JP5328292B2 - Printing system, image forming apparatus, and information processing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To solve the problem that a mechanism is not provided, to perform control so that an image-forming apparatus does not receive print data based on an unauthorized print request from a client apparatus, and to further control giving and/or not giving the print permission to each job while performing the print control for each user in the conventional manner. <P>SOLUTION: Administration such as the administration of the upper limit of a user is performed in an administration server 101, so as to control printing for each user, and a permission list is updated in a printer, so as to perform communication control and interrupt a communication performed for a client apparatus after the job execution. <P>COPYRIGHT: (C)2009,JPO&amp;INPIT

Description

  The present invention relates to a printing system for suppressing unauthorized printing.

  In recent years, image forming apparatuses such as copying apparatuses and printing apparatuses have become widespread in corporate offices, and anyone can easily copy and print. However, there are problems such as security problems such as the outflow of printed materials of in-house documents, wasteful printing, and neglected printing that does not know who has output.

  In order to solve these problems, there is a print management system that aggregates information related to processes such as print document names, print dates and times, paper, number of copies, and color / monochrome printing for each user. In the print management system, the number of printable sheets is set for each user, and printing can be performed based on the print history (log) accumulated by the application when a print instruction is issued from the client apparatus to the image forming apparatus. There is a technique for restricting printing when the number of sheets is exceeded.

  Further, additional information (for example, customer information, printing unit price or billing destination information) that is not normally added by a printing application or a printer driver is added in correspondence with a print job using a special application on the client device or the like. The additional information is managed by including it in the print history.

  As a method of associating additional information with a job transmitted from a client apparatus to an image forming apparatus, it is input from a print setting dialog when generating a job, and is written in an area (for example, a header) different from an area for storing print information by a printer driver. There was a way. Further, when transmitting a job to the image forming apparatus, additional information and a print job are associated in advance, and then transmitted separately.

  Patent Document 1 discloses that a print server has a permission list, and a client name included in a print job generated by a client device is viewed. If the print server is not in its own permission list, printing based on the job is prohibited. . Thus, it is possible to suppress printing other than the permitted client name without transmitting the print job to the image forming apparatus.

In Patent Document 2, the printing apparatus has a permission list, and a network address is added to or deleted from the printing permission list based on a maintenance message from the maintenance computer. The printing device that has received the print request together with the print data prints if the network address of the print request transmission source is included in the print permission list, and otherwise transmits a print disapproval message to the transmission source. And do not print.
Japanese Patent Laid-Open No. 2000-035871 JP 2004-168069 A

  In Patent Document 1, the print permission is determined not by the client device but by the print server. When such a configuration is adopted, at least a client device needs to transmit a packet regarding a print request to the print server.

  Japanese Patent Application Laid-Open No. 2004-228561 employs a configuration in which a printing apparatus holds a print permission list as static information. In addition, the network address of the client device is registered in the print permission list of the printing device, and whether printing is permitted or not is determined for each device. Here, when one client apparatus is used by a plurality of users, further technical ideas are desired to perform print control such as upper limit management of the number of prints for each user.

  Therefore, an object of the present invention is to provide a mechanism for controlling permission / non-permission of printing for each job while performing printing control for each user.

  It is another object of the present invention to provide a mechanism capable of performing control such that print data based on an unauthorized print request from a client device is not received by an image forming apparatus.

In order to solve the above problems, a printing system according to the present invention includes a client device that generates a job, an image forming device that performs a printing process based on a job received from the client device, and a management that controls the printing process. A printing system including the apparatus,
The client device includes a job generation unit that generates a job based on an instruction from a user, and a job for identifying the job generated by the job generation unit in order to apply for permission to execute the job in the image forming apparatus Permit application generation means for generating permission application data including identification information, client identification information for identifying the client device, and user identification information for identifying the user, and permission application data generated by the permission application generation means A permission application transmission unit that transmits the job to the management apparatus, and a job transmission unit that transmits the job generated by the job generation unit to the image forming apparatus,
The management device includes permission application receiving means for receiving permission application data from the client device, and user identification information included in the permission application data for identifying a user who permits printing on the image forming device. The permission command generating means for generating a permission command including the job identification information and the client identification information for permitting printing corresponding to the permission application data, based on being managed in the user list for managing the permission application data, Permission command transmitting means for transmitting the permission command generated by the permission command generating means to the image forming apparatus,
The image forming apparatus associates a permission command receiving unit that receives a permission command from the management device, and client identification information and job identification information included in the permission command received by the permission command receiving unit, thereby processing a job Registration means for registering the client identification information of the client apparatus that permits the client apparatus, a job receiving means for receiving the job from the client apparatus identified by the client identification information managed in the permission list, A printing unit that executes a printing process based on a job received by the job receiving unit; job identification information of the executed job in the permission list after the printing process is performed by the printing unit; and the job identification Client identification information managed corresponding to the information Possess the permission canceling means for dividing,
The job identification information includes a hash value related to the job generated by the job generation unit,
The image forming apparatus further includes an acquisition unit that acquires a hash value of a job received by the job reception unit,
When the hash value of the job identification information managed in the permission list corresponding to the client identification information of the client device that is the transmission source of the job is different from the hash value acquired by the acquisition unit, the printing unit And the permission release means deletes the information managed in correspondence with the client identification information in the permission list .

  According to the above configuration, an object of the present invention is to provide a mechanism for controlling printing permission / non-permission for each job while performing printing control for each user.

  Hereinafter, a printing system according to an embodiment of the present invention will be described with reference to the drawings.

  FIG. 1 is a diagram illustrating a configuration of an image forming system according to the present exemplary embodiment. Reference numerals 101 to 104 are realized by general information processing apparatuses, and are connected to the network 106 by a network cable such as Ethernet (registered trademark).

