JP4893272B2 - Image forming apparatus, authentication method and authentication processing program in the same - Google Patents

Description

  The present invention relates to an image forming apparatus such as an MFP (Multi Function Peripherals) which is a multifunction digital multi-function peripheral, for example, an authentication method and an authentication processing program for permitting a user to use the apparatus.

  As an authentication system for permitting a user to use an image forming apparatus, conventionally, an external authentication server connected to the image forming apparatus via a network is provided, and the authentication information input by the user who has accessed the image forming apparatus is authenticated. A system is known that transmits to a server, authenticates with an authentication server, and returns the result to an image forming apparatus (for example, Patent Document 1). In addition, an authentication server is installed for each of a plurality of departments.

  By the way, in order to ensure the security of image data and to manage the use of the image forming apparatus, the functions that can be used in the image forming apparatus are restricted for each user. In such a case, if the image forming apparatus is provided with function restriction information for each user, the number of usable users is limited to the number of users that can be managed by the image forming apparatus.

  In addition, when a plurality of image forming apparatuses are introduced in a plurality of departments and users of each department use each image forming apparatus, it is necessary to register the users of each department in each of the image forming apparatuses. Occurs.

  In view of this, a system has been proposed in which one intermediate server is installed, function restriction information for each user is held in the intermediate authentication server, and user authentication is performed by an authentication apparatus.

In such an intermediate authentication server, the user's function restriction information can be changed as appropriate, but the change may cause the following problems.
JP 2002-123491 A

  That is, when a print job that outputs a plurality of copies is sent to the image forming apparatus together with an authentication request from a user terminal such as a personal computer, the print job of the plurality of copies is converted into a plurality of jobs depending on the application of the user terminal. May be sent to the forming device.

  In such a case, the image forming apparatus obtains authentication by the authentication server for each job and obtains the function restriction information from the intermediate authentication server. When the setting of the function restriction information is changed, there is a possibility that a plurality of copies designated by the user cannot be output without completing the output, leading to a reduction in the user's business efficiency.

  The present invention has been made in view of such circumstances, and changed to the setting of the function restriction information of the image forming apparatus for the user held by the external server during the execution of the job designated by the user. An image forming apparatus that does not affect the execution of the job even if the job is added, an authentication method in the apparatus, and a program for causing the computer of the image forming apparatus to execute authentication processing And

The above problem is solved by the following means.
(1) Function restriction information acquisition means for acquiring the function restriction information from an external server having the function restriction information of the user apparatus for the user when or after the external authentication of the user who has accessed the apparatus is successful. Information holding means for holding the acquired function restriction information until the user logs out or until the job designated by the authenticated user ends, whichever is later, and the user logs out Or a discarding unit that discards the retained function restriction information after the later one has elapsed until the job designated by the authenticated user is completed, or until the job specified by the authenticated user ends. Image forming apparatus.
(2) The image forming apparatus according to (1), wherein the information holding unit holds the function restriction information only when the user is a designated user.
(3) The image forming apparatus according to (1), wherein the function restriction information is held for a predetermined time after authentication.
(4) An authentication information acquisition unit that acquires the authentication information of the user who has received the authentication from the outside is provided, and the information holding unit holds the acquired authentication information until the function restriction information is discarded. 2. The image forming apparatus according to item 1, wherein authentication of the user is performed based on the stored authentication information while the user is stored.
(5) When the job designated by the user is a print job transmitted from the user terminal and there are a plurality of identical print jobs, the user authentication is performed based on the stored authentication information. 5. The image forming apparatus according to item 4 above.
(6) When the job designated by the user is a print job transmitted from the user terminal and there are a plurality of identical print jobs, the user is externally authenticated for each identical print job. The image forming apparatus according to item 1, wherein the held function restriction information is not updated.
(7) The image forming apparatus according to (6), wherein the function restriction information is not updated because the function restriction information acquisition unit does not acquire the function restriction information from an external server.
(8) When the external authentication of the user who has accessed the device is successful or after that, acquiring the function restriction information from an external server having the function restriction information of the device for the user; Holding the acquired function restriction information until the user logs out or until the job specified by the authenticated user ends, whichever is later, and until the user logs out or the authentication An authentication method in an image forming apparatus, comprising: a step of discarding the held function restriction information after the later of a job designated by a user who has received the job ends. .
(9) when the external authentication of the user who has accessed the device is successful or after that, obtaining the function restriction information from an external server having the function restriction information of the device for the user; Holding the acquired function restriction information until the user logs out or until the job specified by the authenticated user ends, whichever is later, and until the user logs out or the authentication An authentication processing program for causing the computer of the image forming apparatus to execute the step of discarding the held function restriction information after the later one that has elapsed until the job designated by the user who has received the job ends .

