JP5648857B2 - Image processing apparatus and authentication apparatus - Google Patents

Description

  The present invention relates to an image processing apparatus having an authentication function and an authentication apparatus.

  In recent years, MFPs (Multi Function Peripherals) having functions such as scanners, facsimiles, printers, and copiers have been used in offices and the like. A multifunction machine is often used in a situation where it is connected to an information processing terminal such as a personal computer through a network such as a LAN (Local Area Network). Then, it functions as an image forming device that prints image data input from the information processing terminal on paper, functions as an image reading device that acquires image data used in the information processing terminal, and searches document image data. It functions as a document management device that accumulates as possible.

  In an environment such as an office where a single multifunction device is shared by a plurality of users, image data input from an information processing terminal as a print job and document image data stored in the multifunction device are highly sensitive. This includes things that you don't want others to get. For this reason, in this type of multi-function peripheral, by confirming the user's usage qualification by entering authentication information, etc., output (printing) of image data input as a print job and access to stored document image data User authentication that permits only an authorized person to use this is widely used. As such authentication information, a user ID and a password associated with the user ID are widely used.

  On the other hand, some multifunction peripherals have a normal mode in which a general user performs image processing, and a maintenance mode that is open only to a limited number of persons such as service personnel. The maintenance mode is a mode in which all information of the image processing apparatus can be accessed, such as a change of a unit price table as a charging standard, counter information, and extraction of user information. It is necessary to reliably prevent such a transition to the maintenance mode from being executed by a person other than a service person such as a general user or an administrator who has been given a wider authority than a general user such as a user registration authority. There is. For this reason, some MFPs employ a method different from user authentication using a user ID and password, such as authentication by special operation on the operation unit, for authentication for shifting to the maintenance mode. The special operation is an operation that is not performed in order to execute image processing. For example, the operation button is pressed for a long time, a plurality of operation buttons are simultaneously pressed, and a specific order of the operation buttons is pressed. In such an authentication method, unlike an authentication method by inputting a user ID and a password, a user other than a person who knows a special operation for shifting to the maintenance mode finds an entrance for shifting to the maintenance mode. Even it becomes difficult and security can be improved.

  In the above-described method of requesting the user for some operation (input) and confirming the user's authority based on whether or not the performed operation matches a pre-registered operation, the user asks the multifunction device. If the registered operation content (hereinafter referred to as registered operation content) is forgotten, authentication becomes impossible. Even in this case, for example, when a person with higher authority such as an administrator for a general user is set, the higher authority changes the registration operation contents of the general user to new contents. Thus, the general user can be authenticated by executing the newly registered operation. However, if a higher-level authority is not set, such as a service person who is permitted to execute the maintenance mode, the registration operation cannot be changed to a new one. Have difficulty.

  In order to prevent the user from forgetting the contents of the registration operation in this way, for example, Patent Document 1 discloses an unlocking requirement in an entrance / exit management system that requires input of a personal identification number as an unlocking requirement as necessary. A configuration is disclosed in which the input of a personal identification number is requested when a predetermined period has elapsed even in a situation where it is not necessary to input the personal identification number. In this configuration, since the input of a password is required with the elapse of a predetermined period, it is possible to prevent the user from forgetting the password.

JP 2000-274122 A

  Since the technology disclosed in Patent Document 1 is configured to require the user to input a personal identification number, an opportunity to input the personal identification number is obtained unless the user uses the device (entrance / exit management system). I can't. That is, according to the technology, the period designated in advance until the password input is requested is the longest period in which the user does not input the password, and the user frequently uses the device within the period. Is assumed. However, the service person for the multifunction device installed at the customer performs authentication for shifting to the maintenance mode when any problem occurs in the multifunction device. Therefore, even if the technique of Patent Document 1 is applied to the case, since the frequency of operating the multifunction device is low in the first place, it is not possible to obtain the effect of preventing forgotten registration operation contents.

  On the other hand, if the registration operation content for shifting to the maintenance mode is set to be the same in all the multifunction devices, it becomes possible to prevent the occurrence of an unauthenticated state due to forgetting the registration operation content. However, when such a setting is adopted, if the registered operation content is leaked, the use of the leaked registered operation content enables the transition to the maintenance mode in all the MFPs. Moreover, since all the service personnel are aware of the registration operation content, it is difficult to reliably prevent leakage. Furthermore, as described above, since it is necessary to ensure security when shifting to the maintenance mode, it is impossible to select to fix the registration operation content.

