JP5600912B2 - Image output apparatus, method of restricting use thereof, and computer program - Google Patents

Description

  The present invention relates to an image processing apparatus such as an MFP, a usage restriction method thereof, and the like.

  In recent years, an image forming apparatus called a multifunction peripheral or MFP (Multi Function Peripherals) having various functions such as copying, network printing, scanner, fax, and document server has been widely used in offices. Furthermore, an image forming apparatus that has a user authentication function based on a user name and a password and can limit users to use has been proposed (Patent Document 1).

JP 2007-230013 A

  In a company with multiple locations, there are cases where employees travel from one location to another and work there for a certain period of time. At this time, an employee who has made a business trip, that is, a business trip person, sometimes carries a business by bringing a laptop computer used in a normal business. At that time, a business traveler may want to print materials and the like created by his / her notebook computer with an image forming apparatus installed at the base of the business trip destination.

  However, there is a case where the user authentication function is effectively set in the image forming apparatus, and the use of the image forming apparatus is limited only to the employees at the base of the business trip destination. In this case, the business traveler cannot use the image forming apparatus installed at the base of the business trip destination.

  Therefore, it is necessary for the business traveler to obtain the user name and password by having the administrator of the image forming apparatus perform user registration. In addition, when the business trip period ends and the user name and password of the business traveler become unnecessary, the administrator needs to delete the user name and password of the business traveler. The greater the number of business travelers, the greater the workload on the administrator. In addition, the more the times when business travelers stay are different, the more complicated the operations of the manager are.

  In view of such a problem, the present invention enables an image forming apparatus having a user authentication function to temporarily use a user who has not been registered without placing a burden on an administrator. With the goal.

The image output apparatus according to an embodiment of the present invention is an image output apparatus for performing an image output process for outputting an image, according to the operation by the administrator, at all times is an identifier of a user who uses everyday the image output device user A permanent user identifier storing means for storing an identifier, a temporary user identifier storing means for storing a temporary user identifier which is an identifier of a user who temporarily uses the image output device, and the image from the terminal device via a communication line. Processing data reception means for receiving processing data for executing output processing and an input user identifier input to the terminal device, and corresponding to the input user identifier received by the processing data reception means Before the permanent user identifier is stored in the permanent user identifier storage means and corresponds to the input user identifier A temporary user identifier registration means for causing the temporary user identifier storage means to store an identifier corresponding to the input user identifier as the temporary user identifier when the temporary user identifier is not stored in the temporary user identifier storage means; The permanent user identifier corresponding to the input user identifier received by the processing data etc. receiving means is stored in the permanent user identifier storage means, or the temporary user identifier corresponding to the input user identifier is the temporary user identifier A user authenticating unit for authenticating that the user who has input the input user identifier is valid, and the processing data and the input user identifier by the receiving unit such as the processing data when stored in the storing unit; Is received for the input user identifier. When the user authentication unit authenticates that the identifier to be stored as the temporary user identifier is stored in the temporary user identifier storage unit by the temporary user identifier registration unit or is valid, the processing data is used. Image output means for executing the image output process.

  Preferably, the permanent user identifier storage unit stores the permanent user identifier in association with a first password, and the temporary user identifier storage unit stores the temporary user identifier in association with a second password. The processing data receiving means receives a third password inputted by the user together with the input user identifier, and the temporary user identifier registration means uses the temporary user identifier as the input related to the temporary user identifier. In association with the third password received together with the user identifier, the temporary user identifier storage unit stores the third password, and the user authentication unit includes the third password received together with the input user identifier and the input user identifier. The first password associated with the permanent user identifier corresponding to By matching said second password associated with the said one o'clock user identifier corresponding to the input user identifier, performs the authentication.

  Or a tissue identifier storage unit that stores a first tissue identifier for identifying a tissue in which the image processing apparatus is installed, and the processing data reception unit is further installed by the terminal device Receiving a second tissue identifier for identifying the tissue being processed, and the image processing means stores the first tissue identifier stored in the tissue identifier storage means and the received second tissue identifier. If the tissues indicated by are not the same, the image processing is stopped regardless of the result of the authentication.

  Alternatively, the image processing apparatus includes a deletion unit that deletes the temporary user identifier that has been stored for a predetermined time from the temporary user identifier storage unit. Or you may delete, when communication with the said terminal device becomes impossible.

  According to the present invention, in an image forming apparatus provided with a user authentication function, a user who has not been registered can be used temporarily without imposing a burden on an administrator.

