JP5029403B2 - OUTPUT SYSTEM, OUTPUT CONTROL DEVICE, OUTPUT METHOD, AND COMPUTER PROGRAM - Google Patents

Description

  The present invention relates to a technique for performing output based on data after a user is authenticated.

  Conventionally, there is a technique for performing printing in an environment where a user's host terminal and a network printer are connected via a network. For example, in a conventional technique, the host terminal encrypts print data with a predetermined encryption key, and transmits the obtained encrypted print data to a network printer together with a print request. Then, the host terminal determines whether or not the print data is eligible for use based on the certification information received from the network printer. If the host terminal determines that the print data is eligible for use, the print permission including the handling instruction information is determined. Send notifications to network printers. Also, the decryption key is transmitted to the network printer (Patent Document 1).

JP 2006-43931 A

  In the above technique, the user ID of the user currently using the host terminal, that is, the user ID for the user to log in to the operating system of the host terminal is used as the certification information. The user ID is acquired from the operating system by application software executed on the host terminal.

  However, in recent years, there are many cases where application software for ensuring security is incorporated in a personal computer as a host terminal used in a company. In such a personal computer, it is difficult for application software for printing to obtain a user ID from the system. This is because application software for ensuring security hinders acquisition of a user ID by other application software.

  In recent years, personal computers as terminals used in enterprises are often set so that users and application software cannot store data in an internal storage device (such as a hard disk). In such a personal computer, user information that can be used as proof information for printing cannot be fixedly stored in advance by the user or application software for printing.

  Such a problem is not limited to printing, but widely exists in a system that includes an output device (for example, a printer, a projector, an image display, etc.) and a terminal and performs output based on data after authenticating a user. .

  An object of the present invention is to perform output by authenticating a user without using authentication information stored in advance in a terminal in a system including an output device and a terminal.

In order to achieve the above object, the following configuration is employed in the output system which is one embodiment of the present invention. The output system includes an output instruction device, an output device, the output instruction device, an output control device connected to the output device, and a collation data input device connected to at least one of the output device and the output control device. And comprising. In such an employment system,
The output instruction device outputs output job data including specific data that can specify at least one of the output instruction device and the user according to a user instruction, and output data that is an output target. To the control device,
The collation data input device receives collation data capable of specifying the user from the user and sends the collation data to the output control device,
The output device can perform output based on the output data,
The output control device includes:
For a predetermined user who is permitted to use the output device, a collation data storage unit that stores the collation data in association with the specific data;
Referring to the collation data storage unit, collation data determination for determining the corresponding collation data for the specific data included in the output job data and stored in the collation data storage unit And
An output data storage unit for storing the determined collation data and the output data included in the output job data in association with each other;
The output data stored in the output data storage unit, the output data associated with the collation data matching the collation data received via the collation data input device is sent to the output device. And an output data sending section for performing the output.

  According to such an aspect, the use of the output device is permitted by performing collation using the collation data input to the collation data input device by the user and the specific data of the output job data instructed by the user to output. Only the output data of the user can be output from the output device. For the collation, the collation data need not be stored in the output instruction device and read from the output instruction device. Therefore, the user can be authenticated and output without using the authentication information stored in advance in the output instruction device as a terminal.

  In addition, in the mode of “receiving the collation data from the user”, the user operates the input device provided in the collation data input device and inputs the collation data into the collation data input device, and the user stores the collation data And a mode in which collation data is input to the collation data input device by causing the collation data input device to read the medium. The collation data input device may send the collation data to the output control device via the output device, or may send the collation data to the output control device without going through the output device. It is preferable that the output control device does not cause the output device to output the output job data for which the specific data is not stored in the collation data storage unit.

  The specific data includes data that can specify the output instruction device, and includes data representing a data transmission source in data communication between the output instruction device and the output control device. it can.

  According to such an aspect, the data indicating the data transmission source in data communication is used to identify the output instruction device of the user who is permitted to use the output device, and the user inputs it to the collation data input device. Collation with the collation data can be performed. As a result, only the output data of the user who is permitted to use the output device can be output from the output device.

  The specific data may include data representing an identification code uniquely assigned to the user.

  According to such an aspect, it is possible to identify the individual user using an identification code uniquely assigned to the user and perform collation with the collation data input to the collation data input device by the user. As a result, only the output data of the user who is permitted to use the output device can be output from the output device. The identification code can be a combination of letters and numbers. Moreover, the figure which can be replaced with the combination of a character and a number according to fixed law property may be sufficient.

The collation data storage unit
For the predetermined user, a plurality of types of data that can specify the user are stored in association with the specific data,
The output control device further includes:
A setting data storage unit that stores collation setting data representing data to be used as the collation data among the plurality of types of data;
A setting change unit capable of receiving an instruction to change the collation setting data from an administrator of the output system and changing the collation setting data;
The verification data determination unit may determine the verification data corresponding to the specific data included in the output job data according to the verification setting data.

  If it is set as such an aspect, the content of the collation process in an output system can be changed by changing the content of collation setting data.

The specific data is
Data that can identify the output instruction device, the first data representing a data transmission source in data communication between the output instruction device and the output control device,
Data that can identify the user, and second data that is input to the output instruction device by the user when using the output system,
The verification data is data that is more limited to human beings disclosed than the second data,
The collation data storage unit stores the combination of the first and second data and the collation data in association with each other,
The verification data determination unit may determine the verification data corresponding to the specific data based on the first and second data.

  In such an aspect, the person to be disclosed is limited, and collation data that requires advanced security management is stored in the output control device. That is, it is not necessary to store the collation data in the output instruction device. Then, the first and second data are used as the specific data transmitted from the output instruction device, which is associated with the collation data in the output control device. The second data is not stored in advance in the output instruction device but is input to the output instruction device by the user. On the other hand, since the first data is data representing a data transmission source in data communication, it is difficult to arbitrarily alter or disguise the first data. Therefore, by associating the first and second data with the collation data in the output control device, the collation data is not stored in the output instruction device, and the security level is not significantly reduced. Output can be performed with user authentication using verification data.

The output system includes a plurality of output instruction devices as the output instruction device,
The output control device may be configured to receive the output job data from the plurality of output instruction devices.

  In such a correspondence, collation data need not be stored in a plurality of output instruction devices, and can be held and managed in the output control device. For this reason, management of collation data is easy.

