claim 1 of the present application registers an arbitrary department code, a department limit value, etc., and assigns and uses the department code in a predetermined unit to use the device. A plurality of image processing apparatuses having a department management function for managing each department, and an image processing apparatus further having a function for centrally managing department management data performed by each image processing apparatus are connected to a network. The department management system is provided with at least two access rights A and B, and the image processing apparatus for centrally managing the department management data includes at least an access request processing unit and an access right A. It has a department data centralized management part composed of a control part and an access right B control part,
The access request processing unit controls permission / denial of access right acquisition when acquiring the access right,
Based on the request from the user who has acquired the access right A, the access right A control unit can newly register and delete the department code in the network, and change the department limit value.
The access right B control unit is configured to perform count-up update processing of output values for each department code or for each function based on a request from the user who acquired the access right B.

  The department management system according to claim 2 of the present application is related to claim 1, wherein the image processing apparatus for centrally managing the department management data further includes a data reference section, and the data reference section is controlled by an access right B control. It is possible to refer to the department limit value updated in the department.

  The department management system according to claim 3 of the present application relates to claim 1 or 2, wherein the access request processing unit determines a user who is permitted to acquire access right A when permitting acquisition of access right A. It is characterized by comprising authentication means based on a password number to be restricted.

  Further, the department management system according to claim 4 of the present application relates to any one of claims 1 to 3, wherein the access request processing unit exclusively permits acquisition requests for the access right A and the access right B. Control is performed, and when there is a request for acquiring the access right A, the access right A can be acquired preferentially.

  In addition, the department management system according to claim 5 of the present application is related to any one of claims 1 to 4, and only one access right B is allowed to be acquired for each department at the same time. It is characterized by that.

  According to claim 1 of the present application, since the image processing apparatus in the network includes a department data centralized management unit which is a server function, there is no need to purchase a separate server computer, and the department management is also economical. By setting access rights A and B on an image processing device that centrally manages data, and managing the access status in the access request processing unit, there is a case where it is desired to create a new work group such as a new department in the centralized management function. In this case, new creation can be performed without stopping all devices in the network.

  Further, according to claim 2 of the present application, even if the image processing apparatus that centrally manages the department management data has a data reference unit, even if the access right B cannot be obtained, the department limit value, that is, the department The output limit value set every time and the accumulated output value at that time can be referred to, so that even if the access right B cannot be acquired, data can be output.

  According to claim 3 of the present application, when the access request processing unit receives an access right A acquisition request, the contents of the access right A are changed without permission from a third party by providing an authentication means. Can be prevented.

  Further, according to claim 4 of the present application, by granting access right A and access right B exclusively, even if a device in the network is activated, by acquiring access right A, a new department can be obtained. It is possible to register, delete, and change the department limit value. Furthermore, by giving priority when acquiring the access right A, if there are many departments in the network, it can be changed urgently. Even in the case where the user wants, the access right A can be quickly acquired, and the user management table can be edited.

  Further, according to claim 5 of the present application, by making it possible to acquire only one access right B at a time for each department, it is possible to prevent the department limit value count-up process from being performed simultaneously. This makes it easier to manage the department limit values for each department. Furthermore, since acquisition of access right B is permitted in parallel for acquisition from different departments, acquisition of access right B is difficult. Such a problem is less likely to occur.

    Hereinafter, the best embodiment of the present invention will be described with reference to the drawings. However, the embodiment shown below exemplifies a department management system for embodying the technical idea of the present invention, and is not intended to specify the present invention to this department management system. Other embodiments within the scope of the claims are equally applicable.

An embodiment of the present invention will be described below. FIG. 1 is a conceptual diagram of a network system according to an embodiment of the present invention. FIG. 2 is a diagram illustrating the internal configuration of an image processing apparatus having a department data central management unit according to an embodiment of the present invention in an easy-to-understand manner.
FIG. 1 illustrates a network environment generally used in a company or the like in an easy-to-understand manner. As an embodiment of the present invention, a plurality of PCs 3-1 to 3-n, an image processing apparatus (multifunction printer: MFP) 1, 2-1 to 2 -n, printer 4, and the like are a horizontally distributed network system 6 connected by a network 5 including a LAN (local area network) or the like. An arbitrary image processing apparatus 1 is provided with a department data centralized management unit which is a server function.

