JP4380405B2 - Image processing apparatus, billing processing apparatus, control program, and image processing management method - Google Patents

Description

  The present invention relates to a technique related to a processing apparatus that provides a data processing service such as an image processing service using an external apparatus, and more particularly to a technique for using an external apparatus that is charged.

  In an image processing apparatus such as a multifunction peripheral (MFP) having a scanner function and an image forming function, an image processing service such as printout or copy can be provided to a user using these functions, and an ASP (Application Service Provider) It is also possible to set so as to provide an image processing service such as an OCR (optical character reading) service using an external device provided by the. In such an image processing apparatus, generally, a user logs on with an account individually registered for each user and requests an image processing service of the apparatus. Then, the image processing apparatus that has received the request logs on the external apparatus with an account registered in advance for each user, and causes the image processing service to be performed. For this reason, in the external device, the registered user information is held, and the usage fee corresponding to the degree of use is totaled for each user to perform billing processing.

  Patent Document 1 listed below discloses a technique for performing charging based on unique information (serial number) of a device when using a service provided by an ASP. Here, the process of transferring the charge to the user is not performed.

JP 2002-252732 A

  If charging is performed in units of devices as in Patent Document 1, it becomes difficult to perform payment processing for each user or each user's affiliation. However, when logging on using an account individually set for the external apparatus as in the prior art, it is necessary to convey user information to the external apparatus side, which is not preferable in terms of security. In particular, image processing apparatuses often handle image data such as important documents, and it is more necessary to conceal user information from external apparatuses than general information processing apparatuses.

  An object of the present invention is to establish a technology that enables user-specific charging processing while concealing user information from an external device in a processing device that provides an image processing service or the like using an external device. In the point.

  Another object of the present invention is to realize user-specific charging processing when a processing device causes an external device to perform data processing using a representative account shared for processing for each user.

  An image processing apparatus according to the present invention includes an image forming unit that forms a print image on a sheet based on image data, an external processing unit that performs processing on image data using an external device, and an individual account for each user. User management means for managing, reception means for receiving an execution request for an image processing service related to an external processing means from a user who has logged on with an individual account, incidental information associated with the individual account and concealing user information about the individual account Attached information acquisition means for acquiring, external logon means for logging on with a representative account shared for processing for a plurality of users for an external apparatus corresponding to the accepted image processing service, and for the logged-on external apparatus, Command means for performing processing related to the received image processing service with accompanying information; Obtain.

  The image processing apparatus is configured on the assumption that a plurality of users will use it. The user management means is provided for this purpose, and manages the individual account of each user to be set. The user accesses the image processing apparatus directly from the input unit or indirectly from another apparatus through a network or the like. Based on the access, the local logon means logs on the user with an individual account. In this local logon, user authentication can be performed by the user management means holding authentication information such as a password and biometric authentication data.

  The logged-on user can request an image processing service related to an external processing unit such as an OCR processing service or a high-precision image forming processing service. This request is accepted by the image processing apparatus by the accepting unit by, for example, presenting a service item to the user and selecting a desired image processing service.

  In general, an individual account used for user logon includes information about the user, for example, the user name is used as the account name. Therefore, the incidental information acquisition unit acquires incidental information in which the user information about the individual account is concealed by generation or reading. What is important is that the incidental information is associated with one individual account or an account group including a plurality of individual accounts. Thereby, a certain individual account or individual account group can be specified based on incidental information.

  The external logon means is means for logging on to the external device with a representative account. The representative account is an account registered in an external device in order to process a plurality of user service requests. When there is a service request from the set user, the image processing apparatus logs on to the external apparatus using this representative account. Then, the command means instructs the logged-on external device to perform the processing related to the image processing service. In the command, incidental information is given.