Further, the verification data is data that is not disclosed to users other than the user specified by the verification data,
The verification data input device is provided with a recording medium storing the verification data from the user, and receives the verification data from the user by acquiring the verification data in the recording medium. You can also.

  In such an aspect, the collation data is stored in the output control device and the recording medium, and is not disclosed to other users. In addition, it is not necessary to rely on the storage and management of the user himself / herself for holding the collation data. For this reason, it is easy to manage collation data as confidential information.

  In addition, it can also be set as the aspect by which collation data are not disclosed also to the user who is specified by collation data. The collation data may be disclosed to the administrator of the output system.

In addition, this invention can also be comprised with the aspect of the output control apparatus connected to the following output instruction | indication apparatus and an output device.
Here, a collation data input device is connected to at least one of the output device and the output control device.
This output control device
An output job data receiving unit that receives, from the output instruction device, output job data including specific data that can specify at least one of the output instruction device and a user, and output data that is an output target;
Collation data capable of specifying the user, the collation data receiving unit for receiving the collation data received from the user by the collation data input device;
For a given user, a collation data storage unit that stores the collation data in association with the specific data;
Referring to the collation data storage unit, collation data determination for determining the corresponding collation data for the specific data included in the output job data and stored in the collation data storage unit And
An output data storage unit for storing the determined collation data and the output data included in the output job data in association with each other;
The output data stored in the output data storage unit, the output data associated with the collation data matching the collation data received via the collation data input device is sent to the output device. And an output data sending unit for outputting.

Further, the present invention can also be configured in the following manner of the method of outputting in the output system. This method
(A) Output job data including specific data that allows the output instruction device to specify at least one of the output instruction device and the user in accordance with a user instruction, and output data that is an output target Sending to the output control device;
(B) For the predetermined user, the specific data included in the output job data with reference to a verification data storage unit that stores verification data that can specify the user in association with the specific data, For the specific data stored in the verification data storage unit, the output control device determines the corresponding verification data; and
(C) the output control device associating the determined collation data with the output data included in the output job data and storing them in an output data storage unit;
(D) the collation data input device receiving the collation data from the user and sending it to the output control device;
(E) output data stored in the output data storage unit, the output data associated with the collation data matching the collation data received via the collation data input device; A device sending to the output device to cause the output device to output.

  The present invention can be realized in various forms, for example, an output method and an output device, an output control method and an output control device, a printing method and a printing device, a print control method and a print control device, and their The present invention can be realized in the form of a computer program for realizing the function of the method or apparatus, a recording medium recording the computer program, a data signal including the computer program and embodied in a carrier wave, and the like.

A. Example:
A1. Printing system configuration:
FIG. 1 is a diagram illustrating a configuration of a printing system according to the present embodiment. In the printing system 1, a personal computer 100 functioning as a client (terminal) (hereinafter referred to as “client PC 100”), a printer 200, a print server 300, and a user server 400 are connected to each other via a network NT. Yes.

  The client PC 100 includes a CPU 102, a RAM 103, a ROM 104, an interface 105 (denoted as “I / F 105” in FIG. 1), a display 106, a keyboard 107, and a mouse 108.

  The client PC 100 receives user instructions via a keyboard 107 and a mouse 108 as input means. A RAM 103 that is a rewritable storage unit includes a semiconductor memory and a hard disk. In the client PC 100, the application program stored in the RAM 103 is executed, whereby the CPU 102 realizes various functions. The result of the processing performed by the CPU 102 using the RAM 103, the ROM 104, etc. is displayed on the display 106. Further, the CPU 102 performs data communication with the print server 300 via the interface 105 and the network NT.

  Specifically, the client PC 100 receives the print instruction from the user, generates first print job data PJ1, and transmits it to the print server 300. The first print job data PJ1 is data for instructing the print server 300 to perform processing for outputting print data from a predetermined printer.

  The header portion of the first print job data PJ1 includes the IP address (Internet Protocol Address) of the client PC 100 that is the transmission source of the first print job data PJ1. This header is a TCP / IP communication header, and is added to the data by the TCP / IP layer of the client PC 100.

  The first print job data PJ1 includes various instructions including a printing mode. Such instructions include, for example, instructions on the printing paper to be used, color printing or monochrome printing, single-sided printing or double-sided printing, and whether to retain or discard data after printing.

  The print server 300 includes a CPU 302, a RAM 303, a ROM 304, an interface 305 (denoted as “I / F 305” in FIG. 1), a display 306, a keyboard 307, and a mouse 308.

  The print server 300 receives an instruction from the system administrator via a keyboard 307 as an input unit and a mouse 308. A RAM 303 that is a rewritable storage unit includes a semiconductor memory and a hard disk. In the print server 300, the CPU 302 implements various functions by executing application programs stored in the RAM 303. The results of processing performed by the CPU 302 using the RAM 303, the ROM 304, etc. are displayed on the display 306. The CPU 302 performs data communication with the client PC 100, the printer 200, and the user server 400 via the interface 305 and the network NT.

  Specifically, the print server 300 receives the first print job data PJ1 from the client PC 100. Then, the print server 300 generates the second print job data PJ2 based on the first print job data PJ1, the information stored in the RAM 303, and the information received from the user server 400. Then, the second print job data PJ2 is transmitted to the printer 200. The second print job data PJ2 is data for instructing to output print data from the destination printer.

  The user server 400 includes a CPU 402, a RAM 403, a ROM 404, an interface 405 (denoted as “I / F 405” in FIG. 1), a display 406, a keyboard 407, and a mouse 408.

  The user server 400 also receives a system administrator instruction via the keyboard 407 and the mouse 408. The system administrator who has the authority to operate the print server 300 and the system administrator who has the authority to operate the user server 400 may be different or the same. . The user server 400 is, for example, a server of a customer company that has installed the printing system 1 of this embodiment. On the other hand, the print server 300 is a server prepared by a service company that provides the printing system 1 of the present embodiment, for example.

  A RAM 403 that is a rewritable storage unit includes a semiconductor memory and a hard disk. By executing an application program stored in the RAM 403 in the user server 400, the CPU 402 realizes various functions. The result of the processing performed by the CPU 402 using the RAM 403, the ROM 404, etc. is displayed on the display 406. The CPU 402 performs data communication with the print server 300 via the interface 405 and the network NT.