The internal configuration of the image processing apparatus 1 having the department data central management unit is shown below.
As shown in FIG. 2, the image processing apparatus 1 used in the present invention includes at least various host interfaces 11, an operation unit 12, a scanner unit 13, a facsimile unit 14, an external memory interface 15, an input image processing / generation unit 16, A job management unit 17, an output control unit 18, a printing unit 19, an internal memory 20, a department data centralized management unit 21, and an information processing unit 24 are provided. Incidentally, FIG. 2 describes the image processing apparatus 1 having the department data central management unit 21 in the present invention, but the other image processing apparatuses 2-1 to 2-n include the department data central management unit 21 shown in FIG. The configuration of the image processing apparatus 1 is the same as that of the image processing apparatus 1, and the department code authentication performed in the information processing unit 24 and job control unit 17 of the image processing apparatuses 1, 2-1 to 2-n. The count-up processing of the department limit number is performed in each image processing apparatus for each department in which each of the image processing apparatuses 1, 2-1 to 2 -n executes a print job, for example. That is, although the detailed configuration of the department data centralized management unit 21 will be described later, it is assumed that the departmental data centralized management unit 21 does not manage all output processing in the network system 6. Each component will be described below.

  The various host interfaces 11 are connected to a plurality of PCs 3-1 to 3-n, a printer 4, and a plurality of image processing apparatuses 2-1 to 2-n via the network 5. Sending and receiving data from the device.

  The operation unit 12 includes touch panel type input means, and is distributed at least in predetermined units such as each individual and each department, and can perform department management by inputting an ID for authenticating the individual when performing department management. In addition to the above, for example, when used as a copying machine, various setting means capable of changing the number of copies to be printed or paper settings are also provided.

  The scanner unit 13 is a general scanning function, and is used when a copying machine function or an image is acquired.

  The facsimile unit 14 is connected to the public telephone line 22, and is connected to the input image processing / generation unit 16 so that data received via the public telephone line 22 can be printed out and transferred.

  The external memory interface 15 includes various interfaces such as a general-purpose parallel interface, serial interface, USB (Universal Serial Bus), IEEE 1394, and PC-Card bus. The external interface 15 includes a semiconductor memory, an HDD, a CD, and the like. , CD-R, DVD, DVD-R, MO, FD and other external memories (storage means) are connected, and not only input / output of various image data but also user ID, transfer destination, etc. via these external memories Also used as input means.

  The input image processing / generation unit 16 processes / generates data sent from the various host interfaces 11, the operation unit 12, the scanner unit 13, the facsimile unit 14, and the external memory interface 15. Reflects various settings input from the operation unit 12 and, for example, if the received data is an intermediate language such as PDL (page description language) according to the type of data, rasterizes them, Compression processing is performed as necessary, and rasterized processing such as scan data is performed compression processing as necessary, and in the case of data in a predetermined format such as file data, Rasterization processing, compression processing, and temporary storage of the internal file system are appropriately performed.

  The job management unit 17 manages data subjected to various processes by the input image processing / generation unit 16. The job management unit 17 is connected to the information storage unit 24 and stored in the information storage unit 24. Various processes are managed while referring to the department data and the like.

  The output control unit 18 is a part that outputs to the external host interface 11, the facsimile unit 14, the external memory interface 15, and the printing unit 19. Data received from the job control unit 17 is temporarily spooled in the internal memory 20. The output process is appropriately performed according to the volume of received data, the output form, and the state of the main body of the image processing apparatus 1.

  The information storage unit 24 is connected to the job management unit 17 and stores the department code of the data held by the job management unit 17 or the department count accumulated value of the department, etc. It also has a department data management section that checks the department code from the information, obtains the current cumulative department output value and maximum department limit value for that department, and checks whether it can be output. ing.

  The department data central management unit 21 is configured using an internal nonvolatile memory in the image processing apparatus 1 and is a function that only the image processing apparatus 1 in the network system 6 has. Output management performed in each of the image processing apparatuses 1, 2-1 to 2-n is centrally managed for each department. Details will be described below.

  FIG. 3 shows the internal configuration of the department data central management unit 21 provided in the image processing apparatus 1 in detail. Incidentally, FIG. 3 is a block diagram showing the configuration in the department data central management unit 21 in an embodiment of the present invention in an easy-to-understand manner.

