JP5586240B2 - Information processing system and access code generation method - Google Patents

Description

The present invention relates to an information processing system managed by a management apparatus and a maintenance apparatus, and an access code generation method in an image forming apparatus .

Conventionally, a security ensuring technique related to maintenance management of an information processing system is, for example, a non-contact type IC for maintenance personnel when a maintenance worker maintains the information processing system as described in Patent Document 1 below. There is known a technique that enables a setting operation only when an (Integrated Circuit) card is used.

JP 2007-003900 A

However, in the conventional information processing system and access code generation method , if a non-contact IC card for maintenance personnel is lost , there is a possibility that a malicious third party performs a setting operation. Furthermore, there has been a problem that it takes cost to incorporate a system such as a non-contact type IC card.

An information processing system according to a first aspect of the present invention is an access that generates a first sub access code and a second sub access code used for authentication, which are associated with a main access code used for authentication. A code generation unit, an authentication unit that invalidates the first sub-access code and invalidates the second sub-access code, and a new third sub-code when the first sub-access code is invalidated. An access code regenerating means for generating a fourth sub access code when the access code is generated and the second sub access code becomes invalid, and the first sub access code or the first sub code Before the second sub access code becomes invalid, the first sub access code and the second sub access code coexist in a valid state.
An access code generation method according to a second aspect of the present invention is an access code generation method in an image forming apparatus having an access code generation means, an authentication means, an invalidation means, and an access code regeneration means, wherein the access code The generation unit generates a first sub access code and a second sub access code used for authentication, which are associated with the main access code used for authentication, and generates the first sub access code and the second sub access code . The access code generation step for allowing the secondary access code to coexist in an effective state, the access means used for connection to the image forming apparatus, and the first secondary access code or the second secondary access code. an authentication step of determining whether the access code match, the invalid means, the accession in the authentication step The first sub-access code is invalidated after it is determined that the scan code matches the first sub-access code, or the access code matches the second sub-access code in the authentication step. An invalidation step of invalidating the second secondary access code after it is determined that the access code regenerating means invalidates the first secondary access code; An access code regenerating step for newly generating a fourth sub access code when the code is generated and the second sub access code becomes invalid .

The information processing system of the present invention has the following effects (A) and (B).

The main access code can manage settings and connected without number limitation of the (A) The information processing system, while concealing, since the limited management setting of the information processing system can be consigned to the maintenance company, the information processing system Security can be maintained.

(B) The secondary access code is automatically regenerated by the information processing system or the access code generation method every time it is used and invalidated, and sent to a preset mail address, etc. No need to regenerate each time it is done. Also, because the first sub-access code and the second sub-access code associated with the main access code coexist in a valid state, some sub-access codes cannot be used due to loss or transmission error. Even in this case, maintenance can be performed by using another sub-access code.

FIG. 1 is a schematic configuration diagram illustrating an information processing system according to the first embodiment of the present invention. FIG. 2 is a diagram illustrating an example of the billing setting 29 in the information processing system of FIG. FIG. 3 is a diagram showing an example in which the number of uses of the secondary access code in FIG. FIG. 4 is a diagram illustrating an example in which the sub access code As1234 of FIG. 3 is used five times and becomes invalid. FIG. 5 is a flowchart showing the operation of the information processing system of FIG. FIG. 6 is a flowchart showing the operation in step S6 of FIG. FIG. 7 is a flowchart showing the operation in step S23 of FIG. FIG. 8 is a diagram illustrating an example of a workflow of the information processing system of FIG. FIG. 9 is a schematic configuration diagram illustrating an information processing system according to the second embodiment of the present invention. FIG. 10 is a flowchart showing the operation of the information processing system of FIG. FIG. 11 is a flowchart showing the operation of step S6A of FIG. FIG. 12 is a flowchart showing the operation of step S23A of FIG. FIG. 13 is a flowchart showing the operation of the information processing system according to the third embodiment of the present invention. FIG. 14 is a flowchart showing the operation in step S34 in FIG. FIG. 15 is a flowchart showing the operation of the information processing system according to the fourth embodiment of the present invention. FIG. 16 is a flowchart showing the operation of step S6C of FIG. FIG. 17 is a flowchart showing the operation of step S81C of FIG.

  Modes for carrying out the present invention will become apparent from the following description of the preferred embodiments when read in light of the accompanying drawings. However, the drawings are only for explanation and do not limit the scope of the present invention.

(Configuration of Example 1)
FIG. 1 is a schematic configuration diagram illustrating an information processing system according to the first embodiment of the present invention.

The information processing system according to the first embodiment includes a user office 10, the Internet 60, and a dealer office 70, and the user office 10 and the dealer office 70 are connected via the Internet 60.

  The user office 10 includes an in-house LAN (Local Area Network) 11 and an image forming apparatus 20. A management apparatus 40 managed by the dealer and a maintenance apparatus 50 managed by the maintenance company can be connected to the in-house LAN 11. It is. The image forming apparatus 20 in FIG. 1 is connected to the Internet 60 via the in-house LAN 11, but may not be connected to the Internet 60. The management device 40 is used when a dealer makes a billing-related setting for delivery of the image forming apparatus 20 to the user side office 10 and when the dealer goes to the user side office 10 to maintain and manage the image forming apparatus 20. Used. When the dealer entrusts maintenance to a maintenance company, the maintenance apparatus 50 is used when the maintenance company goes to the user office 10 to maintain and manage the image forming apparatus 20.