  According to this configuration, the image processing apparatus can use the external apparatus while keeping the user information for each individual account secret. On the other hand, the image processing apparatus can read only the image processing apparatus side with respect to the execution of the process in the external apparatus by issuing a processing command to the external apparatus using the incidental information that can be associated with the individual account. Labeling. For this reason, on the image processing apparatus side, when an execution record or billing record associated with auxiliary information is acquired from an external device, the execution record or billing record can be used in association with an individual account. Become. It should be noted that the present invention can be extended to data processing for general data instead of image processing for image data.

  Preferably, the image processing apparatus of the present invention is charged for processing related to the image processing service, and includes a charge amount acquisition means for acquiring the amount described in association with the supplementary information from an external device, an individual account, and the supplementary information. Corresponding information acquisition means for acquiring correspondence information, and distribution means for distributing the acquired amount of money to individual accounts based on the correspondence information. In the external device, the charge amount is recorded in association with the auxiliary information based on the information of the auxiliary information attached to the command. The charge amount acquisition means acquires this record directly from the external device or indirectly through another device. The correspondence information acquisition means acquires correspondence information indicating the correspondence between the incidental information and the individual account. The correspondence information may be acquired from the image processing apparatus or another apparatus that holds the information. The allocating means allocates the acquired billing amount to an individual account or an individual account group including a plurality of individual accounts based on the correspondence information. Thereby, it is possible to perform charging processing for each user or each user group while keeping user information confidential to the external device.

  Preferably, in the image processing apparatus of the present invention, the supplementary information is information fixed for each individual account. That is, specific information that is provided separately from the individual account name and does not cause the leakage of user information is used as incidental information. As a result, the association between the individual account and the incidental information can be performed using a small amount of information. For example, a process for distributing the charge amount associated with the incidental information sent from the external device for each individual account is also possible. It can be done easily.

  Preferably, in the image processing apparatus of the present invention, the fixed information is obtained by encrypting an identifier of an individual account. The individual account identifier refers to an individual account name or information associated with the individual account name inside the apparatus. Information obtained by encrypting the identifier of the individual account by a method that can be decrypted only by the image processing apparatus or the related apparatus can be used as supplementary information. In this aspect, only the decryption key is required when associating the incidental information with the individual account, and the amount of information necessary for the association is very small.

  Alternatively, in the image processing apparatus of the present invention, the charge amount related to each individual account is collected from a payee identified by a symbol code in a separately provided charge processing center, and the fixed information is It may be a symbol code of a payee corresponding to an individual account. The symbol code of the payee may be assigned separately to each individual account, or may be assigned commonly to a plurality of individual accounts. One of the main purposes of billing allocation is to identify payees. Therefore, if the symbol code of the payee is used, there is no need to associate each individual account when transmitting the billing information to the billing processing center. Further, since the symbol code of the payee is symbolized, the user information can be kept secret from the external device.

  Preferably, in the image processing apparatus of the present invention, the incidental information is information generated every time a service request is made. Specific examples include information consisting of serial numbers that increase by one each time a service request is received, and information based on the date and time when the service request is received. When the incidental information generated at each service request is used, in order to associate the incidental information with an individual account, it is necessary to store correspondence information with the individual account for each generated incidental information. This increases the amount of information to be held, but exhibits an excellent effect in terms of information confidentiality.

  The accounting processing apparatus according to the present invention includes an external processing unit that processes data using an external device, a user management unit that manages individual accounts for each user, and an external processing unit that logs on with the individual account. Receiving means for accepting the execution request of the data processing service according to the above, supplementary information acquiring means for acquiring the supplementary information associated with the individual account and concealing the user information about the individual account, and the external corresponding to the received data processing service External log-on means for logging on to a device with a representative account shared for processing for a plurality of users, and instructions for processing related to the received data processing service for the logged-on external device, with accompanying information A charging processing device for performing charging processing in cooperation with a data processing system comprising: And, from the external device, a charge amount acquisition unit that is charged for processing related to the data processing service and acquires the amount described in association with the supplementary information, and correspondence that acquires correspondence information between the individual account and the supplementary information An information acquisition unit; and an allocation unit that distributes the acquired amount to the individual account based on the correspondence information. The data processing system is a device composed of a single unit or a plurality of cases. Of course, the acquisition destination of the correspondence information by the correspondence information acquisition unit can be the data processing system, but can also be another device including the accounting processing device. As an example of the latter, the correspondence information generated by the billing management apparatus can be transmitted to the data processing system and also used in the billing processing apparatus.