  The present invention has been made in view of the above-described problems of the prior art, and provides an image processing apparatus and an authentication apparatus capable of ensuring high security and promptly eliminating an unauthenticated state due to a forgotten registration operation content. The purpose is to do.

In order to achieve the above object, the present invention employs the following technical means. That is, the image processing apparatus according to the present invention has an authentication function, and includes an operation unit, an authentication unit, an external interface, a reception unit, and an emergency authentication control unit. The operation unit is used for inputting authentication information. The authentication unit determines whether the authentication information input from the operation unit satisfies a pre-registered authentication condition. Data is input to the external interface from an external apparatus provided independently of the image processing apparatus. The accepting unit accepts an emergency authentication start instruction from the external device through the external interface. In response to the emergency authentication start instruction received by the reception unit, the emergency authentication control unit uses a specific authentication condition associated with the emergency authentication start instruction for a specific time specified in advance for the authentication unit. Instructs execution of authentication. The authentication unit starts authentication based on an emergency authentication condition registered in advance according to the emergency authentication start instruction, and when the authentication based on the emergency authentication condition is possible, the identification on the display of the operation unit By displaying a point at the position, the serviceman is notified that authentication under the emergency authentication condition is possible.

  In this image processing apparatus, when an emergency authentication start instruction is input from the outside, emergency authentication based on a specific authentication condition associated with the emergency authentication start instruction can be performed for a specified time. Therefore, the user can execute the authentication process by performing an operation that satisfies the emergency authentication conditions on the operation unit within the time during which the emergency authentication is possible. The emergency authentication start instruction can be input to the image processing apparatus through a network from a terminal having an issuance authority installed at a sales office of the image processing apparatus distributor, for example. In this case, the external interface is a network interface that acquires data through the network. The emergency authentication start instruction can also be input to the accepting unit through a portable storage medium that can be read by the image processing apparatus, for example. In this case, the external interface is an interface corresponding to the portable storage medium that acquires data from the portable storage medium. As described above, by adopting a configuration in which an emergency authentication start instruction is input without going through the operation unit of the image processing apparatus, for example, emergency authentication can be performed unintentionally due to an attack on the operation unit by a person who attempts to enter. It is possible to prevent the situation from occurring. Then, if the user who is going to perform emergency authentication does not forget the specific authentication condition associated with the emergency authentication start instruction, for example, as an input of a specific character string, the user surely executes the authentication process. can do. Therefore, high security can be ensured, and an unauthenticated state due to forgotten registration operation content can be quickly resolved.

When an emergency authentication start instruction is input to the reception unit through the network, the emergency authentication start instruction can be input by e-mail, for example. In this configuration, even if a security measure such as a firewall is taken in the network at the location where the image processing apparatus is installed, a communication port is specially opened to a network gateway or the like in order to obtain an emergency authentication start instruction. An emergency authentication start instruction can be input to the image processing apparatus without setting such as enabling. The above-described authentication process can be applied to, for example, an authentication process for shifting from a normal mode in which image processing is performed to a maintenance mode for apparatus maintenance. In the case of using a portable storage medium as an external device that issues the emergency authentication start instruction, the accepting unit connects the portable storage medium and the image processing apparatus via an external interface. By acquiring the emergency authentication start instruction from the storage medium, the emergency authentication start instruction is received. When the emergency authentication start instruction is received, the emergency authentication start instruction stored in the portable storage medium cannot be reused. Change or clear state. When the reception unit connects the portable storage medium and the image processing apparatus via an external interface, the reception unit inputs a specific access signal to the connected portable storage medium, and the portable storage medium When a specific access signal from the reception unit is input, the emergency authentication start instruction is input to the reception unit, and when an access signal different from the specific access signal from the reception unit is input, it is stored. Change or delete the emergency authentication start instruction that is currently unavailable.

  On the other hand, from another viewpoint, the present invention can also provide an authentication device.

  According to the present invention, high security can be ensured, and an unauthenticated state due to forgotten registration operation content can be quickly resolved.

1 is a schematic configuration diagram showing the overall configuration of a multifunction machine according to an embodiment of the present invention. 1 is a schematic diagram showing an operation panel of a multifunction machine according to an embodiment of the present invention. The figure which shows the hardware constitutions of the multifunctional device in one Embodiment of this invention. 1 is a functional block diagram showing a multifunction machine according to an embodiment of the present invention. The flowchart which shows an example of the authentication procedure which the multifunctional machine in one Embodiment of this invention implements

  Hereinafter, an embodiment of the present invention will be described in more detail with reference to the drawings. In the following, the present invention is embodied as a digital multifunction machine.