  The image forming apparatus 20 includes an operation unit 21 that operates the image forming apparatus 20, a storage unit 22 that stores data such as an access code, a management device 40, a maintenance device 50, and a dealer side office via the in-house LAN 11. The communication control unit 23 that communicates with the accounting server 80 and the like 70, and the access code generation unit 24 that generates a secondary access code necessary for authentication of the management tool 41 and the management tool 51 installed in the management device 40 and the maintenance device 50. A printing unit 25 that performs printing, a display unit 26 that displays an operation result of the operation unit 21 and a state of the image forming apparatus 20, an access code management unit 27 that manages a main access code and a sub access code, and A billing management unit 28 for managing billing.

An operation unit 21, a storage unit 22, a communication control unit 23, an access code generation unit 24, a printing unit 25, a display unit 26, an access code management unit 27 having functions as an authentication unit and an invalidation unit , and a billing management unit 28, The image forming apparatuses 20 are connected to each other via an internal bus, and the communication control unit 23 is further connected to the in-house LAN 11.

  The access code generation unit 24 generates a secondary access code so as not to overlap with the main access code by using a random number generation algorithm such as the squaring method, the linear congruential method, the mixed congruential method, the Lagged Fibonacci method, the chaos random number method, or the like. . As an example, if the same sub access code as the main access code is generated, the sub access code can be generated so as not to overlap with the main access code by discarding the sub access code and generating the sub access code again. However, the secondary access code may be generated by other methods so as not to overlap with the main access code. The storage unit 22 stores a billing setting 29.

The management apparatus 40 is a management apparatus owned by a dealer, and a management tool 41 for setting the image forming apparatus 20 is installed. The maintenance device 50 is a maintenance device owned by a maintenance company, and in the same manner as the management device 40, a management tool 51 for setting the image forming apparatus 20 is installed. The management tool 41 and the management tool 51 are applications that connect to the image forming apparatus 20 via the in-house LAN 11 and perform management settings. The management apparatus 40 accesses the image forming apparatus 20 using the main access code. This is due to the management means management tool 41 of the management apparatus 40 has. The secondary access code used by the maintenance device 50 is transmitted from the dealer to the maintenance company by telephone or e-mail, and the maintenance device 50 accesses the image forming apparatus 20 using the secondary access code. This is due to the maintenance unit that has management tools 51 of the maintenance device 50.

  The dealer side office 70 includes an in-house LAN 71, a billing server 80 that periodically receives billing data from the image forming apparatus 20 via the Internet 60, and a secondary access code by e-mail from the image forming apparatus 20 via the Internet 60. Is provided with a dealer-side personal computer (hereinafter referred to as “PC (Personal Computer)”) 90. The billing server 80 and the dealer-side PC 90 are connected to the Internet 60 via an in-house LAN 71, respectively. The charging data includes, for example, the usage amount (for example, the number of rotations) of the photosensitive drum unit, the usage amount of toner from the toner tank, the number of recording media used for printing, and the like, and data for charging the usage fee of the image forming apparatus 20 It is. If the billing data cannot be transmitted from the image forming apparatus 20 through the Internet 60, the dealer connects the management device 40 to the in-house LAN 11 of the user side office 10 and sucks the billing data.

FIG. 2 is a diagram illustrating an example of the billing setting 29 in the information processing system of FIG.
The billing setting 29 is composed of a level disclosed to the administrator and a maintenance level. The level disclosed to the administrator is administrator mode / maintenance mode / user mode / charging mode consisting of any setting value, main access code consisting of alphanumeric characters of arbitrary digits, and English of arbitrary digits as well. Multiple (for example, N) sub-access codes consisting of numbers, the number of sub-access code generations consisting of the number of sub-access code generations, every consumption / every sub-access code consumption / any setting value A sub-access code generation timing, a sub-access code usage count consisting of the number of times the sub-access code can be accessed, a destination e-mail address consisting of a destination e-mail address to which the sub-access code is transmitted, billing data, and It consists of other administrator settings. The maintenance level is composed of a charging operation state consisting of setting values of either operation / stop and other maintenance settings. In the first embodiment, the destination e-mail address is set to an e-mail address that can be received by the dealer-side PC 90.

  When setting the image forming apparatus 20 for the first time, a default main access code is stored in the billing setting 29 in advance. Once the accounting operation is started, the management tool 41 of the management apparatus 40 cannot be connected without using the main access code. If the management tool 41 of the management apparatus 40 is not connected using the main access code, the level disclosed to the administrator of the billing setting 29 cannot be displayed or changed. When the management tool 51 of the maintenance device 50 is connected using the secondary access code, only the maintenance level item of the charge setting 29 is displayed or changed.

  When the charging setting 29 of the image forming apparatus 20 is changed using the management tool 41 and the charging operation is started, the access code generation unit 24 of the image forming apparatus 20 generates a sub access code. This is due to the access code generation means that the access code generation unit 24 has.

FIG. 3 is a diagram showing an example in which the number of uses of the secondary access code in FIG.
Abcdefg, As1234, Gfr99gsdgas, Lo09jff, Bi30400gfgg, which are five sub-access codes of an arbitrary number of alphanumeric characters, are generated. These setting values are all unused and indicate that the remaining five connections can be made.

  The secondary access code is an access code for connecting to the image forming apparatus 20 from the management tool 51 of the maintenance apparatus 50 owned by the maintenance company, and can be connected a limited number of times. When the secondary access code is used, the session from the connection to the image forming apparatus 20 with the management tool 51 of the maintenance apparatus 50 is disconnected as one session, and this session can be executed as many times as the number of secondary access codes used in the billing setting 29. . The number of sub-access codes to be generated depends on the number of sub-access codes generated in the billing setting 29.