At least two access rights A and B are set in the department management system. Access right A is an access right that permits new registration and deletion of department codes in the network, and change of department limit values. The right B is an access right that permits the output value count-up process for each department code and each function.
The department data central management unit 21 includes an access request processing unit 30, an access right A control unit 40, an access right B control unit 50, a data reference unit 60, and a database 70. Includes an access request reception unit 31 that receives an access right acquisition request, an access right acquisition request determination unit 32 that determines whether the received access right acquisition request is access right A or access right B, and access It is determined whether the access right A or B requested for the right is in a state where the acquisition is permitted, and an access right acquisition permission / inhibition unit 33 that performs processing according to the result, and a password authentication unit that restricts the acquisition of the access right A 34.

  The access right A control unit 40 that manages the access right A acquired when newly registering, deleting, or changing the department limit value of the department code is used to register a new department or delete a department, and change the department limit value of each department. The user management table editing unit is provided, and the changed user management table is stored in the user management table storage unit 71 provided in the database.

  The access right B control unit 50 that manages the access right B acquired when performing update processing of the count-up information for each department code and for each function counts up and updates the department output value of the department that accessed the access right B The cumulative total value update processing unit that performs processing, and the count up update processing performed here is stored in the cumulative department output value storage unit 72 in the database 70.

  The access right B control unit 50 counts up from the image processing apparatus 1 that performs centralized management of department data, and the department limit value stored in the database 70 can be viewed regardless of whether or not the access right is acquired. The data reference unit 60 made in the above manner can refer to the maximum department limit value storage unit 73 and the cumulative department output value storage unit 72 of the database 70 in real time even when the access right B is not acquired. .

  The database 70 for storing each processing content processed by the department data central management unit 21 includes a user management table storage unit 71 for storing the user management table edited by the access right A control unit 40 as described above. , An accumulated department output value storage unit 72 for storing data counted up for each department by the access right B control unit 50, and a maximum department limit value storage unit for storing department restriction values set by the access right A 73.

  An access request transmitted to the department data central management unit 21 via the network 5 is first sent to the access request receiving unit 31 of the access request processing unit 30. The access request received here is determined in the access right acquisition request determination unit 32 whether the access request is the access right A or the access right B, and then sent to the access right acquisition permission / inhibition unit 33. It is determined whether or not the access right determined in step 1 can be acquired. The determination process will be described later and is omitted here.

  When the access right acquisition permission / rejection unit 33 permits the acquisition of the access right A, after entering the password in the password authentication unit 34, if the password authentication is successful, the process proceeds to the access right A control unit 40. New registration / deletion of code, change of department limit value, and the like are performed by the user management table editing unit, the change result is stored in the user management table storage unit 71 of the database 70, and the operation is finished. Incidentally, the password authenticating unit 34 described here may be anything as long as it can authenticate the user who obtains the access right A, and may be changed as appropriate according to the usage purpose of the user, such as a password and an ID card. Is possible.

  When the access right acquisition permission / inhibition unit 33 permits the access right B to be acquired, first, the cumulative department output value storage unit 72 stores the cumulative department output value and the maximum department output value related to the department that requested the access. Then, it is determined for each image processing apparatus that has made an access request whether the count-up process acquired from the maximum department limit value storage unit 73 and performed by the access right B processing unit 50 does not exceed the department limit value. If it is determined that output is possible, the department output value update processing unit of the access right B control unit 50 performs update processing, and the result is stored in the cumulative department output value storage unit 72 of the database 70.

  Further, when the access right acquisition permission / rejection unit 33 is acquiring the access right A or the access right B of the same department (permitted state) and the data reference unit 60 is selected to refer to the data. For each image processing apparatus that has made an access request, the data reference unit 60 obtains the maximum department limit value and the cumulative output value from the database 70, and outputs the data to be output by the department management function of each image processing apparatus. Judgment is made and output processing is performed. Incidentally, the cumulative output value count-up update process originally performed by the output process performed as described above is performed by the access right from the image processing apparatus that automatically performed the output process when the access right B can be acquired. If B is acquired and count-up update processing is performed, usability is further improved.