  According to the invention described in the preceding paragraph (1), when the external authentication of the user who has accessed the device is successful or after that, the function restriction information is acquired from the external server having the function restriction information of the device about the user. Since the acquired function restriction information is held until the user logs out or until the job specified by the authenticated user is completed, whichever is later, image formation of the same job as multiple jobs Even when the device is accepted, even if the setting of the user's function restriction information is changed on the intermediate authentication server side during job output, the user designates it using the held function restriction information. Thus, it is possible to reliably execute the job, and it is possible to prevent the user's business efficiency from being lowered.

  In addition, the function restriction information held is discarded after the later of either the user logs out or the job specified by the authenticated user ends, which is no longer necessary. It is possible to eliminate the inconvenience of the function restriction information remaining and squeezing the storage capacity.

  According to the invention described in the preceding item (2), the function restriction information is retained only when the user is a designated user, and thus security can be improved.

  According to the invention described in item (3) above, since the function restriction information is held for a predetermined time after the authentication, it is possible to prevent the possibility that the function restriction information is held unnecessarily and the security is lowered.

  According to the invention described in item (4) above, authentication information of the authenticated user is acquired from the outside and retained until the function restriction information is discarded. If authentication is required, this authentication information is used. Authentication can be performed inside the image forming apparatus.

  According to the invention described in (5) above, when the job designated by the user is a print job transmitted from the user terminal and there are a plurality of the same print jobs, the user authentication is retained. Therefore, external authentication is unnecessary and efficient.

  According to the invention described in the above item (6), when the job designated by the user is a print job transmitted from the user terminal and there are a plurality of the same print jobs, for each same print job, While the external authentication of the user is performed, the retained function restriction information is not updated, so that it is possible to prevent a decrease in efficiency due to the update process.

  According to the invention described in the preceding item (7), the function restriction information is not updated by not acquiring the function restriction information from the external server. The efficiency of the image forming apparatus can be prevented from being lowered.

  According to the invention described in (8) above, when the image forming apparatus accepts the same job as a plurality of jobs, the setting of the function restriction information of the user is changed on the intermediate authentication server side during the output of the job. Even in such a case, it is possible to reliably execute a job designated by the user using the held function restriction information, and it is possible to prevent the user's business efficiency from being lowered.

  According to the invention described in item (9), when the image forming apparatus accepts the same job as a plurality of jobs, the setting of the function restriction information of the user is changed on the intermediate authentication server side during the output of the job. Even in this case, it is possible to cause the computer of the image forming apparatus to execute a process that can reliably execute a job designated by the user using the held function restriction information.

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

  FIG. 1 is a configuration diagram of an authentication system using an image forming apparatus according to an embodiment of the present invention. The authentication system includes an image forming apparatus 1 composed of an MFP, a plurality (two in this embodiment) of external authentication servers 21 and 22, an intermediate authentication server 3, and a personal computer (hereinafter referred to as a PC) as a user terminal. 5 are connected via a network 4 such as a LAN (Local Area Network).

  The authentication servers 21 and 22 perform user personal authentication, and have authentication information storage units 211 and 221 in which personal authentication information is stored.

  The intermediate authentication server 3 sends the authentication information transmitted from the image forming apparatus 1 to the authentication server 21 or 22 to instruct the execution of authentication, or receives the authentication result from the authentication servers 21 and 22 that have performed authentication. get. In the intermediate authentication server 3, usage restriction information (usable functions) of the image forming apparatus 1 set for each user is registered.

  The PC 5 transmits a print job to the image forming apparatus 1 together with an authentication request to the image forming apparatus 1.

  FIG. 2 is a block diagram illustrating a configuration of the image forming apparatus 1.

  In FIG. 2, the image forming apparatus 1 includes the above-described MFP, and includes a CPU 11, a ROM 12, a RAM 13, a scanner unit 4, a storage unit 15, a printer unit 16, an operation panel 17, and a network controller (NIC). 18 is provided.