  Reference numerals 103 and 104 denote client apparatuses that can execute various programs such as application programs and have a printer driver having a function of converting print data into a printer language corresponding to an image forming apparatus such as a printing apparatus. Yes. In addition, a communication unit capable of bidirectional communication with other devices connected to the network 106 is provided.

  The printer driver supports a plurality of image forming apparatuses. Here, the image forming apparatus may be any system such as a laser beam printer employing an electrophotographic system, an inkjet printer employing an inkjet system, or a printer utilizing a thermal transfer system.

  Reference numeral 101 denotes a management server, and 102 denotes a print server. The management server 101 and the print server 102 are connected to the network 106 by a network cable, and accumulate files used in the network 106 and monitor the use state of the network 106.

  The management server 101 and the print server 102 can also have functions as client devices 103 to 104.

  The print server 102 can further store a print job including print data for which a print request has been issued from the client apparatuses 103 and 104, and transmit the print job to the image forming apparatus. Alternatively, only the job information that does not include print data is received from the client devices 103 and 104, the print order of the jobs is managed, and the transmission permission of the job including the print data is notified to the client device that has reached the print order. In addition, a function for acquiring various statuses of the image forming apparatus and various types of print jobs and notifying the client apparatuses 103 and 104 is provided.

  An image forming apparatus 105 such as a printing apparatus is connected to the network 106 via a network interface (not shown). Further, it has a function of analyzing a print job including print data described in, for example, a print language transmitted from the client apparatuses 103 and 104, converting the print job into image data, and printing.

  FIG. 2 is a schematic diagram illustrating a hardware configuration of an information processing apparatus such as a client apparatus and an image forming apparatus such as a printer.

  First, the information processing apparatus will be described.

  Reference numeral 200 denotes a CPU as control means. The CPU 200 executes an application program, a printer driver program, an OS, a network printer control program of the present invention, and the like stored in the hard disk (HD) 205. Further, the RAM 202 is controlled to temporarily store information, files, etc. necessary for program execution.

  Reference numeral 201 denotes a ROM which is a storage unit, and stores therein various data such as a program such as a basic I / O program, font data used for document processing, and template data.

  Reference numeral 202 denotes a RAM which is temporary storage means, and functions as a main memory, work area, and the like of the CPU 200.

  A floppy (registered trademark) disk (FD) drive 203 serves as a storage medium reading unit. As shown in FIG. 5 to be described later, a program or the like stored in a floppy (registered trademark) disk (FD) 204 as a storage medium can be loaded into the computer system as a client via the FD drive 203. . Note that the storage medium is not limited to the FD, and may be any CD-ROM, CD-R, CD-RW, PC card, DVD, IC memory card, MO, memory stick, and the like.

  The FD 204 stores a computer-readable program.

  Reference numeral 205 denotes an external storage means, which is a hard disk (HD) that functions as a large-capacity memory, and stores an application program, a printer driver program, an OS, a network printer control program, related programs, and the like. Furthermore, a spooler is secured here. The spooler is a client spooler in the client and a server spooler in the print server. In the print server, job information received from the client is stored, and a table for controlling the order is also generated and stored in the external storage means.

  Reference numeral 206 denotes a keyboard, which is used by a user to input a command of a control command of the image forming apparatus to a client, and an operator or administrator to a print server.

  A display 207 displays a command input from the keyboard 206, a display based on processing in the information processing apparatus, a state acquired from the printer, and the like.

  Reference numeral 208 denotes a system bus, which controls the flow of data in the client computer.

  Reference numeral 209 denotes an interface (input / output means), through which the client exchanges data with an external device.

  In the present embodiment, an example is shown in which a network printer control program and related data are directly loaded from the FD 204 into the RAM 202 and executed. In addition to this, every time the network printer control program is operated from the FD 204, the network printer control program already installed in the HD 205 may be loaded into the RAM 202. The medium for storing the network printer control program may be a CD-ROM, CD-R, PC card, DVD, or IC memory card in addition to the FD. Further, it is possible to store the network printer control program in the ROM 201, configure it as a part of the memory map, and execute it directly by the CPU 200.

  Next, the configuration of the image forming apparatus will be described. The image forming apparatus 2 includes a connection unit 226, a data control unit (printer engine) 225, an operation unit 224, an external memory 223, a PCPU 220, a PRAM 222, and a PROM 221 whose details will be described later. These components are connected to each other via a system bus 227.

  A printer CPU (PCPU) 220 is responsible for overall control of the image forming apparatus 2. The PCPU 220 transmits an image signal to the data control unit 225 based on a printer control command received by the connection unit 226 based on a control program stored in the PROM 221 or the external memory 223 described later.

  The PRAM 222 includes, as a main memory of the PCPU 220, a temporary storage area for various data used as a work data area when the PCPU 220 executes control. The external memory 223 is also connected as an option, and stores font data, an emulation program, form data, and the like. A PROM 221 is a printer internal memory, and stores various data, a printer control program for controlling the image forming apparatus, and the like, similar to the external memory.

  The data control unit 225 is a printer engine, is controlled by the PCPU 220, receives an image signal output via the system bus 227 from a control program stored in the PROM 221 or the external memory 223, and performs an actual printing process. The operation unit 224 includes an input unit such as an operation panel and an operation switch, and a display unit such as an LED and a liquid crystal panel. The operation unit 224 receives an operation instruction input from an operator and displays a result of processing executed by the apparatus. Is.

  A connection unit 226 can be connected to the connection unit 210 of the information processing apparatus 1 through the above-described bidirectional interface 209 to receive a print control command, notify the internal state of the image forming apparatus, and the like. .

  In addition, software that realizes the same function as each of the above devices can be used as an alternative to a hardware device.

  The present invention can be applied to a client device that generates a print job, a print server that transmits a print job, and a management server that manages the system, whether they are the same information processing device or different information processing devices. is there.