It is a figure which shows the example of the whole structure of an intranet. 2 is a diagram illustrating an example of a hardware configuration of an image forming apparatus. FIG. 2 is a diagram illustrating an example of a functional configuration of an image forming apparatus. FIG. It is a figure which shows the example of the hardware constitutions of a terminal device. It is a figure which shows the example of a functional structure of a terminal device. It is a figure which shows the example of input screens, such as user ID. It is a figure which shows the example of temporary authentication data. It is a figure which shows the example of an authentication input screen. It is a flowchart explaining the example of the flow of the whole process in a terminal device. 6 is a flowchart illustrating an example of the overall processing flow in the image forming apparatus. 6 is a flowchart illustrating an example of the overall processing flow in the image forming apparatus. 10 is a flowchart illustrating an example of the flow of authentication printing processing. It is a flowchart explaining the example of the flow of a temporary authentication data management process.

  1 is a diagram illustrating an example of the overall configuration of an intranet NW, FIG. 2 is a diagram illustrating an example of a hardware configuration of the image forming apparatus 1, and FIG. 3 is a diagram illustrating an example of a functional configuration of the image forming apparatus 1. FIG. 4 is a diagram illustrating an example of a hardware configuration of the terminal device 3, and FIG. 5 is a diagram illustrating an example of a functional configuration of the terminal device 3.

  As shown in FIG. 1, the intranet NW includes an image forming apparatus 1, a terminal apparatus 2, a terminal apparatus 3, a gateway 4, a communication line 5, and the like.

  The form of the intranet NW may be a form of a local area network (LAN) or a form of a virtual private network (VPN) that connects a plurality of LANs.

  The image forming apparatus 1, the terminal apparatus 2, the terminal apparatus 3, and the gateway 4 can be connected to each other via a communication line 5. The communication line 5 may be a wired system or a wireless system.

  The gateway 4 is a device that connects the intranet NW to other networks such as the Internet. As the gateway 4, a router or an access server is used.

  The intranet NW is provided for each base of an organization such as a company or a government office, and is mainly used by members of the base, but may also be used by visitors.

  Hereinafter, in a company X having a plurality of bases such as a sales office B in addition to the head office A, an employee belonging to the head office A makes a business trip to the sales office B and temporarily uses the image forming apparatus 1 of the sales office B Will be described as an example. The intranet NW is provided in the sales office B. An employee who uses the image forming apparatus 1, the terminal apparatus 2, or the terminal apparatus 3 is referred to as “user”.

  It is assumed that the image forming apparatuses installed at the head office A and other bases are normally permitted to be used only by employees belonging to the bases.

  The image forming apparatus 1 is an image processing apparatus in which various functions such as copying, scanning, faxing, PC printing (network printing), and document server are integrated. Sometimes called a multi-function peripheral or MFP (Multi Function Peripherals).

  “Network printing” is a function for receiving image data from a personal computer via a communication line and printing the image on paper. Sometimes called a “network printer function” or a “PC print function”.

  Furthermore, the image forming apparatus 1 has a user authentication function that permits use only when the user who is going to use is authenticated and it is confirmed that the user is a valid user. Each employee of the sales office B is given one set of user ID and password for authentication. However, when the business traveler arrives at the sales office B, the user registration with the image forming apparatus 1 is not performed, and thus the image forming apparatus 1 cannot be used.

  As shown in FIG. 2, the image forming apparatus 1 includes a CPU (Central Processing Unit) 10a, a RAM (Random Access Memory) 10b, a ROM (Read Only Memory) 10c, a hard disk 10d, a control circuit 10e, an operation panel 10f, a scanner. 10g, a printing unit 10h, a LAN interface 10i, and a FAX modem 10j.

  The control circuit 10e is a circuit for controlling the hard disk 10d, operation panel 10f, scanner 10g, printing unit 10h, LAN interface 10i, FAX modem 10j, and the like.

  The operation panel 10f is configured by a touch panel and a numeric keypad. On the touch panel, a screen for giving a message or an instruction to the user, a screen for the user to input processing instructions and conditions, and a screen showing the processing result of the CPU 10a are displayed. Further, the touch panel detects a position touched by the user with a finger and transmits a signal indicating the detection result to the CPU 10a.

  The scanner 10g is an apparatus that optically reads an image such as a photograph, a character, a chart, or a picture on a sheet to generate image data.

  The printing unit 10 h prints an image on a sheet based on image data of an image read by the scanner 10 g or image data transmitted from the terminal devices 2 and 3.

  The LAN interface 10i is a network interface card (NIC) for communicating with the terminal device 2, the terminal device 3, or a device outside the intranet NW by TCP / IP (Transmission Control Protocol / Internet Protocol).

  The FAX modem 10j is a device for exchanging image data with another fax terminal using a G3 protocol via a fixed telephone network.