  In addition to the overall control of the entire image forming apparatus 1, the CPU 11 transmits authentication data input by the user to the intermediate authentication server 3 or the authentication result transmitted from the intermediate authentication server 3 in this embodiment. And usage restriction information is acquired to control the operation of the device itself.

  The ROM 12 is a memory for storing an operation program of the CPU 11 and the like.

  The RAM 13 is a memory that provides a work area when the CPU 11 operates based on an operation program.

  The scanner unit 14 is a reading unit that reads an image of a document placed on a document table (not shown) and outputs image data.

  The storage unit 15 is configured by a nonvolatile storage device such as a hard disk drive (HDD). The storage unit 15 stores image data of the original read by the scanner unit 4 and the like.

  The printer unit 16 prints image data of a document read by the scanner unit 14, print data from a user terminal, and the like according to an instructed mode.

  The operation panel 17 is used for various input operations, and includes a display unit made of liquid crystal or the like, a start key, a numeric keypad unit, and the like.

  The network controller 18 controls communication with the intermediate authentication server 3 on the network 3 and other external devices such as user terminals.

  FIG. 3 is a block diagram showing the configuration of the intermediate authentication server 3.

  The intermediate authentication server 3 includes a CPU 31, a ROM 32, a RAM 33, a storage unit 34, an input device 35, a network controller (NIC) 36, and the like.

  In addition to the overall control of the intermediate authentication server 3, the CPU 31 transmits authentication data transmitted from the image forming apparatus 1 to the authentication / authentication servers 21 and 22 in this embodiment to execute authentication. Instructing, receiving the authentication result transmitted from the authentication servers 21 and 22, specifying the function restriction information (available function) of the image forming apparatus 1 for the user, the authentication result and the specified function restriction Information is transmitted to the image forming apparatus 1.

  The ROM 32 is a memory for storing an operation program of the CPU 31 and the like.

  The RAM 33 is a memory that provides a work area when the CPU 31 operates based on an operation program.

  The storage unit 34 is configured by a nonvolatile storage device such as a hard disk drive (HDD). In the storage unit 34, usable functions of the image forming apparatus 1 set for the respective authentication servers 21 and 22 are registered, and other various data are stored.

  The input device 35 is used for various input operations and includes a keyboard and a mouse.

  The network controller 36 controls communication with the image forming apparatus 1 and the authentication servers 21 and 22 on the network 4.

  Next, an authentication method in the authentication system shown in FIG. 1 will be described.

  In this embodiment, the function restriction information of the image forming apparatus 1 is registered in the storage unit 34 of the intermediate authentication server 3 for each user.

  FIG. 4 is a sequence showing information exchange performed between the image forming apparatus 1, the operation panel 17, and the intermediate authentication server 3 when the user makes an authentication request (login) through the operation panel 17 of the image forming apparatus 1. FIG.

  First, when the user inputs authentication information and makes an authentication request through the operation panel 17 of the image forming apparatus 1, an authentication request including the authentication information is transmitted from the image forming apparatus 1 to the intermediate authentication server 3. The intermediate authentication server 3 instructs the authentication servers 21 and 22 to perform authentication, receives the result, and transmits it to the image forming apparatus 1. The example of FIG. 4 shows a case where authentication is successful.

  The image forming apparatus 1 that has received the authentication result requests the intermediate authentication server 3 for function restriction information for the user who has been successfully authenticated. The intermediate authentication server 3 returns the function restriction information of the corresponding user registered in the storage unit 34 to the image forming apparatus 1.

  The CPU 11 of the image forming apparatus 1 that has received the function restriction information stores the function restriction information in the storage unit 15, for example, and then displays on the display unit of the operation panel 17 that the authentication is successful.

  Thereafter, after executing the job designated by the user, when the user inputs an authentication cancellation request (logout) instruction from the operation panel 17, the CPU 11 of the image forming apparatus 1 stores the function restriction stored in the storage unit 15 or the like. Discard information. The logout may be performed not only by a user operation but also by an auto reset elapsed time.

  FIG. 5 is a flowchart illustrating processing performed when the CPU 11 of the image forming apparatus 1 executes a program recorded in a recording medium such as the ROM 12 when the user instructs an authentication request from the operation panel 17.

  First, in step S01, when the CPU 11 of the image forming apparatus 1 accepts a login operation by the user, the CPU 11 transmits an authentication request (login) to the intermediate authentication server 3 in step S02.