  For example, when the secondary access code usage count is 1, the maintenance company can connect to the image forming apparatus 20 only once using the secondary access code. The access code management unit 27 of the image forming apparatus 20 remembers the number of remaining connections for each sub access code, and if the number of remaining connections is 0, the sub access code is invalid.

  FIG. 4 is a diagram illustrating an example in which the sub access code As1234 of FIG. 3 is used five times and becomes invalid.

  The sub-access code As1234 is in an invalid state and indicates that connection will no longer be possible. The secondary access codes Abcdefg, Gfr99gsdgas, Lo09jff, Bi30400gfgg are unused and indicate that the remaining five connections can be made.

  The access code generation unit 24 of the image forming apparatus 20 newly generates one new sub access code if one sub access code becomes invalid, or if all sub access codes become invalid, Generate all new secondary access codes at once. This is due to the access code regenerating means that the access code generating unit 24 has.

  When the management tool 41 of the management apparatus 40 is connected to the image forming apparatus 20 using the main access code, it can be instructed to transmit the sub access code to the management apparatus 40, and the sub access code can be sent to the printing unit 25 of the image forming apparatus 20. The secondary access code can be set to be sent to the destination email address by email.

  The image forming apparatus 20 can print the sub-access code by the printing unit 25 according to an instruction from the management apparatus 40, and this is performed by an access code printing unit included in the image forming apparatus 20.

  When a new secondary access code is generated, the image forming apparatus 20 transmits the secondary access code to the transmission destination e-mail address. This is due to the access code transmission means possessed by the image forming apparatus 20. The transmitted secondary access code can be viewed on the dealer-side PC 90 of the external device.

(Operation of Example 1)
The image forming apparatus 20 is not charged when shipped from the dealer. When the image forming apparatus 20 is installed in the user side office 10 and charged for operation, the dealer uses the management apparatus 40 to check the charging operation state of the charging setting 29 stored in the storage unit 22 of the image forming apparatus 20. Set to “Operation” and start billing operation.

FIG. 5 is a flowchart showing the operation (access code generation method) of the information processing system of FIG.

  When the process is started, the image forming apparatus 20 sets the charging mode to the user mode in step S1, and determines whether or not the time for periodic transmission has come in step S2. When the time for regular transmission is reached, in step S10, the accounting data is transmitted to the accounting server 80 via the Internet 60, and then the processing returns to step S1. By this processing, the billing server 80 can automatically collect billing data related to the image forming apparatus 20 installed in the user side office 10.

  In step S <b> 3, the image forming apparatus 20 determines whether the management apparatus 40 is connected using the main access code or the maintenance apparatus 50 is connected using the sub access code. If neither is connected, the process returns to step S1. The access code used for connection to the image forming apparatus 20 is hereinafter referred to as “specified access code”. In step S4, it is determined whether or not the designated access code is a main access code. If it is not the main access code, the process of step S20 is performed.

  In step S5, the image forming apparatus 20 sets the charging mode to the administrator mode. In step S6, after processing a series of instructions from the management apparatus 40, the process returns to step S1.

In step S20 as an authentication step, the access code management unit 27 of the image forming apparatus 20 determines whether or not the designated access code matches any of the secondary access codes. In step S21, the matching secondary access code ( Hereinafter, it is determined whether or not “corresponding secondary access code” is valid.The designated access code does not match any of the secondary access codes, or the designated access code is valid. If not, in step S40, a response is made that the access code is invalid, and then the process returns to step S1.

In step S22, the image forming apparatus 20 sets the charging mode to the maintenance mode. In step S23, the image forming apparatus 20 processes a series of instructions from the maintenance apparatus 50. In step S24, the corresponding sub access code connection count is reduced by one. In step S25 as an invalid step , it is determined whether or not the corresponding secondary access code becomes 0 and becomes invalid. If the sub-access code is not invalid, the process returns to step S1.

  In step S <b> 26, the image forming apparatus 20 determines whether or not the secondary access code generation timing of the charging setting 29 is every time all the secondary access codes are consumed. If the secondary access code generation timing is not every time all the secondary access codes are consumed, the process of step S30 is performed.

In step S27 of steps S27 and S31 as the access code regeneration step , the image forming apparatus 20 recreates one sub-access code, and then in step S28, the mail designated as the destination e-mail address. The re-created sub-access code and the invalid sub-access code are transmitted to the address (hereinafter referred to as “designated mail address”), and the process returns to step S1.

  In step S <b> 30, the image forming apparatus 20 determines whether all the secondary access codes are invalidated. If all the secondary access codes are not invalidated, the process returns to step S1.

  In step S31, the image forming apparatus 20 re-creates all the sub-access codes, and then transmits all the re-created sub-access codes to the designated mail address in step S32. Then, the process returns to step S1.

  The dealer-side PC 90 can receive mail sent to a designated mail address. Therefore, in step S28 and step S32, when the secondary access code re-created by the image forming apparatus 20 and transmitted to the designated mail address receives the mail related to the designated mail address from the dealer side PC 90, the image forming apparatus 20 20 can know the sub-access code recreated. By disclosing the sub-access code recreated by the image forming apparatus 20 to the maintenance company, the image forming apparatus 20 installed in the user side office 10 can be maintained by the maintenance apparatus 50 managed by the maintenance company.

FIG. 6 is a flowchart showing the operation in step S6 of FIG.
When the processing is started, the image forming apparatus 20 determines whether or not there is an instruction from the management apparatus 40 via the in-house LAN 11 in step S50. If there is an instruction from the management device 40 via the in-house LAN 11, the process of step S52 is performed.