  In the ROM 10c or the hard disk 10d, the company code setting unit 101, the company code storage unit 102, the print data reception processing unit 103, the device authentication processing unit 104, the constant authentication database 105, the temporary authentication database 106, and the authentication data registration determination shown in FIG. Functions of the processing unit 107, temporary registration processing unit 108, authentication registration display processing unit 109, print processing unit 110, terminal connection determination processing unit 111, log data storage unit 112, log output processing unit 113, and temporary registration deletion unit 114 A program and data for realizing the above are stored. These programs and data are called to the RAM 10b as necessary, and the programs are executed by the CPU 10a. Note that all or part of the functions shown in FIG. 3 may be configured only by hardware such as a circuit.

  Each unit shown in FIG. 3 mainly performs a process for registering user authentication of the image forming apparatus 1 and a process for providing a user with a network printing service.

  Returning to FIG. 1, the terminal device 2 and the terminal device 3 are used when the user remotely uses the functions of the image forming apparatus 1 described above. That is, the terminal device 2 and the terminal device 3 are clients of the image forming apparatus 1.

  As the terminal device 2, a personal computer or a workstation is used. The terminal device 2 is used by employees of the sales office B and normally participates in the intranet NW.

  The terminal device 3 is a notebook personal computer that employees of the head office A (hereinafter referred to as “business travelers”) who are on a business trip to the sales office B usually use for business at the head office A. The terminal device 3 participates in the intranet NW only during a period when the business traveler is on a business trip to the sales office B.

  As shown in FIG. 4, the terminal device 3 includes a CPU 30a, a RAM 30b, a ROM 30c, a hard disk 30d, a display 30e, a LAN interface 30f, a keyboard 30g, a pointing device 30h, and the like.

  Various programs such as a printer driver of the image forming apparatus 1 are installed in the ROM 30c or the hard disk 30d. According to these programs, functions such as the company code storage unit 301, the print job reception unit 302, the user ID reception unit 303, the print data generation processing unit 304, and the print data transmission processing unit 305 shown in FIG. 5 are realized. . These programs are called to the RAM 30b as necessary, and the programs are executed by the CPU 30a.

  Each unit shown in FIG. 5 mainly generates print data and transmits the generated print data to the image forming apparatus 1.

  The display 30e displays a screen for giving a message or an instruction to the user, a screen for the user to input processing instructions and conditions, a screen showing a result of the processing of the CPU 30a, and the like.

  The LAN interface 30f is a NIC for communicating with other apparatuses such as the image forming apparatus 1 via the communication line 5 using TCP / IP.

  The terminal device 2 has the same hardware configuration as that of the terminal device 3, and the same software as that of the terminal device 2 is stored in the ROM or the hard disk.

  FIG. 6 is a diagram showing an example of the user ID etc. input screen G1, FIG. 7 is a diagram showing an example of the temporary authentication data 7c, and FIG. 8 is a diagram showing an example of the authentication input screen G2.

  Next, processing contents of each unit of the image forming apparatus 1 shown in FIG. 3 and each unit of the terminal device 3 shown in FIG. 5 will be described.

  In FIG. 5, the company code storage unit 301 of the terminal device 3 stores a company code 63. The company code 63 is a code unique to the company X, which is set in common for the printer drivers of the respective image forming apparatuses and terminal devices used by the company X. That is, the company code 63 is different from the company code set in an apparatus such as an image forming apparatus used in another company.

  The company code 63 is stored in the company code storage unit 301 as follows when the printer driver is installed in the terminal device 3.

  The printer driver is installed in the terminal device 3 by the installer. The installer is configured by a setting file F in addition to an installation program P that arranges each program (module) for realizing each unit shown in FIG. 5 in a predetermined storage area.

  In the setting file F, a company code 63 unique to the company X is set in advance by the administrator. When the program P is executed by the terminal device 3, the modules of the respective units shown in FIG. 5 are arranged in a predetermined directory. Further, the company code 63 of the setting file F is stored in the company code storage unit 301.

  In FIG. 3, the company code storage unit 102 of the image forming apparatus 1 stores a company code 61. As described above, each device of company X uses a common company code. Therefore, the company code 61 is the same code as the company code 63 stored in the company code storage unit 301 of the terminal device 3.

  The company code setting unit 101 sets the company code 61 in the image forming apparatus 1 by storing the company code 61 in the company code storage unit 102. For example, the company code setting unit 101 sets the company code 61 as follows.

  When the image forming apparatus 1 is carried into the sales office B, various settings are made by the administrator before being used by the user. At that time, the administrator inputs the company code 61. Note that the confidentiality of the company code 61 is ensured only by the administrator. When the administrator inputs a predetermined command from the operation panel 10f, the company code setting unit 101 displays a screen for inputting the company code on the operation panel 10f. When the administrator inputs a code unique to the company X, the company code setting unit 101 accepts the input code as the company code 61 and stores the company code 61 in the company code storage unit 102.

