JP5678468B2 - Image processing system and operation management method - Google Patents

Description

The present invention provides an image processing system such as a copying machine, a facsimile machine, a multifunction machine, etc. shared by a plurality of users, more specifically, a user authentication function and a power saving function, and a method for further improving the performance of both functions. images processing system, and a operation management method according to the function.

In recent years, image processing apparatuses such as copiers, facsimiles, and multifunction machines have been developed to be multifunctional, and as one of the important elements constituting an image processing system, it is possible to meet various demands. It is a common usage pattern to be shared with other people. For this reason, security measures are required, and a method has been proposed in which authentication is performed based on authentication information input by the user, and permission such as login is granted on the condition that the authentication is successful.
In addition, power savings are required due to increasing environmental concerns, and image processing devices have conventionally been set in several levels up to the maximum power saving level that stops power supply other than the minimum required power supply. A method of operating in a power saving mode that reduces power consumption from the normal operation during standby is employed.

In the power saving mode, the operation is stopped without supplying power to various devices, modules, units, and the like. The condition for shifting to the power saving mode is a method based on the condition that there is no access for a certain period of time. Is the mainstream. However, in the case of an image processing apparatus that requires authentication, there is already known a method for shifting to a power saving mode when an authentication key used for an operation related to authentication is removed in order to further reduce power consumption. Patent Document 1 can be exemplified. In Japanese Patent Laid-Open No. 2004-228688, when the operation on the client PC that makes a print request to the printer is finished and the authentication key that stores the identification information for identifying the print data is removed, the client PC is shifted to the power saving mode. Depending on the method, the power saving operation is accelerated compared to the normal transition.
However, according to Patent Document 1 exemplified, the authentication key has to be physically attached and removed, so that it is not easy to use, and there is a possibility that the authentication key may be forgotten to be forgotten. . In addition, if the user forgets to unplug, there is a problem that power is consumed wastefully without shifting to the power saving mode.

Further, Patent Document 2 can be shown as a prior art that can solve the above-described problem caused by the confirmation key that requires the attaching / detaching operation according to Patent Document 1.
In Patent Document 2, the user does not need to attach / detach by transmitting necessary information such as user identification information using wireless communication between the identification information transmitting apparatus possessed by the user and the image processing apparatus (multifunction machine). Authenticate. In addition, in this conventional example, along with authentication, control is performed such as measuring the distance between transmitting and receiving devices by the strength of radio waves and starting the processing requested by the user on the condition that the user is within a predetermined distance from the multifunction device. In addition, on the condition that the user has moved away from the multi-function device by a predetermined distance, the process is stopped and control to shift to the power saving mode is performed, thereby ensuring security and power saving.

However, according to the related art using wireless communication (Patent Document 2), since the identification information transmission device possessed by the user does not shift to the power saving mode unless it is separated by a predetermined distance, it is close to the image processing device (multifunction device). When a situation where the user has to stay is reached, the normal operation is continued without shifting to the power saving mode.
In such a case, power is wasted, and there is a risk of unauthorized use while the normal operation continues, impairing certainty in terms of security assurance. . In addition, according to this conventional technique, since it is necessary to continue the process of determining whether or not the identification information transmitting apparatus is separated by a predetermined distance, there is a disadvantage that a considerable processing load is required.
The present invention has been made in view of the above-described problems of the prior art, and an object thereof is an authentication function that does not require a user operation such as an attaching / detaching operation when an authentication key is used, and a mode in conjunction with authentication. In an image processing apparatus or an image processing system having a power saving function for performing migration, the security performance is further improved, and at the same time, the power saving is more effective and the problem solving means is simplified.

The present invention provides an authentication information transmitter for transmitting user authentication information in a manner for transmitting the user's authentication information through the user's human body, a receiver for receiving the authentication information transmitted from the authentication information transmitter, An image processing system comprising: an image processing apparatus that performs predetermined processing after performing user authentication based on the authentication information received by a receiver, wherein the authentication information transmitter transmits the authentication information Before receiving the device information transmitted from the receiver, and when the validity of the receiver is confirmed based on the device information, the authentication information is transmitted to the receiver, and the image processing apparatus Permits login on the condition that authentication based on authentication processing for the received authentication information is established, monitors establishment or disconnection of communication between the authentication information transmitter and the receiver, and disconnects the communication. When detected The normal operation mode is made possible by selecting whether to permit use of only a part of the functions of the image processing apparatus or to restrict the use of all functions, and by restricting the power supply to the image processing apparatus. To a power saving mode having a plurality of power saving levels according to the use permission or the use restriction .

  With an authentication function that eliminates the need for user attachment / detachment and a power-saving function that switches modes in conjunction with authentication, it is easy to use, prevents inadvertent user errors, improves security performance, and is useless. Reduction in power consumption can be achieved at a higher level and by simple means.

It is a figure explaining the circuit structure of the capacitive coupling short-distance communication used with embodiment of the image processing apparatus which concerns on this invention. It is a schematic block diagram which shows an example of the image processing apparatus (system) incorporating the communication circuit of the capacity | capacitance coupling system which transmits / receives authentication information. It is a figure which shows schematic structure inside the authentication information transmitter shown in FIG. It is a figure which shows schematic structure inside each of the image processing apparatus shown in FIG. 2, and the receiver connected to this. It is a figure which shows the flow of the transfer process to the power saving mode corresponding to the cutting | disconnection of communication.

