JP5266007B2 - Information processing apparatus, authentication server, information processing system, control method, program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent an IC card which is going to be registered in an authentication server for performing printing from being registered as an IC card of other user. <P>SOLUTION: A composite machine 100 accepts a card ID of the IC card, transmits the card ID to IC card authentication service of the authentication server 200 to perform an authentication request, acquires an authentication result from the IC card authentication service of the authentication server 200, and when it is shown that the authentication result is not authenticated, accepts input of a user ID, and after the user ID is accepted, accepts input of the card ID of the IC card again, determines whether or not the card ID accepted first and the card ID accepted again are the same piece of authentication information, and for the same piece of authentication information, transmits the user ID to SA service of the authentication server 200 to perform the authentication request. <P>COPYRIGHT: (C)2010,JPO&amp;INPIT

Description

The present invention relates to an information processing apparatus, an authentication server, an information processing system, a control method, and a program, and in particular, authentication information in an information processing system in which one or more information processing apparatuses and an authentication server can communicate via a communication medium . Regarding registration control.

  2. Description of the Related Art Conventionally, a so-called “pull print” printing system is known in which a user issues a print request from a printing device to print data temporarily stored on a server to output the printing data from the printing device. Yes.

  Accordingly, the user can output print data from a desired printing apparatus instead of outputting to a specific printing apparatus when printing from an application (for example, Patent Document 1).

  An example of a printing procedure in such a printing system is as follows.

  When the user holds the IC card over the IC card reader connected to the printing apparatus, the IC card reader detects UID (authentication information) (unique ID) that is identification information of the IC card.

  The printing apparatus transmits the detected UID to the authentication server in order to determine whether the user who owns the IC card of the detected UID is a user who can use the printing apparatus. Upon receiving the UID transmitted from the printing apparatus, the authentication server refers to an authentication table (a table in which a UID and a user name corresponding to the UID are registered) and returns an authentication result to the printing apparatus.

When the printing apparatus that has received the authentication result transmitted from the authentication server succeeds in the authentication, the printing apparatus executes the login process of the user corresponding to the UID and acquires the print data of the login user temporarily stored on the server. And print.
JP 2006-99714 A

  On the other hand, if the authentication fails, the printing apparatus may perform a process of registering the UID of the IC card in the authentication table so that the user can log in when the user cannot log in.

  For example, a mechanism for registering the UID of the IC card in the authentication table of the authentication server can be considered as follows.

  If the user cannot log in, the printing apparatus first confirms with the user whether or not to register the IC card (UID) in the authentication table.

  When the registration instruction is issued by the user, the printing apparatus displays a screen for accepting input of authentication information (user name and password), and uses the authentication information input by the user via the screen to perform the second authentication. Authentication is performed by a server (for example, Active Directory). Whether or not the IC card (UID) can be registered is determined based on the authentication result, and it is determined whether or not to register the user name input as the authentication information and the UID of the IC card in the authentication table.

  Here, if the user cannot log in even if the user holds the IC card over the IC card reader, and the user leaves the side of the printing apparatus to which the IC card reader is connected, authentication information (user name, password) is sent to the printing apparatus. A screen (FIG. 9) for accepting an input is displayed. In such a case, in order to use the printing apparatus, another user may input authentication information (user name, password) by mistake.

  This is because the printing apparatus can be used even by a user who does not have an IC card by inputting authentication information (user name, password) via the screen (FIG. 9) displayed on the display unit. In particular, there is a risk that other users mistakenly input authentication information (user name, password), because this function is provided.

  That is, there is a possibility that the user who holds the IC card over the IC card reader and the user who inputs the authentication information (user name, password) via the screen are different.

  As a result, the user's IC card held over the IC card reader is associated with an incorrect user and registered in the authentication table. That is, after being registered in error in this way, the user holding the IC card for printing inputs the authentication information (user name, password), and prints the printed matter instructed by the incorrect user to print. It will be possible to reduce the security.

  For example, if the UID of user A's IC card and the user name of user B are linked and registered in the authentication table, when user A tries to print the print data by holding the IC card over the reader, the print data is authenticated. Since it is associated with the user name registered in the table, the user B cannot acquire the print data of the user B, and the user A can acquire the print data of the user B, resulting in a decrease in security. It becomes.

An object of the present invention is to provide a mechanism to prevent the authentication information to be registered in the authentication server is registered as the authentication information of other users.

The present invention relates to an information processing in an information processing system including a first authentication server performing authentication processing of the first authentication information, and the second authentication server performing authentication processing of the second authentication information, and an information processing apparatus A first receiving unit that receives an input of the first authentication information, and transmits the first authentication information received by the first receiving unit to the first authentication server to request an authentication. A first authentication requesting unit for performing authentication, a first authentication result acquiring unit for acquiring an authentication result from the first authentication server in response to an authentication request by the first authentication requesting unit, and the first After acquiring an authentication result indicating that authentication has not been performed by the authentication result acquiring unit , a second receiving unit that receives input of second authentication information, and the second authentication information by the second receiving unit After accepting the first authentication The third receiving means for receiving the report input, the first authentication information received by the first receiving means, and the first authentication information received by the third receiving means are the same authentication information. and authentication decision means for performing determining authentication determination process whether, before Symbol the second authentication information received by the second reception means, authentication of the second authentication information by the second authentication server A second authentication requesting means for transmitting and requesting authentication to perform processing; and a second authentication requesting result obtained by the second authentication server in response to an authentication request from the second authentication requesting means. The first authentication information received by the first receiving means and the first authentication information received by the third receiving means by the authentication result acquiring means and the authentication determining means are the same authentication information. Determined to be and the second The first authentication server of the first authentication information determined to be the same authentication information on the condition that the authentication result by the second authentication server acquired by the certificate result acquisition unit is authenticated. And a registration request means for making a registration request .

According to the present invention, the effect of such prevent the authentication information to be registered in the authentication server, is registered as the authentication information of other users.

[First Embodiment]
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

Description of FIG. 1 (System Configuration Diagram) FIG. 1 is a system configuration diagram showing an example of the configuration of a printing system to which the printing apparatus of the present invention can be applied.

  As shown in FIG. 1, the print system of this embodiment includes one or a plurality of multifunction peripherals 100, an IC card authentication server 200, a directory service server 300 (user authentication server), and one or a plurality of computers 400 (for example, for each user). ), The print data storage server 500 is connected via a network 600 (for example, a LAN).

  A printer driver is installed in the computer 400. The printer driver generates print data based on the data received from the application program, transmits the print data to the print data storage server 500, and stores it in a predetermined storage location (spool area) of the print data storage server 500. be able to.

  The print data storage server 500 controls the transfer of the print data stored in the predetermined storage location to the multifunction peripheral 100 based on a command received from the outside.

  As another configuration, instead of the print data storage server 500, the multifunction peripheral 100 can be a print data storage server.

  The IC card authentication server 200 stores an IC card authentication table, and performs an authentication process using the IC card authentication table in response to an authentication request by the IC card from the multifunction device 100.

  Upon receiving the user's print request specified in the authentication process, the multifunction peripheral 100 acquires the user's print data stored in a predetermined storage location of the print data storage server 500, and executes the print process. In addition to the printing process, the multi-function device 100 can use a scan or copy function when authenticated by an IC card.

  The directory service server 300 centrally stores and manages hardware resources such as servers, clients, and printers on the network, and attributes such as attributes and access rights of users who use them. For example, the directory service server 300 is a server equipped with an active directory function. The user attributes include a login user name and password of the computer 400 (for example, a login user name and password of Microsoft Windows (registered trademark)).

  When acquiring the card ID of the IC card, the CPU 301 of the multifunction peripheral 100 transmits the card ID to the IC card authentication server 200.

  Then, the CPU of the IC card authentication server 200 executes an authentication process with the received card ID, and transmits an authentication result to the multifunction device 100.

  When the authentication cannot be performed, the CPU of the IC card authentication server 200 transmits a request for inputting user information (for example, a user name and a password (FIG. 19) managed by the directory service server 300) to the multi-function device 100.

  Upon receiving the user information input request, the MFP 100 transmits the user information input by the operator to the IC card authentication server 200.

  Then, the CPU of the IC card authentication server 200 transmits user information to the directory service server 300. Upon receiving the user information, the directory service server 300 executes authentication processing and transmits the authentication result to the IC card authentication server 200. .

  When the authentication by the directory service server 300 is not possible, the IC card authentication server 200 discards the information. On the other hand, when the directory service server 300 is authenticated, the IC card authentication server 200 registers the user information (user name) and card ID in the IC card authentication server 200.

Description of FIG. 2 (Block Diagram) The hardware of the information processing apparatus applicable to the IC card authentication server 200, directory service server 300, computer 400, and print data storage server 500 shown in FIG. The configuration will be described.

  FIG. 2 is a block diagram illustrating a hardware configuration of an information processing apparatus applicable to the IC card authentication server 200, the directory service server 300, the computer 400, and the print data storage server 500 illustrated in FIG.

  In FIG. 2, reference numeral 201 denotes a CPU that comprehensively controls each device and controller connected to the system bus 204. Further, the ROM 202 or the external memory 211 is necessary to realize a BIOS (Basic Input / Output System) or an operating system program (hereinafter referred to as an OS) that is a control program of the CPU 201 and a function executed by each server or each PC. Various programs to be described later are stored.

  A RAM 203 functions as a main memory, work area, and the like for the CPU 201. The CPU 201 implements various operations by loading a program or the like necessary for execution of processing from the ROM 202 or the external memory 211 into the RAM 203 and executing the loaded program.

  An input controller 205 controls input from a keyboard (KB) 209 or a pointing device such as a mouse (not shown). A video controller 206 controls display on a display device such as a CRT display (CRT) 210. In FIG. 2, although described as CRT 210, the display device is not limited to the CRT, but may be another display device such as a liquid crystal display. These are used by the administrator as needed.

  A memory controller 207 is provided in an external storage device (hard disk (HD)), flexible disk (FD), or PCMCIA card slot for storing a boot program, various applications, font data, user files, editing files, various data, and the like. Controls access to an external memory 211 such as a compact flash (registered trademark) memory connected via an adapter.