  When a response to the authentication is received from the intermediate authentication server 3 in step S03, it is determined whether or not the authentication is successful in step S04. If the authentication has failed (“failure” in step S04), the fact that the authentication has failed in step S05 is displayed on the operation panel 17, and the process is terminated. If the authentication is successful (“success” in step S04), the process proceeds to step S06.

  In step S06, after requesting the function restriction information of the corresponding user from the intermediate authentication server 3, when the function restriction information is received from the intermediate authentication server 3 in step S07, the received function restriction information is stored in the storage unit 15 or the like in step S08. Keep it in memory.

  After completion of the job, in step S09, a logout operation performed by the user through the operation panel 17 is accepted. Then, in step S10, the held function restriction information is discarded.

  FIG. 6 is a sequence diagram showing information exchange between the PC 5, the image forming apparatus 1, and the intermediate authentication server 3 when an authentication request and a print job are input from the user terminal PC 5 to the image forming apparatus 1. It is.

  First, when a user inputs an authentication request and a print job from the PC 5 to the image forming apparatus 1, the authentication request is transmitted from the image forming apparatus 1 to the intermediate authentication server 3. The intermediate authentication server 3 instructs the authentication servers 21 and 22 to perform authentication, receives the result, and transmits it to the image forming apparatus 1. In the example of FIG. 6, a case where the authentication is successful is shown.

  The image forming apparatus 1 that has received the authentication result requests the intermediate authentication server 3 for function restriction information for the user who has been successfully authenticated. The intermediate authentication server 3 returns the function restriction information of the corresponding user registered in the storage unit 34 to the image forming apparatus 1.

  The CPU 11 of the image forming apparatus 1 that has received the function restriction information stores the function restriction information in, for example, the storage unit 15 and then executes the print job. After the end of the print job, the CPU 11 of the image forming apparatus 1 discards the function restriction information stored and held in the storage unit 15 or the like.

  FIG. 7 shows a case where a print job for outputting a plurality of copies together with an authentication request is input from the PC 5 to the image forming apparatus 1, and the plurality of copies of the print job are transmitted to the image forming apparatus 1 as a plurality of jobs by a PC application. 3 is a sequence diagram showing exchange of information performed between the PC 5, the image forming apparatus 1, and the intermediate authentication server 3 in the case of being performed.

  First, when an authentication request (user ID: C) and a print job α are input from the PC 5 to the image forming apparatus 1, the authentication request is transmitted from the image forming apparatus 1 to the intermediate authentication server 3. The intermediate authentication server 3 instructs the authentication servers 21 and 22 to perform authentication, receives the result, and transmits it to the image forming apparatus 1. In the example of FIG. 7, a case where the authentication is successful is shown.

  The image forming apparatus 1 that has received the authentication result requests the intermediate authentication server 3 for function restriction information for the user who has been successfully authenticated. The intermediate authentication server 3 returns the function restriction information of the corresponding user registered in the storage unit 34 to the image forming apparatus 1.

  The CPU 11 of the image forming apparatus 1 that has received the function restriction information stores the function restriction information in, for example, the storage unit 15 and then starts executing the print job α.

  Next, an authentication request (user ID: C) and a print job β are input from the PC 5 to the image forming apparatus 1, and an authentication request (user ID: C) is transmitted from the image forming apparatus 1 to the intermediate authentication server 3. The intermediate authentication server 3 instructs the authentication servers 21 and 22 to perform authentication, receives the result, and transmits it to the image forming apparatus 1.

  The image forming apparatus 1 that has received the authentication result already holds the function restriction information for the user who has been successfully authenticated in the intermediate authentication server 3, so the intermediate authentication server 3 refers to the held function restriction information. Function restriction information is not requested.

  Thereafter, when the job α is completed, the execution of the job β is started. When the job β ends, the CPU 11 of the image forming apparatus 1 discards the function restriction information stored and held in the storage unit 15 or the like.

  FIG. 8 is a flowchart showing processing of the image forming apparatus 1 when a print job is submitted from the PC 5 to the image forming apparatus 1 together with an authentication request. This process is also performed by the CPU 11.

  When an authentication request and a job are received from the PC 5 in step S21, an authentication request (login) is transmitted to the intermediate authentication server 3 in step S22.