  The control program of the present invention includes an image forming unit that forms a print image on a sheet based on image data, and an external processing unit that performs processing on the image data using an external device. A program for controlling an image processing apparatus that performs services, a user management procedure for managing individual accounts for each user, and a reception for accepting an execution request for an image processing service related to an external processing unit from a user logged on with the individual account Ancillary information acquisition procedure for acquiring the incidental information associated with the procedure and the individual account and concealing the user information about the individual account, and processing for a plurality of users for the external device corresponding to the received image processing service Log on with a representative account shared by And includes a command processing according to the image processing service accepted, a command procedure for denoted by the supplementary information. The program controls the image processing apparatus by defining the operation of hardware having an arithmetic function. The hardware provided with this calculation function may be incorporated in the image processing apparatus, or may be a computer such as a PC (personal computer) having a separate housing.

  An image processing management method according to the present invention includes an image forming unit that forms a print image on a sheet based on image data, and an external processing unit that performs processing on the image data using an external device. A method executed by an image processing apparatus that performs an image processing service, comprising: a user management step for managing an individual account for each user; and an execution request for an image processing service according to an external processing unit from a user logged on with the individual account. A reception step for receiving, a supplementary information acquisition step for acquiring supplementary information associated with the individual account and concealing the user information for the individual account, and a plurality of users for the external device corresponding to the received image processing service Log on with a representative account that is shared for The external device includes a command processing according to the image processing service accepted, a command step carried out given the supplementary information.

  Hereinafter, typical embodiments of the present invention will be described.

  FIG. 1 is a schematic block diagram showing the functional configuration of each device constituting the system 10 according to the present embodiment. The system 10 includes an MFP (multifunction peripheral) 20 as an image processing apparatus and an external image processing service apparatus 60 as an external apparatus, which are connected to the Internet 100 as a communication network. The external image processing service device 60 is a customer service device possessed by an ASP (Application Service Provider).

  The MFP 20 includes a scanner function, a printer (image forming) function, a copying function as a combination of the scanner function and the printer function, and a facsimile function as a combination of the telephone communication function and the printer function. The MFP 20 is placed in a public space in the company and used by a plurality of employees. As a form of usage, it is possible to have the user operate without logging on with a specific account, but here, the aspect in which the user logs on with an individual account for administrative or confidential reasons. The explanation will be made assuming that

  The MFP 20 includes a display unit 22, a user input unit 24, a scanner / image forming unit 26, an accompanying information generation unit 27, a control unit 28, a storage unit 30, a charge amount acquisition unit 50, and a distribution unit 52 as main components. Yes. The display unit 22 includes a display and displays guide information and execution results. The user input unit 24 includes an input device such as a touch panel provided on the display surface or a button provided in another part. The user can send an instruction to the MFP 20 by operating the input device. The scanner / image forming unit 26 has the scanner function, image forming function, copying function, and facsimile function described above.

  The incidental information generation unit 27 generates incidental information. The incidental information is information for associating with the individual account, but is characterized in that it is generated so as to conceal information about the user such as the account name of the individual account. The incidental information generation unit 27 generates a service request every time a user uses an external device. In this case, the incidental information is required to have uniqueness that does not overlap even when the power of the MFP 20 is repeatedly turned on and off. Therefore, here, a service request ID, which is a serial number value based on the number of service requests from the time of shipment, is generated as incidental information. The generated service request ID as supplementary information is used for a service execution instruction to the external image processing service device 60 and is recorded in the usage history DB 42 as described later.