  FIG. 3 is an example of an information input screen in the present embodiment. This dialog is a GUI display that is displayed on the display unit 207 of the client device by the spooler monitoring module shown in FIG. 4 to be described later and for inputting an instruction from the user via the keyboard 206 or the like. It has an accounting code input area, an input confirmation button, a job operation button (pause, resume, delete), a display update button, and a job list display section 304. The job list display section can display a list of job ID, document name, job honor, charging code, and status for each line. A plurality of jobs can be selected according to a user instruction. The selected job is highlighted. When a job is selected, billing code input areas 301 to 303 are enabled, and an arbitrary character string can be input. The character string input here is associated with the job identified by the selected job ID, and is managed by the management server when summing up the jobs.

  FIG. 4 is a diagram illustrating a main module that operates on the client device and a main module that operates on the image forming apparatus that constitute the printing system according to the present exemplary embodiment.

  In the client device, for example, Windows (registered trademark) of Microsoft Corporation is used as an operating system (hereinafter referred to as an OS) in a personal computer (equivalent to the information processing device of the present invention) that is widely used. Furthermore, it is assumed that an application 401 such as Microsoft Word (registered trademark) that can instruct printing processing is started.

  The user generates a document using the application 401 and issues a print instruction. The application 401 passes data related to the document instructed to be printed to the printer driver 402, and the printer driver generates a print job based on the data received from the application (job generation). The printer driver 402 passes the generated print job to the spooler 403.

  The spooler 403 schedules print jobs delivered from a plurality of drivers for each designated image forming apparatus. Then, the scheduled print job is transferred to the port monitor 404 corresponding to the connection port of the printer.

  A port monitor 404 appropriately calls a device driver 405 corresponding to a port (for example, USB or network), and passes a job. The device driver 405 establishes a connection with the image forming apparatus 406 through communication unit transmission (such as transmission of a SYN packet described later) via the connection unit 210. Thereafter, job transmission is performed using the connection.

  The spooler monitoring module 407 automatically starts operating when the client device is activated, and monitors the spooler 403. It also monitors the addition, deletion, and change of printer drivers and the generation and status of jobs for each printer driver. When it is detected that a job has been generated in the spooler, the job is stored in the job list 408 (storage area) together with attached information such as status, size, printer driver name, owner, document name, date and time. At the same time, the UI 409 is displayed for information input. The information input UI 409 displays, for example, an information input dialog illustrated in FIG. 3 on the display unit 207 of the client device. When the information input UI 409 receives input from the user, the information input UI 409 reflects the input information in the job list 408.

  The print permission application module 410 automatically starts operating when the client device is activated, and monitors the job list 408. In response to the update of the job list based on the user's predetermined instruction, the management server applies to the management server for permission to print on the image forming apparatus designated by the user to the client management module 411 of the management server. That is, the print permission application module 410 generates a permission application for executing a job, and transmits a permission application after the generation.

  The image forming apparatus holds a received data analysis module 413, a print control module 415, a command control module 414, and a permission list 406.

  The received data analysis module 413 analyzes data from the client device. If the received data is command data other than a print job (described later), the received data is passed to the command control module 414. If the received data is a job, the print control module is received. To pass.

  The command control module 414 analyzes command data transmitted from the client device, and performs control based on the command data. For example, when the command is a status request, the status (an error state or the like) of the image forming apparatus is returned to the client apparatus as a status response command.

  The print control module 415 analyzes the print job transmitted from the client device and executes printing.

  The permission list 406 holds identification information for identifying client devices that are permitted to print.

  The print control module 415 refers to the permission list 406 at the time of executing the printing process, and sequentially executes the print jobs passed from the client apparatus that is permitted to print.

  The client management module 411 of the management server that has received the job information or the client information from the print permission application module 410 of the client device searches the user list 412 to see if the user is registered. If registered, the client management module 411 of the management server notifies the corresponding image forming apparatus of the print permission of the corresponding client computer.

  The image forming apparatus that has been requested for print permission from the client management module 411 of the management server adds identification information for identifying the client that has been requested by the print permission application to the permission list 406.

  FIG. 6 is an example of a communication packet transmitted from the management server when information is added to or deleted from the permission list 406 in the present embodiment.

  The packet content consists of a common header and a data area. The common header stores a version, a packet size (packet length), a command ID that uniquely determines a command, and the like in a common format for all packets.

  The data area has arbitrary information depending on the command. For example, in the case of a packet for transmitting a job, 0 indicating job is stored in the command, and job data (print data or the like) is stored in the data area.

  Identification information for identifying the client device, job identification information, and the like are stored in the data area of a list addition command (for example, a permission command described later) to the permission list of the image forming apparatus and a list deletion command.

  The client identification information includes, for example, information for identifying a client device such as a host name, an IP address, and a MAC address, and information for identifying a user using the client device such as a user name, a user ID, and a nickname. Is done.

  The job information stores at least information for uniquely identifying a job such as a spooler ID, a document name, a job ID, and a hash value generated from job data.

  FIG. 7 is an example of a permission list held by the image forming apparatus according to the present exemplary embodiment. It is held in an area reserved in a storage device such as the PRAM 222 in advance.

  One record of the list includes client identification information, user identification information, job identification information, and permission time.

  As client identification information, for example, information for identifying a client device such as a host name, an IP address, and a MAC address is set.

  As the user identification information, information for identifying a user using the client device such as a user name, a user ID, and a nickname is set.

  As job information, for example, information for uniquely identifying a job such as a spooler ID, a document name, a job ID, and a hash value generated from job data is set.

  The permitted time is set to the time when printing is permitted.

  Hereinafter, description will be made with reference to FIGS. 5, 8, 9, 10, 11, and 12.

  As client identification information for identifying a client device, an IP address will be described as an example.

  FIG. 5 is an example of a flow showing processing based on a program executed by the image forming apparatus in the present embodiment.

  In step 501, the received data analysis module 413 determines whether data has been received. When data is received from the network via the bidirectional interface 209 and the connection unit 226, the data is stored in a work area secured in a storage device such as the PRAM 222. Here, this step is repeated (waiting) until data is received. If it is determined in step 501 that data has been received, the process proceeds to step 502.