  When a response to the authentication is received from the intermediate authentication server 3 in step S23, it is determined whether or not the authentication is successful in step S24. If the authentication has failed (“failure” in step S24), the print job is discarded in step S25, and the process ends. If the authentication is successful (“success” in step S24), the process proceeds to step S26.

  In step S26, after requesting the function restriction information of the corresponding user from the intermediate authentication server 3, when the function restriction information is received from the intermediate authentication server 3 in step S27, the received function restriction information is stored in the storage unit 15 or the like in step S28. Keep it in memory.

  Next, the job is executed in step S29, and when the end of the job is confirmed in step S30, it is determined in step S31 whether there is a next job of the same user.

  If the same user job exists ("Yes" in step S31), the process returns to step S29, and steps S29 to S31 are repeated until there is no more same user job. When there is no same user job (“No” in step S31), the function restriction information is discarded in step S32.

  As described above, the image forming apparatus 1 holds the acquired function restriction information until the job from the PC 5 is completed. Therefore, in the case where the image forming apparatus accepts the same job as a plurality of jobs, Even when the setting of the function restriction information of the user is changed on the intermediate authentication server side during output, the job specified by the user can be reliably executed using the held function restriction information, It is possible to prevent the user's business efficiency from being lowered.

  FIG. 9 shows that after a print job is submitted from the PC 5 to the image forming apparatus 1 together with an authentication request, another user registers another job from the operation panel 17 while the print job is being executed, and a logout operation is performed from the operation panel 17. 7 is a sequence diagram showing exchange of information performed between the PC 5, the image forming apparatus 1, the operation panel 17, and the intermediate authentication server 3 when it is performed.

  First, when an authentication request and a print job α are input from the PC 5 to the image forming apparatus 1, the authentication request is transmitted from the image forming apparatus 1 to the intermediate authentication server 3. The intermediate authentication server 3 instructs the authentication servers 21 and 22 to perform authentication, receives the result, and transmits it to the image forming apparatus 1. In the example of FIG. 9, a case where the authentication is successful is shown.

  The image forming apparatus 1 that has received the authentication result requests the intermediate authentication server 3 for function restriction information for the user who has been successfully authenticated. The intermediate authentication server 3 returns the function restriction information of the corresponding user registered in the storage unit 34 to the image forming apparatus 1.

  The CPU 11 of the image forming apparatus 1 that has received the function restriction information stores the function restriction information in, for example, the storage unit 15 and then starts executing the print job α.

  Next, when the user inputs an authentication request to the image forming apparatus 1 via the operation panel 17, the authentication request is transmitted from the image forming apparatus 1 to the intermediate authentication server 3. The intermediate authentication server 3 instructs the authentication servers 21 and 22 to perform authentication, receives the result, and transmits it to the image forming apparatus 1.

  The image forming apparatus 1 that has received the authentication result displays the received authentication result on the operation panel 17, but the intermediate authentication server 3 already holds the function restriction information for the user who has been successfully authenticated. The function restriction information is not requested to the intermediate authentication server 3 by referring to the function restriction information.

  Next, the job β is registered from the operation panel 17. When the job α ends, the execution of the job β starts. When the job β ends, the result of the job is displayed on the operation panel 17.

  When the user instructs logout from the operation panel 17, the CPU 11 of the image forming apparatus 1 discards the function restriction information stored and held in the storage unit 15 or the like.

  FIG. 10 is a flowchart showing processing of the image forming apparatus 1 when a logout operation is performed by the user in the sequence diagram of FIG. This process is also performed by the CPU 11.

  After accepting a logout operation performed by the user through the operation panel 17 in step S31, it is determined in step S32 whether there is a next job of the same user. If the same user job does not exist (“NO” in step S32), the function restriction information is discarded in step S33.

  On the other hand, if there is a next job of the same user ("Yes" in step S32), the job is executed in step S34, and when the end of the job is confirmed in step S35, the next job of the same user is determined in step S36. It is determined again whether or not exists.

  If there is a next job of the same user (“Yes” in step S36), the process returns to step S34, and steps S34 to S36 are repeated until there is no next job of the same user. When there is no next job of the same user (“No” in step S36), the function restriction information is discarded in step S37.

  As described above, since the image forming apparatus 1 holds the acquired function restriction information until logout or until the job designated by the authenticated user is completed, whichever is later, the job is being output. Even if the setting of the function restriction information of the user is changed on the intermediate authentication server side, the job specified by the user can be reliably executed using the held function restriction information. It is possible to prevent a decrease in business efficiency.