  A communication I / F controller 208 is connected to and communicates with an external device via the network 600, and executes communication control processing in the network. For example, communication using TCP / IP is possible.

  Note that the CPU 201 enables display on the CRT 210 by executing outline font rasterization processing on a display information area in the RAM 203, for example. In addition, the CPU 201 enables a user instruction with a mouse cursor (not shown) on the CRT 210.

  Various programs to be described later for realizing the present invention are recorded in the external memory 211 and executed by the CPU 201 by being loaded into the RAM 203 as necessary. Furthermore, definition files and various information tables used when executing the program are also stored in the external memory 211.

Description of FIG. 3 (Block Diagram) Next, a hardware configuration of a controller unit that controls the multifunction peripheral 100 as the image processing apparatus of the present invention will be described with reference to FIG.

  FIG. 3 is a block diagram illustrating an example of a hardware configuration of the controller unit of the multifunction peripheral 100 illustrated in FIG.

  In FIG. 3, reference numeral 316 denotes a controller unit which is connected to a scanner unit 314 functioning as an image input device and a printer unit 312 functioning as an image output device, while being connected to a LAN (for example, the LAN (network) shown in FIG. 1), By connecting to a public line (WAN) (for example, PSTN or ISDN), image data and device information are input and output.

  In the controller unit 316, reference numeral 301 denotes a CPU, which is a processor that controls the entire system. A RAM 302 is a system work memory for the CPU 301 to operate, and is also a program memory for recording a program and an image memory for temporarily recording image data.

  A ROM 303 stores a system boot program and various control programs. An external storage device (hard disk drive (HDD)) 304 stores various programs for controlling the system, image data, and the like. An IC card authentication application program (1011) to be described later is also stored in the external storage device 304. A card ID storage area 1012 shown in FIG. 4 to be described later is a storage area of the RAM 302 or the HDD 304.

  An operation unit interface (operation unit I / F) 307 is an interface unit with the operation unit (UI) 308 and outputs image data to be displayed on the operation unit 308 to the operation unit 308. The operation unit I / F 307 serves to transmit the information input by the system user from the operation unit 308 to the CPU 301. Note that the operation unit 308 includes a display unit having a touch panel, and various instructions can be given by a user pressing (touching with a finger or the like) a button displayed on the display unit.

  A network interface (Network I / F) 305 is connected to a network (LAN) and inputs / outputs data. A modem (MODEM) 306 is connected to a public line and inputs / outputs data such as FAX transmission / reception.

  Reference numeral 318 denotes an external interface (external I / F), which is an I / F unit that accepts external inputs such as USB, IEEE 1394, printer port, and RS-232C. In this embodiment, a card reader 319 for reading an IC card required for authentication is connected to the external I / F unit 318. The CPU 301 can control reading of information from the IC card by the card reader 319 via the external I / F 318, and can acquire information read from the IC card. The above devices are arranged on the system bus 309.

  Reference numeral 320 denotes an image bus interface (IMAGE BUS I / F), which is a bus bridge that connects the system bus 309 and an image bus 315 that transfers image data at high speed and converts the data structure.

  The image bus 315 is configured by a PCI bus or IEEE1394. The following devices are arranged on the image bus 315.

  A raster image processor (RIP) 310 develops vector data such as a PDL code into a bitmap image. A printer interface (printer I / F) 311 connects the printer unit 312 and the controller unit 316 and performs synchronous / asynchronous conversion of image data. A scanner interface (scanner I / F) 313 connects the scanner unit 314 and the controller unit 316 and performs synchronous / asynchronous conversion of image data.

  An image processing unit 317 performs correction, processing, and editing on input image data, and performs printer correction, resolution conversion, and the like on print output image data. In addition to this, the image processing unit 317 performs image data rotation and compression / decompression processing such as JPEG for multi-valued image data and JBIG, MMR, MH for binary image data.

  The scanner unit 314 illuminates an image on paper as a document and scans it with a CCD line sensor, thereby converting it into an electrical signal as raster image data. The original paper is set on the tray of the original feeder, and when the apparatus user gives a reading start instruction from the operation unit 308, the CPU 301 gives an instruction to the scanner unit 314, and the feeder feeds the original paper one by one to read the original image. Perform the action.

  The printer unit 312 is a part that converts raster image data into an image on paper. The printing method of the printer unit 312 includes an electrophotographic method using a photosensitive drum and a photosensitive belt, and an ink jet method in which an ink is ejected from a minute nozzle array to directly print an image on a sheet. Absent. The activation of the printing operation is started by an instruction from the CPU 301. The printer unit 312 has a plurality of paper feed stages so that different paper sizes or different paper orientations can be selected, and has a paper cassette corresponding thereto.

  The operation unit 308 has an LCD display unit, and a touch panel sheet is pasted on the LCD. The operation unit 308 displays an operation screen of the system. When a displayed key is pressed, the position information is displayed on the operation unit I / F 307. To the CPU 301 via The operation unit 308 includes, for example, a start key, a stop key, an ID key, a reset key, and the like as various operation keys.

  Here, the start key of the operation unit 308 is used when starting a document image reading operation. At the center of the start key, there are two color LEDs, green and red, which indicate whether or not the start key can be used. Further, the stop key of the operation unit 308 functions to stop the operation in operation. The ID key of the operation unit 308 is used when inputting the user ID of the user. The reset key is used when initializing settings from the operation unit. A card reader 319 (corresponding to an IC card reader 319 described later) reads information stored in an IC card (for example, FeliCa (registered trademark) of Sony) under the control of the CPU 301 and reads the information. The CPU 301 is notified of the received information via the external I / F 318.

  With the configuration as described above, the multi-function device 100 can transmit the image data read from the scanner unit 314 to a LAN (network) or print out print data received from the LAN (network) by the printer unit 312. it can.

  Further, the image data read from the scanner unit 314 can be fax-transmitted on the public line by the modem 306, and the image data received by FAX from the public line can be output by the printer unit 312.

Description of FIG. 4 FIG. 4 is a block diagram illustrating an example of a software configuration of the multifunction peripheral 100 illustrated in FIG. 1, and the same components as those in FIG. 3 are denoted by the same reference numerals.

  As shown in FIG. 4, an IC card reader 319 is communicably connected to the multi-function device 100.

  An IC card authentication application (program) 1011 and a card ID storage area 1012 are configured in a storage area such as the HDD 304 or the RAM 302 of the multifunction peripheral 100.

  That is, the IC card authentication application 1011 is realized by the CPU 301 of the multifunction peripheral 100 shown in FIG. 3 executing a program read from the ROM 303 or the HDD 304 to the RAM 302 or the like.

  That is, by the IC card authentication application 1011, the CPU 301 of the multifunction peripheral 100 detects the IC card via the IC card reader 319 and acquires the card ID stored in the IC card. Then, the CPU 301 of the MFP 100 stores the acquired card ID in the card ID storage area 1012.

  Here, the card ID is information that can identify a user, such as an IC card manufacturing number UID (unique number) or personal identification information that identifies an individual.

Description of FIG. 5 FIG. 5 is a block diagram showing an example of the software configuration of the IC card authentication server 200 shown in FIG.

  The storage areas of the external memory 211 and the RAM 203 of the IC card authentication server 200 include an IC card authentication service 501 (first authentication server), a SecurityAgent (security agent) service 502 (second authentication server), and an authentication table deletion service. 503, an authentication table 504 (first authentication table) (authentication information storage means) (FIG. 13), a log 506, and a setting file 505 are stored (configured).

  That is, the IC card authentication service 501, SecurityAgent service 502, and authentication table deletion service 503 are realized by the CPU 201 of the IC card authentication server 200 executing a program read from the ROM 202 or HDD 211 to the RAM 203.

  The IC card authentication service 501 performs an authentication service using a card ID using the authentication table 504. The IC card authentication service 501 registers the card ID, user name, and last login date in the authentication table 504, or searches for the card ID, user name, and last login date registered in the authentication table 504.

  When the SecurityAgent service 502 receives the user name and password from the IC card authentication application 1011 of the multifunction peripheral 100, the SecurityAgent service 502 sends the received user name and password to the directory service server 300 to inquire about the authentication result. When the security agent service 502 receives the authentication result from the directory service server 300, the security agent service 502 transmits the authentication result to the IC card authentication application 1011. That is, the SecurityAgent service 502 performs an authentication service using a user name.

  The authentication table deletion service 503 deletes the card ID, user name, and last login date in the authentication table 504 based on a user information holding period stored in a setting file 505 described later.

  The SecurityAgent service 502 may be realized on a different server device such as the IC card authentication service 501, the authentication table deletion service 503, the authentication table 504, the log 506, the setting file 505, and the like.

Description of FIG. 6 Hereinafter, processing in the IC card authentication application 1011 in the multifunction peripheral 100 will be described with reference to the flowcharts of FIGS. 6A and 6B.

  6A and 6B are flowcharts showing an example of a first control processing procedure in the print system of the present invention, and correspond to processing by the IC card authentication application 1011 in the multifunction peripheral 100 shown in FIG. That is, it is realized by the CPU 301 of the MFP 100 shown in FIG. 3 executing a program read from the ROM 303 or HDD 304 to the RAM 302 or the like. In the figure, S401 to S419, S421 to S426, and S2801 to 2807 indicate steps.

  When the multifunction device 100 is activated, the CPU 301 of the multifunction device 100 initializes the card ID storage area 1012 on the memory (such as the external memory 211 or the RAM 203) in step S401.

  In step S <b> 402, the CPU 301 of the multifunction peripheral 100 displays the login screen illustrated in FIG. 7 on the display unit of the operation unit 308. When the card ID storage area 1012 is initialized in S401, the CPU 301 of the multi-function peripheral 100 stores “NULL” in the card ID storage area.

  FIG. 7 is a schematic diagram illustrating an example of a login screen in the print system of the present invention.

  Next, in step S <b> 403, the CPU 301 of the multifunction peripheral 100 executes an IC card reading process. When the user holds the IC card over the IC card reader 319, the CPU 301 of the multifunction peripheral 100 detects the IC card and acquires a card ID.

  Next, in step S404, the CPU 301 of the multifunction peripheral 100 determines whether or not an IC card has been detected. If it is determined that no IC card has been detected, the process returns to step S403, and the IC card again. The reading process is executed.