  In this embodiment, the user server 400 receives an inquiry from the print server 300 and returns predetermined information to the print server 300.

  The printer 200 includes a printing mechanism 201, a CPU 202, a RAM 203, a ROM 204, an interface 205 (denoted as “I / F 205” in FIG. 1), a display 206 that also functions as a touch panel, operation keys 207a, and numeric keys 207b. And a card reader 209.

  The printer 200 receives a user instruction via an operation key 207 a as an input unit and a display 206. The printer 200 reads the user name and identification number stored in the user's IC card with the card reader 209. The user name and the identification number are unique information assigned to users who can use the printing system 1 of the present embodiment. For example, the user name is “KITADA” and the identification number is 010112. Furthermore, the printer 200 can receive a password from the user through the numeric keypad 207b.

  The RAM 203 as a rewritable storage unit includes a semiconductor memory and a hard disk. In the printer 200, the CPU 202 implements various functions by executing application programs stored in the RAM 203 or the ROM 204. For example, the CPU 202 performs authentication based on the input user name and password. The result of the processing performed by the CPU 202 using the RAM 203, the ROM 204, etc. is displayed on the display 306. The CPU 202 performs data communication with the client PC 100, the print server 300, and the user server 400 via the interface 205 and the network NT. The CPU 202 performs printing by controlling a printing mechanism 201 including a drum, a fixing device, a paper feeding mechanism, and the like.

  In this embodiment, the printer 200 requests the second print job data PJ2 from the print server 300 via the interface 205 in accordance with an instruction from the user. Then, the second print job data PJ 2 is received from the print server 300 via the interface 205. Thereafter, the printer 200 uses the printing mechanism 201, the RAM 203, the ROM 204, the display 206, etc. according to various settings stored in the second print job data PJ2, to store, preview, print, or print data. Predetermined processing such as requesting a password is performed. Processing such as print data preview and printing is also started when an execution instruction is input from the user via the operation key 207a.

  In FIG. 1, one client PC 100 and one printer 200 are shown. However, in the printing system 1, a plurality of client PCs 100 and a plurality of printers 200 are connected to the network. In FIG. 1, for easy understanding of the printing system 1, the second and subsequent client PCs 100 and the second and subsequent printers 200 are not shown.

  In this embodiment, one user uses one client PC 100. And each user does not use another user's PC. That is, the user and the client PC 100 have a one-to-one correspondence.

A2. Printing system operation:
FIG. 2 is a chart showing the operation of each element of the printing system 1 when performing printing. First, in step S <b> 110, the client PC 100 generates first print job data PJ <b> 1 according to a user's print instruction and transmits it to the print server 300. In FIG. 2, the first print job data is represented as “first print JD”. Similarly, the second print job data generated by the print server 300 is denoted as “second print JD”.

  Note that a user interface unit 102 a serving as a functional unit of the CPU 102 of the client PC 100 receives a print instruction from the user via the keyboard 107 and the mouse 108. The job data generation unit 102b as a functional unit of the CPU 102 has a function of generating the first print job data PJ1 in accordance with a user's print instruction (see FIG. 1). A transmission unit 102c as a functional unit of the CPU 102 performs the function of controlling the interface 105 and transmitting the first print job data PJ1 to the print server 300 (see FIG. 1).

  FIG. 3 is a diagram illustrating an example of the contents of the first print job data PJ1 and the second print job data PJ2 generated in the print server 300. Note that FIG. 3 shows some of a large number of data included in the first print job data PJ1 and the second print job data PJ2.

  The first print job data PJ1 is described in the header portion as data PJ100 (hereinafter, “IP address PJ100”) representing a unique address (IP address: Internet Protocol Address) that can identify the client PC 100 on the Internet. ). The header including the IP address PJ100 is generated according to a data communication protocol (TCP / IP) between the client PC 100 and the print server 300.

  In the example of FIG. 3, an IP address PJ100 represents that the IP address of the client PC 100 is 192.168.0.1.

  The first print job data PJ1 includes data PJ102 (hereinafter referred to as “name code PJ102”) representing a name code that can specify the user, and data PJ104 (hereinafter referred to as “name code PJ102”). , “Printer model number PJ104”), data PJ106 (hereinafter referred to as “option setting PJ106”) representing the setting contents of the option at the time of printing, and the printing target such as image data and document data. Print data PJ108.

  The name code PJ102 is, for example, an employee number assigned to an employee of a company that has installed the printing system 1. The name code is input to the client PC 100 when the user logs in to the printing system 1 from the client PC 100 in order to use the printing system 1.

  The printer model number PJ104 in FIG. 3 represents that the model number of the printer designated by the user in the print instruction is “LP-S7000”. The model number of the printer 200 illustrated in FIG. 1 is “LP-S7000”.

  The contents of the option setting PJ 106 include, for example, requesting a password for printing, permitting a preview prior to printing, saving data in the printer 200 after printing, or printing the printer 200 without printing one copy. This includes settings such as whether to save data.

  The option setting PJ 106 in FIG. 3 indicates that the user has not designated an option when printing the print data. If no option is specified, when printing is instructed through the operation key 207a in the printer 200, only one copy is printed, and then the print data is erased.

  The print data PJ108 is data representing the content of a document or image generated by application software executed on the client PC 100, for example.

  FIG. 4 is a flowchart showing a process of generating the second print job data PJ2 in the print server 300. Note that some steps of the print server 300 of FIG. 4 are also shown in the chart of FIG.

  In step S310 in FIG. 4, the print server 300 receives the first print job data PJ1 from the client PC 100. The job data receiving unit 302a as a functional unit of the CPU 302 has a function of receiving the first print job data PJ1 from the client PC 100 via the interface 305 (see FIG. 1).

  In step S320 of FIG. 4, the print server 300 analyzes the contents of the first print job data PJ1, and acquires an IP address PJ100, a name code PJ102, a printer model number PJ104, an option setting PJ106, and print data PJ108 ( (See the upper part of FIG. 3).

  FIG. 5 is a diagram showing the contents of data SD1 (hereinafter referred to as “collation setting data SD1”) that is stored in the RAM 303 by the print server 300 and represents the collation data setting.

  The user name code is data that can identify the user in the printing system 1 of the present embodiment. The IP address of the client PC is data that can identify each client PC connected to the network NY in the printing system 1 of the present embodiment. Data that can specify the user or client PC in the printing system 1 of the present embodiment is referred to as “specific data”.