  Next, the process of acquiring the access right will be described in an easy-to-understand manner with reference to FIGS. FIG. 4 is a flowchart showing each processing step when an access right A access request is made in an easy-to-understand manner in the present invention, and FIG. 5 shows each process when an access right B access request is made in the present invention. It is the flowchart which showed the process clearly.

  If the access right acquisition request unit 32 determines that an access right A access request has been made, the access right acquisition permission / inhibition unit 33 checks the access right acquisition status in step S10 as shown in FIG. Next, when the access right A is being acquired in step S11, the acquisition of the access right A is not permitted, and the process is terminated. Similarly, the access right B is in the acquisition state regardless of the department code (step S12). The acquisition of the access right A is not permitted and ends.

  If the access right A and the access right B are not being acquired in the above steps S11 and S12, the process proceeds to step S13, where the acquisition of the access right A is permitted. When the acquisition permission for the access right A is given, the password authentication unit 34 inputs a password (step S14). This password is generally held only by the administrator of the department management system, but an access right A acquisition request can be issued from any PC within the same network. When the password is authenticated in step S15, the access right A control unit 40 edits the user management table, and then records it in the user management table storage unit 71 of the database 70 and ends (step S16).

  When an access request for the access right B is made, as shown in FIG. 5, first, in the same manner as when there is an access request for the access right A, the access right acquisition status is confirmed in step S20. In this case, since the access right B can be acquired in parallel for each department, the department code of the terminal that requested the access right B in step S21 is read in advance. Incidentally, the department code is recognized by the job management unit 17 and the information storage unit 24 of the image processing apparatus that has received the output data in advance, and the department data central management unit 21 does not necessarily have means for recognizing the department code. Not necessary.

  Then, as a confirmation of the access right acquisition status, it is confirmed whether or not the access right A has been acquired (step S22). If not, whether or not the access right B of the department making the access request has been acquired. (Step S23) is confirmed. If it is determined in step S22 and step S23 that the access right A and the access right B of the department to which the terminal making the access request belongs are not acquired, the process proceeds to step S24 and the designated department (access of the access right B is accessed). (Department of requesting terminal) Acquires the access right B of the code, moves to step S25, refers to the data of the access right B control unit 50, and whether or not output is possible for each image processing apparatus After confirming the above, count-up update processing of the cumulative value of the department limit value of the designated department is performed, and the process is terminated.

  If the access right A is being acquired in step S22 and step S23, or the access right B of the designated department is being obtained, the process proceeds to step S26, and the data reference unit 60 determines the maximum of the designated department at that time. The department limit value and the cumulative output value are acquired from the maximum department limit value storage unit 73 and the cumulative department output value storage unit 72, and it is determined whether data can be output for each image processing apparatus that has made an access request. If it is determined that the data is output, the output is performed. If it is determined that the data cannot be output, the process is terminated without performing the output. If it is determined that data can be output, the fact is stored in the information storage unit 24 in the image processing apparatus that has output the data (step S27).

  The output result stored in step S27 has acquired the access right B and has not performed the count-up update process. Therefore, in step S28, the access right B is set in a standby state until the access right B can be acquired. After obtaining the access right B automatically after the acquisition right state is obtained, the access right B control unit 50 performs the count-up update process for the number of outputs temporarily stored in step S27 in step S25. The accumulated department output value storage unit 72 stores the data, and the process is terminated.

  Incidentally, the access request for the access rights A and B described with reference to FIGS. 4 and 5 can be any of the image processing apparatuses 1, 2-1, and 2-n on the network. In addition, regarding the access right B, in the process when the access right B cannot be acquired, the access right B is monitored for the number of data outputs stored in the image processing apparatus, and the access right B can be acquired. When it is determined, the access right B is automatically acquired and the cumulative output value count-up update process is automatically performed. However, it is of course possible to manually acquire the access right B. Regardless of whether access right B is acquired or not, data to be output by the image processing apparatus is output by the department management function of the information storage unit 24 (see FIG. 2) of the image processing apparatus. Even if it is determined whether the information of the cumulative department limit value and the maximum department limit value is acquired from the access right B control unit 50 or the data reference unit 60 for the output, Obviously, it has no effect on the function of controlling each output. Incidentally, a well-known department management system for each image processing apparatus is used, and the description thereof is omitted.