  As described above, the image forming apparatus 1 can be used only by the user of the sales office B in principle. The user of the business office B is always registered as a user in the image forming apparatus 1 while belonging to the business office B. The business traveler is temporarily registered as a user in the image forming apparatus 1 only while staying at the sales office B. Hereinafter, regular user registration is referred to as “always registered”, and temporary user registration is referred to as “temporary registration”.

  The continuous authentication database 105 stores the continuous authentication data 7b. The constant authentication data 7b is prepared for each user who is always registered, and indicates the user ID and password of the user. An employee ID is used as the user ID. “Employee ID” is a unique number given to an employee who belongs to the company X at the time of joining the company. The employee (user) of the sales office B is always registered in the image forming apparatus 1 when assigned to the sales office B. That is, the permanent authentication data 7b of the employee is generated and stored in the permanent authentication database 105. After that, when you move to another location, take a leave, or retire, you will always be deregistered. The permanent registration is deleted by deleting the permanent authentication data 7b of the employee from the permanent authentication database 105.

  Regular registration is possible when the administrator performs a predetermined operation on the image forming apparatus 1 using the administrator password. The administrator password is managed only by the administrator. The administrator logs in to the image forming apparatus 1 with the administrator password and displays a screen for constant registration. Then, the user ID and password of the employee newly assigned to the sales office B are input. Then, the continuous authentication data 7b indicating the input user ID and password is generated and stored in the continuous authentication database 105. Alternatively, the user ID of an employee who has been transferred from the sales office B to another base, has taken a leave, or has left the company is input. Then, the continuous authentication data 7b indicating the input user ID is deleted from the continuous authentication database 105.

  The temporary authentication database 106 stores temporary authentication data 7c. The temporary authentication data 7c is prepared for each business traveler who has received temporary registration. The temporary authentication data 7c shows the user ID and password of the user. The contents, generation, and deletion of the temporary authentication data 7c will be described later.

  A business traveler performs the following operations to perform temporary registration and printing from the terminal device 3 to the image forming apparatus 1.

  The business traveler causes his / her terminal device 3 to participate in the intranet NW. Further, the business traveler creates the data of the material to be printed by an application such as word processor software or presentation material creation software installed in the terminal device 3. The business traveler opens the data of the prepared material with an application. Further, a predetermined command is input to display a print dialog box, and an apparatus for executing printing, that is, the image forming apparatus 1 is selected, and printing conditions such as a page to be printed, the number of copies, and a paper size are designated.

  Then, the print job reception unit 302 of the terminal device 3 illustrated in FIG. 5 receives the specified print condition.

  When the print job accepting unit 302 accepts the print condition, the user ID accepting unit 303 performs a process for accepting the user ID and password of the user who specified the print condition as follows.

  The user ID etc. receiving unit 303 displays the user ID etc. input screen G1 shown in FIG. 6 on the display 30e.

  If the user has already been registered (always registered or temporarily registered) in the image forming apparatus 1, the user inputs his / her user ID and password used for user registration. On the other hand, if the user is not yet registered in the image forming apparatus 1, the user ID and password desired to be used for temporary registration are input. The business traveler needs to input a user ID that does not overlap with the user ID of the employee of the sales office B that has already been registered in the image forming apparatus 1 as the user ID registered in the temporary registration. It is desirable for the business traveler to use the employee ID given at the time of joining the company as the user ID.

  When the user ID and password are received by the user ID reception unit 303, the print data generation processing unit 304 prints the currently open data, that is, the material to be printed, under the printing conditions received by the print job reception unit 302. The print data 8 is generated by converting the data of the material into a page description language corresponding to the image forming apparatus 1.

  The print data transmission processing unit 305 converts the print data 8 generated by the print data generation processing unit 304 into authentication data 7a indicating the received user ID and password, the IP address or MAC (Media Access) of the image forming apparatus 1 itself. Control) Address information 9 indicating an address and the company code 63 stored in the company code storage unit 301 are associated with each other and transmitted to the image forming apparatus 1.

  The print data reception processing unit 103 of the image forming apparatus 1 illustrated in FIG. 3 receives from the terminal device 3 the print data 8 associated with (added to) the company code 63, the authentication data 7a, and the address information 9. .

  The device authentication processing unit 104 performs device authentication based on the company code 63 added to the print data 8 and the company code 61 set in the image forming apparatus 1 itself. Device authentication is performed as follows.