  In step 502, the received data analysis module 413 determines whether the received data is command data (control command) other than a print job. That is, using the PCPU 220, the received data stored in the work area secured in the storage device such as the PRAM 222 is analyzed, and if it is in a predetermined control command format, it is determined as a control command.

  If it is determined in step 502 that the received data is a control command, in step 503, the command control module 414 determines whether the received data is a list addition command. Here, the PCPU 220 is used to analyze received data stored in a work area secured in a storage device such as the PRAM 222, and when the list addition command format is determined in advance, it is determined as a list addition command.

  If the command control module 414 determines in step 503 that the received data is a list addition command (for example, a permission command described later), the process proceeds to step 504. In step 504, the command control module 414 adds the client information (client identification information) specified by the received list addition command to the permission list 406. Here, using the PCPU 220, the client identification information (for example, IP address) stored in the data area shown in FIG. 6 is extracted from the received data stored in the work area secured in the storage device such as the PRAM 222. Next, it adds to the permission list | wrist hold | maintained in memory | storage devices, such as PRAM222. For example, here, when a later-described permission command is received, information such as client identification information, job identification information, and permission time included in the permission command is added to the permission list in association with each other. Thereafter, the process returns to step 501.

  If the command control module 414 determines in step 503 that the received data is not a list addition command, it determines in step 505 whether it is a list deletion command. Here, the PCPU 220 is used to analyze received data stored in a work area secured in a storage device such as the PRAM 222, and when the list delete command format is determined in advance, it is determined as a list delete command.

  Next, when it is determined in step 506 that the received data is a list deletion command, the command control module 414 deletes the record designated by the list deletion command from the permission list 406. Here, using the PCPU 220, the client identification information (IP address) stored in the data area shown in FIG. 6 is extracted from the received data saved in the work area secured in the storage device such as the PRAM 222. Next, the record including the corresponding client identification information is deleted from the permission list held in the storage device such as the PRAM 222. Thereafter, the process returns to step 501.

  If the received data analysis module 413 determines in step 502 that the received data is not a control command, it determines in step 507 whether the received data is a print job. That is, using the PCPU 220, the received data stored in the work area secured in the storage device such as the PRAM 222 is analyzed, and if the print job format is determined in advance, it is determined that the print job.

  If the received data analysis module 413 determines in step 507 that the received data is not a print job, the process returns to step 501 assuming that the data is not to be processed by this program. If the received data analysis module 413 determines in step 507 that the received data is a print job, the process proceeds to step 508.

  In step 508, the print control module 415 searches the permission list 406 and determines whether printing based on the received print job is permitted. That is, the PCPU 220 is used to analyze a print job stored in a work area secured in 222 such as a PRAM, and acquire client identification information (IP address) of the client apparatus that has transmitted the print job and job identification information of the print job. . Thereafter, the permission list held in the storage device such as the PRAM 222 is collated with the client identification information and job identification information acquired from the print job. If there is an item in the permission list, it is determined that printing is permitted.

  If it is determined in step 508 that printing is permitted, the print control module 415 instructs printing based on the print job in step 509. Thereafter, the process returns to step 501. If it is determined in step 508 that printing is not permitted, the print control module 415 deletes the received print job without printing in step 510. Then, the process returns to step 501.

  FIG. 8 shows the flow of processing based on the program executed by the client device in this embodiment, which is the basic operation of the spooler monitoring module.

  In step 801, a list of acquired jobs is acquired. For example, a Win32 function EnumJob () prepared in Windows (registered trademark) of Microsoft Corporation is called to obtain a list of print jobs and stored in a work area secured in a storage device such as the RAM 202 or the HD 205 in advance.

  In step 802, it is determined whether a new job has occurred in the job list acquired in step 801. That is, the CPU 200 compares the job list 408 with a job having a new job ID, and determines that a new job has occurred.

  If it is determined in step 802 that a new job has occurred, in step 803, the new job and information attached to the job in the job list acquired in step 801 are added to the job list 408. In the job list, information attached to a job such as a job ID and a document name is managed for each job, and additional information added by a predetermined application such as a billing code is also added for each job. Managed. Here, the information attached to the job is acquired by using a Win32 function GetJob () prepared in Windows (registered trademark) of Microsoft Corporation.

  Next, in step 804, it is determined whether there are one or more jobs in the job list 408. That is, the CPU 200 searches the job list and calculates the number of records in the list. If it is determined that there are no more than one job, the process returns to step 801.

  If it is determined in step 804 that there are one or more jobs, it is determined in step 805 whether the information input UI 409 has been displayed. For example, when a window used by the information input UI 409 exists by calling the Win32 function FindWindow () prepared in Windows (registered trademark) of Microsoft Corporation, it is determined that the information input UI 409 has already been displayed. If the information input UI is already displayed, step 801 and subsequent steps are repeated.

  If it is determined in step 805 that the information input UI is not displayed, the information input UI 409 is displayed on a display device such as the CRT 207 in step 806 based on a predetermined procedure.

  If no occurrence of a new job is detected in step 802, it is determined in step 807 whether the job has been completed. Here, the CPU 200 compares the job list acquired in step 801 with the job list 408. If there are no jobs in the job list in the job list, it is determined that the job stored in the job list has ended. Here, the completed job may be deleted from the job list 408.

  FIG. 9 is an example of a process flow when receiving an instruction input via the information input UI according to the embodiment.

  In step 901, it is determined whether or not an event has occurred in which a button on the screen is pressed by clicking with the mouse. For example, in the method disclosed in Microsoft's MSDN Library (registered trademark), operations such as mouse clicks and keyboard input and IDs that uniquely determine each resource such as a button or list box in a window are used as events. Be notified. Here, it waits until an event occurs.