  The collation setting data SD1 has flags D132 and D134. The flag D132 indicates whether or not the name code that can be used as the specific data in the matching process is actually used as the specific data. Similarly, the flag D134 indicates whether or not an IP address that can be used as specific data in the matching process is actually used as specific data. When the flag is 1, the data is used as specific data in the matching process. When the flag is 0, the data is not used as specific data in the matching process.

  In the printing system 1 of this embodiment, an identification number and a user name are assigned to each user in order to handle information for each user. For example, the identification number is 010112 and the user name is “KITADA”. The user name and the identification number are data that can specify a user who can use the printing system 1 in the printing system 1 of the present embodiment. There is a one-to-one correspondence between identification numbers and user names. In the printing system 1 of the present embodiment, data that can specify a user who can use the printing system 1 is referred to as “collation data”.

  The collation setting data SD1 has flags D142 and D144. The flag D142 indicates whether or not an identification number that can be used as matching data in the matching process is actually used as matching data. Similarly, the flag D144 indicates whether or not a user name that can be used as matching data in the matching process is actually used as matching data. When the flag is 1, the data is used as collation data in the collation process. When the flag is 0, the data is not used as collation data in the collation process.

  The CPU 302 of the print server 300 extracts the data with the flag of 1 from the specific data from the first print job data PJ1, and based on the data, the data with the flag of 1 of the collation data is extracted. decide.

  In the example of FIG. 5, the flag D134 corresponding to the IP address is 1 in the data flag D130 that can be used as the specific data. Further, the flag D144 corresponding to the user name in the data flag D140 that can be used as collation data is 1. Therefore, the CPU 302 of the print server 300 determines the user name based on the IP address PJ100 of the first print job data PJ1 (see the upper IP address PJ100 and the lower user name PJ202 in FIG. 3).

  The IP address PJ100 is included in the header added to the transmission data by the TCP / IP layer of the client PC 100. For this reason, if the user name is determined based on the IP address PJ100, printing can be performed even if the application software of the client PC 100 does not acquire information that can identify the client PC 100 such as the IP address PJ100 from the system of the client PC 100. On the server 300 side, the user name can be determined. For this reason, a print instruction from the client PC 100 in which application software for ensuring security that inhibits acquisition of a user ID or IP address by other application software is installed is also executed on the print server 300 side by the user. The name can be determined.

  Note that, among the information that can be used as the specific data in the printing system 1 of the present embodiment, which one is actually used as the specific data is determined by, for example, the administrator of the printing system 1. Further, the administrator of the printing system 1 can determine which of the information that can be used as the collation data is actually used as the collation data. The administrator of the printing system 1 can overwrite the collation setting data SD1 via the keyboard 307 and the mouse 308 according to the determination.

  By adopting such an aspect, it is possible to change the contents of collation processing in the printing system 1 by changing the contents of the collation setting data SD1 of the print server 300 without changing the setting contents of each client PC 100. it can.

  Note that the function of prompting the administrator of the printing system 1 to set specific data and collation data to be used, receiving the settings, and saving the collation setting data SD1 is a setting changing unit 302b as a functional unit of the CPU 302. Is realized.

  In step S330 of FIG. 4, the CPU 302 of the print server 300 transmits the IP address PJ100 included in the first print job data PJ1 received in step S310 to the user server 400, and the user name corresponding to the IP address PJ100 is transmitted. An inquiry is made (see step S330 in FIG. 2).

  In step S330, the user name is inquired to the user server 400 because the user name flag D144 of the data flag D140 that can be used as collation data is 1 in the collation setting data SD1. Yes (see FIG. 5).

  FIG. 6 is a diagram showing the contents of the user data list DB 3 which is a list of data for each user held in the RAM 403 by the user server 400. The user whose identification number and user name are described in the user data list DB 3 is a user who can perform printing with the printer 200 using the printing system 1 of the present embodiment.

  The user data list DB 3 includes data D 332 (hereinafter referred to as “name code D 332”) representing a name code assigned to each user, and data D 334 (IP address of a client PC assigned to each user) ( Hereinafter, described as “IP address D334”, data D342 indicating an identification number (hereinafter described as “identification number D342”), and data D344 indicating a user name (hereinafter referred to as “user name D344”). ) And.

  The IP address is an address on the Internet for specifying each device connected to the Internet. In the data communication, the IP address is arranged in the transmission data according to the protocol, and represents the data transmission destination and transmission source. For this reason, it is difficult to arbitrarily modify or disguise the IP address arbitrarily. Therefore, as in the user data list DB3 of this embodiment, the IP address included in the first print job data PJ1 is used as data associated with the user identification number D342 and user name D344 that can use the printing system. As a result, the following effects can be obtained. That is, it is possible to effectively prevent an act of illegally using the printing system based on the IP address included in the print job data PJ1.

  The name code is uniquely given to the employee in the company. For this reason, as shown in the user data list DB3 of the present embodiment, the following effects can be obtained by using the name code as data associated with the user identification number D342 or the user name D344 that can use the printing system. It is done. That is, the user who has issued the print instruction can be specified based on the name code included in the print job data PJ1.

  The specific data that can specify the user or the client PC is shown as “specific data D330” in FIG. In addition, collation data that can identify a user who is permitted to use the printing system 1 is shown as “collation data D340” in FIG.

  The specific data D330 (name code D332, IP address D334) is information determined based on a request other than the printing system 1 of the present embodiment. That is, the specific data D330 is not information provided exclusively for internal processing of the printing system 1 of the present embodiment.

  On the other hand, the identification number D342 is a number assigned to each user so that the printing system 1 of this embodiment handles information for each user. The user name D344 is a user name assigned to a user who can use the printing system 1 of the present embodiment. That is, the specific data D330 is information provided for internal processing of the printing system 1 of the present embodiment.

  The name code of each user is disclosed to general employees. The IP address of each user's client PC is also disclosed because it is necessary for data communication. On the other hand, the identification number D342 assigned to each user is not disclosed except for the administrator of the printing system 1. Further, in principle, the user name D344 is not disclosed to anyone other than the administrator of the printing system 1 and the user himself / herself. That is, the collation data is data that is not disclosed to other users. In other words, the collation data is data for which the object of disclosure is more limited than the specific data.