  The device authentication processing unit 104 acquires the company code 63 added to the print data 8 and acquires the company code 61 of the image forming apparatus 1 from the company code storage unit 102. The acquired company code 63 and the company code 61 are compared. If both are the same, the terminal device 3 authenticates that it is valid. On the other hand, if they are not identical, it is determined that the terminal device 3 is not valid. If it is determined to be valid, the next user authentication processing, printing processing, and the like are appropriately performed. On the other hand, when it is determined not to be valid, these processes are stopped.

  The authentication data registration determination processing unit 107 performs user authentication processing and processing for determining whether to perform temporary registration as follows.

  The authentication data registration determination processing unit 107 searches the permanent authentication database 105 and the temporary authentication database 106 for the permanent authentication data 7b and the temporary authentication data 7c indicating the same user ID as the user ID indicated in the accepted authentication data 7a. . When the permanent authentication data 7b or the temporary authentication data 7c is found, the user authentication process is performed as follows, and it is determined that the temporary authentication process is not performed. On the other hand, if it is not found, it is determined that the user authentication process is not performed and the temporary authentication process is performed.

  The authentication data registration determination processing unit 107 checks whether the password indicated in the found permanent authentication data 7b or temporary authentication data 7c matches the accepted password. If the two match, the authentication data registration determination processing unit 107 determines that the business traveler is a valid user registered in the image forming apparatus 1. If it is determined that the user is a valid user, the print processing unit 110 executes authentication printing described later. On the other hand, if the two do not match, the authentication data registration determination processing unit 107 determines that the business traveler is an invalid user. In this case, the subsequent authentication printing process is not executed.

  Temporary registration processing unit 108, when temporarily registered as a business traveler, is determined by authentication data registration determination processing unit 107, user ID and password shown in authentication data 7 a received together with print data 8, and address information 9. In addition, temporary authentication data 7c indicating the current date and time is generated and stored in the temporary authentication database 106 as shown in FIG.

  When new temporary authentication data 7c is stored in temporary authentication database 106 by temporary registration processing unit 108, authentication registration display processing unit 109 notifies authentication input screen G2 that it has been stored, as shown in FIG. Message MG is arranged and displayed on the touch panel of operation panel 10f.

  When the business traveler finishes the operation on the terminal device 3 described above, the business traveler moves to the front of the image forming apparatus 1 to pick up the printed matter. Then, his / her user ID and password are entered in the authentication input screen G2.

  Then, the authentication data registration determination processing unit 107 searches the always-authentication database 105 and the temporary authentication database 106 for the always-authentication data 7b or the temporary authentication data 7c indicating the input user ID and password. Alternatively, if temporary authentication data 7c is found, it is determined that the business traveler is a valid user. On the other hand, if it is not found, it is determined that the user is not a valid user.

  When the authentication data registration determination processing unit 107 determines that the business traveler who has visited the image forming apparatus 1 is a valid user, the print processing unit 110 has been received together with the user ID of the business traveler. Based on the print data 8, a process for printing the material on paper is performed. And the business trip person acquires the printed material (printed material). If printing is successful, the print data 8 and each data received along with it may be deleted.

  In the log data storage unit 112, after the printing process is performed by the print processing unit 110 based on the print data 8, the log data LD recorded for the process is stored. In addition to the user ID and address information 9 indicated in the authentication data 7a received together with the print data 8, the log data LD includes the processing contents (for example, the printing conditions such as the number of copies) and the processing. The date and time and the success or failure of execution are shown.

  The terminal connection determination processing unit 111 determines whether or not each business trip terminal device 3 can be connected to the image forming apparatus 1 as follows.

  The terminal connection determination processing unit 111 transmits a specific command (for example, a PING command) to the address indicated by the address information 9 included in each temporary authentication data 7c stored in the temporary authentication database 106. If the terminal device 3 having the address participates in the intranet NW, there should be a response within a predetermined time (for example, within 5 seconds). Therefore, the terminal connection determination processing unit 111 determines that the terminal device 3 can be connected to the image forming apparatus 1 if there is a response, and determines that the connection is impossible if there is no response.

  The determination as to whether or not connection with the image forming apparatus 1 is possible is performed at a predetermined frequency. For example, every 5 minutes. The frequency can be arbitrarily set by the administrator.

  The temporary registration deletion unit 114 deletes the temporary authentication data 7c of the terminal device 3 determined by the terminal connection determination processing unit 111 as being inaccessible to the image forming apparatus 1 from the temporary authentication database 106, so that the business traveler Cancel temporary registration. Further, regardless of the result of the determination by the terminal connection determination processing unit 111, the temporary authentication data 7c that has passed a predetermined time (for example, one week) after being registered in the temporary authentication database 106 is deleted from the temporary authentication database 106. To cancel the temporary registration of the business traveler. The administrator can arbitrarily set the predetermined time.

