JP4848907B2 - Biometric authentication system, server, and job execution method in network system - Google Patents

Description

  The present invention relates to a biometric authentication system, a server in a network system using the biometric authentication system, and a job execution method.

  In general, in order for a user to use a part or all of the functions of a computer system, authentication is performed to confirm whether or not the user is an authorized person.

  Conventionally, there are a method using a password and a method using a card as an authentication method, but in recent years, a biometric authentication system with higher safety has been used. In the biometric authentication system, a physical feature of an individual such as a fingerprint, an iris, and a vein is detected by a biometric sensor, and the individual is authenticated using the obtained biometric information.

  For example, in biometric authentication using fingerprints, a plurality of feature points are extracted from one detected fingerprint and compared with feature points of fingerprint information registered in advance to determine whether their shapes and positions match. To do.

  On the other hand, there are cases where a user wants to print a secret document with a printer at a remote location using a network system or the like. In such a case, if the user himself / herself creates a job for printing, causes the printer to execute the job and print it, and the user collects the printed matter, the confidentiality is maintained, so there is no problem. Absent. However, there are cases where the user wants to ask other people for various operations due to various circumstances. For example, a user may generate a job, but may ask another person in the vicinity of the printer to collect the printed matter by causing the printer to execute the job.

  In such a case, in a system that merely authenticates a user, a job generated by the user cannot be executed by a specific other person. This is also a problem because the biometric authentication system is for enhancing security.

  By the way, it is proposed to record the fingerprint information of the agent designated by the user together with the fingerprint information of the user himself / herself on the card so that both the user himself / her and the agent can authenticate using the card. (Patent Document 1).

In addition, it has been proposed that information indicating the user's agent is registered in the proxy authentication database, and when the agent inputs fingerprint information, it is checked against the registration information in the proxy authentication database. (Patent Document 2).
Japanese Patent Laid-Open No. 9-114983 JP 2002-222168

  By using the technology of the above-mentioned patent document, the user decides an appropriate person as an agent, and registers the fingerprint information of the agent in a card or database, so that the user can perform various operations. It is possible to ask an agent to execute.

  However, in this case, since the agent is given authority equivalent to that of the user, the agent can execute the work not requested by the user. For this reason, for example, although the agent is requested to print only job A, printing may be executed for job B, or work or processing other than job execution may be performed. obtain.

  Thus, in the conventional biometric authentication system, since the user's agent is also authenticated in the same manner as the user, there is a problem that the security level is lowered.

  The present invention has been made in view of the above-described problems, and an object of the present invention is to provide a biometric authentication system that allows a user to request an agent to execute a job without reducing the security level.

  A biometric authentication system according to the present invention is a biometric authentication system including a client and a server connected via a network, wherein the client generates a job based on a user instruction, and the generated job includes: Means for adding biometric information of a user instructing execution, and means for transmitting the job and the added biometric information to the server, the server acquiring a biometric information of the user; An authority to request the execution of the job based on the biometric information database in which the relationship between the biometric information and the operation authority is recorded in advance, the biometric information added to the job received from the client, and the biometric information database Means for acquiring job execution request authority information indicating whether or not the job execution request is acquired, and the acquired job execution request Means for storing limit information in association with a job corresponding thereto, biometric information acquired from a user requesting execution of the job when the job is requested to the server, and the job execution request authority Means for determining whether or not the user has the authority to request execution of the job based on the information; and means for executing the job when it is determined that the user has authority to request execution of the job , Has.

  Preferably, the biometric information database includes identification information for identifying biometric information, a user who is a subject of the biometric information, one or more operation contents corresponding to each identification information, and authority for the operation contents. Is a record of the relationship between one or more users who have been given

The biometric information database can record biometric information about a plurality of parts for one user, and the operation contents and the authority are given to the biometric information of each part. It is possible to record each user individually,
The biological information is fingerprint information, and the part is a finger of each of the right hand and the left hand.

  In addition, the client includes a biometric information sensor that acquires biometric information of the user, a unit that generates a job based on a user instruction, and a unit that adds the biometric information of the user instructing execution of the job to the generated job And means for transmitting the job and the added biometric information to the server, wherein the server is a biometric information sensor for acquiring biometric information of a user, identification information for identifying biometric information, and the biometric information Biological information in which the relationship between the user who is the main body of the user, one or more operation contents corresponding to each identification information, and one or more users who are authorized for the operation contents is recorded in advance Based on the database, the biometric information added to the job received from the client, and the biometric information database, which user has the job. Means for acquiring job execution request authority information indicating whether or not the user has the authority to request execution, means for storing the acquired job execution request authority information in association with the corresponding job, and When there is a request for execution, biometric authentication means for authenticating the user based on biometric information acquired from the user requesting execution of the job, information on the user authenticated by the biometric authentication means, and the job Based on the execution request authority information, means for determining whether the user has authority to request execution of the job, and executes the job when it is determined that the user has authority to request execution of the job Means.