  In step S <b> 51, the image forming apparatus 20 determines whether disconnection is requested from the management apparatus 40 via the in-house LAN 11. If it is determined that the disconnection is requested, the process of FIG. 6 is terminated. If not, the process returns to step S50.

  In step S <b> 52, the image forming apparatus 20 determines whether or not the management apparatus 40 has instructed setting of the main access code. If it is determined that setting of the main access code is instructed, in step S70, the main access code instructed to set is stored in the billing setting 29 of the storage unit 22, and the process returns to step S50.

  In step S <b> 53, the image forming apparatus 20 determines whether the management apparatus 40 has instructed transmission of the secondary access code stored in the billing setting 29. If it is determined that the transmission of the secondary access code stored in the billing setting 29 has been instructed, the sub access code stored in the billing setting 29 is transmitted to the management device 40 via the communication control unit 23 in step S71. The process returns to step S50.

  In step S <b> 54, the image forming apparatus 20 determines whether the management apparatus 40 has instructed printing of the secondary access code stored in the billing setting 29. If it is determined that printing of the sub access code stored in the billing setting 29 is instructed, in step S72, the sub access code stored in the billing setting 29 is printed by the printing unit 25, and the process returns to step S50.

  In step S <b> 55, the image forming apparatus 20 determines whether or not the management apparatus 40 has instructed to reset the secondary access code stored in the billing setting 29. If it is determined that an instruction to reset the sub access code stored in the billing setting 29 has been issued, all the sub access codes stored in the billing setting 29 are regenerated in step S73, and the process returns to step S50.

  In step S <b> 56, the image forming apparatus 20 determines whether or not the management apparatus 40 has instructed the administrator to change the public level charging setting 29. If it is determined that an instruction to change the public-level charging setting 29 is given to the administrator, the public-level charging setting 29 is changed to the administrator in step S74, and the process returns to step S50.

  In step S <b> 57, the image forming apparatus 20 determines whether or not the management apparatus 40 has instructed to change the charge setting 29 for the maintenance level. If it is determined that the change of the maintenance level charging setting 29 is instructed, in step S75, it is determined whether or not the charging operation state is set to “operation” and the start of the charging operation is instructed. If it is determined that the start of billing operation has not been instructed, the billing setting 29 at the maintenance level is changed in step S79, and the process returns to step S50.

In step S76, it is determined whether or not the charging operation is being performed. If it is determined that the charging operation is being performed, in step S80, “already charging operation is in progress” is warned and the process returns to step S50. Otherwise, in step S77 as an access code generation step, all specified numbers of secondary access codes are generated and billing operation is started. Then, in step S78, the secondary access code re-created at the specified mail address. And returns to the process of step S50.

  Therefore, in step S78, when the secondary access code recreated by the image forming apparatus 20 and transmitted to the designated mail address receives the mail related to the designated mail address from the dealer-side PC 90, the image forming apparatus 20 re-creates it. You can know the created secondary access code. By disclosing the sub-access code recreated by the image forming apparatus 20 to the maintenance company, the image forming apparatus 20 installed in the user side office 10 can be maintained by the maintenance apparatus 50 managed by the maintenance company.

  In step S <b> 58, the image forming apparatus 20 determines whether the management apparatus 40 has instructed to change the setting of the image forming apparatus 20. If it is determined that the setting change of the image forming apparatus 20 has been instructed, the setting of the image forming apparatus 20 is changed in step S81, and the process returns to step S50.

  In step S <b> 59, the image forming apparatus 20 determines whether the management apparatus 40 has instructed transmission of billing data. If it is determined that transmission of billing data has been instructed, billing data is transmitted in step S82, and the process returns to step S50. If it is determined that transmission of billing data is not instructed, the process returns to step S50.

FIG. 7 is a flowchart showing the operation in step S23 of FIG.
When the processing is started, the image forming apparatus 20 determines whether or not there is an instruction from the maintenance apparatus 50 via the in-house LAN 11 in step S90. If there is an instruction from the maintenance device 50 via the in-house LAN 11, the process of step S92 is performed.

  In step S <b> 91, the image forming apparatus 20 determines whether disconnection is requested from the maintenance apparatus 50 via the in-house LAN 11. If it is determined that the disconnection has been requested, the process of FIG. 7 is terminated. If not, the process returns to step S90.

  In step S <b> 92, the image forming apparatus 20 determines whether the main access code setting is instructed from the maintenance apparatus 50. If it is determined that the setting of the main access code has been instructed, “designation instruction is not accepted” is displayed in step S100, and the process returns to step S90.

  In step S <b> 93, the image forming apparatus 20 determines whether or not the maintenance apparatus 50 has instructed transmission of the secondary access code stored in the billing setting 29. If it is determined that the transmission of the secondary access code stored in the billing setting 29 has been instructed, “designation instruction is not accepted” is displayed in step S101, and the process returns to step S90.

  In step S <b> 94, the image forming apparatus 20 determines whether the maintenance apparatus 50 has instructed printing of the sub access code stored in the billing setting 29. If it is determined that an instruction to print the sub-access code stored in the billing setting 29 is given, “No designation instruction is accepted” is displayed in step S102, and the process returns to step S90.

  In step S <b> 95, the image forming apparatus 20 determines whether or not the maintenance apparatus 50 has instructed to reset the secondary access code stored in the billing setting 29. If it is determined that resetting of the secondary access code has been instructed, “designation instruction is not accepted” is displayed in step S103, and the process returns to step S90.