  When the CPU 402 of the user server 400 receives an inquiry about the user name from the print server 300 in step S410 of FIG. 2, in step S420, the CPU 402 of the first print job data PJ1 is stored in the user data list DB3 (see FIG. 6). A user name corresponding to the IP address PJ100 (see the upper part of FIG. 3) is searched.

  When the user name is obtained, the user server 400 transmits the user name as the determined collation data to the print server 300 in step S430.

  On the other hand, if the IP address does not exist in the user data list DB 3 in step S420, the user server 400 indicates that the IP address is not that of the client PC 100 of the user authorized to use the printing system 1. Is returned to the print server 300. In FIG. 2, the processing when the IP address does not exist in the user data list DB 3 is omitted for easy understanding.

  The user server 400 controls the interface 405 to receive a user name inquiry as collation data from the print server 300 (see step S410 in FIG. 2). 402a (see FIG. 1). And it is the search part 402b as a function part of CPU402 (refer FIG. 1) that plays the function which searches and determines the user name as collation data (refer step S420 of FIG. 2). It is the transmission unit 402c as a functional unit of the CPU 402 that controls the interface 405 to perform the function of transmitting the user name as collation data or the above message to the print server 300 (see step S430 in FIG. 2). (See FIG. 1).

  In step S340 in FIG. 4, the print server 300 indicates that the user name or the IP address transmitted from the user server 400 does not belong to the client PC 100 of the user who is permitted to use the print system 1. Receive a message.

  When the user name as the collation data is received in step S340 (Yes in step S345), the print server 300, in step S350, the user name PJ202 and the print data PJ208 (the first print received from the client PC 100). Second print job data PJ2 including the print data PJ108 included in the job data PJ1 is generated (see FIG. 3). Then, the second print job data PJ 2 is stored in the RAM 303.

  The printer model number PJ204 in the print job data PJ2 represents the same content as the printer model number PJ104 in the print job data PJ1 (see the lower part of FIG. 3). The option setting PJ206 in the print job data PJ2 represents the same content as the option setting PJ106 in the print job data PJ1. When the second print job data PJ2 is transmitted to the printer 200, the IP address PJ200 of the print server 300 is added to the header portion (see the lower part of FIG. 3).

  In the print server 300, the function of the CPU 302 is to control the interface 305 to inquire the user server 400 about the user name as collation data (see step S330 in FIGS. 2 and 4). As a specific data transmission unit 302c (see FIG. 1). The verification data receiving unit 302d as a functional unit of the CPU 302 performs the function of controlling the interface 305 and receiving a user name as verification data from the user server 400 (see step S340 in FIGS. 2 and 4) (see FIG. 2). (See FIG. 1). The job data generation unit 302e as a functional unit of the CPU 302 performs the function of generating the second print job data PJ2 (see step S350 in FIGS. 2 and 4) (see FIG. 1).

  In step S350, the print server 300 replies to the client PC 100 that printing of the first print job data PJ1 is permitted. In step S120, the client PC 100 receives the message from the print server 300, and displays on the display 106 that printing of the first print job data PJ1 instructed by the user to be printed is permitted.

  Thereafter, the print server 300 stands by with the second print job data PJ2 held in the RAM 303. Note that the print server 300 stores a plurality of second print job data PJ2 generated by the same processing in the RAM 303.

  On the other hand, in step S340 in FIG. 4, the print server 300 does not receive the user name as the collation data, and the IP address for inquiring the corresponding user name is that of the client PC 100 of the user who is permitted to use the printing system 1. If a message to the effect is not received (No in step S345), the process proceeds to step S360.

  In step S360, the print server 300 replies to the client PC 100 that printing of the first print job data PJ1 is not permitted. The client PC 100 displays on the display 106 that printing of the first print job data PJ1 designated by the user is not permitted. The above is the processing for generating the second print job data PJ2 in the print server 300 shown in the flowchart of FIG.

  A user who is permitted to print issues a print instruction on the client PC 100 and then goes to a place where the printer 200 of the model number specified in the print instruction is located. At that time, the user brings an IC card storing his / her user name. When the user arrives at the printer 200, the user inserts the IC card into the card reader 209 (see FIG. 1).

  The printer 200 acquires a user name as collation data from the IC card via the card reader 209 in step S210 of FIG. In step S220 in FIG. 2, the user name is transmitted to the print server 300, and the print server 300 is requested to transmit print job data instructed to be printed by the user. Note that the transmission unit 202c as a functional unit of the CPU 202 performs the function of controlling the interface 205 to transmit the request for the second print job data PJ2 to the print server 300 (see FIG. 1).

  FIG. 7 is a flowchart illustrating processing in which the print server 300 receives the request and transmits the second print job data PJ2 to the printer. Note that some of the steps in FIG. 7 are also shown in FIG.

  In step S <b> 360, the print server 300 receives a request for print job data with a user name from the printer 200. In step S <b> 370, the print server 300 includes the second print job data including a user name that matches the user name received from the printer 200 from among the plurality of second print job data held in the RAM 303. PJ2 (see the lower part of FIG. 3) is searched. Thereafter, different processing is executed depending on the presence / absence of the corresponding second print job data PJ2 (step S375).

  If the corresponding second print job data PJ2 exists (Yes in step S375), the second print job data PJ2 is transmitted to the printer 200 in step S380.

  On the other hand, when the second print job data PJ2 including the user name that matches the user name received from the printer 200 does not exist in the plurality of second print job data held in the RAM 303 (step S1). In step S 375, the fact is transmitted to the printer 200 in step S 390. The printer 200 displays on the display 206 that there is no print job data instructed to be printed by the user.

  The request receiving unit 302f as a functional unit of the CPU 302 performs the function of receiving a request for print job data from the printer 200 via the interface 305 (see step S360 in FIGS. 2 and 4) (FIG. 1). reference). The job data processing unit 302g as a functional unit of the CPU 302 performs the function of selecting the second print job data PJ2 (see step S370 in FIGS. 2 and 4) (see FIG. 1).

  A function of controlling the interface 305 to transmit a message indicating that the corresponding second print job data does not exist or the second print job data PJ2 to the printer 200 (see steps S380 and S390 in FIGS. 2 and 4). The job data transmission unit 302h serving as a functional unit of the CPU 302 is played (see FIG. 1). Note that the second print job data PJ2 includes information on an instruction to the printer 200 to execute printing based on the print data PJ208, the option setting PJ206, and the like.