  FIG. 1 is a schematic configuration diagram illustrating an example of the overall configuration of a digital multifunction peripheral according to the present embodiment. As shown in FIG. 1, the multifunction peripheral 100 includes a main body 101 including an image reading unit 120 and an image forming unit 140, and a platen cover 102 attached above the main body 101. A document table 103 is provided on the upper surface of the main body 101, and the document table 103 is opened and closed by a platen cover 102. Further, the platen cover 102 includes a document conveying device 110.

  An image reading unit 120 is provided below the document table 103. The image reading unit 120 reads an image of a document with the scanning optical system 121 and generates digital data (image data) of the image. The document can be placed on the document table 103 or the document transport device 110. The scanning optical system 121 includes a first carriage 122, a second carriage 123, and a condenser lens 124. The first carriage 122 is provided with a linear light source 131 and a mirror 132, and the second carriage 123 is provided with mirrors 133 and 134. The light source 131 illuminates the document. The mirrors 132, 133, and 134 guide reflected light from the document to the condenser lens 124, and the condenser lens 124 forms an optical image on the light receiving surface of the line image sensor 125. In the scanning optical system 121, the first carriage 122 and the second carriage 123 are provided so as to be able to reciprocate in the sub-scanning direction 135. By moving the first carriage 122 and the second carriage 123 in the sub-scanning direction 135, the image of the document placed on the document table 103 can be read by the image sensor 125. When reading an image of a document set on the document conveying device 110, the image reading unit 120 temporarily fixes the first carriage 122 and the second carriage 123 according to the image reading position, and passes the image reading position. Are read by the image sensor 125. The image sensor 125 generates image data of a document corresponding to, for example, each color of R (red), G (green), and B (blue) from the light image incident on the light receiving surface. The generated image data can be printed on paper in the image forming unit 140. Further, the data can be transmitted to other devices (not shown) through the network 162 by the network interface 161.

  The image forming unit 140 prints image data obtained by the image reading unit 120 or image data received from another device connected to the network 162 on a sheet. The image forming unit 140 includes a photosensitive drum 141. The photosensitive drum 141 rotates in one direction at a constant speed. Around the photosensitive drum 141, a charger 142, an exposure unit 143, a developing unit 144, and an intermediate transfer belt 145 are arranged in this order from the upstream side in the rotation direction. The charger 142 uniformly charges the surface of the photosensitive drum 141. The exposure device 143 irradiates the surface of the uniformly charged photoconductor drum 141 with light according to the image data, and forms an electrostatic latent image on the photoconductor drum 141. The developing device 144 attaches toner to the electrostatic latent image and forms a toner image on the photosensitive drum 141. The intermediate transfer belt 145 transfers the toner image on the photosensitive drum 141 onto a sheet. When the image data is a color image, the intermediate transfer belt 145 transfers each color toner image onto the same sheet. The RGB color image is converted into C (cyan), M (magenta), Y (yellow), and K (black) format image data, and the image data of each color is input to the exposure unit 143.

  The image forming unit 140 feeds paper from the manual feed tray 151, the paper feed cassettes 152, 153, and 154 to the transfer unit between the intermediate transfer belt 145 and the transfer roller 146. Various sizes of paper can be placed or stored in the manual feed tray 151 and the paper feed cassettes 152, 153, and 154. The image forming unit 140 selects a sheet specified by the user or a sheet corresponding to the automatically detected document size, and feeds the selected sheet from the manual feed tray 151 or the cassettes 152, 153, and 154 by the feeding roller 155. . The fed paper is transported to the transfer section by transport rollers 156 and registration rollers 157. The sheet on which the toner image is transferred is conveyed to the fixing device 148 by the conveyance belt 147. The fixing device 148 has a fixing roller 158 and a pressure roller 159 with a built-in heater, and fixes the toner image on the sheet by heat and pressing force. The image forming unit 140 discharges the sheet that has passed through the fixing device 148 to the discharge tray 149.