  In the job execution method according to the present invention, when a job is generated in a client, the user's biometric information for instructing execution of the job is acquired, and the acquired biometric information is added to the generated job. Which biometric information is transmitted from the client to the server, and in the server, based on the biometric information added to the received job and the biometric information database in which the relationship between the biometric information and the operation authority is recorded in advance. Obtains job execution request authority information indicating whether the user has the authority to request execution of the job, stores the job execution request authority information in association with the job, and requests the server to execute the job. The biometric information of the user requesting execution of the job is acquired, and the acquired biometric information and If the user based on the job execution request authorization information is determined to have the authority to request execution of the job, to perform the job.

  According to the present invention, the user can request the agent to execute a job without lowering the security level.

  1 is a diagram illustrating an example of the overall configuration of a network system 1 to which a biometric authentication system SN according to the present invention is applied, FIG. 2 is a diagram illustrating an example of a hardware configuration of an image forming apparatus 2, and FIG. 3 is an image forming apparatus. 2 is a diagram illustrating an example of a hardware configuration of the terminal device 3, FIG. 5 is a diagram illustrating an example of a functional configuration of the network system 1, and FIG. 6 is a biometric information table TB1. FIG. 7 is a diagram showing an example of the biological information data DS1.

  In FIG. 1, the network system 1 includes one or a plurality of image forming apparatuses 2, one or a plurality of terminal apparatuses 3 that can be connected to each other via a communication line 4. As the communication line 4, the Internet, an intranet, a public line, a dedicated line, or the like is used. Hereinafter, these image forming apparatuses 2 may be described separately as “image forming apparatus 2A”, “image forming apparatus 2B”, and so on. Similarly, these terminal devices 3 may be described separately as “terminal device 3A”, “terminal device 3B”, and so on.

  The image forming apparatus 2 is a processing apparatus that integrates various functions such as copy, scanner, fax, network printing, and document server. Sometimes called a multi-function peripheral or MFP (Multi Function Peripherals). “Network printing” is a function for receiving image data from the terminal device 3 and printing an image on paper. Sometimes called a “network printer function” or a “PC print function”. The “document server” gives each user a storage area called a “box” or “personal box”, which corresponds to a folder or directory in a personal computer, and the user can store a document such as an image file in his storage area. This function allows you to save data. Sometimes called “box function”.

  The image forming apparatus 2 is installed in offices or offices such as businesses, public facilities such as schools or libraries, stores such as convenience stores, and other various places, and can be shared by a plurality of users.

  As shown in FIG. 2, the image forming apparatus 2 includes a CPU 20a, a RAM 20b, a ROM 20c, a mass storage device (hard disk) 20d, a control circuit 20e, an operation panel 20f, a scanner 20g, a printing device 20h, a communication interface 20j, and a fingerprint. The sensor SS2 is configured.

  The large-capacity storage device 20d is a large-capacity storage device for storing programs such as an operating system and firmware, document data, and the like. As the large-capacity storage device 20d, a storage device that can rewrite data and is nonvolatile, such as a hard disk or a flash memory, is used. A part of the program or data may be stored in the ROM 20c. Programs and data stored in the large-capacity storage device 20d are loaded into the RAM 20b as necessary, and the programs are executed by the CPU 20a.

  The control circuit 20e is a circuit for controlling the mass storage device 20d, the scanner 20g, the printing device 20h, the communication interface 20j, the operation panel 20f, and the like.

  The scanner 20g is an apparatus that optically reads an image of content such as a sentence, a mathematical formula, a symbol, a photograph, a chart, or an illustration drawn on a document to generate image data.

  The printing device 20h prints an image on a sheet based on image data (including text data) obtained by the scanner 20g or image data transmitted from the terminal device 3 or the like. The communication interface 20j is a NIC (Network Interface Card) or a modem for communicating with other devices via the communication line 4.