  When the printer 200 receives the second print job data PJ2 in step S230 of FIG. 2, the printer 200 performs printing in accordance with the print data PJ208 of the second print job data PJ2 and the option setting PJ206 in step S240.

  Note that the reception unit 202a as a functional unit of the CPU 202 performs the function of receiving the second print job data PJ2 from the print server 300 via the interface 205 (see step S230 in FIG. 2) (see FIG. 1). ). It is the printing unit 202b as a functional unit of the CPU 202 (see FIG. 1) that performs the function of controlling the printing mechanism 201 and performing printing based on the second print job data PJ2 (see step S240 in FIG. 2). .

  By adopting an aspect like the present embodiment, it is possible to permit printing of the printer 200 only for a user who is permitted to use the printing system 1 (see, for example, step S420 in FIG. 2 and FIG. 6). In addition, it is possible to perform printing with authentication without storing information (user name in this embodiment) for permitting printing only for some users in the client PC 100.

B. Variations:
The present invention is not limited to the above-described examples and embodiments, and can be implemented in various modes without departing from the gist thereof. For example, the following modifications are possible.

B1. Modification 1:
In the above embodiment, the IP address used for determining the user name is an IP address included in the header added to the data by the TCP / IP layer of the client PC 100. However, the IP address used for determining the user name may be stored in data generated by a printing application program executed in the client PC 100.

  That is, information that can identify the client PC 100 and the user may be stored in data generated by an application program that instructs output from the printer 200. Data generated by the application program may be stored in a header added for communication later. Information that can specify the output instruction device (client PC 100) and the user is stored in any part of data transmitted from the output instruction device (client PC 100) to the output control device (print server 300 or user server 400). It only has to be done.

B2. Modification 2:
In the above embodiment, the user name PJ202 is generated as the collation data in the second print job data PJ2 according to the IP address PJ100 in the first print job data PJ1. However, the collation data can also be generated based on other data.

  For example, in the collation setting data SD1 (see FIG. 5), the flag D132 is set to 1 and the flag D134 is set to 0, so that the name code PJ102 (see the upper part of FIG. 3) included in the first print job data PJ1. Thus, the collation data can be determined. In such a case, in step S330 of FIGS. 2 and 4, the print server 300 transmits a name code PJ102 to the user server 400 to inquire about collation data.

  In such an aspect, the user server 400 searches the user data list DB 3 and returns the verification data corresponding to the name code that matches the name code received together with the inquiry to the print server 300. According to such an aspect, even when a plurality of users share one client PC 100, it can be used as an output instruction device for a user who has input verification data via the card reader 209 as a verification data input device. The printed product based on the print data that the user has instructed to print can be passed through the client PC 100.

  Further, by setting both the flag D132 and the flag D134 to 1 in the collation setting data SD1, collation is performed based on the IP address PJ100 and the name code PJ102 (see the upper part of FIG. 3) included in the first print job data PJ1. Data can be determined. In such a case, in step S330 of FIGS. 2 and 4, the print server 300 sends an IP address PJ100 and a name code PJ102 to the user server 400 to inquire collation data.

  In such an aspect, the user server 400 searches the user data list DB3, and returns the collation data corresponding to the IP address and name code that matches the IP address and name code received together with the inquiry to the print server 300. . According to such an aspect, even when a plurality of users share one client PC 100, the user prints against the user who has input the verification data via the card reader 209 as the verification data input device. The printed matter based on the print data instructed can be delivered. Further, since authentication is performed using an IP address that is difficult to be altered or camouflaged, unauthorized use of the printing system can be effectively prevented.

B3. Modification 3:
In the above embodiment, the card reader 209 as a collation data input device is connected to the printer 200 as an output device and is controlled by the CPU 202 of the printer 200. In other words, in the above embodiment, the collation data input device and the output device are configured integrally. However, the collation data input device may be connected to other components of the output system such as the print server 300 and the user server 400, or may be integrated with other components. . However, it is preferable that the collation data input device is provided at a position close to the output device among the output instruction device and the output device.

  It is also preferable that the collation data input device receives the collation data input in direct contact with the user. For example, the collation data input by the user via the collation data input device may be information such as a user name input via the keyboard, or images such as fingerprints, blood vessels of the fundus, blood vessels of the palm, and faces. Such biological information can also be included. In such an aspect, the collation data input device can be configured to acquire such information. Further, the output control device holds the information and the specific information in association with each other (see FIG. 6).

B4. Modification 4:
In the above embodiment, the output instruction device (client PC 100 in the above embodiment) outputs a plurality of types of data (name code and IP address) that can be used as specific data to the output control device (the print server 300 in the above embodiment). And to the user server 400). Then, the output control device (print server 300) determines specific data to be used from among the collation setting data SD1. However, the output instruction device may be configured such that, among a plurality of types of specific data, data that the output control device does not use for searching for collation data is not transmitted to the output control device.

  In the above embodiment, the collation data input device and the output device (in the above embodiment, the printer 200 having the operation key 207a, the numeric key 207b, and the card reader 209) are a plurality of types of data that can be used as collation data. Among the (identification number and user name), the user name is transmitted to the output control device. However, the collation data input device may be configured to transmit a plurality of types of collation data to the output control device.

  Only some of the multiple types of data that can be used as specific data are transmitted from the output instruction device to the output control device, and only some of the multiple types of data that can be used as collation data are input devices. Is preferably transmitted to the output control device, the following processing is preferably performed. That is, in such an aspect, when the contents of the collation setting data SD1 (see FIGS. 1 and 5) are changed, the output control device (the print server 300 and the user server 400 in the above embodiment) The changed setting contents are transmitted to the apparatus (the client PC 100) and the collation data input apparatus (the printer 200 having the operation key 207a, the numeric key 207b, and the card reader 209). And it is preferable that an output instruction | indication apparatus sends the specific data according to the setting to an output control apparatus. Moreover, it is preferable that a collation data input device sends the collation data according to the setting to an output control apparatus.

B5. Modification 5:
In the above embodiment, the printer 200 requests the second print job data PJ2 when reading the user name as the collation data from the IC card (see steps S230 and S240 in FIG. 2). Further, when the printer 200 receives the second print job data PJ2, the printer 200 performs printing (see steps S230 and S240 in FIG. 2). However, it is also possible to adopt a mode in which a password is requested from the user between step S230 and step S240 in FIG. 2 or between step S230 and step S240.