  Other information can be used as the incidental information. For example, when the incidental information is generated every time there is a service request, uniqueness can be guaranteed even if a hash value obtained by converting time information with a hash function is used. For example, it is also effective to use a fixed value for each individual account, instead of generating it every time there is a service request. Specifically, an example of information obtained by encrypting the identifier of the individual account so that it can be decrypted only by the MFP 20 (or in a related apparatus) can be given. It is also effective to use a symbol code that is a payment code for charging an individual account. When these fixed values are adopted, it is not necessary to store the correspondence between the incidental information and the individual account for each service request. For example, the private key 38, which will be described later, is used for decryption (therefore, the corresponding public key is used for encryption), or the correspondence information between individual accounts and symbol codes is listed and stored in the storage unit 30. This is because the association between the two can be performed.

  The control unit 28 includes hardware having an arithmetic function such as an MPU (ultra-small processing unit) and a program (software) that defines the processing operation. Then, it controls the operation of each component of the MFP 20 based on a program and user input, and gives an instruction to an external device such as the external image processing service device 60.

  The storage unit 30 includes a storage device such as a semiconductor memory or a hard disk. In addition to storing programs, image data, and the like, the storage unit 30 stores a user authentication DB (database) 32, a service list 34, service authentication information 36, a secret key 38, a certificate 40, and a usage history DB 42. .

  The user authentication DB 32 is a database for authenticating a user who uses the MFP 20. The user authentication DB 32 is constructed when an administrator (KO; key operator) of the MFP 20 creates an individual account and sets authentication information for local authentication when logging on to the MFP 20 locally. The authentication information may be changed by the user. The authentication information is data used for authentication of input authentication target information. Typically, the authenticated information is a password input by the user, and the authentication information is a password having the same content or information created from the password. When there is a user logon access, the control unit 28 refers to the user authentication DB 32 to perform local authentication processing as the first authentication, and allows the authenticated user to log on.

  FIG. 2 shows an example of the user authentication DB 32 in a table format. In this figure, the name of each user, an individual account name (userID) in the MFP 20, and a password as authentication information used for local login to the MFP 20 are shown. That is, for the user “Hanako”, an individual account name “hanako” and a password “hoge” are set. For the user “Taro”, an individual account name “taro” and a password “foopass” are set.

  The service list 34 is a list of services available to each registered user. FIG. 3 shows an example of the service list 34 in a table format. In this figure, for hanako and taro for which individual accounts are created, a copy service and a scanner service as a local (inside apparatus) service 110 using the scanner / image forming unit 26, and an external image processing service device 60 are used. Each service such as service A 112 (Service A) can be implemented (displayed with a circle) or not (displayed with a cross). In the example shown, both local service 110 and service A 112 are available for both hanako and taro. The control unit 28 displays a list for the user who has logged on to the display unit 22 based on the service list 34. Then, the service selected by the user is received and an execution instruction is given. When the execution instruction is given, the incidental information generated by the incidental information generation unit 27 is also transmitted. Thereby, in the external image processing service device 60, execution of the instructed process can be performed by labeling with the accompanying information.

  The service authentication information 36 is information indicating which password is used for external logon with a representative account name when executing a service related to an external device. FIG. 4 shows an example of the service authentication information 36 in the form of a table. For the service A 112 illustrated in FIG. 3, an item 120 indicating an account name (ID) and an item 122 indicating its password are shown. According to this, the service A 112 is logged on with the account name serviceuser and the password servicepass. The control unit 28 refers to the service authentication information 36 and performs access to the external device.

  As the representative account name, it is also effective to use the identifier of the MFP 20 instead of an arbitrary name as shown here. In particular, when only one representative account is set for each service in the MFP 20, this name is effective because the representative account and the identifier of the MFP 20 correspond one-to-one. Specifically, the account name can be a value uniquely determined based on the manufacturer name, product name, serial number, etc. of the device. Alternatively, a method of authenticating that access is from the MFP 20 based on a public key encryption method such as the digital signature method described below and logging on with a corresponding account (which can be regarded as a representative account indicating the MFP 20 itself) is also effective. It is.