  On the other hand, if the CPU 301 of the multifunction peripheral 100 determines in step S404 that an IC card has been detected, it acquires a card ID from the detected IC card in step S405. Here, the CPU 301 of the MFP 100 stores the acquired card ID in a storage medium such as the RAM 203.

  In step S <b> 406, the CPU 301 of the multifunction peripheral 100 determines whether the card ID acquired in step S <b> 405 is the same as the card ID held in the card ID storage area 1012. If it is determined that they are the same (S406: YES), the CPU 301 of the multifunction peripheral 100 returns the process to S403 again and executes the IC card reading process again.

  On the other hand, if it is determined in step S406 that the card ID acquired in S405 is not the same as the card ID held in the card ID storage area 1012 (S406: NO), the CPU 301 of the multi-function peripheral 100 performs step S406. The process proceeds to S407.

  In step S407, the CPU 301 of the multifunction peripheral 100 updates the card ID held in the card ID storage area 1012 to the card ID acquired in S405.

  Next, in step S <b> 408, the CPU 301 of the multifunction peripheral 100 determines whether another user is already logged in. If it is determined that the user is logged in (S408: YES), the CPU 301 of the multifunction peripheral 100 forcibly logs off the logged-in user in step S409, and the process proceeds to step S410.

  That is, when a card ID different from the card ID permitting the use of the multifunction device is input, the use permission for the card ID permitted to be used is forcibly released (logged off). Accordingly, it is possible to log in with an appropriate user and execute processing of the multifunction peripheral 100 by the correct user. Therefore, since the printing process is not executed by the user who has logged off, printing with improved security is possible. When the MFP 100 receives a print request of a user who has been specified and logged in by an authentication process described later, the MFP 100 acquires the print data of the user stored in a predetermined storage location of the print data storage server 500, and print processing Execute.

  On the other hand, if it is determined in step S408 that another user is not logged in, the CPU 301 of the multifunction peripheral 100 proceeds directly to step S410. That is, it is controlled so that the login process is not executed again in response to the login request for the card number of the same user acquired by the polling process. For this reason, optimal print processing is executed without erroneously deleting print data for the user by re-login processing.

  Next, in step S410, the CPU 301 of the multifunction peripheral 100 transmits the card ID acquired in S405 to the IC card authentication service 501 of the IC card authentication server 200 to request an authentication. When receiving the card ID, the IC card authentication service 501 searches whether or not the received card ID is registered (stored) in the authentication table. Then, the IC card authentication service 501 prohibits (disallows) login, if the card ID is registered, the authentication result including the user name as information indicating that login is permitted, and if the card ID is not registered. The authentication result including this information is transmitted to the multi-function device 100.

  In step S411, the CPU 301 of the multifunction peripheral 100 receives the authentication result from the IC card authentication service 501 of the IC card authentication server 200.

  In step S <b> 412, the CPU 301 of the multifunction peripheral 100 determines whether the authentication result received in step S <b> 411 is information indicating that login is permitted (including the user name). If it is determined that the information is that the login is permitted (authentication OK) (S412: YES), the CPU 301 of the multifunction peripheral 100 advances the process to step S413.

  In step S413, the CPU 301 of the multifunction device 100 executes login processing to the multifunction device 100 using the user name included in the authentication result received in S411. In step S414, the operation screen is displayed on the operation unit 308 on the operation screen ( (Not shown) is displayed.

  In step S415, the CPU 301 of the multifunction peripheral 100 executes print processing or the like for the user in accordance with an operation from the user on the operation screen, and returns the process to step S403.

  On the other hand, if it is determined in step S412 that the authentication result received in S411 is not information indicating that login is permitted (authentication NG) (S412: NO), the CPU 301 of the multifunction peripheral 100 advances the process to step S416. .

  In step S416, the CPU 301 of the multifunction peripheral 100 displays the authentication failure screen illustrated in FIG. 8 on the operation unit 308, and waits for an instruction from the user.

  FIG. 8 is a schematic diagram illustrating an example of an authentication failure screen in the print system of the present invention.

  In FIG. 8, reference numeral 1201 denotes a Yes button, which is touched when executing user registration. Reference numeral 1202 denotes a No button which is touched when user registration is not executed. The user can selectively touch the Yes button 1201 or the No button 1202.

  When the Yes button 1201 or the No button 1202 is touched, the CPU 301 of the multifunction peripheral 100 advances the process to step S417.

  In step S417, the CPU 301 of the multi-function device 100 determines whether or not user registration is performed (Yes button 1201 is touched). If it is determined that the user is not registered (No button 1202 is touched) (S417: NO), the CPU 301 of the multifunction peripheral 100 returns the process to step S402 and displays the login screen of FIG. 7 again. .

  On the other hand, if it is determined in step S417 that the user is registered (Yes button 1201 is touched) (S417: YES), the CPU 301 of the multi-function device 100 proceeds to step S2801, and reads the IC card. (Same as S403). When the user holds the IC card over the IC card reader 319, the CPU 301 of the multifunction peripheral 100 detects the IC card and reads and acquires a card ID (UID) from the IC card.

  Next, in step S2802, the CPU 301 of the multifunction peripheral 100 determines whether or not an IC card has been detected. If it is determined that an IC card has been detected (S2802: YES), the CPU 301 in FIG. A warning screen is displayed on the operation unit 308, and a confirmation instruction from the user is awaited.

  This is based on the assumption that the IC card remains in the IC card reader 319 in the IC card registration process, and the IC card reader 319 reads the IC card, which is a feature of the present embodiment, by holding it twice (see FIG. This is a process for establishing an operation of S2804 to S2807 described later.

  FIG. 20 is a schematic diagram showing an example of a warning screen in the printing system of the present invention.

  In FIG. 20, reference numeral 3101 denotes an OK button. When the OK button 3101 is touched, the process returns to step S416, and the authentication failure screen of FIG. 8 is displayed again.

  Returning to the flowchart of FIG.

  On the other hand, if the CPU 301 of the multifunction peripheral 100 does not detect the IC card in step S2802 (S2802: NO), the registration screen shown in FIG. 9 is displayed on the operation unit 308 in step S418.

  FIG. 9 is a schematic diagram showing an example of a user registration screen in the print system of the present invention.

  In FIG. 9, reference numeral 1301 denotes a user name input field, and 1302 denotes a password input field. The user name and password managed by the directory service server 300 are displayed on a keyboard screen (not shown) displayed on the operation unit 308 or on the operation unit 308. Input (key input) from a hard key or the like (not shown).

  Reference numeral 1304 denotes a registration button, which is instructed to perform user registration. Reference numeral 1303 denotes a button for the top screen, which performs a touch instruction when returning to the login screen shown in FIG. 7 without executing user registration.

  Returning to the flowchart of FIG.

When the CPU 301 of the multifunction device 100 detects that the button 1303 or the registration button 1304 is touched to the top screen on the registration screen in FIG. 9 , the process proceeds to step S2804.

  In step S2804, the CPU 301 of the multifunction peripheral 100 executes an IC card reading process. When the user holds the IC card over the IC card reader 319, the CPU 301 of the multifunction peripheral 100 detects the IC card and acquires a card ID.

  Next, in step S2805, the CPU 301 of the multifunction peripheral 100 determines whether or not an IC card has been detected. If it is determined that no IC card has been detected (S2805: NO), the process returns to step S2804. .

  On the other hand, if it is determined in step S2805 that the CPU 301 of the multifunction peripheral 100 has detected an IC card (S2805: YES), in step 2806, a card ID is acquired from the detected IC card. Here, the CPU 301 of the MFP 100 stores the acquired card ID in a storage medium such as the RAM 203.

  In step S <b> 2807, the CPU 301 of the multifunction peripheral 100 determines whether the card ID acquired in step S <b> 2806 is the same as the card ID held in the card ID storage area 1012. If it is determined that they are not the same (S2807: NO), the CPU 301 of the multifunction peripheral 100 shifts the processing to step S407.

  That is, while a user who has failed in authentication in the process of S412 has left the multifunction device 100 in the state where the registration screen of FIG. 9 is displayed in S419, another user has removed the multifunction device 100. It is determined that the IC card is held over the IC card reader 319 for use, and the registration to the authentication table of the IC card is stopped, and control is performed so as to shift to the authentication process of the other user. By performing such control, the user who has failed authentication with the IC card uses the multifunction device 100 while leaving the multifunction device 100 while the registration screen of FIG. 9 is displayed. Therefore, another user mistakenly inputs authentication information (user name, password) from the registration screen (FIG. 9), and the authentication information of the other user corresponding to the IC card is entered in the authentication table (FIG. 13). Occurrence of a situation such as registration can be prevented.

  On the other hand, if it is determined in step S2807 that the card ID acquired in S2806 is the same as the card ID held in the card ID storage area 1012 (S2807: YES), the CPU 301 of the multifunction peripheral 100 determines whether The process proceeds to S419. In addition, you may comprise so that said S2804-S2807 may be performed when it is NO by S419 mentioned later.

  Next, in step S419, the CPU 301 of the multifunction peripheral 100 determines whether or not the button 1303 is touched to the top screen. If it is determined that the button 1303 is touched to the top screen (S419: YES), the CPU 301 of the multifunction peripheral 100 returns the process to step S402 and displays the login screen of FIG. 7 again.

  On the other hand, if it is determined in step S419 that the button 1303 is not touched on the top screen and the registration button 1304 is touched (S419: NO), the CPU 301 of the multifunction peripheral 100 advances the process to step S421.

  In step S <b> 421, the CPU 301 of the multifunction peripheral 100 transmits the user name and password input in the user name input field 1301 and password input field 1302 to the SecurityAgent service 502. Here, the CPU 301 of the multifunction peripheral 100 stores the input user name and password in a storage medium such as the RAM 302.

  In step S422, the CPU 301 of the MFP 100 receives the user authentication result from the SecurityAgent service 502. In step S423, the CPU 301 determines whether the user authentication result is authentication OK.

  If it is determined in step S423 that the user authentication result is authentication OK (S423: YES), the CPU 301 of the multifunction peripheral 100 advances the processing to step S425.