  FIG. 11 shows another embodiment of the present invention and is a flowchart showing processing executed by the CPU 11 of the image forming apparatus 1. In this embodiment, the image forming apparatus 1 holds function restriction information only when the user is designated in advance.

  When the CPU 11 of the image forming apparatus 1 receives the authentication request and job from the PC 5 in step S51, the CPU 11 transmits an authentication request (login) to the intermediate authentication server 3 in step S52.

  When a response to the authentication is received from the intermediate authentication server 3 in step S53, it is determined whether or not the authentication is successful in step S54. If the authentication has failed (“failure” in step S54), the processing ends. If the authentication is successful (“success” in step S54), the process proceeds to step S55.

  In step S55, after requesting the function restriction information of the corresponding user from the intermediate authentication server 3, if the function restriction information is received from the intermediate authentication server 3 in step S56, whether or not the user has been designated in advance in step S57. Judge whether. Whether or not the user is designated may be determined based on whether or not the user is registered in the storage unit 15 of the image forming apparatus 1 or the storage unit 34 of the intermediate authentication server 3.

  If the user is not a designated user (“not a designated user” in step S57), the process ends without retaining function restriction information in order to ensure security. Therefore, in this case, even if there is a next job of the same user, the function restriction information is acquired from the intermediate authentication server 3 one by one.

  If the user is a designated user (“designated user” in step S57), the function restriction information is retained in step S58, and the job designated by the authenticated user is completed in step S59 until logout. The function restriction information is retained until the later one.

  FIG. 12 shows still another embodiment of the present invention and is a flowchart showing processing executed by the CPU 11 of the image forming apparatus 1. In this embodiment, after the function restriction information is held, the function restriction information is discarded after a predetermined time has elapsed.

  In step S61, when the CPU 11 of the image forming apparatus 1 accepts a login operation by the user, the CPU 11 transmits an authentication request (login) to the intermediate authentication server 3 in step S62.

  When a response to the authentication is received from the intermediate authentication server 3 in step S63, it is determined whether or not the authentication is successful in step S64. If the authentication has failed (“failure” in step S64), the processing ends. If the authentication is successful (“success” in step S64), the process proceeds to step S65.

  In step S65, after requesting the function restriction information of the corresponding user from the intermediate authentication server 3, if the function restriction information is received from the intermediate authentication server 3 in step S66, the received function restriction information is stored in the storage unit 15 or the like in step S67. Keep it in memory.

  Thereafter, in step S68, when the predetermined time elapses, the held function restriction information is discarded.

  Thus, in this embodiment, since the function restriction information is held for a predetermined time after authentication, it is possible to prevent the possibility that the function restriction information is held unnecessarily and the security is lowered.

  FIG. 13 shows still another embodiment of the present invention and is a flowchart showing processing executed by the CPU 11 of the image forming apparatus 1. In this embodiment, the authentication information (user ID, password) input by the user during the login operation is held in the image forming apparatus 1.

  In step S71, when the CPU 11 of the image forming apparatus 1 accepts a login operation by the user, in step S72, the CPU 11 transmits an authentication request (login) to the intermediate authentication server 3 and receives a response to authentication from the intermediate authentication server 3. . In step S73, it is determined whether authentication is successful. If the authentication has failed (“failure” in step S73), the processing ends. If the authentication is successful (“success” in step S73), the process proceeds to step S74.

  In step S74, the authentication information (user ID, password) input by the user at the time of the login operation is stored in, for example, the storage unit 15 and the like, and in step S75, the function restriction information of the corresponding user is acquired from the intermediate authentication server 3, In step S76, the acquired function restriction information is stored and held in the storage unit 15 or the like.

  Next, the job is executed in step S77. After confirming the end of the job in step S78, it is determined in step S79 whether there is a next job of the same user. If there is a next job of the same user ("Yes" in step S79), the process returns to step S77 and the job is executed. At this time, authentication is performed using the authentication information held in step S74. As described above, since authentication is performed using the authentication information held in the image forming apparatus 1, there is no need to transmit an authentication request to the intermediate authentication server 3 or perform authentication by the authentication servers 21 and 22. Processing can be simplified.