  The fingerprint sensor SS2 is for reading the user's fingerprint and acquiring the fingerprint information SJ. The fingerprint sensor SS2 is incorporated on the surface of the housing as part of the image forming apparatus 2. Alternatively, the fingerprint sensor SS2 may be independently installed in the vicinity of the image forming apparatus 2. As the fingerprint sensor SS2, various types of sensors such as an image sensor or a capacitive sensor can be used. The fingerprint sensor SS2 captures the user's fingerprint as image data DF, for example. Based on the image data DF, feature point data DT and other various data are generated as necessary. These image data DF and the data generated thereafter are stored in the RAM 20b or the large-capacity storage device 20d.

  In FIG. 3, the operation panel 20f includes an operation unit SB and a display unit TD. A numeric keypad or the like is used as the operation unit SB, and a liquid crystal display or the like is used as the display unit TD. By operating the operation unit SB, the user gives an instruction to the image forming apparatus 2 to start (request) or interrupt the execution of processing, and processing such as data destination, printing conditions, or image file format. You can specify conditions and other various items. On the display unit TD, a screen for giving a message or an instruction to the user, a screen for inputting a type of processing and processing conditions desired by the user, a screen showing a result of processing executed by the CPU 20a, etc. Is displayed. When a touch panel is used as the operation panel 20f, the touch panel serves as both the operation unit SB and the display unit TD. As described above, the operation panel 20 f serves as a user interface for a user who operates the image forming apparatus 2.

  As shown in FIG. 4, the terminal device 3 includes a CPU 30a, a RAM 30b, a ROM 30c, a hard disk 30d, a control circuit 30e, a keyboard 30f, a pointing device 30g, a display 30h, a communication interface 30j, a fingerprint sensor SS3, and the like. As the terminal device 3, a personal computer or a workstation is used.

  The keyboard 30 f and the pointing device 30 g are input devices for the user to input various information to the terminal device 3. The display 30h displays various screens for the user. That is, the keyboard 30f, the pointing device 30g, and the display 30h serve as a user interface. Further, the user can use the image forming apparatus 2 remotely by operating the keyboard 30f or the pointing device 30g while looking at the screen displayed on the display 30h.

  The fingerprint sensor SS3 is for acquiring the fingerprint information SJ by reading the user's fingerprint, and is the same as the fingerprint sensor SS2 provided in the image forming apparatus 2. The fingerprint sensor SS3 is incorporated as a part of the terminal device 3 on the surface of the housing. Moreover, you may install separately in the vicinity of the terminal device 3 separately.

  The communication interface 30j is a NIC (Network Interface Card) or a modem for communicating with the image forming apparatus 2 or another terminal apparatus 3 via the communication line 4.

  The control circuit 30e is a circuit for controlling the hard disk 30d, the display 30h, the communication interface 30j, and the like.

  An operating system, application software, image forming apparatus control software, and the like are installed in the hard disk 30d.

  Next, the configuration and operation of the case where the network system 1 functions as a network print system including a client and a server will be described. In this case, the image forming apparatus 2 operates as a server, and the terminal apparatus 3 operates as a client. Here, the terminal device 3 generates a job JB3 for printing, transmits it to the image forming apparatus 2, requests the image forming apparatus 2 to execute the job JB3, and actually prints it on paper. In printing on the image forming apparatus 2, another user US4, who is the agent designated by the user US3 who generated the job JB3, is authenticated, and the user US4, who is the agent, requests execution of the job.

  5, the terminal device 3 includes an instruction unit 301, a job generation unit 302, a job storage unit 303, a biometric information storage unit 304, an authentication unit 305, a communication unit 306, and the like.

  The image forming apparatus 2 includes a communication unit 201, a job execution request authority information storage unit 202, a job storage unit 203, a job reading unit 204, a job execution unit 205, a biometric information acquisition unit 206, a biometric information database 207, an operation authority. An acquisition unit 208, an authentication unit 210, an instruction unit 211, and the like are provided.

  These functions in the image forming apparatus 2 and the terminal apparatus 3 are realized by the respective hardware and software shown in FIGS.

  In the terminal device 3, the job generation unit 302 generates a job JB 3 based on the instruction of the user US 3 from the instruction unit 301. There are various types of job JB3, such as a print job, FAX transmission job, mail transmission job, copy job, write job, read job, and delete job. Here, the case where the job JB3 is a print job will be described first.