  In step S425, the CPU 301 of the multifunction peripheral 100 transmits the card ID input by the user (obtained in step S405) and the user name (user name input in the user name input field 1301) to the IC card authentication service 501. In step S426, the CPU 301 of the multifunction peripheral 100 receives registration OK from the IC card authentication service 501, and displays a registration completion screen shown in FIG.

  In step S425, the CPU 301 of the multifunction peripheral 100 acquires the card ID and user name acquired in step S405 from the storage medium such as the RAM 203, and transmits the card ID and user name to the IC card authentication service 501 (request for registration). ).

  FIG. 10 is a schematic diagram showing an example of a registration completion screen in the printing system of the present invention.

  When the OK button 1401 is touched on the registration completion screen in FIG. 10, the CPU 301 of the multifunction peripheral 100 returns the process to step S <b> 402 and displays the login screen in FIG. 7 again.

  On the other hand, when it is determined in step S423 that the user authentication result is authentication NG (S423: NO), the CPU 301 of the multifunction peripheral 100 displays the registration failure screen shown in FIG. 11 in step S424.

  FIG. 11 is a schematic diagram showing an example of a registration failure screen in the print system of the present invention.

  When the OK button 1501 is touched on the registration failure screen in FIG. 11, the CPU 301 of the multifunction peripheral 100 returns the process to step S <b> 402 and displays the login screen in FIG. 7 again.

Description of FIG. 12 Hereinafter, processing in the IC card authentication service 501 in the IC card authentication server 200 will be described with reference to the flowchart of FIG.

  FIG. 12 is a flowchart showing an example of the second control processing procedure in the print system of the present invention, and corresponds to the processing by the IC card authentication service 501 in the IC card authentication server 200 shown in FIG. That is, it is realized by the CPU 201 of the IC card authentication server 200 executing a program read from the ROM 202 or HDD 211 to the RAM 203. In the figure, S601 to S610 indicate each step.

  First, when the CPU 201 of the IC card authentication server 200 receives the card ID (, user name) from the IC card authentication application 1011 of the multifunction peripheral 100 (S601), the process proceeds to step S602.

  In step S602, the CPU 201 of the IC card authentication server 200 determines whether or not user name information is included in the received information. When it is determined that the user name information is not included in the received information (S602: NO), the CPU 201 of the IC card authentication server 200 transmits the information transmitted in S410 of FIG. And the process proceeds to step S603.

  In step S603, the CPU 201 of the IC card authentication server 200 searches the authentication table 504 shown in FIG. 13 using the card ID received in S601 as a key.

  FIG. 13 is a diagram showing an example of the configuration of the authentication table 504 shown in FIG.

  As shown in FIG. 13, the authentication table 504 stores card ID, user name, and last login date information. Each record (card ID, user name, last login date) indicates information of each user.

  Returning to the flowchart of FIG.

  In step S604, the CPU 201 of the IC card authentication server 200 determines whether the card ID received in step S601 has been registered in the authentication table 504 based on the search result in step S603. If it is determined that it has been registered (S604: YES), the CPU 201 of the IC card authentication server 200 advances the process to step S605.

  In step S605, the CPU 201 of the IC card authentication server 200 updates the date (last login date) in the authentication table 504 to the current date, and the process proceeds to step S606. As described above, when the card ID received in S601 has already been registered in the authentication table 504, the last login date corresponding to the card ID is updated to the current time in the authentication table 504. Store (last login time storage means).

  In step S <b> 606, the CPU 201 of the IC card authentication server 200 transmits an authentication result indicating authentication OK (information indicating that login is permitted (including the user name)) to the IC card authentication application 1011 of the multifunction peripheral 100. Then, the process of this flowchart ends.

  On the other hand, if it is determined in step S604 that the card ID received in S601 has not been registered in the authentication table 504 (S604: NO), the process proceeds to step S607.

  In step S <b> 607, the CPU 201 of the IC card authentication server 200 transmits an authentication result indicating authentication NG to the IC card authentication application 1011 of the multifunction peripheral 100, and the process of this flowchart ends. Note that the authentication result transmitted in S606 and S607 is received in S411 of FIG.

  On the other hand, if it is determined in step S602 that the user name information is included in the information received in S601 (S602: YES), this information is the information transmitted in S425 of FIG. Recognize and proceed to step S608.

  In step S608, the CPU 201 of the IC card authentication server 200 writes the card ID, user name, and current date received in S601 in the authentication table 504. That is, the CPU 201 of the IC card authentication server 200 registers (stores) the card ID, the user name, and the current date and time acquired in S601 in the authentication table 504 in association with each other.

  Next, in step S609, the CPU 201 of the IC card authentication server 200 writes the current date and time (registration time), the card ID received in S601, and the user name in the log 506 (FIG. 14).

  FIG. 14 is a diagram illustrating an example of the configuration of the log 506 illustrated in FIG.

  As illustrated in FIG. 14, the log 506 stores registration date / time, card ID, and user name information.

  Returning to the flowchart of FIG.

  Next, in step S610, the CPU 201 of the IC card authentication server 200 transmits a registration result indicating registration OK to the IC card authentication application 1011 of the multifunction peripheral 100, and ends the processing of this flowchart. Note that the registration result transmitted in S610 is received in S426 of FIG.

Description of FIG. 15 The processing in the SecurityAgent service 502 in the IC card authentication server 200 will be described below with reference to the flowchart of FIG.

  FIG. 15 is a flowchart showing an example of a third control processing procedure in the print system of the present invention, and corresponds to the processing by the SecurityAgent service 502 in the IC card authentication server 200 shown in FIG. That is, it is realized by the CPU 201 of the IC card authentication server 200 executing a program read from the ROM 202 or HDD 211 to the RAM 203. In the figure, S700 to S703 indicate each step.

  First, when the CPU 201 of the IC card authentication server 200 receives a user name and password from the IC card authentication application 1011 of the multifunction peripheral 100 (S700), the process proceeds to step S701. Note that the user name and password received in S700 are those transmitted in S421 of FIG.

  In step S701, the CPU 201 of the IC card authentication server 200 transmits the user name and password received in S700 to the directory service server 300 to inquire about the authentication result.

  Then, when receiving the authentication result from the directory service server 300, the CPU 201 of the IC card authentication server 200 determines in step S702 whether or not the authentication result in the directory service server 300 is authentication OK.

  If it is determined in step S702 that the authentication result in the directory service server 300 is authentication OK (S702: YES), the CPU 201 of the IC card authentication server 200 advances the process to step S703.

  In step S703, the CPU 201 of the IC card authentication server 200 transmits an authentication OK as an authentication result to the IC card authentication application 1011 and ends the process of this flowchart.

  On the other hand, if it is determined in step S702 that the authentication result in the directory service server 300 is authentication NG (S702: NO), the CPU 201 of the IC card authentication server 200 advances the processing to step S704.

  In step S704, the CPU 201 of the IC card authentication server 200 transmits authentication NG as an authentication result to the IC card authentication application 1011 and ends the processing of this flowchart.

  Note that the authentication result transmitted in S703 and S704 is received in S422 in FIG.

  As described above, in the printing system of the present invention, authentication information can be registered in the IC card authentication server 200, and the printing apparatus can be used.

Description of FIG. 16 The processing in the authentication table deletion service 503 in the IC card authentication server 200 will be described below with reference to the flowchart of FIG.

  FIG. 16 is a flowchart showing an example of a fourth control processing procedure in the printing system of the present invention. The first authentication table deletion by the processing of the authentication table deletion service 503 in the IC card authentication server 200 shown in FIG. Corresponds to processing. That is, it is realized by the CPU 201 of the IC card authentication server 200 executing a program read from the ROM 202 or HDD 211 to the RAM 203. In the figure, S801 to S805 indicate steps.

  When the first deletion process is started, the CPU 201 of the IC card authentication server 200 determines the user information holding period (“7” in the example shown in FIG. 17) held in the setting file 505 shown in FIG. 17 in step S801. Read.

  FIG. 17 is a diagram showing an example of the configuration of the setting file 505 shown in FIG.

  As shown in FIG. 17, the setting file 505 has a user information holding period as an item, and stores the number of days as a value (period is set).

  Hereinafter, the description returns to the flowchart of FIG.

  Next, in step S802, the CPU 201 of the IC card authentication server 200 reads one row (one record) of the authentication table 504 (FIG. 13), and in step S803, determines whether the read row is an EOF. To do.

  If it is determined in step S803 that the line read in S802 is not EOF (S803: NO), the CPU 201 of the IC card authentication server 200 advances the process to step S804.

  In step S804, the CPU 201 of the IC card authentication server 200 determines “today (card ID, user name, last login date)” based on the user information holding period read in S801 and one row of the authentication table 504 read in S802 (card ID, user name, last login date). It is determined whether or not “current) date−last login date> = user information holding period”.

  If it is determined in step S804 that “today (current) date−last login date> = user information holding period” is satisfied (S804: YES), the CPU 201 of the IC card authentication server 200 proceeds to step S805. Proceed with the process.

  In step S805, the CPU 201 of the IC card authentication server 200 deletes one line (one line read in S802) from the authentication table 504, and returns the process to step S802.

  On the other hand, if it is determined in step S804 that “today (current) date−last login date> = user information holding period” is not satisfied (S804: NO), the CPU 201 of the IC card authentication server 200 directly performs the step. The process returns to S802.

  If it is determined in step S803 that the line read in S802 is EOF (S803: YES), the CPU 201 of the IC card authentication server 200 ends the processing of this flowchart.

  Through the above processing, the user information (card ID, user name, user name, etc.) of the user who has not logged in to the multifunction device 100 within the user information holding period (“7” day in the example shown in FIG. 17) held by the setting file 505 The last login date) is deleted from the authentication table 504 by the authentication table deletion service 503. Therefore, it is not necessary to delete the user information manually by the administrator, and the administrator's trouble can be reduced.

  The activation of the authentication table deletion service 503 may be automatically performed at a date and time specified in advance (for example, at night) (night batch).

  As described above, the printing system of the present invention can delete the card ID for which a predetermined period has elapsed since the last login from the authentication table 504.