  If it is determined in step 901 that an event has occurred, it is determined in step 902 whether the event is a job selection. That is, it is determined based on the notified event whether any record in the job list display unit 304 in FIG. 3 has been selected.

  If it is determined in step 902 that the notified event is job selection, in step 903 the corresponding record is highlighted on the screen in an identifiable manner.

  If it is determined in step 902 that the notified event is not job selection, it is determined in step 904 whether or not the “input” button has been pressed. That is, it is determined based on the notified event whether or not the “input” button in FIG. 3 has been pressed.

  If it is determined in step 904 that the notified event is a press of the “input” button, the event is stored in the corresponding job list 408 based on the job ID of the job selected in the job list display unit 304 in step 905. Set a billing code for the submitted job. Here, the respective values of the first code, the second code, and the third code in FIG. 3 are set in the accounting code area of the record of the job in the job list 408.

  If it is determined in step 904 that the notified event is not the “input” button being pressed, it is determined in step 906 whether or not the “pause” button has been pressed. That is, it is determined based on the notified event whether or not the “pause” button in FIG. 3 has been pressed.

  If it is determined in step 906 that the notified event is a press of the “pause” button, the job ID of the job selected in the job list display unit 304 is acquired in step 907. Next, the job is specified by the Win32 function SetJob () prepared in Windows (registered trademark) of Microsoft Corporation, and the job is paused (pause).

  If it is determined in step 906 that the notified event is not a press of the “pause” button, it is determined in step 908 whether the “resume” button has been pressed. That is, it is determined based on the notified event whether or not the “resume” button in FIG. 3 has been pressed.

  If it is determined in step 908 that the notified event is a press of the “resume” button, the job ID of the job selected in the job list display unit 304 is acquired in step 909. Next, the job is designated by the Win32 function SetJob () prepared in Windows (registered trademark) of Microsoft Corporation, and the selected job is resumed (Resume).

  If it is determined in step 908 that the notified event is not the “restart” button being pressed, it is determined in step 910 whether or not the “delete” button has been pressed. That is, it is determined based on the notified event whether or not the “delete” button in FIG. 3 has been pressed.

  If it is determined in step 910 that the notified event is a press of the “delete” button, the job ID of the job selected in the job list display unit 304 is acquired in step 911. Next, the job is specified by the Win32 function SetJob () prepared in Windows (registered trademark) of Microsoft Corporation, and the selected job is deleted (Delete).

  If it is determined in step 910 that the notified event is not the “delete” button being pressed, it is determined in step 912 whether or not the “update” button has been pressed. That is, it is determined based on the notified event whether or not the “update” button in FIG. 3 has been pressed.

  If it is determined in step 912 that the notified event is a press of the “update” button, a job list is reacquired in step 913. For example, a list of jobs and their associated information is reacquired by using the Win32 function EnumJob (), the Win32 function GetJob (), etc. prepared in Windows (registered trademark) of Microsoft Corporation. The information in the job list 408 is updated with the job information acquired here.

  Next, in step 914, the display of the job list display unit 304 in FIG. 3 is updated based on the job list information updated in step 913.

  FIG. 10 is an example of a permission list held by the client management module of the management server in this embodiment.

  The permission list is held in an area secured in a storage device such as the RAM 202 or the HD 205 of the management server. One record in the permission list includes user identification, client identification, image forming apparatus, job identification, permission time, and the like.

  In the user identification, information identifying a user using the client device such as a user name, a user ID, and a nickname is stored. In this embodiment, when a print permission application is made, a user who is permitted to print can be registered, and all registered users are listed.

  In the client identification information, for example, information for identifying a client device such as a host name, an IP address, and a MAC address is stored. It is blank until the print application is accepted.

  The image forming apparatus stores information for identifying an image forming apparatus that desires printing, such as an IP address, a host name, and a MAC address.

  In the job information, for example, identification information for uniquely identifying a job such as a spooler ID, a document name, a job ID, and a hash value generated from job data is stored.

  The permission time is set to the time when permission for the print application is given.

  FIG. 11 is an example of a flow showing the basic operation of the print permission application module in this embodiment.

  In step 1101, it is determined whether additional information has been input by the user. That is, the CPU 200 is used to search the job list 408, and when a record in which additional information is described is found, it is determined that there is a job when the additional information is input by the user.

  If it is determined in step 1101 that additional information has been input by the user, printing permission application data to be sent to the client management module is generated in step 1102. The generated data includes a data packet storing the IP address of the client device, the login user name, job identification information, and the IP address of the printer to be printed.

  Next, in step 1103, the print permission application data generated in step 1102 is sent to the client management module of the management server.

  If it is determined in step 1101 that no additional information has been input by the user, step 1101 is repeated.

  FIG. 12 is an example of a flow showing the basic operation of the client management module of the management server in this embodiment.

  In step 1201, it is determined whether permission application data has been received from the client device. When permission application data is received from the network via the bidirectional interface 209 and the connection unit 226, it is stored in a work area secured in a storage device such as the RAM 202 or the HD 205. Repeat this step until permission application data is received.

  When permission application data is received in step 1201, it is determined in step 1202 whether or not it is a print permission application from a registered user registered in the user list 412. Here, the user information is acquired from the permission application data and searched from the list of the user list 412. When the same user information is found, it is determined that the application is a print permission application from a registered user.

  If it is determined in step 1202 that the application is a print permission application from a registered user, the user list 412 is updated in step 1203. Specifically, here, the user list is a list for performing upper limit management for each user, and manages the number of prints of the user per month in addition to the user identification information. Assume that the upper limit number of prints of the user identified by the user identification information is determined for each month, for example. If this upper limit is reached when receiving a print permission application, the user is temporarily deleted from the user list in order to control so that printing is not possible during that month. Note that the upper limit management period may be any period. In addition, what is managed may be any print function other than the number of prints or any function that can be provided by the image forming apparatus. Further, the results such as the number of prints managed in the user list may be updated when the permission application is received, but after the processing is executed in the image forming apparatus, the execution notification is received and the results are recorded based on the notification. May be a strict implementation.