  In step S <b> 96, the image forming apparatus 20 determines whether or not the maintenance apparatus 50 has instructed the administrator to change the public level charging setting 29. If it is determined that the administrator has instructed the administrator to change the accounting level 29 for the public level, in step S104, “designation instruction is not accepted” is displayed, and the process returns to step S90.

  In step S <b> 97, the image forming apparatus 20 determines whether or not the maintenance apparatus 50 has instructed to change the maintenance level charge setting 29. If it is determined that a change in the maintenance level charging setting 29 has been instructed, it is determined in step S105 whether or not the charging operation state is set to “operation” and the start of charging operation has been instructed. If it is determined that the start of charging operation has not been instructed, the charging setting 29 at the maintenance level is changed in step S109, and the process returns to step S90.

  In step S106, it is determined whether or not the billing operation is being performed. If it is determined that the billing operation is being performed, a warning that “already the billing operation is in progress” is issued in step S110, and the process returns to step S90. Otherwise, charging operation is started in step S107, and the process returns to step S90.

  In step S <b> 98, the image forming apparatus 20 determines whether or not the maintenance apparatus 50 has instructed the setting change of the image forming apparatus 20. If it is determined that the setting change of the image forming apparatus 20 has been instructed, the setting of the image forming apparatus 20 is changed in step S111, and the process returns to step S90.

In step S99, the image forming apparatus 20 determines whether or not the maintenance apparatus 50 has instructed transmission of billing data. If it is determined that transmission of billing data has been instructed, billing data is transmitted in step S112, and the process returns to step S90. If the transmission of billing data is determined not been instructed, the process returns to step S90.

FIG. 8 is a diagram illustrating an example of a workflow of the information processing system in FIG.
At time T0, the management apparatus 40 connects to the image forming apparatus 20 with a main access code, and sets the image forming apparatus 20 to the administrator mode. When the management apparatus 40 instructs the image forming apparatus 20 to transmit the secondary access code stored in the charging setting 29 at time T1, the image forming apparatus 20 transmits the secondary access stored in the charging setting 29 at time T2. The code is transmitted to the management device 40.

  At time T3, when the management apparatus 40 disconnects from the image forming apparatus 20, the image forming apparatus 20 returns to the normal mode. At time T <b> 4, the image forming apparatus 20 transmits charging data to the charging server 80. This transmission is performed periodically.

  At time T5, the maintenance device 50 connects to the image forming apparatus 20 with the sub access code, and sets the image forming apparatus 20 to the maintenance mode. At time T6, when maintenance device 50 disconnects from image forming apparatus 20, at time T7, image forming apparatus 20 transmits the newly generated secondary access code to dealer-side PC 90 by e-mail, and in normal mode. Return to. Further, at times T8 and T9, the image forming apparatus 20 transmits billing data to the billing server 80.

(Effect of Example 1)
The information processing system according to the first embodiment has the following effects (A) and (B).

  (A) Since a main access code that can be connected to the image forming apparatus 20 without limitation and managed and set can be concealed, limited management and setting of the image forming apparatus 20 can be entrusted to a maintenance company. The security of the device 20 can be maintained.

(B) The secondary access code is automatically regenerated by the image forming apparatus 20 or the access code generation method every time it is used and invalidated, and is transmitted to a preset mail address. Therefore, the secondary access code is consumed. No need to regenerate each time it is done. Also, because the first sub-access code and the second sub-access code associated with the main access code coexist in a valid state, some sub-access codes cannot be used due to loss or transmission error. Even in this case, maintenance can be performed by using another sub-access code.

(Configuration of Example 2)
FIG. 9 is a schematic configuration diagram illustrating an information processing system according to the second embodiment of the present invention. Elements common to those in FIG. 1 illustrating the first embodiment are denoted by common reference numerals.

The information processing system according to the second embodiment includes a user-side office 10A having a configuration different from that of the user-side office 10 according to the first embodiment, the Internet 60, and the dealer-side office 70 similar to those in the first embodiment. ing. In the user side office 10A, an image forming apparatus 20A having a configuration different from that of the image forming apparatus 20 of the first embodiment, an in-house LAN 11 similar to that of the first embodiment, a management apparatus 40 managed by the dealer side, and a maintenance company side manage it. And a maintenance device 50.

  As in the first embodiment, the image forming apparatus 20A includes an operation unit 21 that operates the image forming apparatus 20A, a storage unit 22 that stores data such as an access code, and a management device 40 and a maintenance device 50 via the in-house LAN 11. The communication control unit 23 that communicates with the billing server 80 of the dealer side office 70, and the sub-access code necessary for authentication of the management tool 41 and the management tool 51 installed in the management device 40 and the maintenance device 50 are generated. An access code generation unit 24, a printing unit 25 that performs printing, a display unit 26 that displays an operation result of the operation unit 21 and a state of the image forming apparatus 20A, and an access code management that manages a main access code and a sub access code And a charging management unit 28 for managing charging, and an encryption unit 30 for encrypting the sub-access code. The encryption unit 30 is connected to the internal bus of the image forming apparatus 20A.

(Operation of Example 2)
In the first embodiment, the generated secondary access code is printed in plain text by the printing unit 25 of the image forming apparatus 20 and transmitted to the e-mail address designated by the communication control unit 23 in plain text. In the second embodiment, the access code generation unit 24 of the image forming apparatus 20A newly generates a secondary access code, and then encrypts it with the encryption unit 30. The encryption unit 30 encrypts the main access code as a common key by a method such as DES (Data Encryption Standard) encryption or AES (Advanced Encryption Standard) encryption. Decrypting the encrypted secondary access code requires a main access code as a common key.