  Note that a notification destination such as an email address is registered for each user name (notification destination registration), and the authentication table deletion service 503 monitors the last login date and time (for example, one day before (by the administrator) It may be configured to have a function of notifying that the user information is deleted from the authentication table 504 to the mail address corresponding to the user name associated with the card ID. As described above, the user is notified that the user information is to be deleted from the authentication table after the predetermined period to the notification destination associated with the card ID or the user name. Can be known in advance.

Description of FIG. 18 Hereinafter, the second authentication table deletion processing by the authentication table deletion service 503 of the IC card authentication server 200 shown in FIG. 5 will be described with reference to the flowchart of FIG.

  FIG. 18 is a flowchart showing an example of the fifth control processing procedure in the printing system of the present invention, corresponding to the second authentication table deletion processing by the authentication table deletion service 503 of the IC card authentication server 200 shown in FIG. To do. In the figure, the processing of S1601, S1602, S1606, and S1607 is realized by the CPU 201 of the IC card authentication server 200 executing a program read from the ROM 202 or HDD 211 to the RAM 203. Further, the processing of S1603 to S1605 is realized by the CPU 201 of the directory service server 300 executing a program read from the ROM 202 or HDD 211 to the RAM 203.

  When the second deletion process is started, the CPU 201 of the IC card authentication server 200 acquires all user names from the authentication table 504 in step S1601.

  Next, in step S1602, the CPU 201 of the IC card authentication server 200 stores (registers) each user name acquired in S1601 in the authentication table 1900 (second authentication table) (FIG. 19) managed by the directory service server 300. ) Is transmitted to the directory service server 300 (including all user names acquired in step S1601).

  FIG. 19 is a diagram showing a part of an authentication table 1900 (second authentication table) stored in the HD 211 of the directory service server 300.

  As shown in FIG. 19, the authentication table 1900 managed by the directory service server 300 stores user names and passwords.

  Returning to the flowchart of FIG.

  In step S1603, the CPU 201 of the directory service server 300 receives information indicating that it is stored (registered) in the authentication table 1900 (including all user names acquired in S1601) (S1603: YES). Wait until. When receiving information indicating whether or not the user name is stored (registered) in the authentication table 1900 (S1603: YES), the CPU 201 of the directory service server 300 advances the process to step S1604.

  In step S1604, the CPU 201 of the directory service server 300 executes a search process of the authentication table 1900 for all user names included in the information received in S1603, and lists user names that are not stored (registered) in the authentication table 1900. Get (search results).

  In step S <b> 1605, the CPU 201 of the directory service server 300 transmits a list of user names (search results) not stored (registered) in the authentication table 1900 to the IC card authentication server 200.

  When the CPU 201 of the IC card authentication server 200 receives a list (search result) of user names not stored (registered) in the authentication table 1900 managed by the directory service server 300 from the directory service server 300 (step S1606), step S1607. Proceed with the process.

  In step S1607, the CPU 201 of the IC card authentication server 200 searches the authentication table 504 based on the user name included in the list (search result) received in S1606, and specifies the card ID corresponding to the user name. Further, the CPU 201 of the IC card authentication server 200 deletes the user name and card ID from the authentication table 504, and ends the processing of this flowchart.

  Conventionally, when a user retires or the like, the administrator of the directory service server 300 displays the user authentication information registered in the authentication table 1900 (second authentication table) (FIG. 19) managed by the directory service server 300. In addition, the authentication information of the retired user must also be deleted from the authentication table 504 (first authentication table) (FIG. 13) of the IC card authentication server 200.

  Therefore, in the present embodiment, as described above, user authentication information that does not exist in the authentication table 1900 (second authentication table) (FIG. 19) managed by the directory service server 300 is used as the authentication table of the IC card authentication server 200. By deleting from the authentication table 504 (first authentication table) (FIG. 13), it is possible to reduce complicated user deletion operations by the administrator.

  Further, the authentication information (first authentication information) such as the UID of the retired user's IC card is registered with the user authentication information (second authentication information) registered in the authentication table 1900 (FIG. 19) of the directory service server. Can be disabled according to the deletion of

  The authentication table deletion service 503 is configured to periodically execute the second authentication table deletion process.

  That is, the authentication table deletion service 503 periodically inquires of the directory service server 300 whether or not the user name registered in the authentication table 504 exists, and the user name that does not exist in the directory service server 300 is determined by the authentication table 504. It has the structure deleted from. Thereby, complicated operations such as registration or deletion of authentication information (card ID of IC card, user name) such as UID performed by the administrator can be reduced.

  Further, it is possible to prevent an IC card (authentication information such as a UID) owned by the user from being erroneously registered in the authentication table by another user. Therefore, it is possible to prevent the user from printing the print data of a person other than the user, which contributes to improvement of security and reduction of authentication table maintenance work by the authentication server administrator.

[Second Embodiment]
In the second embodiment, the system for preventing the IC card (authentication information such as UID) owned by the user from being mistakenly registered in the authentication table by another user, as shown in FIGS. 6A and 6B of the first embodiment. Another embodiment will be described.

  In the present embodiment, it corresponds to the process of S2807 in FIG. 6 (that is, the process of determining whether the IC card that has failed authentication in S412 is the same as the IC card that has been read again when the registration screen is displayed). This processing is realized on the IC card authentication service 501 side.

  In this embodiment, FIG. 6 (FIGS. 6A and 6B) described in the first embodiment is replaced with FIG. 21 (FIGS. 21A and 21B), and FIG. 12 is replaced with FIG.

  In addition, when the process of each step shown in FIG.21 and FIG.22 and the process of each step shown in FIG. 6 are the same, the same step number is attached | subjected and description is abbreviate | omitted.

  First, processing in the IC card authentication application 1011 in the multifunction peripheral 100 will be described with reference to FIG.

  21A and 21B are flowcharts showing an example of a sixth control processing procedure in the print system of the present invention, and the IC card authentication application 1011 in the multifunction peripheral 100 shown in FIG. 4 in the second embodiment of the present invention. It corresponds to the processing by. That is, it is realized by the CPU 301 of the MFP 100 shown in FIG. 3 executing a program read from the ROM 303 or HDD 304 to the RAM 302 or the like. In the figure, S401 to S419, S421 to S426, S2801 to 2806, and S2901 to S2902 indicate steps. Furthermore, the same step number is attached | subjected to the step same as FIG.

  Steps S401 to S417, S2801 to S2803, S418, and S2804 to S2806 are the same as those in FIG. Note that after executing the card ID acquisition process in step 2806, the CPU 301 of the multifunction peripheral 100 advances the process to step S419, which is different from FIG.

  Steps S419 to S425 are the same as those in FIG. Note that after executing the card ID acquisition process in step 2806, the CPU 301 of the multifunction peripheral 100 advances the process to step S419, which is different from FIG.

In step S425, after transmitting the card ID and the user name input by the user (the user name input in the user name input field 1301) to the IC card authentication service 501, the CPU 301 of the multi-function peripheral 100 performs steps. The point that the process proceeds to S2901 is different from FIG.

  In step S 2901, the CPU 301 of the multifunction peripheral 100 receives the registration result from the IC card authentication service 501 of the IC card authentication server 200.

  Next, in step S2902, the CPU 301 of the multifunction peripheral 100 determines whether or not the registration result received in S2901 is registration completion (registration OK). If it is determined that registration is complete (registration OK) (S2902: YES), the CPU 301 of the multifunction peripheral 100 advances the process to step S426.

  On the other hand, if it is determined in step S2902 that the registration result received in S2901 is incomplete registration (registration NG) (S2902: NO), the CPU 301 of the multifunction peripheral 100 moves the process to step S407.

  Note that description of step S426 is omitted because it is the same as FIG.

  Hereinafter, processing in the IC card authentication service 501 in the IC card authentication server 200 will be described with reference to the flowchart of FIG.

FIG. 22 is a flowchart showing an example of a seventh control processing procedure in the print system of the present invention. In the IC card authentication service 501 in the IC card authentication server 200 shown in FIG. 5 in the second embodiment of the present invention. Processing will be described. That is, it is realized by the CPU 201 of the IC card authentication server 200 executing a program read from the ROM 202 or HDD 211 to the RAM 203. In the figure, S601 to S610 and S3001 to S3003 indicate steps. Furthermore, the same step number is attached | subjected to the step same as FIG.

  First, when the CPU 201 of the IC card authentication server 200 receives the card ID (, user name) from the IC card authentication application 1011 of the multifunction peripheral 100 (S601), the process proceeds to step S602.

  In step S602, the CPU 201 of the IC card authentication server 200 determines whether or not user name information is included in the received information. When it is determined that the user name information is not included in the received information (S602: NO), the CPU 201 of the IC card authentication server 200 transmits the information transmitted in S410 of FIG. (Search request), the process proceeds to step S3001.

  In step S3001, the CPU 201 of the IC card authentication server 200 updates the card ID held in the RAM 203 to the card ID received in S601, and the process proceeds to step S603. The description of steps S603 to S607 is the same as in FIG.

  In addition, you may comprise so that the process of said step S3001 may be performed following step S607.

  On the other hand, if it is determined in step S602 that the user name information is included in the information received in S601 (S602: YES), the CPU 201 of the IC card authentication server 200 displays the information in FIG. It recognizes that it is the information transmitted by S425, and advances a process to step S3002.

  In step S3002, the CPU 201 of the IC card authentication server 200 determines whether or not the card ID received in S601 is the same as the card ID held in the RAM 203. If it is determined that they are the same (S3002: YES), the CPU 201 of the IC card authentication server 200 advances the process to S608. Note that description of steps S608 to S610 is omitted because it is the same as FIG. Note that the registration result (registration OK) transmitted in S610 is received in S2901 in FIG.

  On the other hand, if the CPU 201 of the IC card authentication server 200 determines in step S3002 that the card ID received in S601 is not the same as the card ID held in the RAM 203 (S3002: NO), the IC card The CPU 201 of the authentication server 200 advances the process to S3003.

  Next, in step S3003, the CPU 201 of the IC card authentication server 200 transmits a registration result indicating registration NG to the IC card authentication application 1011 of the multi-function device 100, and the process of this flowchart ends. Note that the registration result (registration NG) transmitted in S3003 is received in S2901 in FIG.