  FIG. 6 is a flowchart showing another embodiment of each processing step when an access request for the access right A in FIG. 4 is made, and the configuration will be described below. Incidentally, the other embodiment of FIG. 6 is the same as FIG. 4 except for the processing steps when the access right B is being acquired in step S12 of FIG. Only explain.

In FIG. 6, when it is determined in step S12 that the access right B is being acquired, all access rights B cannot be acquired after the access request for the access right A is made in step S17. If the acquisition of the access right B is not canceled in step S18, it is set in a standby state in step S18. If it is determined that the acquisition of the access right B has been canceled, the access right A is acquired in step S13. The user management table is changed by performing each process.
As can be seen from the above procedure, the access right A and the access right B are exclusively granted, and the access right A is preferentially granted to the access right B.

  In other words, with such a configuration, when the access right A is acquired, whether or not the access right B is being acquired affects the acquisition permission / denial in the first embodiment. In item 2, it is desired to change the department limit value urgently by temporarily making it impossible to acquire access right B after the access right A acquisition request is made so that access right A can be acquired preferentially. In some cases, changes can be made promptly. In this case, the data reference unit can refer to the data and output the data without acquiring the access right B, so that the user is not affected at all. This is a particularly effective function on a system in which a state where the access right B is not acquired is unlikely to occur, such as when there are many departments in the network.

  Furthermore, with the above-described configuration, the department management system according to the present invention allows department management in the network to be performed without the need for a server when performing department management. It is also excellent in terms.

  In addition, by providing access right A and access right B for centralized management of department management, a function for managing department limit values in department management as well as new department creation, deletion, or department limit values in the department management function are provided. Functions that cannot be performed without stopping other devices in the network, such as changes, can be performed without stopping other devices in the network.

The conceptual diagram of the network system in one Example of this invention, The figure explaining easily the internal structure of the image processing apparatus which has a department data centralized management part in one example of the present invention, The block diagram which showed the structure in the department data centralized management part in one Example of this invention clearly A flowchart showing each processing step when an access request for access right A is made in the present invention, The flowchart which showed each processing process when the access request of the access right B is made in this invention intelligibly. The flowchart which shows the other Example of each process process at the time of the access request of the access right A of FIG.

Explanation of symbols

1 Image processing apparatuses 2-1 to 2-n (having a department data centralized management unit) Image processing apparatuses 3-1 to 3-n (other than 1) PC
DESCRIPTION OF SYMBOLS 11 Various host interfaces 12 Operation part 13 Scanner part 14 Fax part 15 External memory interface 16 Input image processing / generation part 17 Job management part 18 Output control part 19 Printing part 20 Internal memory 21 Department data central management part 24 Information storage part 30 Access Request processing unit 40 Access right A control unit 50 Access right B control unit 60 Data reference unit 70 Database

Claims (5)

A plurality of image processing apparatuses having a department management function for managing the use of each apparatus for each department by registering an arbitrary department code, a department limit value, etc., allocating and using the department code in a predetermined unit A department management system connected to a network, and an image processing apparatus further provided with a function for centrally managing department management data performed by each image processing apparatus, wherein the department management system has at least two accesses An image processing apparatus that is provided with rights A and B and centrally manages the department management data is a department data centralized management section that includes at least an access request processing section, an access right A control section, and an access right B control section Have
The access request processing unit controls permission / denial of access right acquisition when acquiring the access right,
Based on the request from the user who has acquired the access right A, the access right A control unit can newly register and delete the department code in the network, and change the department limit value.
The access right B control unit performs count-up update processing of output values for each department code or for each function based on a request from a user who has acquired the access right B. .   The image processing apparatus that centrally manages the department management data further includes a data reference unit, and the data reference unit can refer to the department limit value updated by the access right B control unit. The department management system according to claim 1, wherein   The access request processing unit includes an authentication unit based on a personal identification number or the like that restricts a user permitted to acquire the access right A when the access right A is acquired. The department management system described.   The access request processing unit performs control such that an acquisition request for the access right A and the access right B is exclusively granted. Further, if there is a request for acquiring the access right A, the access request processing unit The department management system according to any one of claims 1 to 3, wherein the department management system is configured to be acquired preferentially.   5. The department management system according to claim 1, wherein only one access right B is permitted to be obtained for each department at the same time. 6.

Images