  For example, the password may be stored in a storage medium (IC card in the above example) that stores verification data (user name or identification code in the above example). The printing system collates the password input from the input device such as the operation key 207a or the numeric keypad 207b with the password stored in the storage medium, and proceeds to the next process when the two match. can do.

  Further, for example, the print server 300 or the user server 400 may be associated with specific data or collation data and hold a password. Then, the printing system collates the password input from the input device such as the operation key 207a or the numeric keypad 207b with the password held by the print server 300 or the user server 400. It can be set as the aspect which progresses to the process of.

B6. Modification 6:
In the above-described embodiment, the process of collating the IP address as the specific data received from the client PC 100 as the output instruction device and the user name as the collation data received via the card reader 209 as the collation data input device Are executed by the print server 300 and the user server 400 (see FIG. 2). However, these processes can be executed by one server, and can also be executed by three or more servers.

  However, as a server that receives print job data for output from the output instruction device and generates print job data to be passed to the output device, a server prepared by a person (company) that provides the output service is provided, and the specific data and It is preferable to provide a server of a person (company) who receives the provision of the output service as a server that holds the correspondence relationship with the collation data. By adopting such an aspect, an in-house server that holds specific data in advance can be utilized. Moreover, if it is set as such an aspect, it is not necessary to preserve | save specific data in the server of a service company.

  In the printing system 1 of the above embodiment, the client PC 100, the printer 200, the print server 300, and the user server 400 are connected via the network NT. However, the aspect of the printing system is not limited to this. In other words, any of these elements can be stored in a single housing. Each element such as the print server 300 and the user server 400 may be configured by a plurality of elements.

B7. Modification 7:
In the above embodiment, the printing system has been described as one aspect of the present invention. However, the present invention is not limited to such an aspect, and can be realized in various aspects. In other words, the present invention is not limited to printing on a recording medium, but is applied to a device that outputs information in various modes, such as displaying a still image or a moving image on a display, projecting a still image or a moving image on a screen, or reproducing a voice message. be able to.

B8. Modification 8:
In the above embodiment, a part of the configuration realized by hardware may be replaced with software, and conversely, a part of the configuration realized by software may be replaced by hardware.

  A computer program that realizes such a function is provided in a form recorded on a computer-readable recording medium such as a floppy disk or a CD-ROM. The host computer reads the computer program from the recording medium and transfers it to the internal storage device or the external storage device. Alternatively, the computer program may be supplied from the program supply device to the host computer via a communication path. When realizing the function of the computer program, the computer program stored in the internal storage device is executed by the microprocessor of the host computer. Further, the host computer may directly execute the computer program recorded on the recording medium.

  In this specification, the host computer is a concept including a hardware device and an operation system, and means a hardware device that operates under the control of the operation system. The computer program causes such a host computer to realize the functions of the above-described units. Note that some of the functions described above may be realized by an operation system instead of an application program.

  In the present invention, the “computer-readable recording medium” is not limited to a portable recording medium such as a flexible disk or a CD-ROM, but an internal storage device in a computer such as various RAMs and ROMs, An external storage device fixed to a computer such as a hard disk is also included.

1 is a diagram illustrating a configuration of a printing system according to an embodiment. 6 is a chart showing the operation of each element of the printing system 1 when performing printing. FIG. 4 is a diagram illustrating an example of the contents of first print job data PJ1 and second print job data PJ2 generated in the print server 300. 9 is a flowchart showing processing for generating second print job data PJ2 in the print server 300. The figure showing the content of collation setting data SD1 which the print server 300 hold | maintains in RAM303 and represents the setting of collation data. The figure showing the contents of user data list DB3 which is a list of the data for every user which user server 400 holds in RAM403. 10 is a flowchart illustrating processing in which the print server 300 receives a request and transmits second print job data PJ2 to the printer.

Explanation of symbols

1 ... Printing system 100 ... Client PC
102 ... CPU
102a ... User interface unit 102b ... Job data generation unit 102c ... Transmission unit 103 ... RAM
104 ... ROM
DESCRIPTION OF SYMBOLS 105 ... Interface 106 ... Display 107 ... Keyboard 108 ... Mouse 200 ... Printer 201 ... Printing mechanism 202 ... CPU
202a ... receiving unit 202b ... printing unit 202c ... transmitting unit 203 ... RAM
204 ... ROM
205 ... Interface 206 ... Display 207a ... Operation Key 207b ... Numeric Keypad 209 ... Card Reader 300 ... Print Server 302 ... CPU
302a ... Job data reception unit 302b ... Setting change unit 302c ... Specific data transmission unit 302d ... Verification data reception unit 302e ... Job data generation unit 302f ... Request reception unit 302g ... Job data processing unit 302h ... Job data transmission unit 303 ... RAM
304 ... ROM
305 ... Interface 306 ... Display 307 ... Keyboard 308 ... Mouse 400 ... User server 402 ... CPU
402a ... Receiving unit 402b ... Searching unit 402c ... Transmitting unit 403 ... RAM
404 ... ROM
405 ... Interface 406 ... Display 407 ... Keyboard 408 ... Mouse D130 ... Flag of data that can be used as specific data D132 ... Flag indicating whether name code is used as specific data D134 ... Use IP address as specific data Flag indicating whether or not to perform D140. Flag of data that can be used as collation data. D142. Flag indicating whether or not to use identification number as collation data. D144... Whether or not to use user name as specific data. Representing flag D330 ... specific data D332 ... name code D334 ... IP address D340 ... collation data D342 ... identification number D344 ... user name DB3 ... user data list NT ... network PJ1 ... first print job data PJ100 ... IP address PJ102 ... Name code PJ104 ... Printer model number PJ106 ... Option setting PJ108 ... Print data PJ2 ... Second print job data PJ200 ... IP address PJ202 ... User name PJ204 ... Printer model number PJ206 ... Option setting PJ208 ... Print data SD1 ... Verification setting data

Claims (12)