  As described above, the authentication registration display processing unit 109 displays the user ID etc. input screen G1 with the message MG informing the existence of the newly registered temporary authentication data 7c, but has deleted the temporary authentication data 7c. After that, the user ID etc. input screen G1 is displayed without arranging the message MG.

  The log output processing unit 113 collects the log data LD, which is stored in the log data storage unit 112 and indicates the user ID of the user whose temporary registration has been deleted, into one file, and manages the terminal device 2 or USB of the administrator. Output to memory etc. Alternatively, it may be stored in a manager's box in the image forming apparatus 1.

  FIG. 9 is a flowchart illustrating an example of the overall processing flow in the terminal device 3, FIGS. 10 and 11 are flowcharts illustrating an example of the overall processing flow in the image forming apparatus 1, and FIG. 12 is an authentication printing process. FIG. 13 is a flowchart for explaining an example of the flow of temporary authentication data management processing.

  Next, the overall processing flow of the terminal device 3 and the image forming apparatus 1 will be described with reference to flowcharts.

  In FIG. 9, the terminal device 3 opens the data of the material to be printed designated by the user by the application, and when the printing condition, user ID, and password are further input by the user (# 601), the company code 63 is changed to the company code 63. While reading from the code storage unit 301 (# 602), the address information 9 is acquired by making an inquiry to its own OS (Operating System) (# 603).

  Then, the terminal device 3 generates the print data 8 by converting the data of the material based on the print condition in the page description language corresponding to the image forming device 1 (# 604), the authentication data 7a, the company code 63 The print data 8 is transmitted to the image forming apparatus 1 in association with the address information 9 (# 605).

  10 and 11, the image forming apparatus 1 performs the following process in response to each occurrence of an event.

  When the image forming apparatus 1 receives the print data 8 (Yes in # 501 in FIG. 10), the image forming apparatus 1 appropriately executes the processes in steps # 502 to # 515 as follows.

  The image forming apparatus 1 extracts the company code 63 and authentication data 7a sent together with the print data 8 (# 502), and reads the company code 61 from its own company code storage unit 102 (# 503). Then, the company code 61 and the company code 63 are collated (# 504).

  If the company code 61 and the company code 63 do not match (No in # 505), the image forming apparatus 1 determines that the terminal device 3 that has transmitted the print data 8 belongs to another company (# 506). Cancel processing such as printing.

  On the other hand, if the company code 61 and the company code 63 match (Yes in # 505), the image forming apparatus 1 determines that the terminal device 3 that has transmitted the print data 8 belongs to the company X (# 507). The permanent authentication data 7b and the temporary authentication data 7c indicating the same user ID as the user ID indicated in the authentication data 7a received together with the print data 8 are searched from the permanent authentication database 105 and the temporary authentication database 106, respectively (# 508).

  If such permanent authentication data 7b or temporary authentication data 7c is found (Yes in # 509), the image forming apparatus 1 is shown in the password received together with the print data 8 and the found permanent authentication data 7b or temporary authentication data 7c. The password is verified (# 510). If the two do not match (No in # 511), the image forming apparatus 1 determines that the user of the terminal device 3 that has transmitted the print data 8 is not a valid user, and stops processing such as printing. If they match, the authentication printing process is executed (# 512). The procedure of this process will be described later with reference to FIG.

  On the other hand, if none of the permanent authentication data 7b and the temporary authentication data 7c indicating the same user ID as the user ID indicated in the authentication data 7a received together with the print data 8 is found (No in # 509), the image forming apparatus 1 Then, it is determined that the user of the terminal device 3 that has transmitted the print data 8 is a new business traveler (# 513), and a temporary authentication data management process is executed to temporarily register this user (# 515). The procedure of this process will be described later with reference to FIG. In the temporary authentication data management process, not only the temporary registration process but also the deletion process is performed. The image forming apparatus 1 prepares a temporary registration management flag for indicating which process is to be executed, and sets the temporary registration management flag to “1” when it is determined that the user is a new user (# 514).

  Alternatively, the image forming apparatus 1 determines whether or not the terminal device 3 for each temporarily registered user can communicate with the image forming apparatus 1 every time a predetermined time comes (Yes in # 516 in FIG. 11). Is checked (# 517). For example, if a PING command is transmitted to the address indicated in the address information 9 of each temporary authentication data 7c and there is a response (Yes in # 518), it is determined that communication is possible (# 519). It is determined that communication is impossible (# 520).