  The fingerprint sensor SS3 acquires the fingerprint information SJ3 of the user US3 who has instructed the generation of the job JB3. The authentication unit 305 collates the fingerprint information SJ3 with a large number of fingerprint information SJ stored in the biometric information storage unit 304, collates with the user ID as necessary, and authenticates the user when there is a match. To do. The fingerprint information may be obtained when the user US3 logs in the terminal device 3. The authenticated fingerprint information SJ3 is sent to the job generation unit 302.

  In the job generation unit 302, fingerprint information SJ3 is added to the generated job JB3. In this way, the job JB3S to which the fingerprint information SJ3 is added is created and stored once in the job storage unit 303 such as a memory.

  The created job JB3S is transmitted to the image forming apparatus 2 via the communication unit 306 in accordance with an instruction from the user US3.

  In the image forming apparatus 2, the job JB 3 is received via the communication unit 201. The biometric information acquisition unit 206 extracts the fingerprint information SJ3 added thereto from the received job JB3. Based on the extracted fingerprint information SJ3 and the biometric information database 207 in which the relationship between the fingerprint information SJ and the operation authority is recorded in advance, the operation authority acquisition unit 208 has authority to request execution of the job. Job execution request authority information JK3 indicating whether or not the job execution request is acquired. The acquired job execution request authority information JK3 is associated with the corresponding job JB3, stored as job JB3K in the job execution request authority information storage unit 202, and then stored in the job storage unit 203 that stores a large number of jobs. .

  The job JB3 received via the communication unit 201 is stored in the job storage unit 203 as it is, and when the job execution request authority information JK3 is acquired, the job execution request authority information JK3 is related to the job JB3 and stored in the job. It may be stored in the unit 203 or other appropriate memory.

  On the other hand, the user US2 who is the agent who has received the request from the user US3 instructs the execution unit to execute the job JB3 from the instruction unit 211 in the image forming apparatus 2, and causes the fingerprint sensor SS2 to read his / her fingerprint, Information SJ2 is input. The inputted fingerprint information SJ2 is subjected to various verifications in the authentication unit 210.

  That is, the authentication unit 210 has the authority that the user US2 requests execution of the job JB3 based on the fingerprint information SJ2 acquired from the user US2 requesting execution of the job JB3 and the job execution request authority information JK3 acquired previously. It is determined whether it has. When it is determined that the job JB3 is authorized to request execution, the job reading unit 204 reads the job JB3 (job JB3K) stored in the job storage unit 203, and the job execution unit 205 executes the job JB3. To do.

  For example, the job execution unit 205 instructs the printing apparatus 20h to execute the job JB3. It is also possible that the job execution unit 205 is a part of the printing apparatus 20h.

  The biometric information database 207 records the relationship between fingerprint information SJ, which is biometric information, and the operation authority. Specifically, for example, the biometric information table TB1 shown in FIG. 6 and the biometric information table shown in FIG. Information data DS1 is stored.

  The biometric information table TB1 records the biometric information number BS, the authentication user NU, the authority user KU, and the operation content SN. Further, the biometric information data DS1 is a record of a large number of fingerprint information SJ, which is biometric information, with each biometric information number BS attached thereto.

  The biometric information number BS is an identifier for identifying each biometric information. In this example, fingerprint information SJ is recorded as biometric information. The biological information table TB1 and the biological information data DS1 are associated with each other by the biological information number BS.

  The authenticated user NU indicates the user US who is the subject of the fingerprint information SJ indicated by the biometric information number BS. In other words, the authenticated user NU who is the subject of the fingerprint information SJ causes the fingerprint sensor SS to read each fingerprint and register the fingerprint information SJ. In the example illustrated in FIG. 6, for the biometric information numbers BS “0001” to “0004”, “A” as the user US is the subject of the fingerprint information SJ and the fingerprint information SJ is registered.

  The authorized user KU indicates a user who is authorized for the fingerprint information SJ indicated by the biometric information number BS. In the example shown in FIG. 6, only “A” has authority for the biometric information number BS “0001”, “A” and “B” have authority for “0002”, and “0003”. "B" has authority, and "0004" has authority "A", "C", and "D".

  The operation content SN indicates the content of the operation authority given to the fingerprint information SJ indicated by the biometric information number BS. The operation content SN is, for example, “All”, “Print”, “Copy”, “Read”, “Write”, “Delete”, and the like. In the example shown in FIG. 6, all operations are permitted for the biometric information numbers BS “0001” and “0002”, only printing is permitted for “0003”, and printing is permitted for “0004”. Only reading, copying, and copying are allowed.