  In the first embodiment, printing and transmission of the secondary access code stored in the billing setting 29 is permitted only when connected to the apparatus using the primary access code. However, in the second embodiment, the secondary access code is connected using the secondary access code. Even in such a case, printing of the encrypted secondary access code and transmission to the mail address are permitted. The encrypted secondary access code is decrypted using the decryption tool and the common access main access code.

FIG. 10 is a flowchart showing the operation of the information processing system in FIG. 9 , and elements common to those in FIG. 5 showing the first embodiment are denoted by common reference numerals.

  The processing of steps S1 to S5, the processing of steps S10 to S22, the processing of steps S24 to 27, and the processing of steps S30 to S31 are the same as in the first embodiment, but steps S6A and S23A are the same as step S6 of the first embodiment. , S23 is performed differently. In the second embodiment, after performing the process of step S27, the process of a new step S29 is performed, and after the process of step S31 is performed, the process of a new step S33 is performed.

  In step S29, the image forming apparatus 20A encrypts the generated sub access code by the encryption unit 30, and then performs the process of step S28. Similarly, in step S33, the image forming apparatus 20A encrypts the generated secondary access code by the encryption unit 30, and then performs the process of step S32.

  FIG. 11 is a flowchart showing the operation of step S6A in FIG. 10, and elements common to those in FIG. 6 showing the first embodiment are denoted by common reference numerals.

  In the second embodiment, the processing in steps S50 to S52, the processing in steps S55 to S59, the processing in step S70, and the processing in steps S73 to S82 are the same as those in the first embodiment. In step S <b> 53, the image forming apparatus 20 </ b> A determines whether or not the management apparatus 40 has instructed transmission of the secondary access code stored in the billing setting 29. If it is determined that the transmission of the sub-access code stored in the billing setting 29 is instructed, in step S83, the sub-access code stored in the billing setting 29 is encrypted by the encryption unit 30, and then in step S84. The encrypted secondary access code is transmitted to the management apparatus 40 via the communication control unit 23, and the process returns to step S50.

  In step S54, the image forming apparatus 20A determines whether or not the management apparatus 40 has instructed printing of the secondary access code stored in the billing setting 29. If it is determined that printing of the secondary access code stored in the billing setting 29 is instructed, it is determined in step S85 whether or not there is an encryption instruction. If there is no encryption instruction, in step S72. Then, the secondary access code stored in the billing setting 29 is printed by the printing unit 25, and the process returns to step S50. If there is an instruction to encrypt, the secondary access code stored in the billing setting 29 is encrypted by the encryption unit 30 in step S86, and then the encrypted secondary access code is printed by the printing unit 25 in step S87. Then, the process returns to step S50.

  FIG. 12 is a flowchart showing the operation of step S23A in FIG. 10, and common elements to those in FIG.

  In the second embodiment, the processing in steps S90 to S92, the processing in steps S95 to S99, the processing in step S100, and the processing in steps S103 to S112 are the same as those in the first embodiment. In step S93, the image forming apparatus 20A determines whether or not the maintenance apparatus 50 has instructed transmission of the sub access code stored in the billing setting 29. If it is determined that the transmission of the secondary access code stored in the billing setting 29 is instructed, in step S120, the sub access code stored in the billing setting 29 is encrypted by the encryption unit 30, and then in step S121. The encrypted secondary access code is transmitted to the maintenance device 50 via the communication control unit 23, and the process returns to step S90.

  In step S94, the image forming apparatus 20A determines whether or not the maintenance apparatus 50 has instructed printing of the sub access code stored in the billing setting 29. If it is determined that printing of the secondary access code stored in the billing setting 29 is instructed, the secondary access code is encrypted by the encryption unit 30 in step S122, and then the encrypted secondary access code is displayed in step S123. Printing is performed by the printing unit 25, and the process returns to step S90.

(Effect of Example 2)
The information processing system according to the second embodiment has the following effects (C) and (D) in addition to the effects of the first embodiment.

  (C) Even when the image forming apparatus 20A is in an environment where it is not possible to send an e-mail to the dealer-side PC 90, the maintenance contractor uses the maintenance apparatus 50 to connect using the secondary access code, and prints the encrypted secondary access code. By transmitting to, the secondary access code decoded from the dealer can be obtained. It is not necessary for the dealer to go to the user office 10 and connect to the management apparatus 40 using the main access code to acquire the sub access code, thereby improving work efficiency.

  (D) Since the secondary access code is encrypted and sent to the email address, even if a third party intercepts the email, the encrypted secondary access code written in the email cannot be used as it is. Security is improved.

(Configuration of Example 3)
The configuration of the information processing system in the third embodiment of the present invention is the same as the configuration of the first embodiment shown in FIG.

(Operation of Example 3)
FIG. 13 is a flowchart illustrating the operation of the information processing system according to the third embodiment of the present invention. Elements common to those in FIG. 5 illustrating the first embodiment are denoted by common reference numerals.

In the third embodiment, the processes in steps S1 to S32 are the same as those in the first embodiment.
After the process in step S28 is performed and after the process in step S32 is performed, the process in step S34 is performed. In step S34, the image forming apparatus 20 determines the frequency of transmitting the secondary access code to the designated mail address, changes the secondary access code generation timing, and returns to the processing in step S1.

FIG. 14 is a flowchart showing the operation in step S34 in FIG.
When the process is started, the image forming apparatus 20 records a log of the date and time when this mail is transmitted in the storage unit 22 in step S130. In step S131, for example, the mail transmission log for the most recent January is acquired from the storage unit 22, and the number of mail transmissions is counted. In the third embodiment, the month is January, but it may be one week or three months. This is performed by a transmission frequency recording unit included in the image forming apparatus 20.