  With the above processing, the purpose of preventing the IC card (authentication information such as UID) owned by the user from being erroneously registered in the authentication table by another user can be realized.

In the above S3001, when storing the card ID in the memory, information for specifying the MFP that has transmitted the card ID (for example, IP address of the MFP) can you save each of the S3002 card At the time of ID comparison, the card ID received in S601 is compared with the card ID transmitted from the same multi-function peripheral as the card ID and stored in the memory.

  With this configuration, even when a card ID is received from another multifunction device while the same card ID is received twice from the same multifunction device, 2 transmitted from the same multifunction device is also received. Two card IDs (first and second times) can be reliably compared.

Contact name invention, authentication information and, not the directory service server 300 is limited to the relation between the authentication information management, authentication information for each authentication server by multiple authentication servers that IC card authentication server 200 manages Any system can be applied as long as it manages the system.

The authentication information server to apply the present invention to manage, not limited to the ID data (serial number, etc.) and the user name of the IC card, the server that manages the other authentication information such as biometrics information However, the present invention is applicable. In other words, the present invention is applicable to any system having a server that manages (registers) any authentication information as long as the system includes a plurality of servers that manage (register) authentication information.

  Further, another information processing apparatus may be used instead of the multifunction peripheral 100.

  In this embodiment, an IC card (UID) is described as an example of authentication information. However, the present invention is not limited to this. For example, fingerprint information may be used as authentication information.

  It should be noted that the configuration and contents of the various data described above are not limited to this, and it goes without saying that the various data and configurations are configured according to the application and purpose.

  Although one embodiment has been described above, the present invention can take an embodiment as, for example, a system, apparatus, method, program, or recording medium, and specifically includes a plurality of devices. The present invention may be applied to a system including a single device.

  As described above, according to each embodiment of the present invention, it is possible to prevent an IC card to be registered in the authentication server for printing from being registered as an IC card of another user.

  Hereinafter, with reference to the memory map shown in FIG. 23, a computer-readable record in which a program for causing a computer (multifunction device 100, IC card authentication server 200, directory service server 300) to function as a print system according to the present invention is recorded. The configuration of the medium will be described.

  FIG. 23 is a memory map of a computer-readable recording medium (storage medium) on which a program for causing a computer (multifunction device 100, IC card authentication server 200, directory service server 300) to function as the print system according to the present invention is recorded. FIG.

  Although not specifically shown, information for managing a program group stored in the recording medium, for example, version information, creator, etc. is also stored, and information depending on the OS on the program reading side, for example, a program is identified and displayed. Icons may also be stored.

  Further, data depending on various programs is also managed in the directory. In addition, when a program or data to be installed is compressed, a program to be decompressed may be stored.

  The functions shown in FIGS. 6A, 6B, 12, 15, 16, 18, 18, 29A, 29B, and 30 in this embodiment are installed by a program (authentication program, information processing program, etc.) installed from the outside. May be performed by a host computer. In this case, the present invention is applied even when an information group including a program is supplied to the output device from a recording medium such as a CD-ROM, a flash memory, or an FD, or from an external recording medium via a network. Is.

  As described above, a recording medium in which a program code of software for realizing the functions of the above-described embodiments is recorded is supplied to the system or apparatus, and the computer (or CPU or MPU) of the system or apparatus is stored in the recording medium. It goes without saying that the object of the present invention can also be achieved by reading and executing the program code.

  In this case, the program code itself read from the recording medium realizes the novel function of the present invention, and the recording medium storing the program code constitutes the present invention.

  As a recording medium for supplying the program code, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, DVD-ROM, magnetic tape, nonvolatile memory card, ROM, EEPROM, A silicon disk or the like can be used.

  Further, by executing the program code read by the computer, not only the functions of the above-described embodiments are realized, but also an OS (operating system) or the like running on the computer based on the instruction of the program code. It goes without saying that a case where the function of the above-described embodiment is realized by performing part or all of the actual processing and the processing is included.

  Furthermore, after the program code read from the recording medium is written in a memory provided in a function expansion board inserted in the computer or a function expansion unit connected to the computer, the function expansion is performed based on the instruction of the program code. It goes without saying that the case where the CPU or the like provided in the board or the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  Further, the present invention may be applied to a system composed of a plurality of devices or an apparatus composed of a single device. Needless to say, the present invention can be applied to a case where the present invention is achieved by supplying a program to a system or apparatus. In this case, by reading a recording medium storing a program represented by software for achieving the present invention into the system or apparatus, the system or apparatus can enjoy the effects of the present invention.

  Furthermore, by downloading and reading out a program represented by software for achieving the present invention from a server, database, etc. on a network using a communication program, the system or apparatus can enjoy the effects of the present invention. It becomes.

  In addition, all the structures which combined each embodiment mentioned above and its modification are also included in this invention.

1 is a system configuration diagram illustrating an example of a configuration of a printing system to which a printing apparatus of the present invention can be applied. FIG. 2 is a block diagram showing a hardware configuration of an information processing apparatus applicable to the IC card authentication server 200, directory service server 300, computer 400, and print data storage server 500 shown in FIG. FIG. 2 is a block diagram illustrating an example of a hardware configuration of a controller unit of the multifunction peripheral 100 illustrated in FIG. 1. FIG. 2 is a block diagram illustrating an example of a software configuration of the multifunction peripheral 100 illustrated in FIG. 1. It is a block diagram which shows an example of the software structure of the IC card authentication server 200 shown in FIG. 6 is a flowchart illustrating an example of a first control processing procedure in the print system of the present invention. 6 is a flowchart illustrating an example of a first control processing procedure in the print system of the present invention. It is a schematic diagram which shows an example of the login screen in the printing system of this invention. It is a schematic diagram which shows an example of the authentication failure screen in the printing system of this invention. It is a schematic diagram which shows an example of the user registration screen in the printing system of this invention. It is a schematic diagram which shows an example of the registration completion screen in the printing system of this invention. It is a schematic diagram which shows an example of the registration failure screen in the print system of this invention. 6 is a flowchart illustrating an example of a second control processing procedure in the printing system of the present invention. FIG. 6 is a diagram illustrating an example of a configuration of an authentication table 504 illustrated in FIG. 5. FIG. 6 is a diagram illustrating an example of a configuration of a log 506 illustrated in FIG. 5. 10 is a flowchart illustrating an example of a third control processing procedure in the print system of the present invention. 10 is a flowchart illustrating an example of a fourth control processing procedure in the print system of the present invention. FIG. 6 is a diagram illustrating an example of a configuration of a setting file 505 illustrated in FIG. 5. 10 is a flowchart illustrating an example of a fifth control processing procedure in the print system of the present invention. It is a figure which shows a part of authentication table 1900 (2nd authentication table) memorize | stored in HD211 of the directory service server 300. FIG. It is a schematic diagram which shows an example of the warning screen in the printing system of this invention. It is a flowchart which shows an example of the 6th control processing procedure in the printing system of this invention. It is a flowchart which shows an example of the 6th control processing procedure in the printing system of this invention. 12 is a flowchart illustrating an example of a seventh control processing procedure in the printing system of the present invention. 2 is a diagram illustrating a memory map of a computer-readable recording medium (storage medium) on which a program for causing a computer (multifunction device 100, IC card authentication server 200, directory service server 300) to function as a printing system according to the present invention is recorded. It is.

Explanation of symbols

100 MFP 200 IC Card Authentication Server 300 Directory Service Server 400 Computer 500 Print Data Storage Server 600 Network

Claims (26)