  Thus, one user US can register a plurality of fingerprint information SJ. In that case, the user US registers the fingerprint information SJ of different parts. For example, as shown in parentheses in FIG. 6, when the biometric information number BS is “0001”, A's right index finger, “0002” is A's left index finger, “0003” is A's right middle finger, and “0004” is A Corresponds to the fingerprint information SJ of the left middle finger.

  However, the relationship between the biological information number BS and the biological part need not be recognized in the biological information database 207. Therefore, when the user US registers a plurality of fingerprint information SJ, he / she becomes the authentication user NU and inputs the fingerprint information SJ of each part, and his / her own fingerprint information SJ What is necessary is just to specify and register the desired authority user KU and operation content SN. A screen for such registration is displayed on the display unit TD. Then, the user US should know what authority user KU and the operation content SN have been registered for the fingerprint information SJ of which part of the user US or record it in a memo so that it can be understood. Good. However, on the fingerprint information SJ registration screen, the part of the user US can be entered and registered for each fingerprint information SJ.

  The authenticated user NU and the authorized user KU may be any user who can identify individual users, such as the name of each user US or the user ID of the user US.

  That is, in the present embodiment, for one user US, the biometric information (fingerprint information SJ) of a plurality of different biological parts is associated with the authorized user KU and the operation content SN, and then biometric authentication is performed. The presence or absence of authority to request execution of various jobs JB is determined.

  In the generation of the job JB, when the generated job JB is determined as to what type of operation it is, for example, when it is a print job or a scan job The biometric information table TB1 determines whether or not there is an authority to request execution of the job JB itself. In addition, when the operation content of the generated job JB is not fixed, for example, when the job JB is image data itself or data designating an object, the job JB is processed with respect to the job JB. Since a plurality of operations are possible, it is determined by the biometric information table TB1 what operation is authorized to request execution of the job JB.

  As described above, for the fingerprint information SJ3 extracted by the biometric information acquisition unit 206, the operation authority acquisition unit 208 acquires job execution request authority information JK3 based on the biometric information database 207. In this case, the fingerprint information SJ3 is collated with the fingerprint information SJ of the biological information data DS1 stored in the biological information database 207. If the matching fingerprint information SJ is found, the authority user KU and the operation content SN are extracted from the biometric information table TB1 using the biometric information number BS as a key. As a result, job execution request authority information JK3 for the job JB3 is acquired.

  The job execution request authority information JK3 includes, for example, information for specifying the job JB3 and an authority user KU having the authority to request execution of the job JB3. Further, when the job JB3 is a job capable of a plurality of operations, the operation content SN and the authority user KU for each operation content SN are included.

  When the user US2 who is the agent inputs the fingerprint information SJ2 from the fingerprint sensor SS2, the authentication unit 210 checks the fingerprint information SJ2 with the fingerprint information SJ of the biological information data DS1 stored in the biological information database 207. I do. If the matching fingerprint information SJ is found, the authenticated user NU is extracted from the biometric information table TB1 using the biometric information number BS as a key. It is determined whether or not the extracted authentication user NU (that is, user US2) is included in the authority user KU indicated in the job execution request authority information JK.

  When the authenticated user NU (user US2) is included in the authority user KU, the content of the job JB3 is displayed on the display unit TD. The user US2 confirms the content of the displayed job JB3 and gives an instruction to execute it.

  In this case, in response to an input instruction by the operation of the user US2, the user US2 who is the requester of the user US2 displays only the job JB3 that is the authenticated user NU, so that the user US2 can only display the target job JB3. Can be selected immediately and execution is instructed.

  When the user US2 inputs the fingerprint information SJ2 from the fingerprint sensor SS2, the fingerprint information SJ of any part of the user US2 may be input as long as it is the fingerprint information SJ registered in the biometric information database 207.

  With this configuration, for example, when the user US2 inputs the fingerprint information SJ2 from the fingerprint sensor SS2, the job execution request authority information including the authentication user NU corresponding to the fingerprint information SJ2 as the authority user KU. It is also possible to search the job storage unit 203 for JK, extract all the hit jobs JB, and display them on the display unit TD as a list. In such a case, it is possible to select the job JB that the user US2 desires to execute from the list displayed on the display unit TD and actually execute it.

  In this way, the user US can easily know the job JB accumulated in the job storage unit 203 by inputting the fingerprint information SJ, and can easily find the necessary job JB from the job JB. Can be selected and executed. In this case, a screen for performing such an operation is displayed on the display unit TD, and the extracted job JB is displayed in order of newest, oldest, each requester, etc. in accordance with an input instruction by the operation of the user US2. It is also possible to sort and display them.