  FIG. 2 is a diagram illustrating an example of an appearance of an operation panel included in the multifunction peripheral. The user can use the operation panel 200 to give the MFP 100 a start of copying and other instructions, and to confirm the status and settings of the MFP 100. On the operation panel 200, a display 201 with a touch panel and operation keys 203 are arranged. The display 201 includes a display surface including a liquid crystal display that displays operation buttons, messages, and the like, and a sensor that detects a pressed position on the display surface. The detection method of a press position is not specifically limited. Any method such as a resistance film method, a capacitance method, a surface acoustic wave method, and an electromagnetic wave method can be employed. The user can input through the display 201 using his / her finger or the touch pen 202.

  The display 201 displays an operation screen having a button display unit 204, a message display unit 205, and a status display unit 206. A plurality of tabs 208 are prepared in the button display unit 204, and operation buttons corresponding to the tab category are arranged on each tab. The “easy setting” tab has operation buttons used for basic setting. In the example of FIG. 2, operation buttons for setting paper size, copy magnification, density, printing surface, page aggregation, and post-processing are arranged. For example, when the user performs an operation of pressing the “density” button 207, a pop-up screen having selection buttons such as “light”, “normal”, and “dark” for selecting the density is displayed over the operation button. The density is set by the user's selection (pressing). In the example of FIG. 2, in addition to the “easy setting” tab, a “document / paper / finish” tab, a “color / image quality” tab, a “layout / edit” tab, and an “application / others” tab are also provided. The user can switch to the display of these tabs by performing an operation of selecting the tab button 208. While one tab is selected, other tabs and their elements are hidden on the operation screen.

  The message display unit 205 displays a message notifying the user of settings such as whether copying is possible and the number of copies. Note that the MFP 100 according to the present embodiment is configured to perform user authentication processing (login processing) for confirming the user (operator) usage qualification when the MFP 100 is used. FIG. 2 shows a state before the user authentication processing is performed, and a message “Please enter authentication information” requesting input of user authentication information is displayed on the message display unit 205. . Here, the user inputs user authentication information using the numeric keypad 210 or a software keyboard displayed on the touch panel 201 as necessary.

  The status display unit 206 displays device status information as necessary. In this display, detection results of various sensors included in the multifunction peripheral 100 are reflected. The device status information means a message that notifies the user of a warning that prompts the user to respond to an abnormality although the device is in an operable state. For example, the fact that the remaining amount of paper is low, the document platen 103 is dirty, and the facsimile document is stored in the memory when the facsimile memory reception is set is included. Further, the device status information may include out-of-paper, conveyance jam, and the like.

  The operation keys 203 include a main power key 209, a numeric keypad 210, a start key 211, a clear key 212, a LogOut key 213, and the like. For example, the main power key 209 is used to switch the main power supply of the multifunction peripheral 100 on and off. The numeric keypad 210 can be used for specifying the number of copies and setting the copy magnification. When the user makes these settings, the multi-function device 100 displays a message such as “Can be copied (with settings)” on the message display unit 205 to notify the user that the settings have been made. The start key 211 is used for a start instruction for copying or image printing. The user operates the clear key 212 when canceling the setting made by the user. Since whether or not the machine accepts the setting by the user can be determined by the above-described message, the clear key 212 may be operated if the setting becomes unnecessary. Although not particularly limited, in the present embodiment, the operation through the operation panel 200 is prohibited except for the information input related to the user authentication until the user's use qualification is confirmed by the user authentication process described above. . When the authenticated user presses the LogOut key 213 after using the multifunction peripheral, or when the operation of the operation panel 200 and the operation of the image reading unit 120 and the image forming unit 140 are not performed for a predetermined time after the authentication, the multifunction peripheral 100 It is configured to return to the state before the authentication process is performed.

  FIG. 3 is a hardware configuration diagram of a control system in the multifunction machine. The multifunction peripheral 100 according to the present embodiment includes a CPU (Central Processing Unit) 301, a RAM (Random Access Memory) 302, a ROM (Read Only Memory) 303, an HDD (Hard Disk Drive) 304, an original transport device 110, and an image reading unit 120. A driver 305 corresponding to each drive unit in the image forming unit 140 is connected via an internal bus 306. The ROM 303, the HDD 304, and the like store programs, and the CPU 301 controls the multifunction peripheral 100 in accordance with the instructions of the control program. For example, the CPU 301 uses the RAM 302 as a work area, and controls the operation of each driving unit by exchanging data and commands with the driver 305. The HDD 304 is also used to store image data obtained by the image reading unit 120 and image data received from other devices through the network interface 161.