  Next, in step 1204, a permission command is generated for adding information to the permission list of the image forming apparatus in the format shown in FIG. Also, client identification information, user identification information, and job identification information are acquired from the permission application data held in the work area, and the current time is acquired and set in the permission command. Next, the generated permission command is transmitted to the image forming apparatus acquired from the permission application data held in the work area. Additional information such as billing destination information may be included in the permission command.

  If it is determined in step 1202 that the print permission application is from a user other than the registered user, the process returns to step 1201.

  In the image forming apparatus, when the format of the add command to the permission list (FIG. 6) used in the present embodiment is determined, the command is determined to be a command for adding information to the list. Thereby, the permission list is updated as needed.

(Example 2)
In this embodiment, after receiving a permission command in the image forming apparatus, a timeout is provided to automatically cancel the user's printing permission. Here, differences from the first embodiment will be described with reference to FIG.

  FIG. 13 is a flow relating to a timeout monitoring process realized based on a program held in the image forming apparatus. It operates independently of the flow of the image forming apparatus of FIG.

  In step 1301, the PCUP 220 searches the permission list stored in the storage device such as the PRAM 222, and determines whether the number of clients permitted to print is not zero.

  If it is determined in step 1301 that the number of clients permitted to print is zero, the process returns to step 1301.

  If it is determined in step 1301 that the number of clients permitted to print is not zero, in step 1302, one record is extracted from the permission list by the PCPU 220 and stored in a work area secured in a storage device such as the PRAM 222.

  Next, in step 1303, the PCPU 220 acquires the current time from a clock or the like held by the image forming apparatus. Then, it is determined whether or not the elapsed time from the permission time set in the record acquired in step 1302 exceeds the time-out value set and held in advance in the image forming apparatus.

  Here, when determining the timeout of the permission information (record) in the permission list, the time allowed from the management server may be received directly in the permission command. By doing so, the image forming apparatus does not need to maintain a timeout value, manages the time when the permission command is received, and makes a determination similar to the above by comparing with the permission time.

  If it is determined in step 1303 that the timeout value has been exceeded, in step 1304, the print permission for the user of the corresponding record is canceled. That is, the corresponding record is deleted from the permission list held in the storage device such as the PRAM 222 using the PCPU 220.

  Next, in step 1305, it is determined whether or not the PCPU 220 has calculated the timeout for all records.

  If it is determined in step 1305 that all records have been completed, the process returns to step 1301.

  If it is determined in step 1305 that all records have not been completed, the process returns to step 1302 to acquire the next record in the permission list.

  If it is determined in step 1303 that the timeout value has not been exceeded, the process returns to step 1302 to acquire the next record in the permission list.

  As another embodiment, the same effect can be obtained by monitoring the timeout in the management server or the client device and applying for canceling the print permission.

(Example 3)
An improvement may be considered in which after the application for permission is made in the client apparatus, the permission of the user is automatically canceled in accordance with the end of the job corresponding to the permission application transmitted to the image forming apparatus. This improvement is applicable to all the embodiments described above.

  In the present embodiment, an example in which permission of printing is canceled in the image forming apparatus will be described. With respect to the differences from the above-described embodiment, an improvement regarding the processing of step 509 in FIG.

  If it is determined in step 508 in FIG. 5 that printing is permitted, in step 1401, the print control module 415 executes printing based on the received job.

  Next, in step 1402, after printing is completed, the print control module 415 cancels permission of printing. That is, the PCPU 220 is used to delete a record having the same job identification information as the job printed in step 1401 from the permission list held in the storage device such as the PRAM 222. Then, the process returns to step 501.

  As a result, there is an effect that printing permission and cancellation of permission can be strictly performed for each client or user who has applied for permission to transmit a job.

Example 4
Even when printing is performed from a client apparatus that is permitted to print, an improvement in which the image forming apparatus cancels the print permission when an unauthorized job is transmitted can be considered. With respect to the differences from the first embodiment, an improvement regarding the processing of step 509 in FIG. 5 will be described with reference to FIG.

  When it is determined in step 508 in FIG. 5 that printing is permitted, in step 1501, the print control module 415 determines whether the job is invalid.

  For example, the permission list stored in the storage device such as the RAM 222 is searched, and the hash value of the job stored in the job identification information is compared with the hash value generated from the job received via the bidirectional interface 209. If the comparison results are different, it is determined that the job has been tampered with after permission, and it is determined that the job is invalid. Alternatively, when the job is not generated based on a predetermined format, it is determined that the job is invalid.

  If it is determined in step 1501 that the job is illegal, in step 1502, the print control module 415 cancels the print permission of the client apparatus itself that transmitted the illegal job. That is, the PCPU 220 is used to delete a record having the same client identification information as the job determined in step 1501 from the permission list held in the storage device such as the PRAM 222.

  In step 1503, the print control module 415 deletes the job without printing it.

  If it is determined in step 1501 that the job is not invalid, the print control module 415 prints the job in step 1504. Then, the process returns to step 501.

(Example 5)
In the image forming apparatus, it can be considered that the print control is performed by restricting the communication between the client apparatuses. Differences from the above-described embodiment will be described with reference to FIG. This improvement is applicable to all the embodiments described above.

  Here, it is assumed that the IP address of the management server is registered in advance in the permission list held in the storage device such as the RAM 222 of the image forming apparatus. This guarantees communication between the image forming apparatus and the management server.

  FIG. 16 is a flow that operates when the reception data analysis module of the image forming apparatus starts a network communication connection. Specifically, step 501 in FIG. 5 is improved.

  Step 1601: Accept a communication connection request. That is, communication data for establishing a connection from a client device or the like is received via the bidirectional interface. For example, in TCP communication that is widely used, data called a SYN packet is received.