  As described above, when network printing is executed by the network system 1 of the present embodiment, the user US3 first performs personal authentication at the terminal device 3 that is a client. At that time, considering who should be given the authority to operate the job, decide which finger to use for authentication. The generated job (print job) and the biometric information (fingerprint information SJ2) used for authentication are transmitted to the image forming apparatus 2.

  In the image forming apparatus 2, the biometric information added to the job is viewed, and the user who is permitted to operate and the operation authority are specified from the association registered in advance in the biometric information database 207. When the user US2 who is permitted to perform the operation authenticates in the image forming apparatus 2, the user US2 can print the job.

  Although it is possible to select a user whose authority is delegated using the GUI of the printer driver, since the user is usually managed by the MFP, the driver acquires the management information from the MFP and performs the GUI. The system becomes complicated when generating.

  On the other hand, in this embodiment, the printer driver only sends biometric information to the MFP (image forming apparatus 2), so the system is simple. Therefore, the effect is great when a print job is instructed from the terminal device 3 that has no GUI or operation panel or has a poor GUI.

  For example, when the terminal device 3 instructs network printing from a mobile terminal, a mobile phone, or the like, biometric authentication is performed on the mobile terminal, and the print job and authentication information are collectively transmitted to the MFP (image forming apparatus 2). Thus, the user authority information addition process can be executed on the MFP side.

  Further, as described above, when the user US2 performs printing with the image forming apparatus 2, the user is authorized to perform printing operation when biometric authentication is performed without switching the screen of the display unit TD to the authentication screen. It is also possible to print a print job. In this way, the authentication screen and the print job selection screen can be eliminated, and this has the effect of improving operability.

  In the above description, the case where the job JB is printing has been described. That is, the example in which the job JB3 is generated in the terminal device 3, is transmitted to the image forming apparatus 2, and the job JB3 is executed in the image forming apparatus 2 has been described. However, conversely, the job JB may be generated by the image forming apparatus 2, transmitted to the terminal apparatus 3, and the job JB may be executed in the terminal apparatus 3. Further, the job JB may be generated in both the image forming apparatus 2 and the terminal apparatus 3 and the job JB may be executed in both. For example, in the image forming apparatus 2, the user US2 generates a job JB, adds the biometric information of the user US2 to the generated job JB, and transmits this to the terminal apparatus 3 or another image forming apparatus 2. Also good.

  As a specific example, for example, in the image forming apparatus 2, it is possible to scan and read a document (original) with the scanner 20g and transmit the read image to the terminal device 3 (scan transmission). In this case, a scan job JB is generated in the image forming apparatus 2. In the terminal device 3 and the image forming apparatus 2, in order to assign an operation authority to each living body for a plurality of users US, a part of the living body and an operation authority user are linked in advance.

  When executing scan transmission, the image forming apparatus 2 causes the fingerprint sensor SS2 to read a fingerprint, and when authentication is performed, the scan transmission is started with the authentication as a trigger. The authority transfer user name and the operation authority associated with the authentication data are added to the document to be scanned and transmitted.

  When the terminal device 3 receives the document, it can process and use the document based on the authority transfer user and the operation authority given thereto.

  In that case, the job JB is generated in the image forming apparatus 2 and transmitted to the terminal apparatus 3 together with the biological information. In the terminal device 3, only a person who has an operation authority according to the biological information table TB can request execution of the job JB. In this case, the biological information table TB may be stored in the terminal device 3 in advance, or may be transmitted from the image forming device 2 to the terminal device 3 together with the transmission of the job JB. When the terminal apparatus 3 obtains job execution request authority information JK, stores the job execution request authority information JK in association with the job JB, and when the terminal apparatus 3 is requested to execute the job JB In addition, the biometric information of the user who requests execution of the job JB is acquired, and based on the acquired biometric information and job execution request authority information JK, the user is determined to have authority to request execution of the job JB. In this case, the job JB may be executed. Therefore, in this case, it can be considered that the image forming apparatus 2 serves as a client and the terminal device 3 serves as a server.

  When the operation authority acquisition unit 208 acquires the job execution request authority information JK3 based on the biometric information database 207, the biometric information including the received job JB3 as the operation content SN is extracted from the biometric information table TB1, A biometric information table TB corresponding to the job JB3 may be generated.