  An operation panel 200, an external interface 307, and various sensors 308 are also connected to the internal bus 306. The operation panel 200 receives a user operation and supplies a signal based on the operation to the CPU 301. Further, the display 201 of the operation panel 200 displays the above-described operation screen according to a control signal from the CPU 301. The external interface 307 is a portable interface such as a network interface 161 that realizes connection with a communication network such as the Internet and data transmission / reception via the communication network, and a USB (Universal Serial Bus) memory that is an external device. Various interfaces such as a USB interface for realizing data transmission / reception with a medium are included. As will be described later, an emergency authentication start instruction is input to the multifunction peripheral 100 via the external interface 307. The sensor 308 includes various sensors such as an open / close detection sensor for the platen cover 102, a document detection sensor on the document table 103, a temperature sensor for the fixing device 148, and a detection sensor for the conveyed paper or document.

  The CPU 301 executes, for example, a program stored in the ROM 303 to realize each of the following means (functional blocks) and controls the operation of each means according to signals from these sensors.

  FIG. 4 is a functional block diagram of the MFP according to the present embodiment. As illustrated in FIG. 4, the multifunction peripheral 100 according to the present embodiment includes an operation recognition unit 401, an authentication unit 402, a reception unit 403, an emergency authentication control unit 404, and an operation control unit 405. In FIG. 4, the multifunction peripheral 100 is connected to the Internet 400 via the external interface 307. An external device 411 that issues an emergency authentication start instruction is connected to the Internet 400.

  The operation recognition unit 401 recognizes pressing of the operation key 203 and pressing of the display 201 on the operation panel 200 and recognizes the operation content of the user. Although not particularly limited, in the present embodiment, the coordinates of the pressed position detected by the sensor that detects the pressed position of the display 201 are input to the operation recognition unit 401, and the operation recognition unit 401 is configured such as an operation button held by itself. Based on the coordinates of the screen elements and the coordinates of the input pressing position, the user's operation content on the display 201 is recognized. The operation recognized by the operation recognition unit 401 is input to the authentication unit 402 and the operation control unit 405.

  The authentication unit 402 executes user authentication by determining whether an operation on the operation panel 200 satisfies a pre-registered authentication condition. As described above, in this embodiment, the user inputs user authentication information to the multifunction peripheral 100 through the operation panel 200. For example, the user inputs user authentication information using the numeric keypad 210 or a software keyboard displayed on the touch panel 201 as necessary. The user authentication information may be any information as long as it can identify the user. In the present embodiment, a user ID uniquely assigned to each user and a password associated with the user ID are used as user authentication information.

  In the present embodiment, the authentication unit 402 is registered in advance with an authorized user list in which a user ID of a user who is permitted to use the multifunction device 100 and a password associated with the user ID are recorded. If the user ID and password input from operation panel 200 are included in the authorized user list, authentication unit 402 determines that the user authentication condition is satisfied. When the user authentication condition is satisfied, the authentication unit 402 permits the user to use the multifunction peripheral 100 (generation of image data in the image reading unit 120, printing of image data in the image forming unit 140, etc.), and user authentication. When the condition is not satisfied, the use of the multifunction device 100 by the user is prohibited. In the present embodiment, the various processes in the MFP 100 are configured to be executed by the operation control unit 405 based on a user instruction recognized by the operation recognition unit 401, and the authentication unit 402 is configured to operate the operation control unit 405. Various processes are realized by removing the operation restrictions.

  Further, the authentication unit 402 sets the authentication conditions for emergency authentication associated with the emergency authentication start instruction for a time (for example, several minutes) specified in advance according to an instruction from the emergency authentication control unit 404 described later. Perform the authentication used. In the present embodiment, one password is registered in the authentication unit 402 in advance as an authentication condition for emergency authentication. As the password, a character string made up of characters such as numerals and alphabets, an operation on the operation panel 200, and the like can be adopted. The operation on the operation panel 200 is, for example, an operation such as pressing a specific operation button for a long time, simultaneously pressing a specific plurality of operation buttons, or pressing one or more specific areas on the display 201. Here, it is assumed that a password consisting of four digits known to all service personnel is registered as an emergency authentication condition.