In step S132, if the image forming apparatus 20 determines that e-mail transmission has been performed over a certain frequency in the last January, the sub access code generation timing is set to “every time all consumption” in step S134. If the email transmission does not exceed a certain frequency, the sub access code generation timing is set to “every time consumed” in step S133, and the processing of FIG. Here, the fixed frequency is a frequency that would be troublesome for humans to process mail. For example, the average number of mails per day may exceed one. The access code generation timing is a generation mode setting, and the generation mode is changed by a generation mode setting changing unit included in the image forming apparatus 20.

(Effect of Example 3)
The image forming apparatus 20 of the third embodiment has the following effects (E) and (F) in addition to the effects of the first embodiment.

  (E) When the mail related to the secondary access code is frequently transmitted, it is set to be generated every time the secondary access code is consumed, and the mail transmission frequency is reduced spontaneously. Therefore, a person having a mail address does not need to process many received mails at a time.

  (F) When the frequency of mail transmission of the secondary access code is low, it is set to be generated every time the secondary access code is consumed one by one, and the mail transmission is frequently performed voluntarily. Therefore, the person who has the mail address can grasp how the secondary access code is consumed.

(Configuration of Example 4)
The configuration of the information processing system in the fourth embodiment of the present invention is the same as the configuration of the first embodiment shown in FIG.

(Operation of Example 4)
FIG. 15 is a flowchart illustrating the operation of the information processing system according to the fourth embodiment of the present invention. Elements common to the elements in FIG. 5 illustrating the first embodiment are denoted by common reference numerals.

  In the fourth embodiment, the process in step S6C is different from that in the first embodiment, but the processes in steps S1 to S5 and the processes in steps S10 to S32 are the same as those in the first embodiment.

  FIG. 16 is a flowchart showing the operation of step S6C in FIG. 15, and elements common to those in FIG. 6 showing the first embodiment are denoted by common reference numerals.

  In the fourth embodiment, the process in step S81C is different from that in the first embodiment, but the processes in steps S1 to S80 and the process in step S82 are the same as those in the first embodiment.

FIG. 17 is a flowchart showing the operation of step S81C of FIG.
When the process starts, the image forming apparatus 20 determines whether or not it is an instruction for the number of sub-access code generations in step S140. If it is an instruction for the number of secondary access codes to be generated, the process of step S141 is performed, otherwise the process of FIG. 17 is terminated.

  In step S <b> 141, the image forming apparatus 20 sets the number of secondary access code generations of the billing setting 29. This is due to the generation number changing means provided in the image forming apparatus 20.

  In step S142, the image forming apparatus 20 determines whether the number of secondary access code settings is equal to or less than a certain number. If it is equal to or less than a certain number, the secondary access code generation timing is set to “every time consumed” in step S144. Otherwise, the secondary access code generation timing is set to “every time consumed” in step S143. To complete the processing of FIG. If it is not less than a certain number, in step S145, a device setting change instruction other than the sub-access code generation timing is processed, and the processing in FIG. 17 ends.

(Effect of Example 4)
According to the information processing system of the fourth embodiment, in addition to the effects of the first embodiment, the following effects (G) are obtained.

  (G) When the number of secondary access codes generated is small, it is set to be generated every time one secondary access code is consumed, so that a constant stock of valid secondary access codes can always be secured. It is possible to prevent a situation where maintenance cannot be performed because all access codes are invalid.

(Modification)
The present invention is not limited to the above-described embodiments, and various usage forms and modifications are possible. For example, the following forms (a) to (e) are available as usage forms and modifications.

  (A) Embodiments 1 to 4 relate to the image forming apparatuses 20 and 20A, but are not limited thereto, and are scanners, facsimile apparatuses, composite devices, home appliances, and the like, and include a management apparatus 40 and a maintenance apparatus. 50 is applicable if it is connected to 50 and managed.

(B) in Examples 1-4, but the specified mail address was to browse at the dealer side PC90 in dealer side office 70 is not limited to this, mobile phone or PDA (Personal Digital Assistant ) Etc. may be designated. Thereby, not only the dealer-side PC 90 in the dealer-side office 70 but also the effect of being able to acquire the secondary access code without being restricted by the place is achieved.

(C) The second embodiment is an encryption method using a common key, and the main access code is used as the common key. However, the present invention is not limited to this, and a public key encryption method is adopted, and an encryption key and a decryption key are used. The key may be different. Thereby, there exists an effect which can employ | adopt arbitrary encryption systems.

(D) When the minimum number of sub-access codes is set in the image forming apparatuses 20 and 20A, and the number of valid sub-access codes becomes the minimum number, new sub-access codes corresponding to the difference between the sub-access code generation number and the minimum number are newly added. An access code may be recreated and sent to a designated email address. Thus, there is an effect that the minimum number of secondary access codes can always be stocked.

(E) In Examples 1-4, the management apparatus 40 and maintenance device 50 had been connected to the image forming apparatus 20,20A via the internal LAN 11, is not limited to this, Ya USB (Universal Serial Bus) The image forming apparatuses 20 and 20A may be connected via communication means such as IEEE 1394 (Institute of Electrical and Electronic Engineers 1394). Thereby, there exists an effect similar to Examples 1-4.