  For example, as described above, when the job JB3 for printing is generated in the terminal device 3 and transmitted to the image forming device 2, the image forming device 2 uses the biometric information table TB1 for printing. The biometric information corresponding to the job JB3 is extracted, and the biometric information table TB2 shown in FIG. 8 is generated. Based on this biometric information table TB2, another user US4 who is an agent is authenticated.

  When the image read by the scanner 20g in the image forming apparatus 2 is transmitted to the terminal device 3, the image forming apparatus 2 extracts the biological information corresponding to the job JB associated with the reading or scanning from the biological information table TB1. The biometric information table TB3 shown in FIG. 9 is generated. Based on the biometric information table TB3, the agent is authenticated.

  The biometric information table TB corresponding to such a job JB may be temporarily generated as necessary, or may be generated and stored in advance. If it is generated in advance, the processing speed such as acquisition of job execution request authority information JK3 is improved.

  As described above, in the network system 1 of the present embodiment, the job is operated based on the result of performing biometric authentication by previously associating the biometric information of different biological parts with the user who is permitted to operate. Associate authority with the function to be operated. Accordingly, when the user authentication is performed based on the biometric information of the specific part of the user US3, the agent and the operation authority information registered in advance corresponding to the part of the biometric part are acquired. The operation authority information can be given to the generated job.

  As described above, according to the present embodiment, the user can request the agent to execute a job without lowering the security level in biometric authentication.

  Next, the processing operation of the network system 1 will be described with reference to a flowchart.

  FIG. 10 is a flowchart showing the processing operation of the network system 1.

  In FIG. 10, in the terminal device 3, when the user US3 instructs execution of printing (Yes in # 11), biometric authentication of the user US3 is performed (# 12), and a print job JB3 is generated (# 13). The biometric information of the user US3 is added to the job JB3 (# 14). Those data are transmitted to the image forming apparatus 2 (# 15).

  When the image forming apparatus 2 receives data (# 16), biometric information is acquired from the data (# 17), and authentication is performed using the acquired biometric information (# 18). Based on the biometric information database 207, the authority user KU is acquired (# 19), and the operation content SN is acquired (# 20). Based on these, job execution request authority information JK3 is added to job JB3 (# 21), and stored in a hard disk or the like (# 22). When there is a print request from the user US2 as an agent (Yes in # 23), the biometric information of the user US2 is acquired (# 24), and authentication is performed using the acquired biometric information (# 25). It is determined whether or not the authenticated user NU who has been authenticated is the authorized user KU for the job JB3. If the authenticated user NU is the authorized user KU (Yes in # 26), printing is permitted and executed in the image forming apparatus 2. (# 27).

  In the embodiment described above, the configuration of the biometric information database 207, the configuration of the biometric information table TB1 and the biometric information data DS1, the method of performing authentication using these data, the method of acquiring the job execution request authority information JK, etc. Various modifications other than those described above can be made. In addition, the hardware and software in the image forming apparatus 2 and the terminal apparatus 3, the configuration of the functions thereof, the content and order of processing, and the like can be changed as appropriate in accordance with the spirit of the present invention.

  In the embodiment described above, the fingerprint information SJ is taken up as the biometric information. However, not only the fingerprint information SJ but also other biometric information, for example, various individual physical features such as an iris or a vein may be used. Is possible.

  For example, when vein information is used as the biological information, the right hand, the left hand, their fingers, or their palms can be used as the biological part. The operation content SN and the authorized user KU may be individually recorded for the biometric information of those parts.

It is a figure which shows the example of the whole structure of the network system which concerns on this invention. 2 is a diagram illustrating an example of a hardware configuration of an image forming apparatus. FIG. 3 is a diagram illustrating an example of an operation panel of the image forming apparatus. FIG. It is a figure which shows the example of the hardware constitutions of a terminal device. It is a figure which shows the example of a functional structure of a network system. It is a figure which shows the example of a biometric information table. It is a figure which shows the example of biometric information data. It is a figure which shows the example of the extracted biometric information table. It is a figure which shows the example of the extracted biometric information table. It is a flowchart which shows the processing operation of a network system.