  The secret key 38 is a key generated based on a public key cryptosystem. The certificate 40 proves a public key corresponding to the private key 38. The private key 38 and the certificate 40 are normally stored in the storage unit 30 at the manufacturing stage of the MFP 20. However, storage may be performed for the first time when an image processing service contract is made with an external apparatus, or addition or change may be performed. The secret key 38 is roughly used for the following two. One is a digital signature. When the MFP 20 accesses the external device, the information is encrypted with the private key 38 and transmitted to the external device, and decrypted with the corresponding public key in the external device. This proves the integrity of the creation information of the MFP 20. The other is encryption, which secures the confidentiality of information by receiving the information encrypted with the public key corresponding to the external device and decrypting it with the private key 38. . In order to realize these functions, it is necessary to hold the correct public key for the external device that is the communication destination. The certificate 40 is a public key certificate used for this purpose, and describes an MFP identifier created by its serial number or the like to identify the MFP 20 and is issued by a trusted organization. Then, it is sent to an external device for use at the beginning of interactive communication or when digitally signed information is transmitted.

  A public key cryptosystem can be used for external logon to the external image processing service device 60. For example, instead of using the password shown in FIG. 4, authentication using the private key 38 and the corresponding public key certificate may be performed. Information on the authentication method to be used for authentication can be included in the service authentication information 36. In this case, the control unit 28 refers to the information and performs external logon using an appropriate one from the set representative account name, password, public key certificate, and the like.

  In the usage history DB 42, usage information of a user who uses the MFP 20 is recorded as needed. FIG. 5 is a diagram exemplifying information recorded in the usage history DB 42, and shows an item 130 indicating a service request ID as incidental information and an item 132 indicating an individual account name. According to this, it can be seen that the external processing service numbered “0001” was made by hanako's instruction, and the external processing service numbered “0002” was made by taro's instruction. Note that the usage history DB 42, in addition, and date and time of accepting the service, can also be recorded information such if with which services including local service.

  The usage history DB 42 is used when the distribution unit 52 distributes the charge amount from the external image processing service device 60 acquired by the charge amount acquisition unit 50 to each individual account. The charge amount acquisition unit 50 is configured to acquire a list of charge amounts related to the use of the MFP 20 from the external image processing service device 60. This list is created by, for example, monthly closing, and is transmitted in association with the service request ID as supplementary information attached at the time of execution instruction. The distribution unit 52 converts the service request ID into an individual account using the usage history DB 42 for the list acquired by the charge amount acquisition unit 50, and totals the charge amount for each individual account. Then, the MFP 20 bills the user together with the use result of the service provided using only the MFP 20.

  In the above description, the control unit 28 of the MFP 20 has been described as being inside the MFP 20. However, the control unit 28 or some of the functions of the control unit 28 may be provided in a device different from the MFP 20. For example, a function of the control unit 28 can be assigned by installing a PC on the way to connect the MFP 20 and the Internet 100. The billing amount acquisition unit 50 and the distribution unit 52 can also be provided in a separate device from the MFP 20. For example, it is also effective to provide a server that collectively manages charges in a plurality of MFPs in a company, and to have the functions of the charge amount acquisition unit 50 and the distribution unit 52 in the server.

  Next, the configuration of the external image processing service device 60 will be described. The external image processing service device 60 includes a control unit 62, a service A unit 64, a service permission list 70, and a usage history DB 72 as main components. The control unit 62 is provided in the main body of the external image processing service device 60 or in a separate housing, and is configured by hardware having an arithmetic function and a program that defines its operation. It manages control of the external image processing service device 60, communication with external devices via the Internet 100, and the like. The service A unit 64 is configured to perform the service A described with reference to FIGS. 3 and 4.