  In step 1602, it is determined whether communication is permitted for the connection request source included in the communication data packet received in step 1601. That is, using the PCPU 220, it is searched whether the identification information of the request source (client device) of the connection acquired in step 1601 exists in the client identification information of the permission list. If found, it is determined that communication is permitted. For example, in TCP communication of a widely used network communication method, the source IP address is described in the IP header of the SYN packet. If this address is described in the client identification of the permission list, it is permitted. Judge.

  If it is determined in step 1602 that communication is permitted, a connection response is sent in step 1603. For example, in widely used TCP communication, an ACK packet is returned. Thereafter, a communication path is established by a predetermined communication procedure, and communication with the communication connection request source becomes possible.

  In step 1604, subsequent data (job) is received via the network.

  If it is determined in step 1602 that communication is not permitted, the request is rejected in step 1604. For example, ACK is not returned in widely used TCP.

  Next, the process returns to step 1601.

  In this embodiment, whether or not to establish a connection between the client apparatus and the image forming apparatus is determined by referring to the permission list, thereby prohibiting unauthorized users from accessing before receiving an actual job. As a result, the image forming apparatus does not receive an unauthorized job in the first place, and there is an effect that wasteful processing in the apparatus can be reduced.

  In this embodiment, a job received as a print job from a permitted client device may be further verified using job identification information held in the permission list corresponding to the client identification information. . A print job that is not permitted is not subjected to print processing as in S510. With this configuration, it is possible to prevent an unauthorized print job from being printed using an authorized client device.

(Example 6)
An improvement is conceivable in which the image forming apparatus is not provided with a special function and communication is restricted by network settings. Differences from the first embodiment will be described. In this embodiment, for example, the image forming apparatus performs only the process of printing the received print job.

  FIG. 17 is a schematic diagram of a printing system in the present embodiment. The printing system includes a client device, an image forming device, a management server, and a network management device. Here, unlike the embodiment described above, the management server and the network management apparatus are connected via a network or the like.

  The print permission application module 1710 of the client device monitors the job list 1708. Based on an instruction from the user, permission application data for applying for printing permission to a desired printer is transmitted to the client management module 1711 of the management server.

  From the print permission application module 1710 of the client apparatus, the client management module 1711 of the management server of the permission application data searches the user list 1712 based on the identification information included in the permission application data, and determines whether the corresponding user is registered. To do. If registered, the network management apparatus 1713 is set to permit communication between the client apparatus and the image forming apparatus.

  The network management device 1711 is a device that can control communication of devices connected to a network such as a gateway and a switching hub. Communication between the client apparatus to which communication permission is set from the client management module 1711 of the management server and the image forming apparatus is set.

(Example 7)
In this embodiment, an improvement related to the processing described in FIG. 12 in the management server will be described.

  In the present embodiment, when a print permission application is received from a client device, temporary identification information (temporary ID) is newly issued in the management server if the user is permitted to print. The temporary ID issued here is transmitted to the image forming apparatus in S1204, and managed in association with client identification information and the like in the permission list 406. In addition, the management server transmits this temporary ID to the client as a response to the print permission application.

  When transmitting a print job to the image forming apparatus, the client apparatus transmits the print job including the temporary ID received from the management server.

  When receiving a print job, the image forming apparatus determines whether to execute the print job based on the temporary ID instead of the job identification information. Printing is permitted when the temporary ID recorded in the permission list 406 corresponding to the client identification information matches the temporary ID included in the print job.

  With the improvement according to the present embodiment, even with respect to job identification, temporary information issued by a management server, which is a third party, not a client device is used, so that security is further improved. In addition, there is no need to issue job identification information at the client device and distribute it to each device.

  For each of the embodiments described above, at least the following effects can be given.

  In the first embodiment, the user is permitted to print by inputting and executing additional information such as billing destination information for the job on the client device, and printing cannot be performed unless the additional information is input.

  In the second embodiment, it is assumed that a time-out occurs after a certain time and the print permission is canceled. As a result, even if the inconvenience occurs such that the job is lost in the middle or communication between the management server and the image forming apparatus cannot be performed, the printing is not continuously permitted.

  In the third embodiment, since the print permission corresponding to the job is canceled after the job is completed, the time during which the print is permitted can be shortened and the security is improved.

  In the fourth embodiment, it is possible to prevent printing of unauthorized jobs such as falsification and duplication. Further, the permission of the client apparatus that has transmitted such an illegal job can be cancelled.

  In the fifth embodiment, since a print job from a client apparatus that is not permitted to print is not received by the image forming apparatus, redundant processing and unnecessary traffic in the image forming apparatus can be reduced.

  In the sixth embodiment, it is not necessary to provide a special function to the image forming apparatus. Image forming apparatuses already on the market can be applied with the printing system of the present invention without any special modification.

1 is a diagram illustrating an example of a configuration of a printing system according to the present invention. 2 is a block diagram illustrating an example of a detailed configuration of a client device and an image forming apparatus according to the present invention. FIG. It is an example of the information input screen in this invention It is a module block diagram in a printing system in the present invention. FIG. 6 is a flowchart illustrating a processing operation in the image forming apparatus according to the first embodiment. 3 is an example of a communication packet in the first embodiment. 3 is an example of a permission list held by the image forming apparatus according to the first exemplary embodiment. FIG. 6 is a flowchart illustrating a processing operation in the spooler monitoring module according to the first embodiment. FIG. 10 is a diagram illustrating a flowchart illustrating a processing operation in an information input UI according to the first embodiment. 4 is an example of a permission list held by the client management module of the management server according to the first embodiment. FIG. 10 is a flowchart illustrating a processing operation in a print permission application module according to the first embodiment. FIG. 6 is a flowchart illustrating processing operations in a client management module according to the first exemplary embodiment. FIG. 10 is a flowchart illustrating a print permission release processing operation of the image forming apparatus according to the second exemplary embodiment. FIG. 10 is a flowchart illustrating processing for canceling print permission of an image forming apparatus according to a third exemplary embodiment. FIG. 10 is a flowchart illustrating a processing operation of an image forming apparatus in Embodiment 4. FIG. 10 is a flowchart illustrating a processing operation of an image forming apparatus in Embodiment 5. FIG. 10 is a module configuration diagram of a printing system according to a sixth embodiment.