20 , 20A Image forming apparatus 21 Operation unit 22 Storage unit 23 Communication control unit 24 Access code generation unit 25 Printing unit 26 Display unit 27 Access code management unit 28 Charging management unit 29 Charging setting 30 Encryption unit 40 Management device 50 Maintenance device 80 Billing server 90 Dealer side PC

Claims (12)

Associated with the primary access code used for authentication, the access code generating means for generating a and the first sub-access code used for authentication second secondary access code,
Authentication means for invalidating the first secondary access code and invalidating the second secondary access code;
When the first secondary access code is invalid, a new third secondary access code is generated, and when the second secondary access code is invalid, a fourth secondary access code is newly generated . and code re-generating means,
Equipped with a,
Before the first sub access code or the second sub access code becomes invalid, the first sub access code and the second sub access code coexist in a valid state. Information processing system. The authentication means includes
When authentication using the first secondary access code is executed a predetermined number of times, the first secondary access code is invalidated,
2. The information processing system according to claim 1 , wherein when the authentication using the second secondary access code is executed a predetermined number of times, the second secondary access code is invalidated . When the third secondary access code is generated, the third secondary access code is transmitted to an external device, and when the fourth secondary access code is generated, the fourth secondary access code is transmitted to the external device. The information processing system according to claim 1, further comprising: an access code transmission unit configured to transmit to the apparatus . The access code regeneration means
When both the first sub access code and the second sub access code are invalid, the third sub access code and the fourth sub access code are newly generated.
The information processing system according to any one of claims 1 to 3. The access code regeneration means
When the second secondary access code is valid and the first secondary access code is invalid, the third secondary access code is newly generated,
When the first secondary access code is valid and the second secondary access code is invalid, the fourth secondary access code is newly generated.
The information processing system according to any one of claims 1 to 4, wherein: Management device authentication means for authenticating the management device by the main access code;
Generation mode setting changing means for changing the generation mode setting according to an instruction of the management device,
The access code regeneration means
If the second sub-access code is valid and the first sub-access code is invalid due to the generation mode setting, the third sub-access code is newly generated, and the first sub-access code is generated. When the access code is valid and the second secondary access code is invalid, the fourth secondary access code is newly generated, or the first secondary access code and the second secondary access code are generated. If both the access code and the access code become invalid, the third sub-access code and the fourth sub-access code are newly generated, or one of them is switched,
The access code transmitting means includes
One of the third sub-access code or the fourth sub-access code newly generated by the access code regenerating unit, or the third sub-access code and the fourth sub-access code The information processing system according to claim 3, wherein the information processing system is transmitted to the external device. The access code transmitting means includes
When the second sub-access code is valid and the first sub-access code is invalidated, the third sub-access code is newly generated by the access code regenerating unit, and the first sub-access code is generated. If the second sub-access code is valid and the second sub-access code is invalid, the third sub-access is newly generated when the fourth sub-access code is newly generated. 7. The information according to claim 6, wherein the code or the fourth sub-access code and the invalidated first sub-access code or the second sub-access code are transmitted to the external device. Processing system. The information processing system according to claim 6 or 7, further comprising:
Transmission frequency recording means for recording the transmission frequency to the external device,
When the transmission frequency recorded by the transmission frequency recording unit is equal to or greater than a predetermined value, the access code regenerating unit is when both the first sub access code and the second sub access code are invalidated. The information processing system is characterized in that the generation mode setting is changed so as to newly generate the third sub access code and the fourth sub access code. The information processing system according to claim 6 or 7, further comprising:
Transmission frequency recording means for recording the transmission frequency to the external device,
If the transmission frequency recorded by the transmission frequency recording unit is less than a predetermined value, the second access code is valid and the first secondary access code is invalid. In this case, the third secondary access code is newly generated, and when the first secondary access code is valid and the second secondary access code is invalid, the fourth secondary access code is An information processing system, wherein the generation mode setting is changed so as to newly generate. The information processing system according to claim 6 or 7, further comprising:
A generation number changing means for changing the number of sub-access code generations according to an instruction from the management device;
The access code re-generation unit determines whether the first sub-access code and the second sub-access code when the sub-access code generation number changed by the generation number changing unit is changed to a predetermined number or more. An information processing system that changes the generation mode setting to newly generate the third sub-access code and the fourth sub-access code when both become invalid. The information processing system according to claim 6 or 7, further comprising:
A generation number changing means for changing the number of sub-access code generations according to an instruction from the management device;
The access code regeneration means is configured such that when the sub access code generation number changed by the generation number changing means is changed to less than a constant, the second sub access code is valid and the first sub access code is valid. When the code becomes invalid, the third secondary access code is newly generated. When the first secondary access code is valid and the second secondary access code becomes invalid, the third secondary access code is invalidated. 4. An information processing system, wherein the generation mode setting is changed so as to newly generate 4 sub-access codes. An access code generation method in an image forming apparatus having an access code generation means, an authentication means, an invalidation means, and an access code regeneration means,
The access code generating means generates a first sub access code and a second sub access code used for authentication, which are associated with a main access code used for authentication, and the first sub access code and An access code generation step for allowing the second sub-access code to coexist in an effective state ;
An authentication step in which the authentication unit determines whether or not the access code used for connection to the image forming apparatus matches the first sub-access code or the second sub-access code ;
The invalidating means invalidates the first secondary access code after it is determined in the authentication step that the access code matches the first secondary access code, or the access code in the authentication step An invalidation step of invalidating the second secondary access code after it is determined that the second secondary access code matches the second secondary access code;
The access code regeneration unit newly generates a third sub access code when the first sub access code is invalid, and newly generates a fourth sub code when the second sub access code is invalid. An access code regeneration step for generating a secondary access code of
Access code generating method, characterized in that it comprises a.