  The service permission list 70 is provided for authenticating the logon of the MFP group that has a use contract with the external image processing service device 60 for each service. Registration in the service permission list 70 is generally performed by an operator on the ASP side who is an administrator of the external image processing service apparatus 60 after a contract with the MFP is made. FIG. 6 shows an example of the service permission list 70. Here, a part of the service permission list 70 corresponding to the service authentication information 36 of the MFP 20 shown in FIG. 4 is shown. In the service permission list 70, values are registered for an item 200 indicating a service name related to the service A unit 64, an item 202 indicating a registered account name, and an item 204 indicating a password as authentication information. Specifically, an account having an account name “serviceuser” and a password “servicepass” is registered as an account using the service A, and these correspond to FIG. The control unit 62 refers to the service permission list 70, authenticates access from the MFP 20 with a password, permits logon, and gives the authority to use the corresponding service.

  The usage history DB 72 is a database that records users who use the service of the external image processing service device 60. FIG. 7 is a diagram illustrating information held in the usage history DB 72. Here, the history information is recorded in four items of usage date and time 140, account name 142, incidental information 144, and billing amount 146. Specifically, at 15:03 on December 1, 2003, it is used by a user having an account name of serviceuser (that is, MFP 20), and the accompanying information is “0001” (according to FIG. 5, this is hanako's This is due to the service request), and the charge amount imposed on the processing is 50 yen. Also, at 10:32 on December 3, 2003, it was also used by a user with the account name serviceuser, and the incidental information was “0002” (according to taro's service request), and was imposed on the processing. The billing amount is 35 yen. Based on the usage history DB 72, the control unit 62 totals the amount charged for each account at the time of closing such as once a month, and charges the user corresponding to the account. At that time, by adding the supplementary information, the MFP as a user can allocate a charge amount for each individual account.

  Next, an outline of the operation of the system 10 will be described with reference to FIGS.

  FIG. 8 is a flowchart showing the flow of processing for the external image processing service device 60. When a contract is made online or offline between the ASP that owns the external image processing service device 60 and the company that owns the MFP 20, an administrator on the ASP side registers a representative account in the external image processing service device 60. (S10). According to the example shown in FIG. 6, the registration for the service A is performed by registering the representative account with the account name serviceuser and the corresponding password with servicepass. Then, service list information describing the service contents to be presented to the user is provided to the MFP 20 (S12).

  When there is an access from the registered MFP, the external image processing service device 60 performs authentication and permits logon (S14). For example, the user name serviceuser and password information servicepass are transmitted to the service A (encrypted if necessary) from the MFP 20. The control unit 62 of the external image processing service device 60 performs authentication by referring to the service permission list 70.

  The logged-on user (that is, the MFP 20) transmits to the external image processing service apparatus 60 together with image data that requires a command for service execution. At that time, incidental information is given (S16). The external image processing service device 60 implements the service using the service A unit 64 (S18), and writes an implementation record including the charge amount in the usage history DB 72 together with the accompanying information (S20). The user who has received the service logs out immediately (S22). Steps S14 to S22 are repeated in response to a service request from the MFP.

  When the set aggregation timing comes, the external image processing service device 60 charges each user (that is, the MFP 20) for a charge amount online (S24). At this time, the usage history DB 72 is referred to, and the charge amount is charged with the accompanying information.

  Next, an outline of the operation of the MFP 20 will be described with reference to FIG. FIG. 9 is a flowchart showing the flow of processing in the MFP 20. In the MFP 20, when a contract with the external image processing service device 60 is made, the administrator sets a representative account for the service authentication information 36 (S30). Further, the administrator downloads service list information from the external image processing service device 60 and adds it to the service list 34 (S32). The service list 34 can be set to automatically receive and add by registering address information such as the URL and IP address of the external image processing service device 60. Note that if the services available for each user are different, an access right may be set for each user.