  If there is a terminal device 3 that cannot communicate, the image forming apparatus 1 sets the temporary registration management flag to “0” (# 523), and deletes the temporary authentication data 7c including the address information 9 of the terminal device 3 In order to do this, temporary authentication data management processing is executed (# 524).

  On the other hand, when there is a terminal device 3 capable of communication, the image forming apparatus 1 checks the elapsed time since the permanent authentication data 7b of the terminal device 3 is stored in the temporary authentication database 106 (# 521). . If there is a terminal device 3 whose elapsed time exceeds the predetermined time (Yes in # 522), the temporary registration management flag is set to “0” (# 523), and temporary authentication including the address information 9 of the terminal device 3 is performed. Temporary authentication data management processing is executed to delete the data 7c (# 524).

  Here, the flow of the authentication printing process and the temporary authentication data management process will be described with reference to FIGS.

  When the user ID and password are input from the operation panel 10f (# 531 in FIG. 12), the image forming apparatus 1 receives the input user ID and password, the respective authentication data 7b, and the user indicated by the temporary authentication data 7c. The ID and password are collated (# 532).

  If there is always-authentication data 7b or temporary authentication data 7c indicating the same user ID and password as the input user ID and password (Yes in # 533), the image forming apparatus 1 print data received together with the user ID before. The material is printed on the paper based on 8 (# 534). Then, log data LD for the current printing process is generated and stored (# 535).

  Further, when the print data 8 from a new business traveler is received, that is, when the temporary registration management flag is “1” (Yes in # 551), the image forming apparatus 1 receives the authentication received together with the print data 8 In addition to the user ID and address information 9 shown in the data 7a, temporary authentication data 7c indicating the registration date (current date) is generated (# 552) and stored in the temporary authentication database 106 (# 553). Then, a message MG notifying that the user with the user ID has been registered is displayed (# 554).

  On the other hand, if there is a user whose temporary registration should be deleted, that is, if the temporary registration management flag is “0” (No in # 551), the log data LD indicating the user ID of the user is collected in one file (# 555). ) And output it to a USB memory or the like (# 556). Then, the temporary authentication data 7c of the user is deleted from the temporary authentication database 106 (# 557), and the display of the message MG of the user is stopped (# 558).

  According to the present embodiment, in the image forming apparatus 1 having a user authentication function, it is possible to temporarily use a user who is not registered as a user without placing a burden on the administrator.

  In this embodiment, the case of recording PC print log data as the log data LD has been described as an example. However, log data of other types of jobs such as copying, fax transmission, and scanning may be recorded.

  A difference may be made between the access right of the user who is always registered and the access right of the user who is temporarily registered. For example, color printing may be permitted for a user who is always registered, but not for a temporarily registered user. Alternatively, the usage amount or usable time zone of the image forming apparatus 1 by a temporarily registered user may be limited.

  In this embodiment, when temporary registration is deleted, log data LD of job execution by a temporarily registered user is output, but may be output when requested by an administrator.

  If the user authentication function is disabled, the terminal device 3 may transmit the print data 8 to the image forming apparatus 1 without attaching the authentication data 7a.

  After the temporary registration is deleted, the temporary registration with the same user ID and password may be prohibited until a certain time has passed.

In this embodiment,
In addition, the entire intranet NW, the image forming apparatus 1, the terminal apparatuses 2 and 3, or the configuration of each part, the processing content, the processing order, the data configuration, and the like can be appropriately changed in accordance with the spirit of the present invention.

1 Image forming device (image processing device)
2 Terminal device 3 Terminal device 5 Communication line 7a Authentication data (input user identifier, third password)
7c Temporary authentication data (temporary user identifier)
7b Always authentication data (always user identifier)
8 Print data (processing data)
61 Company code (first organization identifier)
63 Company code (second organization identifier)
102 Company code storage (organization identifier storage means)
103 Print Data Reception Processing Unit (Processing Data Receiving Unit)
105 Continuous authentication database (always user identifier storage means)
106 Temporary authentication database (temporary user identifier storage means)
107 Authentication data registration judgment processing unit (user authentication registration means)
108 Temporary registration processing unit (temporary user identifier registration means)
110 Print processing unit (image processing means)
114 Temporary registration deletion part (deletion means)

Claims (7)