  The accepting unit 403 accepts an emergency authentication start instruction from the external device 411 through the external interface 307. As described above, in this embodiment, the multi-function device 100 receives an emergency authentication start instruction from the external device 411 via the Internet 400 and the external interface 307. Here, the receiving unit 403 has an email receiving function, and the external device 411 has an email sending function. An address that is a destination for the e-mail to reach the reception unit 403 is registered in the external device 411 in advance. Note that the address may be specified when an e-mail transmission request is made. The external device 411 transmits an e-mail including an emergency authentication start instruction to the multi-function device 100 (accepting unit 403) in accordance with an instruction input to the external apparatus 411. The emergency authentication start instruction only needs to be included in the e-mail in a state that the reception unit 403 can recognize, and may be included in any of header information such as a title, body text, and attached file.

  In response to the emergency authentication start instruction received by the receiving unit 403, the emergency authentication control unit 404 sends a specific authentication condition associated with the emergency authentication start instruction to the authentication unit 402 for a specific time specified in advance. Instructs execution of authentication using. In the present embodiment, in response to the instruction from the emergency authentication control unit 404, the authentication unit 402 performs authentication using the above-described emergency authentication password for a predetermined time.

  FIG. 5 is a flowchart illustrating an example of an emergency authentication procedure performed by the multifunction peripheral 100. The procedure starts with the main power of the multi-function device 100 being turned on as a trigger. Here, a description will be given based on a case where the serviceman forgets the password for shifting to the maintenance mode and cannot shift to the maintenance mode, and the situation is resolved. In the maintenance mode, a password can be reset for shifting from the normal mode to the maintenance mode.

  Under the situation where the accepting unit 403 has not accepted the emergency authentication start instruction, as described above, only the input of information related to user authentication is permitted as an operation through the operation panel 200 in the MFP 100 (No in step S501). . In this situation, the service person who has forgotten the password for shifting to the maintenance mode cannot shift the multifunction peripheral 100 to the maintenance mode.

  Under this situation, the service person contacts the operator of the external device 411 in order to issue an emergency authentication start instruction from the external device 411. In the present embodiment, the external device 411 is set at the sales office (for example, the head office) of the multifunction peripheral 100 to which the serviceman belongs, and the serviceman contacts the sales office. The communication can be performed using a portable information terminal or the like that can be connected to the store network. In this case, in the communication through the portable information terminal, the service person proves his / her identity with a password or the like, and transmits the information specifying the target MFP to which the emergency authentication start instruction is transmitted, so that the external device 411 automatically In addition, it is possible to adopt a configuration in which an emergency authentication start instruction is transmitted. However, the communication of the target multi-function peripheral that transmits the identity verification and the emergency authentication start instruction may be made verbally using a telephone or the like. As described above, by allowing verbal communication, it is possible to issue an emergency authentication start instruction from the external device 411 even in an office or the like where bringing in a portable information terminal is restricted for security management.

  The operator who has received the above instruction instructs the external apparatus 411 to transmit an e-mail including an emergency authentication start instruction to the multifunction peripheral 100 designated by the service person. The reception unit 403 that has received the e-mail transmitted by the external device 411 according to the instruction via the external interface 307 and recognized the emergency authentication start instruction notifies the emergency authentication control unit 404 that the emergency authentication start instruction has been acquired. (Step S501 Yes).

  In response to the notification, the emergency authentication control unit 404 instructs the authentication unit 402 to execute authentication based on the emergency authentication condition. The authentication unit 402 starts authentication based on an emergency authentication condition registered in advance in response to the instruction (step S502). As described above, authentication based on the emergency authentication condition is possible within a time specified in advance in the authentication unit 402. Therefore, when the time has elapsed, the authentication unit 402 prohibits authentication based on the emergency authentication condition (steps S503 Yes, S507). At this time, from the viewpoint of improving security, the authentication unit 402 displays a point at a specific position on the display 201 without clearly displaying on the display 201 or the like that the authentication based on the emergency authentication condition is possible. It is preferable to notify the service person with a slight change in appearance. Even in such a configuration, since the service person recognizes that the multifunction device 100 performs such an operation, the password for emergency authentication can be input.

  The authentication unit 402 that has started authentication based on the emergency authentication condition waits for an operation through the operation panel 200 until a predetermined time (for example, 2 minutes) elapses (No in steps S503 and S504). When there is an operation through the operation panel 200, the operation is collated with the above-described emergency authentication condition (Steps S503 No, S504 Yes, S505). If the urgent authentication condition is not satisfied, the authentication unit 402 waits for an operation through the operation panel 200 within a predetermined time (steps S505 No, S503 No, S504 No).