  The control unit 28 of the MFP 20 refers to the user authentication DB 32, authenticates the user's access to a preset individual account, and permits logon (S34). For the logged-on user, a service list is displayed on the display unit 22 based on the service list 34, and information on a service request made through the user input unit 24 is accepted (S36). When the accepted service is provided by the external image processing service device 60, the service is logged on with reference to the service authentication information 36 (S38). According to the example shown in FIG. 4, in the case of service A, a representative account called serviceuser is used to log on using a password called servicepass. For this reason, the user does not need to be aware of how the logon to the external image processing service device 60 is performed, and does not need to perform complicated operations such as entering a password.

  After logging on, the external image processing service device 60 is attached with the supplementary information generated by the supplementary information generating unit 27 and issues a command to execute the process related to the service selected by the user (S40). At that time, image data is transmitted and received as necessary. Upon receiving the commanded service (S42), the MFP 20 logs out from the external image processing service device 60 (S44).

  In the MFP 20, a record of making a service request to the external image processing service device 60 is added to the usage history DB 42 together with the accompanying information (S46). In addition, the user who has received the service logs out of the MFP 20 upon completion of the service (S48). The process from step S34 to S48 is repeated as appropriate.

  Billing information is periodically transmitted from the external image processing service device 60 or the ASP that manages it, and the billing amount acquisition unit 50 acquires the information (S50). Then, the distribution unit 52 replaces the corresponding charge amount with the corresponding user in comparison with the usage history DB 42 (S52). The created billing amount is transmitted to a billing processing center or the like and used for payment processing.

  Here, a modified example of how to provide the accompanying information will be described with reference to FIG. FIG. 10 is a diagram corresponding to FIG. 3 and is a diagram showing a modified example of the service list 34 in a table format. In FIG. 10, similarly to FIG. 3, usable information such as the service A 112 using the local function 110 and the external image processing service device 60 is shown for each user. The difference is that an item for the cost code 210 is provided. This cost code is a code used in a billing processing center that pays bills for each user, and is a symbol code represented as a symbol. Specifically, hanako is assigned a code of 123, and taro is assigned a code of 456. The cost code is generally a mere number indicating a billing destination and the like, and even if it is disclosed to the external image processing service apparatus 60 side, there is no possibility that user information is leaked to the external image processing service apparatus 60 side. . Therefore, this cost code can be used as incidental information. The cost code is a fixed value, and each user (individual account) or a group of a plurality of users can be uniquely specified. Therefore, unlike the above-described embodiment, the MFP 20 stores the charging information transmitted from the external image processing service device 60 for each individual account without recording the cost code as incidental information in the usage history DB 42. Can be allocated.

  Next, another modified example will be described. In this case, the incidental information generation unit 27 can encrypt the individual account name of the logged-on user using the public key of the MFP 20 in the certificate 40 and use this as the incidental information. In this case, only the MFP 20 having the private key 38 corresponding to the certificate 40 can decrypt the encrypted individual account name, and the encrypted individual account name is transmitted to the external image processing service device 60 side. Even if the information is disclosed, the user information is not leaked to the external image processing service device 60 side. Therefore, this encrypted individual account name can be used as supplementary information. Unlike the above-described embodiment, the MFP 20 can use the encrypted individual account name because the distribution unit 52 can obtain the individual account name by decrypting it using the secret key 38. Even without recording the cost code as supplementary information in the history DB 42, it is possible to allocate the billing information transmitted from the external image processing service device 60 to each individual account.

It is a block diagram which shows schematic structure of the apparatus which concerns on this Embodiment. It is a figure which shows the example of user authentication DB. It is a figure which shows the example of a service list. It is a figure which shows the example of service authentication information. 6 is a diagram illustrating an example of an MFP usage history DB. FIG. 6 is a diagram illustrating an example of an MFP permission list. FIG. It is a figure which shows the example of utilization log | history DB of an external device. It is a flowchart explaining the outline | summary of operation | movement of an external device. 3 is a flowchart illustrating an outline of operation of the MFP. It is a figure which shows another example of a service list.