Explanation of symbols

1 Network system 2 Image forming device (server, client)
3 Terminal devices (client, server)
20h engine (means for executing job)
202 Job execution request authority information storage unit (storage means)
203 Job storage (memory means)
204 Job reading unit 205 Job execution unit (means for executing a job)
206 Biometric information acquisition unit 207 Biometric information database 208 Operation authority acquisition unit (means for acquiring job execution request authority information)
210 Authentication unit (means for determining)
302 job generation unit (means for generating a job)
303 Job storage (means for adding biometric information)
304 Biometric information storage unit 305 Authentication unit 306 Communication unit (transmission means)
SN biometric authentication system SS2 fingerprint sensor (biological information sensor)
BS biological information number (identification information)
NU authentication user (user)
KU authority user (user)
SN Operation details

Claims (8)

A biometric authentication system comprising a client and a server connected via a network,
The client
Means for generating a job based on user instructions;
Means for adding biometric information of a user instructing execution of the job to the generated job;
Means for transmitting the job and the added biometric information to the server,
The server
A biological information sensor for acquiring the biological information of the user;
A biological information database in which the relationship between the biological information and the operation authority is recorded in advance;
Means for acquiring job execution request authority information indicating which user has authority to request execution of the job based on the biometric information added to the job received from the client and the biometric information database;
Means for storing the acquired job execution request authority information in association with the corresponding job;
When there is a job execution request to the server, the user requests execution of the job based on the biometric information acquired from the user requesting execution of the job and the job execution request authority information. Means for determining whether to have authority;
Means for executing the job when it is determined that the job has authority to request execution of the job;
A biometric authentication system comprising: The biological information database is
Identification information for identifying biometric information, a user who is the subject of the biometric information, one or more operation contents corresponding to each identification information, and one or more persons authorized for the operation contents Is a record of the relationship between users,
The biometric authentication system according to claim 1. The biometric information database can record biometric information about a plurality of parts for one user, and the user who is given the operation content and the authority to the biometric information of each part. , Each can be recorded individually,
The biometric authentication system according to claim 2. The biometric information is fingerprint information;
The part is each finger of the right hand or the left hand,
The biometric authentication system according to claim 3. The biological information is vein information,
Said part is the finger or palm of each of the right hand or left hand,
The biometric authentication system according to claim 3. A biometric authentication system comprising a client and a server connected via a network,
The client
A biological information sensor for acquiring the biological information of the user;
Means for generating a job based on user instructions;
Means for adding biometric information of a user instructing execution of the job to the generated job;
Means for transmitting the job and the added biometric information to the server,
The server
A biological information sensor for acquiring the biological information of the user;
Identification information for identifying biometric information, a user who is the subject of the biometric information, one or more operation contents corresponding to each identification information, and one or more persons authorized for the operation contents A biometric information database in which the relationship of the user is recorded in advance,
Means for acquiring job execution request authority information indicating which user has authority to request execution of the job based on the biometric information added to the job received from the client and the biometric information database;
Means for storing the acquired job execution request authority information in association with the corresponding job;
Biometric authentication means for authenticating the user based on biometric information acquired from the user requesting execution of the job when a job execution request is issued to the server;
Means for determining whether or not the user has authority to request execution of the job based on the information of the user authenticated by the biometric authentication means and the job execution request authority information;
Means for executing the job when it is determined that the job has authority to request execution of the job;
A biometric authentication system comprising: A server that receives and executes a job to which biometric information sent from a client via a network is added,
A biological information sensor for acquiring the biological information of the user;
Identification information for identifying biometric information, a user who is the subject of the biometric information, one or more operation contents corresponding to each identification information, and one or more persons authorized for the operation contents A biometric information database in which the relationship of the user is recorded in advance,
Means for acquiring job execution request authority information indicating which user has authority to request execution of the job based on the biometric information added to the job received from the client and the biometric information database;
Means for storing the acquired job execution request authority information in association with the corresponding job;
Biometric authentication means for authenticating the user based on biometric information acquired from the user requesting execution of the job when a job execution request is issued to the server;
Means for determining whether or not the user has authority to request execution of the job based on the information of the user authenticated by the biometric authentication means and the job execution request authority information;
Means for executing the job when it is determined that the job has authority to request execution of the job;
A server characterized by comprising: A job execution method in a network system composed of a client and a server,
When generating a job in the client, the biometric information of the user instructing execution of the job is acquired and the acquired biometric information is added to the generated job.
Sending the job and attached biometric information from the client to a server;
In the server, based on the biometric information added to the received job and the biometric information database in which the relationship between the biometric information and the operation authority is recorded in advance, which user has the authority to request the execution of the job. The job execution request authority information shown, and store the job execution request authority information in association with the job,
When there is a request for job execution to the server, the biometric information of the user requesting execution of the job is acquired, and the user is notified based on the acquired biometric information and the job execution request authority information. If it is determined that you have the authority to request job execution, execute the job.
Job execution method in the network system.