An image output device that executes an image output process for outputting an image,
According to an operation by the administrator, a constant user identifier storage means for storing a constant user identifier that is an identifier of a user who regularly uses the image output device;
Temporary user identifier storage means for storing a temporary user identifier that is an identifier of a user who temporarily uses the image output device;
Receiving means for receiving processing data for executing the image output processing and input user identifier input to the terminal device from a terminal device via a communication line;
The permanent user identifier corresponding to the input user identifier received by the processing data etc. receiving means is not stored in the permanent user identifier storage means, and the temporary user identifier corresponding to the input user identifier is the temporary user identifier. A temporary user identifier registration unit that, when not stored in the user identifier storage unit, causes the temporary user identifier storage unit to store an identifier corresponding to the input user identifier as the temporary user identifier;
The permanent user identifier corresponding to the input user identifier received by the processing data etc. receiving means is stored in the permanent user identifier storage means, or the temporary user identifier corresponding to the input user identifier is the temporary user A user authenticating means for authenticating that the user who inputted the input user identifier is valid when stored in the identifier storing means;
As the processing data and the input user identifier are received by the processing data etc. receiving means, an identifier corresponding to the input user identifier becomes the temporary user identifier by the temporary user identifier registration means as the temporary user identifier. if it is stored in the identifier storage means or said there is a validity is authenticated by the user authentication unit performs the image output processing by using for the process data, and an image output unit,
An image output apparatus comprising: The permanent user identifier storage means stores the permanent user identifier in association with a first password,
The temporary user identifier storage means stores the temporary user identifier in association with a second password,
The processing data receiving means receives a third password entered by the user together with the input user identifier,
The temporary user identifier registration means stores the temporary user identifier in the temporary user identifier storage means in association with the third password received together with the input user identifier related to the temporary user identifier;
The user authentication means corresponds to the third password received together with the input user identifier and the first password associated with the constant user identifier corresponding to the input user identifier or the input user identifier. Performing the authentication by verifying with the second password associated with the temporary user identifier
The image output apparatus according to claim 1. A tissue identifier storage means for storing a first tissue identifier for identifying the tissue in which the image output apparatus is installed;
The processing data receiving means further receives a second organization identifier for identifying the organization in which the terminal device is installed,
The image output means, when the first tissue identifier stored in the tissue identifier storage means and the received second tissue identifier are not the same organization, respectively, regardless of the result of the authentication Cancel image output processing,
The image output apparatus according to claim 1. A deletion unit that deletes the temporary user identifier that has been stored for a predetermined time from the temporary user identifier storage unit;
The image output apparatus according to claim 1. Deleting means for deleting the temporary user identifier from the temporary user identifier storage means when communication with the terminal device becomes impossible,
The image output apparatus according to claim 1. Use restriction that restricts the use of an image output device that executes image output processing for outputting an image and has a constant user identifier storage means for storing a constant user identifier that is a daily user identifier according to an operation by an administrator A method,
Preparing a temporary user identifier storage means for storing a temporary user identifier that is an identifier of a user who temporarily uses the image output device;
In the image output device,
From the terminal device via the communication line, to execute processing for receiving the processing data for executing the image output processing and the input user identifier input to the terminal device,
The permanent user identifier corresponding to the received input user identifier is not stored in the permanent user identifier storage unit, and the temporary user identifier corresponding to the input user identifier is not stored in the temporary user identifier storage unit In the case, the processing corresponding to storing the identifier corresponding to the input user identifier as the temporary user identifier in the temporary user identifier storage means is executed,
The permanent user identifier corresponding to the received input user identifier is stored in the permanent user identifier storage unit, or the temporary user identifier corresponding to the input user identifier is stored in the temporary user identifier storage unit To execute a process of authenticating that the user who has input the input user identifier is valid,
As the processing data and the input user identifier are received, an identifier corresponding to the input user identifier is stored as the temporary user identifier in the temporary user identifier storage means or is authenticated. The image output process is executed using the processing data,
The use restriction method characterized by the above. Temporary user that performs image output processing for outputting an image and has a constant user identifier storage means for storing a constant user identifier that is a daily user identifier according to an operation by an administrator, and is a temporary user identifier A computer program used in an image output apparatus having temporary user identifier storage means for storing an identifier,
In the image output device,
From the terminal device via the communication line, to execute processing for receiving the processing data for executing the image output processing and the input user identifier input to the terminal device,
The permanent user identifier corresponding to the received input user identifier is not stored in the permanent user identifier storage unit, and the temporary user identifier corresponding to the input user identifier is not stored in the temporary user identifier storage unit In the case, the processing corresponding to storing the identifier corresponding to the input user identifier as the temporary user identifier in the temporary user identifier storage means is executed,
The permanent user identifier corresponding to the received input user identifier is stored in the permanent user identifier storage unit, or the temporary user identifier corresponding to the input user identifier is stored in the temporary user identifier storage unit To execute a process of authenticating that the user who has input the input user identifier is valid,
As the processing data and the input user identifier are received, an identifier corresponding to the input user identifier is stored as the temporary user identifier in the temporary user identifier storage means or is authenticated. The image output process is executed using the processing data,
A computer program characterized by the above.

Images