  If there is no next job of the same user (NO in step S79), the authentication information and function restriction information held in step S80 are discarded.

  FIG. 14 shows still another embodiment of the present invention, and is a flowchart showing processing executed by the CPU 11 of the image forming apparatus 1. In this embodiment, when the job specified by the user is a print job transmitted from the PC 5 and there are a plurality of identical print jobs, the user authentication is performed based on the stored authentication information. The case where it performs is shown.

  In step S81, an authentication request and a job are input from the PC 5, and when the first job is received in step S82, the file name of the job is held in step S83.

  Next, in step S84, an authentication request (login) is transmitted to the intermediate authentication server 3 and a response to the authentication is received from the intermediate authentication server 3. In step S85, it is determined whether authentication is successful. If the authentication has failed (“failure” in step S85), the process ends. If the authentication is successful (“success” in step S85), the process proceeds to step S86.

  In step S86, the authentication information (user ID, password) input by the user is held in the storage unit 15 or the like, for example, and in step S87, the function restriction information of the user is acquired from the intermediate authentication server 3 and stored in the storage unit. It is stored and held at 15 etc.

  Next, after executing the job in step S88, it is determined in step S89 whether there is a next job of the same user. If there is a job of the same user ("Yes" in step S89), the file name of the next job is acquired in step S90, and in step S91, the file name is the same as the file name acquired in step S83 or the number of copies is one. Judge whether or not.

  If the file names are the same and the number of copies is 1 (“same” in step S91), the process returns to step S88 to execute the job. At this time, authentication is performed using the authentication information held in step S86. Is called.

  If the file names are not the same or if the number of print copies is two or more ("different" in step S91), the process returns to step S84, and the authentication information is transmitted to the intermediate authentication server 3 to be authenticated again.

  On the other hand, if there is no next job of the same user in Step S89 (“None” in Step S89), the function restriction information, user ID, password, etc. held in Step S92 are discarded.

  FIG. 15 shows still another embodiment of the present invention and is a flowchart showing processing executed by the CPU 11 of the image forming apparatus 1. In this embodiment, in the case of a job of the same user, a case where the content of the function restriction information is not updated even when the function restriction information is acquired is shown.

  In step S101, an authentication request and a job are input from the PC 5, and when a first job is received in step S102, information on the job is held in step S103.

  Next, in step S104, an authentication request (login) is transmitted to the intermediate authentication server 3, and a response to the authentication is received from the intermediate authentication server 3. In step S105, it is determined whether authentication is successful. If the authentication has failed (“failure” in step S105), the processing ends as it is. If the authentication is successful (“success” in step S105), the process proceeds to step S86.

  In step S106, the function restriction information of the corresponding user is acquired from the intermediate authentication server 3, and the function restriction information is held in step S107.

  Next, after executing the job in step S108, it is determined in step S109 whether there is a next job of the same user. If there is a job of the same user ("Yes" in step S109), information on the next job is acquired in step S110, and in step S111, it is determined whether the information is the same as the information acquired in step S103.

  Even if the information is the same ("same" in step S111) or different ("different" in step S111), the process returns to step S104 and the above operations are repeated. However, if the information is different, the function restriction information is acquired from the intermediate authentication server 3 in step S106, and the content of the function restriction information acquired and held in the previous job is updated in step S107. If the job information is the same, even if the function restriction information is acquired from the intermediate authentication server 3 in step S106, the update in step S107 is not performed. For this reason, it is possible to prevent a decrease in efficiency of the image forming apparatus 1 due to the update process.

  If there is no next job of the same user in step S109 ("None" in step S109), the function restriction information held in step S112 is discarded.

  In the embodiment of FIG. 15, the function restriction information is acquired from the intermediate authentication server 3 but is not updated for the second and subsequent jobs of the same user that have the same information as the first job. However, the second and subsequent jobs may be configured not to acquire function restriction information. Accordingly, no data transmission / reception is performed, so that a reduction in efficiency of the image forming apparatus can be prevented.