Explanation of symbols

  10 system, 20 MFP, 22 display unit, 24 user input unit, 26 image forming unit, 27 incidental information generation unit, 28 control unit, 30 storage unit, 32 user authentication DB 32, 34 service list, 36 service authentication information, 38 Private key, 40 certificate, 42, 72 usage history DB, 50 charge amount acquisition unit, 52 distribution unit, 60 external image processing service device, 62 control unit, 64 service A unit, 70 service permission list.

Claims (9)

Image forming means for forming a print image on paper based on the image data;
An external processing means for processing image data using an external device;
User management means for managing individual accounts for each user;
Receiving means for receiving an execution request for an image processing service related to an external processing means from a user who has logged on with an individual account;
Accompanying information acquisition means for acquiring incidental information associated with an individual account and concealing user information about the individual account;
An external logon means for logging on to the external device corresponding to the received image processing service with a representative account shared for processing for a plurality of users;
Instruction means for performing processing related to the received image processing service with attached information to the logged-on external device;
An image processing apparatus comprising: The image processing apparatus according to claim 1.
Charge amount acquisition means for acquiring an amount charged for processing related to the image processing service and described in association with the accompanying information from an external device;
Correspondence information acquisition means for acquiring correspondence information between individual accounts and incidental information,
A distribution means for distributing the acquired amount to individual accounts based on the correspondence information;
An image processing apparatus comprising: The image processing apparatus according to claim 1.
The image processing apparatus according to claim 1, wherein the incidental information is information fixed for each individual account. The image processing apparatus according to claim 3.
The image processing apparatus according to claim 1, wherein the fixed information is obtained by encrypting an identifier of an individual account. The image processing apparatus according to claim 3.
The billing amount for each individual account is collected from the payee identified by the symbol code at a separate billing processing center.
The image processing apparatus according to claim 1, wherein the fixed information is a symbol code of a payee corresponding to each individual account. The image processing apparatus according to claim 1.
The image processing apparatus according to claim 1, wherein the incidental information is information generated each time a service request is made. External processing means for processing data using an external device;
User management means for managing individual accounts for each user;
An accepting means for accepting an execution request for a data processing service related to an external processing means from a user who has logged on with an individual account;
Accompanying information acquisition means for acquiring incidental information associated with an individual account and concealing user information about the individual account;
An external logon means for logging on to an external device corresponding to the accepted data processing service with a representative account shared for processing for a plurality of users;
Instruction means for performing processing related to the received data processing service with attached information to the logged-on external device;
A billing processing apparatus that performs billing processing in cooperation with a data processing system comprising:
Charge amount acquisition means for acquiring an amount described in association with incidental information charged from the external device for processing related to the data processing service;
Correspondence information acquisition means for acquiring correspondence information between individual accounts and incidental information,
A distribution means for distributing the acquired amount to individual accounts based on the correspondence information;
A billing processing apparatus comprising: Image forming means for forming a print image on paper based on the image data;
An external processing means for processing image data using an external device;
A program for controlling an image processing apparatus that provides an image processing service to a user,
User management procedures to manage individual accounts for each user;
An acceptance procedure for accepting an execution request for an image processing service related to an external processing means from a user who has logged on with an individual account;
Accompanying information acquisition procedure for acquiring incidental information associated with an individual account and concealing user information about the individual account;
An external logon procedure for logging on to an external device corresponding to the accepted image processing service with a representative account shared for processing for a plurality of users;
A command procedure for performing processing related to the received image processing service with additional information for the logged-on external device,
A control program comprising: Image forming means for forming a print image on paper based on the image data;
An external processing means for processing image data using an external device;
A user management step of managing an individual account for each user, and a method executed by an image processing apparatus that provides an image processing service to a user,
An accepting step of accepting an execution request of an image processing service related to an external processing means from a user who has logged on with an individual account;
Accompanying information acquisition step for acquiring incidental information associated with an individual account and concealing user information about the individual account;
An external logon step for logging on to the external device corresponding to the received image processing service with a representative account shared for processing for a plurality of users;
A command step for performing processing related to the received image processing service with additional information for the logged-on external device;
An image processing management method comprising:

Images