An output comprising an output instruction device, an output device, the output instruction device, an output control device connected to the output device, and a collation data input device connected to at least one of the output device and the output control device A system,
The output instruction device outputs output job data including specific data that can specify at least one of the output instruction device and the user according to a user instruction, and output data that is an output target. To the control device,
The collation data input device receives collation data capable of specifying the user from the user and sends the collation data to the output control device,
The output device can perform output based on the output data,
The output control device includes:
For a given user, the verification data storage unit for storing the verification data in association with the said specific data,
Referring to the collation data storage unit, collation data determination for determining the corresponding collation data for the specific data included in the output job data and stored in the collation data storage unit And
An output data storage unit for storing the determined collation data and the output data included in the output job data in association with each other;
The output data stored in the output data storage unit, the output data associated with the collation data matching the collation data received via the collation data input device is sent to the output device. Bei example and an output data transmitting section that causes the output Te,
The output system, wherein the specifying data is data that can specify the output instruction device, and includes data representing a data transmission source in data communication between the output instruction device and the output control device. The method of claim 1, characterized in output system,
The output system, wherein the specific data includes data representing an identification code uniquely assigned to the user. The output system according to claim 1 or 2, wherein
The collation data storage unit
For the predetermined user, a plurality of types of data that can specify the user are stored in association with the specific data,
The output control device further includes:
A setting data storage unit that stores collation setting data representing data to be used as the collation data among the plurality of types of data;
A setting change unit capable of receiving an instruction to change the collation setting data from an administrator of the output system and changing the collation setting data;
The output system, wherein the collation data determination unit determines the collation data corresponding to the specific data included in the output job data according to the collation setting data. The output system according to claim 1,
The specific data is
Data that can identify the output instruction device, the first data representing a data transmission source in data communication between the output instruction device and the output control device,
Data that can identify the user, and second data that is input to the output instruction device by the user when using the output system,
The verification data is data that is more limited to human beings disclosed than the second data,
The collation data storage unit stores the combination of the first and second data and the collation data in association with each other,
The output system in which the collation data determination unit determines the collation data corresponding to the specific data based on the first and second data. The output system according to claim 4, wherein
The verification data is data that is not disclosed to a user other than the user specified by the verification data,
The output system, wherein the verification data input device is provided with a recording medium storing the verification data from the user, and receives the verification data from the user by obtaining the verification data in the recording medium. An output instruction device and an output control device connected to the output device,
A collation data input device is connected to at least one of the output device and the output control device,
The output control device includes:
An output job data receiving unit that receives, from the output instruction device, output job data including specific data that can specify at least one of the output instruction device and a user, and output data that is an output target;
Collation data capable of specifying the user, the collation data receiving unit for receiving the collation data received from the user by the collation data input device;
For a given user, a collation data storage unit that stores the collation data in association with the specific data;
Referring to the collation data storage unit, collation data determination for determining the corresponding collation data for the specific data included in the output job data and stored in the collation data storage unit And
An output data storage unit for storing the determined collation data and the output data included in the output job data in association with each other;
The output data stored in the output data storage unit, the output data associated with the collation data matching the collation data received via the collation data input device is sent to the output device. an output data transmitting section that causes the output Te Bei give a,
The output control device, wherein the specifying data is data that can specify the output instruction device and includes data representing a data transmission source in data communication between the output instruction device and the output control device. The output control device according to claim 6,
The output control device, wherein the specific data includes data representing an identification code uniquely assigned to the user. The output control device according to claim 6 or 7,
The collation data storage unit
For the predetermined user, a plurality of types of data that can specify the user are stored in association with the specific data,
The output control device further includes:
A setting data storage unit that stores collation setting data representing data to be used as the collation data among the plurality of types of data;
A setting changing unit capable of receiving an instruction to change the collation setting data from an administrator of the output control device and changing the collation setting data;
The collation data determination unit is an output control device that determines the collation data corresponding to the specific data included in the output job data according to the collation setting data. The output control device according to claim 6,
The specific data is
Data that can identify the output instruction device, the first data representing a data transmission source in data communication between the output instruction device and the output control device,
Data that can identify the user, and the second data that is input to the output instruction device by the user when using the output instruction device,
The verification data is data that is more limited to human beings disclosed than the second data,
The collation data storage unit stores the combination of the first and second data and the collation data in association with each other,
The said collation data determination part is an output control apparatus which determines the said collation data corresponding to the said specific data based on the said 1st and 2nd data. The output control device according to claim 9,
The output system, wherein the verification data is data that is not disclosed to a user other than the user specified by the verification data. An output comprising an output instruction device, an output device, the output instruction device, an output control device connected to the output device, and a collation data input device connected to at least one of the output device and the output control device A method for outputting in a system,
(A) Output job data including specific data that allows the output instruction device to specify at least one of the output instruction device and the user in accordance with a user instruction, and output data that is an output target Sending to the output control device;
(B) For the predetermined user, the specific data included in the output job data with reference to a verification data storage unit that stores verification data that can specify the user in association with the specific data, For the specific data stored in the verification data storage unit, the output control device determines the corresponding verification data; and
(C) the output control device associating the determined collation data with the output data included in the output job data and storing them in an output data storage unit;
(D) the collation data input device receiving the collation data from the user and sending it to the output control device;
(E) output data stored in the output data storage unit, the output data associated with the collation data matching the collation data received via the collation data input device; device is sent to the output device, Bei give a, a step of causing the output to the output device,
The method, wherein the specifying data includes data that can specify the output instruction device and represents data transmission source in data communication between the output instruction device and the output control device . A computer program that is executed in an output instruction device and an output control device connected to the output device, and that outputs from the output device,
A collation data input device is connected to at least one of the output device and the output control device,
The computer program is
A function of receiving, from the output instruction device, output job data including specific data that can specify at least one of the output instruction device and the user, and output data that is an output target;
Verification data that can identify the user, the verification data input device receiving the verification data received from the user;
For a given user, the function of storing the collation data in the collation data storage unit in association with the specific data;
A function of referring to the collation data storage unit and determining the corresponding collation data for the specific data included in the output job data and stored in the collation data storage unit;
A function for storing the determined collation data and the output data included in the output job data in an output data storage unit in association with each other;
The output data stored in the output data storage unit, the output data associated with the collation data matching the collation data received via the collation data input device is sent to the output device. The output control device realizes the function of causing the output to be performed ,
The computer program includes data that can specify the output instruction device and includes data representing a data transmission source in data communication between the output instruction device and the output control device .

Images