The first authentication server performing authentication processing of the first authentication information, and the second authentication server performing authentication processing of the second authentication information, an information processing apparatus in an information processing system including an information processing apparatus ,
First receiving means for receiving input of the first authentication information;
First authentication requesting means for transmitting the first authentication information received by the first receiving means to the first authentication server and making an authentication request;
First authentication result acquisition means for acquiring an authentication result from the first authentication server in response to an authentication request by the first authentication request means;
Second acquisition means for receiving an input of second authentication information after acquiring an authentication result indicating that the authentication has not been performed by the first authentication result acquisition means;
Third accepting means for accepting input of the first authentication information after accepting the second authentication information by the second accepting means;
An authentication determination process is performed to determine whether the first authentication information received by the first receiving unit and the first authentication information received by the third receiving unit are the same authentication information. Authentication determination means;
The second authentication information received in the previous SL second reception means, to perform the authentication process of the second authentication information by the second authentication server, a second authentication request for transmission to the authentication request Means,
In response to an authentication request by the second authentication request means, second authentication result acquisition means for acquiring an authentication result by the second authentication server;
The authentication determination means determines that the first authentication information received by the first reception means and the first authentication information received by the third reception means are the same authentication information, and The first authentication information determined to be the same authentication information on the condition that the authentication result by the second authentication server acquired by the second authentication result acquisition unit is authenticated. Registration request means for making a registration request to the first authentication server;
An information processing apparatus comprising:   Before receiving the input of the second authentication information by the second receiving means, further comprising warning means for giving a warning when the input of the first authentication information is received by the third receiving means. The information processing apparatus according to claim 1.   The first authentication requesting unit is further configured by the authentication determination unit, the first authentication information received by the first receiving unit, and the first authentication information received by the third receiving unit. The authentication request is transmitted by transmitting the first authentication information received by the third receiving means to the first authentication server when it is determined that the authentication information is not the same authentication information. The information processing apparatus according to 1 or 2. To indicate that the acquired authentication result by said first authentication result obtaining means is authenticated, either of claims 1 to 3, further comprising a permitting means for permitting use of the information processing apparatus 1 The information processing apparatus according to item. Claims before Symbol authentication result obtained in the second authentication result obtaining means to indicate that that has not been authenticated, characterized by further comprising a prohibition unit that controls so as not to allow the use of the information processing apparatus Item 5. The information processing apparatus according to any one of Items 1 to 4 . An input determination unit for determining whether or not the first authentication information is input by the third reception unit;
The authentication determination unit executes the authentication determination process when the input determination unit determines that the first authentication information is input by the third reception unit. 6. The information processing apparatus according to any one of 5 above. An information processing apparatus capable of communicating with a first authentication server that performs authentication processing of first authentication information,
First receiving means for receiving input of the first authentication information;
First authentication requesting means for transmitting the first authentication information received by the first receiving means to the first authentication server and making an authentication request;
First authentication result acquisition means for acquiring an authentication result from the first authentication server in response to an authentication request by the first authentication request means;
Second acquisition means for receiving an input of second authentication information after acquiring an authentication result indicating that the authentication has not been performed by the first authentication result acquisition means;
Second authentication requesting means for transmitting the second authentication information received by the second receiving means and performing an authentication request so as to perform authentication processing of the second authentication information by a second authentication server; ,
Third accepting means for accepting input of the first authentication information after accepting the second authentication information by the second accepting means;
A registration request unit that performs a registration request of the first authentication information said first authentication information by sending the first authentication server received by the third reception means,
An information processing apparatus comprising: Before receiving the input of the second authentication information by the second receiving means, further comprising warning means for giving a warning when the input of the first authentication information is received by the third receiving means. The information processing apparatus according to claim 7 . In response to a registration request by the registration request means, the apparatus further comprises registration result acquisition means for acquiring a registration result from the first authentication server,
The first authentication requesting unit further displays the first authentication information received by the third receiving unit when the registration result acquired by the registration result acquiring unit indicates that the registration result has not been registered. the information processing apparatus according to claim 7 or 8 in the transmission of the authentication server and performs the authentication request. To indicate that the acquired authentication result by said first authentication result obtaining means is authenticated, any one of claims 7 to 9, characterized by further comprising permission means for permitting the use of the information processing apparatus 1 The information processing apparatus according to item. Before SL in response to the authentication request by the second authentication request means further includes a second authentication result obtaining means for obtaining an authentication result by the second authentication server,
The registration request unit is configured to receive the first received by the third receiving unit on the condition that the authentication result by the second authentication server acquired by the second authentication result acquiring unit is authenticated. the information processing apparatus in any one of claims 7 to 1 0 and performing a registration request to the first authentication server of the authentication information. Claims before Symbol authentication result obtained in the second authentication result obtaining means to indicate that that has not been authenticated, characterized by further comprising a prohibition unit that controls so as not to allow the use of the information processing apparatus Item 12. The information processing apparatus according to Item 11 . An authentication server capable of communicating with one or a plurality of information processing devices,
Storage means for storing authentication information;
Based on the authentication information stored in the storage means, it performs an authentication process of the received authentication information as an authentication request from the information processing apparatus, to send an authentication result of the processing person authentication to the information processing apparatus authenticate Means,
Result of the authentication processing by said authentication means, and holding means for holding the authentication information has not been authenticated,
Authentication determination means for determining whether the authentication information received as a registration request from the information processing apparatus and the authentication information held by the holding means are the same authentication information;
Authentication information registration means for registering the authentication information determined to be the same in the storage means on the condition that the authentication determination means determines that the authentication information is the same ,
An authentication server comprising: An information processing system including one or more information processing devices and a first authentication server that performs authentication processing of first authentication information , wherein the second authentication information is transmitted as an authentication request from the information processing device. An information processing system capable of communicating via a communication medium with a second authentication server comprising second authentication means for performing the authentication process of
The first authentication server is
Storage means for storing first authentication information;
Based on the first authentication information stored in the storage means, performs an authentication process of the first authentication information received as an authentication request from the information processing apparatus, the information processing an authentication result of the processing person authentication a first authentication means sends to device,
Authentication information registration means for registering the first authentication information for which the registration request has been received in the storage means, on condition that the registration request for the first authentication information has been received from the information processing apparatus;
With
The information processing apparatus includes:
First receiving means for receiving input of the first authentication information;
First authentication requesting means for transmitting the first authentication information received by the first receiving means to the first authentication server and making an authentication request;
In response to the authentication request by the first authentication request unit, a first authentication result obtaining means for obtaining an authentication result from the first authentication server,
Second acquisition means for receiving an input of second authentication information after acquiring an authentication result indicating that the authentication has not been performed by the first authentication result acquisition means;
Third accepting means for accepting input of the first authentication information after accepting the second authentication information by the second accepting means;
An authentication determination process is performed to determine whether the first authentication information received by the first receiving unit and the first authentication information received by the third receiving unit are the same authentication information. Authentication determination means;
The second authentication information received in the previous SL second reception means, to perform the authentication process of the second authentication information by the second authentication server, transmitting to a second authentication of performing authentication request Request means;
In response to an authentication request by the second authentication request means, second authentication result acquisition means for acquiring an authentication result by the second authentication server;
The authentication determination means determines that the first authentication information received by the first reception means and the first authentication information received by the third reception means are the same authentication information, and The first authentication information determined to be the same authentication information on the condition that the authentication result by the second authentication server acquired by the second authentication result acquisition unit is authenticated. Registration request means for making a registration request to the first authentication server;
An information processing system comprising: An information processing system in which one or more information processing apparatuses and a first authentication server can communicate via a communication medium,
The first authentication server is
Storage means for storing first authentication information;
Based on the first authentication information stored in the storage means, performs an authentication process of the first authentication information received as an authentication request from the information processing apparatus, the information processing an authentication result of the processing person authentication authentication means to send to the device,
It said authentication means by the authentication processing result, a holding means for holding the first authentication information has not been authenticated,
Authentication determination means for determining whether or not the first authentication information received as a registration request from the information processing apparatus and the first authentication information held by the holding means are the same authentication information;
An authentication information registration means for registering the first authentication information determined to be the same authentication information in the storage means on the condition that the authentication determination means determines the same authentication information;
With
The information processing apparatus includes:
First receiving means for receiving input of the first authentication information;
A first authentication request means for performing the authentication request by sending the first authentication information received by said first receiving means to the first authentication server,
An authentication result acquisition means for acquiring an authentication result from the first authentication server in response to an authentication request by the first authentication request means;
A second accepting means for accepting an input of second authentication information after obtaining an authentication result indicating that the authentication result is not obtained by the authentication result obtaining means;
Second authentication requesting means for transmitting the second authentication information received by the second receiving means and performing an authentication request so as to perform authentication processing of the second authentication information by a second authentication server; ,
Third accepting means for accepting input of the first authentication information after accepting the second authentication information by the second accepting means;
A registration request unit that performs a registration request of the first authentication information said first authentication information by sending the first authentication server received by the third reception means,
An information processing system comprising: The first authentication server performing authentication processing of the first authentication information, the control method of an information processing apparatus in an information processing system including a second authentication server performing authentication processing of the second authentication information, and an information processing apparatus Because
A first accepting step for accepting an input of the first authentication information;
The first authentication request means, a first authentication request step of performing an authentication request by sending the first authentication information received by said first reception step to the first authentication server,
The first authentication result obtaining means, in response to the authentication request by the first authentication request process, a first authentication result obtaining step of obtaining an authentication result from the first authentication server,
A second accepting step for accepting an input of second authentication information after the second accepting unit obtains an authentication result indicating that the authentication has not been performed by the first authentication result obtaining step ;
A third accepting step for accepting an input of the first authentication information after a third accepting means accepts the second authentication information in the second accepting step ;
Authentication decision means determines said first said accepted at the reception step first authentication information, whether a third said first authentication information received by the receiving process of the same credentials An authentication determination step for performing an authentication determination process ;
A second authentication request unit, the second authentication information received by the second receiving step, to perform the authentication process of the second authentication information by the second authentication server, transmitting to the authentication A second authentication request process for making a request;
A second authentication result acquisition step in which a second authentication result acquisition means acquires an authentication result by the second authentication server in response to the authentication request by the second authentication request step;
The first authentication information received in the first reception step and the first authentication information received in the third reception step are the same authentication information by the registration requesting unit in the authentication determination step. The first authentication information is determined to be the same authentication information on the condition that the authentication result by the second authentication server acquired in the second authentication result acquisition step is authenticated. A registration request step for requesting registration of the authentication information to the first authentication server;
An information processing apparatus control method comprising: A control method of an information processing apparatus capable of communicating with a first authentication server that performs authentication processing of first authentication information,
A first accepting step for accepting an input of the first authentication information;
The first authentication request means, a first authentication request step of performing an authentication request by sending the first authentication information received by said first reception step to the first authentication server,
Authentication result obtaining means is responsive to the authentication request by the first authentication request process, the authentication result obtaining step of obtaining an authentication result from the first authentication server,
A second accepting step for accepting an input of second authentication information after the second accepting unit obtains an authentication result indicating that the authentication result is not authenticated by the authentication result obtaining step ;
A second authentication requesting means transmits the second authentication information received in the second receiving step to perform an authentication process of the second authentication information by a second authentication server and sends an authentication request. A second authentication request step to be performed;
A third accepting step for accepting an input of the first authentication information after a third accepting means accepts the second authentication information in the second accepting step ;
Registration request means, the registration request step of transmitting the first authentication information received by the third receiving step to the first authentication server performs registration request of the first authentication information,
An information processing apparatus control method comprising: An authentication server control method capable of communicating with one or a plurality of information processing apparatuses and having a storage means for storing authentication information,