1 is a configuration diagram of an authentication system using an image forming apparatus according to an embodiment of the present invention. 1 is a block diagram illustrating a configuration of an image forming apparatus. It is a block diagram which shows the structure of an intermediate authentication server. FIG. 10 is a sequence diagram illustrating an exchange of information performed between the image forming apparatus, the operation panel, and the intermediate authentication server when a user makes an authentication request (login) through the operation panel of the image forming apparatus. 6 is a flowchart illustrating processing performed by a CPU of an image forming apparatus when a user instructs an authentication request from an operation panel. FIG. 6 is a sequence diagram illustrating an exchange of information performed between a PC, an image forming apparatus, and an intermediate authentication server when an authentication request and a print job are input from the PC that is a user terminal to the image forming apparatus. When a print job for outputting a plurality of copies together with an authentication request is input from the PC to the image forming apparatus, and the plurality of print jobs are transmitted to the image forming apparatus as a plurality of jobs by a PC application, FIG. 6 is a sequence diagram illustrating exchange of information performed between the image forming apparatus and the intermediate authentication server. 6 is a flowchart illustrating processing of the image forming apparatus when a print job is submitted together with an authentication request from the PC to the image forming apparatus. After submitting a print job together with an authentication request from the PC to the image forming apparatus, if the same user registers another job from the operation panel and executes a logout operation from the operation panel while the print job is being executed, FIG. 6 is a sequence diagram showing exchange of information performed between an image forming apparatus, an operation panel, and an intermediate authentication server. 10 is a flowchart illustrating processing of the image forming apparatus 1 when a logout operation is performed by a user in the sequence diagram of FIG. 9. FIG. 10 is a flowchart illustrating another embodiment of the present invention and processing executed by the CPU of the image forming apparatus. 14 is a flowchart illustrating still another embodiment of the present invention and processing executed by the CPU of the image forming apparatus. 14 is a flowchart illustrating still another embodiment of the present invention and processing executed by the CPU of the image forming apparatus. 14 is a flowchart illustrating still another embodiment of the present invention and processing executed by the CPU of the image forming apparatus. 14 is a flowchart illustrating still another embodiment of the present invention and processing executed by the CPU of the image forming apparatus.

Explanation of symbols

1 Image forming device (MFP)
21, 22 Authentication server 3 Intermediate authentication server 4 Network 11 CPU
15 Storage Unit 17 Operation Panel 18 Network Controller 31 CPU
34 Memory

Claims (9)

Function restriction information acquisition means for acquiring the function restriction information from an external server having function restriction information of the user's own device for the user when or after the external authentication of the user who has accessed the device is successful;
Information holding means for holding the acquired function restriction information until the user logs out or until the job designated by the authenticated user ends, whichever is later;
A discarding unit that discards the held function restriction information after the later one elapses until the user logs out or until the job specified by the authenticated user ends;
An image forming apparatus comprising:   The image forming apparatus according to claim 1, wherein the information holding unit holds the function restriction information only when the user is a designated user.   The image forming apparatus according to claim 1, wherein the function restriction information is held for a predetermined time after authentication. Comprising authentication information acquisition means for acquiring authentication information of the user who has received the authentication from the outside;
The information holding means holds the acquired authentication information until the function restriction information is discarded,
The image forming apparatus according to claim 1, wherein the authentication of the user is performed based on the stored authentication information while the authentication information is stored.   The user authentication is performed based on the held authentication information when a job designated by the user is a print job transmitted from a user terminal and there are a plurality of identical print jobs. 5. The image forming apparatus according to 4.   When the job designated by the user is a print job transmitted from the user terminal and there are a plurality of identical print jobs, the user is externally authenticated for each identical print job, while the above-mentioned holding The image forming apparatus according to claim 1, wherein the function restriction information is not updated.   The image forming apparatus according to claim 6, wherein the function restriction information is not updated when the function restriction information acquisition unit does not acquire the function restriction information from an external server. Obtaining the function restriction information from an external server having the function restriction information of the user apparatus for the user when or after the external authentication of the user who has accessed the apparatus is successful;
Holding the acquired function restriction information until the user logs out or until the job designated by the authenticated user ends, whichever is later;
Discarding the retained function restriction information after the later of either until the user logs out or until the job specified by the authenticated user ends;
An authentication method in an image forming apparatus, comprising: Obtaining the function restriction information from an external server having the function restriction information of the user apparatus for the user when or after the external authentication of the user who has accessed the apparatus is successful;
Holding the acquired function restriction information until the user logs out or until the job designated by the authenticated user ends, whichever is later;
Discarding the retained function restriction information after the later of either until the user logs out or until the job specified by the authenticated user ends;
An authentication processing program for causing the computer of the image forming apparatus to execute.

Images