  On the other hand, when the emergency authentication conditions are satisfied, emergency authentication processing is executed (steps S505 Yes, S506). That is, in this example, when a password consisting of a 4-digit number registered in advance by the operation is input, the authentication unit 402 determines that the emergency authentication condition is satisfied, and the operation control unit 405 enters the maintenance mode. Instruct to migrate. As a result, the transition to the maintenance mode is performed.

  As described above, in the MFP 100, when an emergency authentication start instruction is input from the outside, authentication based on the emergency authentication condition associated with the emergency authentication start instruction can be performed within a specified time. . Therefore, even if the serviceman has forgotten the password for shifting to the maintenance mode, an operation that satisfies the authentication conditions for the emergency authentication is performed on the operation panel 200 within the time when the emergency authentication is possible. Thus, the service person can perform the transition to the maintenance mode.

  Further, in this way, the MFP 100 adopts a configuration in which an emergency authentication start instruction is input without going through the operation panel 200, so that, for example, an unintentional attack due to an operation panel 200 by a person who tries to intrude is not intended. Emergency authentication is not possible. Further, by using a password well known to the service person as the emergency authentication condition, the service person can surely execute the transition to the maintenance mode. Furthermore, since the time for which emergency authentication is possible is limited, even if the password is leaked, it cannot be used unless an emergency authentication start instruction is entered, ensuring high security. can do. In addition, since the configuration is such that an emergency authentication start instruction is input using a network, emergency authentication can be executed even in an office where the introduction of an information processing terminal such as a personal computer is restricted due to security management. .

  Further, the MFP 100 is configured to input an emergency authentication start instruction to the accepting unit 403 via the Internet by electronic mail. Therefore, even when a security measure such as a firewall is taken in a gateway or the like in the network to which the multifunction device 100 is connected, without setting a communication port for notifying an emergency authentication start instruction, An emergency authentication start instruction can be input to the multifunction device 100.

  In the above-described embodiment, the configuration in which the emergency authentication condition is registered in the authentication unit 402 in advance has been described. However, the configuration may be such that the emergency authentication condition (password) is specified together with the emergency authentication start instruction. In this case, the reception unit 403 may extract the designated emergency authentication condition and set the emergency authentication condition in the authentication unit 402. In this configuration, it is possible to set emergency authentication conditions according to the operating service person. That is, by transmitting the password constituting the emergency authentication condition to the multifunction peripheral 100 together with the emergency authentication start instruction as, for example, the date of birth of the service person, a password known to the service person can be set. Further, since the password is not registered in advance, there is no risk of the password leaking.

  In the above embodiment, the emergency authentication start instruction is input to the multifunction peripheral 100 through the Internet. However, the emergency authentication start instruction may be input using another communication line. Further, the emergency authentication start instruction can be input to the accepting unit through a portable storage medium that can be read by the multifunction peripheral 100, for example. For example, it is possible to adopt a configuration in which an emergency authentication start instruction is stored in a USB memory, and the USB memory is attached to the USB interface of the multifunction peripheral 100 that is the external interface 307. In this case, the accepting unit 403 accepts an emergency authentication start instruction through the USB interface. In this configuration, when a service person has the portable recording medium for emergency response and forgets the password for shifting to the maintenance mode as described above, the portable recording medium is attached to the multifunction peripheral 100. The emergency authentication procedure described above can be executed.

  In the configuration in which the portable storage medium is used as the external device that issues the emergency authentication start instruction in this way, the emergency authentication start instruction is acquired by the reception unit 403 according to the connection between the portable storage medium and the multifunction peripheral 100. It is preferable that it is the structure. For example, when the portable storage medium and the multifunction peripheral 100 are connected via the external interface 307, the reception unit 403 or the external interface 307 inputs an access signal such as a password to the connected portable storage medium. In response to the access signal, an emergency authentication start instruction is input from the portable storage medium to the receiving unit 403.

  Further, when receiving the emergency authentication start instruction, the receiving unit 403 preferably changes or deletes the information stored in the portable storage medium so that it cannot be reused. In addition, the portable storage medium preferably changes or deletes the stored emergency authentication start instruction to an unusable state when an access signal different from the access signal from the multifunction peripheral is input. Thereby, even if the service person loses the portable storage medium, the possibility of unauthorized use can be extremely reduced. Whether or not the access signal is genuine from the multifunction peripheral can be determined by the password when the access signal includes a password, for example, and even if the password is not included, the OS (operating system) ) It can be determined by referring to the information.