Explanation of symbols

101 Management Server 103, 104 Client Device 105 Image Forming Device 106 Network

Claims (7)

A printing system including a client device that generates a job, an image forming device that performs printing processing based on a job received from the client device, and a management device that controls printing processing,
The client device is
Job generation means for generating a job based on an instruction from the user;
In order to apply for permission to execute the job in the image forming apparatus, job identification information for identifying a job generated by the job generation unit, client identification information for identifying a client apparatus, and the user Permission application generating means for generating permission application data including user identification information of
Permission application transmitting means for transmitting the permission application data generated by the permission application generating means to the management device;
Job transmission means for transmitting the job generated by the job generation means to the image forming apparatus,
The management device
Permission application receiving means for receiving permission application data from the client device;
Corresponding to the permission application data based on the fact that the user identification information included in the permission application data is managed in a user list for managing user identification information for identifying a user permitted to print on the image forming apparatus. Permission command generation means for generating a permission command including the job identification information and the client identification information for permitting printing;
Permission command transmission means for transmitting the permission command generated by the permission command generation means to the image forming apparatus,
The image forming apparatus includes:
Permission command receiving means for receiving a permission command from the management device;
Registration means for associating client identification information included in the permission command received by the permission command receiving means with job identification information and registering it in a permission list for managing client identification information of a client device that permits job processing;
Job receiving means for receiving the job from the client device identified by the client identification information managed in the permission list;
Printing means for executing print processing based on the job received by the job receiving means;
After the printing process by the printing unit is executed, permission release means for deleting job identification information of the executed job and client identification information managed corresponding to the job identification information in the permission list; I have a,
The job identification information includes a hash value related to the job generated by the job generation unit,
The image forming apparatus further includes an acquisition unit that acquires a hash value of a job received by the job reception unit,
When the hash value of the job identification information managed in the permission list corresponding to the client identification information of the client device that is the transmission source of the job is different from the hash value acquired by the acquisition unit, the printing unit And the permission release means deletes information managed corresponding to the client identification information in the permission list . The client device is
Communication data transmission means for transmitting communication data including the client identification information in order to establish a connection for transmitting a job generated by the job generation means to the image forming apparatus;
The image forming apparatus includes:
Communication data receiving means for receiving the communication data from the client device;
Determining means for determining whether client identification information included in the communication data received by the communication data receiving means is managed in the permission list;
When the client identification information is not managed in the permission list by the determination means, no response is made to the communication data, and when the client identification information is managed in the permission list by the determination means, Response means for responding to the communication data in order to establish the connection between the client apparatus and the image forming apparatus;
2. The job receiving unit receives the job after the connection between the client apparatus and the image forming apparatus is established according to a response result by the response unit. Printing system. The permission command generation means further generates a permission command including a permission time for permitting execution of the job,
The registration unit registers client identification information, job identification information, and the permission time included in the permission command in the permission list in association with each other,
3. The printing system according to claim 1, wherein the permission canceling unit deletes information managed in accordance with the permission time based on the permission time managed in the permission list. The management device
Issuing means for issuing temporary identification information based on the fact that the user identification information included in the permission application data is managed in the user list;
A transmission unit that transmits the temporary identification information issued by the issuing unit to the client device;
The permission command generation means of the management device generates a permission command further including temporary identification information issued by the issuing means,
The job transmission unit of the client device transmits the temporary identification information together with the job to the image forming device,
The registration unit of the previous image forming apparatus registers the client identification information, job identification information, and temporary identification information included in the permission command in association with the permission list, and the printing unit of the previous image forming apparatus includes: The temporary identification information included in the job is registered in the permission list corresponding to the client identification information of the client apparatus that has transmitted the job, and print processing based on the job is executed. the system according to any one of claims 1 to 3, characterized. An image forming apparatus capable of communicating with a client apparatus that generates a job and a management apparatus for controlling print processing,
Permission command receiving means for receiving a permission command including job identification information of a job permitted to print from the management device and client identification information of a client device that transmits the job;
Registration means for associating client identification information included in the permission command received by the permission command receiving means with job identification information and registering it in a permission list for managing client identification information of a client device that permits job processing;
Job receiving means for receiving the job from the client device identified by the client identification information managed in the permission list;
Obtaining means for obtaining a hash value of a job received by the job receiving means;
Printing means for executing print processing based on the job received by the job receiving means;
Permission release means for deleting job identification information of the executed job and client identification information managed corresponding to the job identification information in the permission list after the printing process by the printing means is executed And having
The job identification information includes a hash value related to a job generated by the client device ,
When the hash value of the job identification information managed in the permission list corresponding to the client identification information of the client device that is the transmission source of the job is different from the hash value acquired by the acquisition unit, the printing unit The image forming apparatus is characterized in that the print processing based on the permission list is not executed, and the permission release unit deletes information managed in correspondence with the client identification information in the permission list . Communication data receiving means for receiving communication data including client identification information in order to establish a connection when transmitting the job from the client apparatus to the image forming apparatus;
Determining means for determining whether client identification information included in the communication data received by the communication data receiving means is managed in the permission list;
When the client identification information is not managed in the permission list by the determination means, no response is made to the communication data, and when the client identification information is managed in the permission list by the determination means, Response means for responding to the communication data in order to establish the connection between the client apparatus and the image forming apparatus;
The job receiving unit, after the connection between the client device and the image forming apparatus according to the result of response by said response means is established, according to claim 5, characterized in that to receive the job Image forming apparatus. A program for causing a computer to function as the means according to claim 5 or 6 .

Images