Authentication means, based on the authentication information stored in the storage means, performs an authentication process of the authentication information received as an authentication request from the information processing apparatus, sending an authentication result of the processing person authentication to the information processing apparatus A trusted authentication process ,
Holding means, the result of the authentication processing by the authentication step, a holding step of holding the authentication information has not been authenticated,
Authentication decision means, the authentication information received as a registration request from the information processing apparatus, and whether the determined authentication determination step whether said authentication information and the same authentication information held in said holding step,
Authentication information registration means, wherein the authentication determination process under the condition that it is determined that the same authentication information, the authentication information registering step of registering the authentication information is determined to the same in the storage means,
An authentication server control method comprising: An information processing system including one or a plurality of information processing apparatuses, and a first authentication server having a storage means for storing the first authentication information, the second transmitted from the information processing apparatus as the authentication request A method of controlling an information processing system capable of communicating with a second authentication server comprising a second authentication means for performing authentication processing of authentication information via a communication medium,
A first accepting step in which a first accepting unit of the information processing apparatus accepts an input of the first authentication information;
The first authentication request means of the information processing apparatus, a first authentication request step of performing an authentication request by sending the first authentication information received by said first reception step to the first authentication server ,
First authentication means of the first authentication server is, on the basis of the first authentication information stored in the storage means, the authentication processing of the first authentication information received as an authentication request from the information processing apparatus was carried out a first authentication step of the authentication result of the processing person authentication is sent to the information processing apparatus,
First authentication result obtaining means of said information processing apparatus, in response to the authentication request by the first authentication request process, a first authentication result obtaining step of obtaining an authentication result from the first authentication server,
The second reception unit that receives the input of the second authentication information after the second reception unit of the information processing apparatus acquires the authentication result indicating that the authentication is not performed by the first authentication result acquisition step Process ,
A third accepting step for accepting an input of the first authentication information after the third accepting means of the information processing device accepts the second authentication information in the second accepting step ;
Authentication decision means of the information processing apparatus, whether the first authentication information received by the first receiving step, said first authentication information accepted by the third receiving step is the same credentials An authentication determination step for performing an authentication determination process for determining whether or not;
The second authentication request means of the information processing apparatus, the second authentication information received by the second receiving step, to perform the authentication process of the second authentication information by the second authentication server A second authentication request step for transmitting and requesting authentication;
A second authentication result acquisition step in which a second authentication result acquisition unit of the information processing apparatus acquires an authentication result by the second authentication server in response to an authentication request by the second authentication request step;
The registration request means of the information processing apparatus includes the first authentication information received in the first reception step and the first authentication information received in the third reception step by the authentication determination step. It is determined that the authentication information is the same, and the same authentication information is provided on the condition that the authentication result by the second authentication server acquired by the second authentication result acquisition step is authenticated. A registration request step for requesting registration of the determined first authentication information to the first authentication server;
On the condition that the authentication information registration unit of the first authentication server has received a registration request for the first authentication information from the information processing apparatus, the first authentication information that has received the registration request is stored in the storage unit. An authentication information registration process to be registered;
An information processing system control method comprising: A control method of an information processing system in which one or a plurality of information processing apparatuses and an authentication server including a storage unit that stores first authentication information can communicate via a communication medium,
A first accepting step in which a first accepting unit of the information processing apparatus accepts an input of the first authentication information;
The first authentication request means of the information processing apparatus, a first authentication request step of performing an authentication request by sending the first authentication information received by said first reception step to the authentication server,
Authentication means of the authentication server, based on the first authentication information stored in the storage means, performs an authentication process of the first authentication information received as an authentication request from the information processing apparatus, those authentication an authentication step of sending an authentication result of the processing to the information processing apparatus,
A holding step for holding the first authentication information that has not been authenticated as a result of the authentication process by the authentication step ;
Authentication result obtaining means of said information processing apparatus, in response to the authentication request by the first authentication request process, the authentication result obtaining step of obtaining an authentication result from the authentication server,
A second accepting step of accepting an input of second authentication information after the second accepting means of the information processing apparatus obtains an authentication result indicating that the authentication result obtaining step did not authenticate,
The second authentication request unit of the information processing apparatus transmits the second authentication information received in the second receiving step so as to perform an authentication process of the second authentication information by a second authentication server. A second authentication request step for making an authentication request,
A third accepting step for accepting an input of the first authentication information after the third accepting means of the information processing device accepts the second authentication information in the second accepting step ;
Registration request means of the information processing apparatus, a registration request step of transmitting the third receiving step in received the first authentication information to the authentication server performs registration request of the first authentication information,
Whether or not the first authentication information received as a registration request from the information processing apparatus and the first authentication information held in the holding step are the same authentication information by the authentication determination unit of the authentication server An authentication determination step of determining
The authentication information registration unit of the authentication server registers the first authentication information determined to be the same authentication information in the storage unit on the condition that the authentication information is determined to be the same authentication information in the authentication determination step. Authentication information registration process ;
An information processing system control method comprising: The first authentication server performing authentication processing of the first authentication information, and the second authentication server performing authentication processing of the second authentication information, the information processing apparatus in an information system including the information processing apparatus,
First receiving means for receiving input of the first authentication information;
First authentication requesting means for transmitting the first authentication information received by the first receiving means to the first authentication server and making an authentication request;
First authentication result acquisition means for acquiring an authentication result from the first authentication server in response to an authentication request by the first authentication request means;
Second acquisition means for receiving an input of second authentication information after acquiring an authentication result indicating that the authentication has not been performed by the first authentication result acquisition means;
Third accepting means for accepting input of the first authentication information after accepting the second authentication information by the second accepting means;
An authentication determination process is performed to determine whether the first authentication information received by the first receiving unit and the first authentication information received by the third receiving unit are the same authentication information. Authentication determination means;
The second authentication information received in the previous SL second reception means, to perform the authentication process of the second authentication information by the second authentication server, transmitting to a second authentication of performing authentication request Request means;
In response to an authentication request by the second authentication request means, second authentication result acquisition means for acquiring an authentication result by the second authentication server;
The authentication determination means determines that the first authentication information received by the first reception means and the first authentication information received by the third reception means are the same authentication information, and The first authentication information determined to be the same authentication information on the condition that the authentication result by the second authentication server acquired by the second authentication result acquisition unit is authenticated. A program for functioning as a registration request means for making a registration request to the first authentication server . An information processing apparatus capable of communicating with a first authentication server that performs authentication processing of first authentication information,
First receiving means for receiving input of the first authentication information;
First authentication requesting means for transmitting the first authentication information received by the first receiving means to the first authentication server and making an authentication request;
In response to the authentication request by the first authentication request unit, an authentication result obtaining means you get the authentication result from the first authentication server,
The pre-Symbol authentication result obtaining means, after obtaining an authentication result indicating that was not authenticated, and a second receiving means for receiving an input of the second authentication information,
Second authentication requesting means for transmitting the second authentication information received by the second receiving means and performing an authentication request so as to perform authentication processing of the second authentication information by a second authentication server; ,
Third accepting means for accepting input of the first authentication information after accepting the second authentication information by the second accepting means;
Program for operating as the third registration request means for said first authentication information received by the receiving means and transmitted to the first authentication server performs registration request of the first authentication information. An authentication server capable of communicating with one or a plurality of information processing devices and having storage means for storing authentication information ;
Based on the authentication information stored in the storage means, it performs an authentication process of the received authentication information as an authentication request from the information processing apparatus, to send an authentication result of the processing person authentication to the information processing apparatus authenticate Means,
Result of the authentication processing by said authentication means, and holding means for holding the authentication information has not been authenticated,
Authentication determination means for determining whether the authentication information received as a registration request from the information processing apparatus and the authentication information held by the holding means are the same authentication information;
The authentication on condition that it is determined that the same authentication information determining means, a program to function as the authentication information registration means for registering the authentication information is determined to the same in the storage means. An information processing system including one or a plurality of information processing devices and a first authentication server including a storage unit that stores first authentication information, wherein the second information transmitted from the information processing device as an authentication request A program that can be read and executed by an information processing system that can communicate with a second authentication server including a second authentication unit that performs authentication processing of the authentication information of
The first authentication server,
Based on the first authentication information stored in the storage means, performs an authentication process of the first authentication information received as an authentication request from the information processing apparatus, the information processing an authentication result of the processing person authentication a first authentication means sends to device,
The information processing apparatus on the condition that the registration request is accepted in the first authentication information, the first authentication information accepted the registration request is made to function as an authentication information registration means for registering in the storage means,
The previous SL information processing apparatus,
First receiving means for receiving input of the first authentication information;
First authentication requesting means for transmitting the first authentication information received by the first receiving means to the first authentication server and making an authentication request;
In response to the authentication request by the first authentication request unit, a first authentication result obtaining means for obtaining an authentication result from the first authentication server,
Second acquisition means for receiving an input of second authentication information after acquiring an authentication result indicating that the authentication has not been performed by the first authentication result acquisition means;
Third accepting means for accepting input of the first authentication information after accepting the second authentication information by the second accepting means;
An authentication determination process is performed to determine whether the first authentication information received by the first receiving unit and the first authentication information received by the third receiving unit are the same authentication information. Authentication determination means;
The second authentication information received in the previous SL second reception means, to perform the authentication process of the second authentication information by the second authentication server, transmitting to a second authentication of performing authentication request Request means;
In response to an authentication request by the second authentication request means, second authentication result acquisition means for acquiring an authentication result by the second authentication server;
The authentication determination means determines that the first authentication information received by the first reception means and the first authentication information received by the third reception means are the same authentication information, and The first authentication information determined to be the same authentication information on the condition that the authentication result by the second authentication server acquired by the second authentication result acquisition unit is authenticated. A program for functioning as a registration request means for making a registration request to the first authentication server . A program that can be read and executed by an information processing system in which one or a plurality of information processing apparatuses and a first authentication server including a storage unit that stores first authentication information can communicate via a communication medium,
The first authentication server is
Based on the first authentication information stored in the storage means, performs an authentication process of the first authentication information received as an authentication request from the information processing apparatus, the information processing an authentication result of the processing person authentication authentication means to send to the device,
It said authentication means by the authentication processing result, a holding means for holding the first authentication information has not been authenticated,
Authentication determination means for determining whether or not the first authentication information received as a registration request from the information processing apparatus and the first authentication information held by the holding means are the same authentication information;
On condition that it is determined that the same authentication information by the authentication decision means, to the function of the first authentication information is determined to be the same authentication information as the authentication information registration means for registering in the storage means,
The previous SL information processing apparatus,
First receiving means for receiving input of the first authentication information;
A first authentication request means for performing the authentication request by sending the first authentication information received by said first receiving means to the first authentication server,
An authentication result acquisition means for acquiring an authentication result from the first authentication server in response to an authentication request by the first authentication request means;
A second accepting means for accepting an input of second authentication information after obtaining an authentication result indicating that the authentication result is not obtained by the authentication result obtaining means;
Second authentication requesting means for transmitting the second authentication information received by the second receiving means and performing an authentication request so as to perform authentication processing of the second authentication information by a second authentication server; ,
Third accepting means for accepting input of the first authentication information after accepting the second authentication information by the second accepting means;
Program for operating as the third registration request means for said first authentication information received by the receiving means and transmitted to the first authentication server performs registration request of the first authentication information. A computer-readable recording medium on which the program according to any one of claims 2 to 25 is recorded.

Images