  As described above, according to the present invention, high security can be ensured, and an unauthenticated state due to forgotten registration operation content can be quickly resolved.

  The above-described embodiments do not limit the technical scope of the present invention, and various modifications and applications other than those already described are possible within the scope of the present invention. For example, in the above-described embodiment, the configuration including one authentication unit that performs both user authentication and emergency authentication has been described. However, the configuration may include a user authentication authentication unit and an emergency authentication authentication unit. . In the above-described embodiment, a case where the service person applied the emergency authentication under the situation where the password for shifting to the maintenance mode is forgotten has been described as a preferable aspect. The present invention can be applied to any mode in which temporary emergency authentication is required to cancel an unauthenticated state due to forgetting.

  Further, in the flowchart shown in FIG. 5, the order of the steps can be appropriately changed within a range where the equivalent action is achieved. Also, from the viewpoint of enhancing security, a configuration is adopted in which emergency authentication is prohibited even within a specified time when it is determined that the authentication condition is not satisfied in the determination of whether or not the emergency authentication condition is satisfied (step S505). You can also

  Further, in the above description, the present invention is embodied as a digital multi-function peripheral. However, the present invention is not limited to a digital multi-function peripheral, but can be applied to any image processing apparatus such as a printer or a copier. In addition, in the above description, the MFP as an image processing device has been described as including an operation unit, an authentication unit, an external interface, a reception unit, and an emergency authentication control unit. However, the present invention provides an authentication device including these components. It can also be provided.

  According to the present invention, high security can be ensured, and an unauthenticated state due to forgotten registration operation contents can be quickly eliminated, which is useful as an image processing apparatus and an authentication apparatus.

100 MFP 200 Operation Panel (Operation Unit)
307 External interface 401 Operation recognition unit 402 Authentication unit 403 Reception unit 404 Emergency authentication control unit 405 Operation control unit 411 External device

Claims (4)

An image processing apparatus having an authentication function,
An operation unit used to input authentication information;
An authentication unit for determining whether authentication information input from the operation unit satisfies a pre-registered authentication condition;
An external interface for inputting data from an external device provided independently of the image processing device;
A receiving unit that receives an emergency authentication start instruction from the external device through the external interface;
In response to the emergency authentication start instruction received by the reception unit, execution of authentication using a specific authentication condition associated with the emergency authentication start instruction for a specific time specified in advance for the authentication unit An emergency authentication control unit that instructs
Equipped with a,
The authentication unit starts authentication based on an emergency authentication condition registered in advance according to the emergency authentication start instruction, and when the authentication based on the emergency authentication condition is possible, the identification on the display of the operation unit An image processing apparatus that notifies a service person that authentication based on the emergency authentication condition is possible by displaying a point at a position . In the case of using a portable storage medium as an external device that issues the emergency authentication start instruction, the accepting unit connects the portable storage medium and the image processing apparatus via an external interface. By acquiring the emergency authentication start instruction from the storage medium, the emergency authentication start instruction is received. When the emergency authentication start instruction is received, the emergency authentication start instruction stored in the portable storage medium cannot be reused. The image processing apparatus according to claim 1, wherein the image processing apparatus changes or erases the state . The reception unit inputs a specific access signal to the connected portable storage medium when the portable storage medium and the image processing apparatus are connected via an external interface,
When a specific access signal from the reception unit is input to the portable storage medium, the emergency authentication start instruction is input to the reception unit, and an access signal different from the specific access signal from the reception unit is input 3. The image processing apparatus according to claim 2 , wherein the stored emergency authentication start instruction is changed or deleted to an unusable state . An operation unit used to input authentication information;
An authentication unit for determining whether authentication information input from the operation unit satisfies a pre-registered authentication condition;
An external interface to which data is input from an external device;
A receiving unit that receives an emergency authentication start instruction from the external device through the external interface;
In response to the emergency authentication start instruction received by the reception unit, authentication using the specific authentication condition associated with the emergency authentication start instruction is performed for the authentication unit only for a specific time specified in advance. An emergency authentication control unit for instructing execution;
Equipped with a,
The authentication unit starts authentication based on an emergency authentication condition registered in advance according to the emergency authentication start instruction, and when the authentication based on the emergency authentication condition is possible, the identification on the display of the operation unit An authentication device that notifies a serviceman that authentication under the emergency authentication condition is possible by displaying a point at a position .

Images