Embodiments of an image processing apparatus according to the present invention will be described with reference to the accompanying drawings.
In the following, input of a job to be processed by the image processing apparatus is performed in accordance with a user operation at the installation place of the image processing apparatus, and user authentication is required for permission of login, for example, a copying machine, a facsimile machine, a multifunction machine An embodiment in which an image processing apparatus such as the above is taken as an example is shown.
Conventionally, the same kind of proposed image processing apparatus performs authentication by transmitting user identification information or the like by wireless communication from an identification information transmitting apparatus possessed by the user, and the user who has finished the processing has a predetermined distance from the image processing apparatus. Some devices have a function of performing an operation of shifting to the power saving mode on condition that they are separated from each other. However, according to this conventional apparatus, as described in [Problem to be Solved by the Invention] above, there is a possibility of causing a security problem that wasteful power consumption or use by an unauthorized person occurs. In addition, since it is necessary to continue the process of determining whether or not the identification information transmitting apparatus is separated by a predetermined distance, there is a disadvantage that a considerable processing load is required.

Therefore, in the present invention, as a technique with less processing load without causing the above-described problem, the identification information transmission means possessed by the user is used for authentication from the identification means transmission means to the reception means on the image processing apparatus side by short-distance communication of the capacity coupling method. Use a technique to convey identification information.
According to the capacitive coupling communication employed in this method, communication can be established at a short distance, which is impossible with wireless communication, and login is performed through user recognition performed after the communication is established. After that, even when the user leaves the image processing device after completing or canceling the processing of the requested job, communication disconnection can be detected at a short distance, and security is ensured by logging out on the condition of communication disconnection. Can do. In addition, by performing control to shift to the power saving mode at the same time as logout, wasteful power consumption does not occur, and the processing burden for determining the distance of the conventional device is eliminated, thus simplifying the processing. it can.

[Capacitive coupling near field communication]
First, an outline of capacitive coupling short-distance communication applied to transmission / reception of identification information possessed by a user in this embodiment will be described.
FIG. 1 is a diagram for explaining a circuit configuration of short-distance communication of a capacitive coupling system applied in this embodiment.
A communication circuit 100 illustrated in FIG. 1 includes a transmitter 101, a communication medium 103, and a receiver 102.
The transmitter 101 includes an AC signal generation circuit 101m modulated with transmission data and a transmission electrode 101e that is capacitively coupled to the communication medium 103 and transmits the modulated signal to the transmitter 101.
The receiver 102 includes a receiving electrode 102e that receives a signal transmitted from the transmitter 101 via the communication medium 103 by capacitively coupling with the communication medium 103, and a circuit 102d that demodulates transmission data from the received signal.
In this embodiment, the communication medium 103 is a user holding the transmitter 101, and the human body is used as the communication medium 103 and is capacitively coupled to both the electrodes 101 e and 102 e of the transmitter and receiver so that signals can be received by the receiver 102. A communication circuit is configured when the user approaches the state.

The capacitively coupled communication circuit 100 shown in FIG. 1 is a short-range communication technique, and is a method of exchanging charges between both electrodes 101e and 102e of a transceiver, and a communication medium between both electrodes 101e and 102e. Even if 103 is a medium that conducts electricity, a change in charge propagates, so communication is possible.
The communication medium 103 may be a human body as in this embodiment. In this case, the communication operation is performed by a circuit configured through the human body in which a weak alternating electric field in the vicinity of the human body is read by an electrode. Further, in this communication circuit, a change in charge is transmitted by capacitive coupling, so that a signal can be transmitted even if clothes or the like are interposed between the transmitter 101, the communication medium 103, and the receiver 102.
Note that the capacitive coupling short-range communication applied to this embodiment is a known technique as shown in Non-Patent Document 1, for example, and the same document can be referred to for details.

[Connection of Communication Circuit 100 to Image Processing Device]
The communication circuit 100 (FIG. 1) can establish communication when a user approaches the image processing apparatus, and can detect disconnection of communication at a short distance even when the user leaves the image processing apparatus. It is desirable to ensure that the desired operation can be performed in the natural behavior that the user performs when using the image processing apparatus.
Therefore, the authentication information transmitter possessed by the user (hereinafter referred to as “authentication information transmitter”) is, for example, a portable format that can be put in the user's pocket, and the authentication information transmitter that transmits the user's body as a communication medium by capacitive coupling. For example, the receiver is placed under a carpet on which the user stands when operating the image processing apparatus so that the receiver can reliably receive the above signal on the image processing apparatus side and receive the authentication information.

FIG. 2 is a schematic configuration diagram illustrating an example of an image processing apparatus (system) in which a capacitive coupling type communication circuit that transmits and receives authentication information is incorporated.
In the configuration of the embodiment shown in FIG. 2, the authentication information transmitter 201 possessed by the user (communication medium) 203 is carried in the user's pocket, and the receiver 202 moves the image processing apparatus 204 to, for example, an operation panel (not shown). It is installed on the floor on which the user 203 stands when performing an input operation through the figure.
The receiver 202 is connected to the image processing apparatus 204 and transfers received data. This connection may be a wired communication such as a USB (Universal Serial Bus) or a LAN (Local Area Network), but may be a wireless communication such as a wireless LAN.

In addition, the method of carrying the authentication information transmitter 201 possessed by the user 203 as a communication medium is a method of hanging the card type authentication information transmitter 201 in a pocket, as well as a method of hanging from a neck with a string, Or the method of mounting | wearing an arm with a wristband form may be used.
When the authentication information transmitter 201 is used in such a form, the user 203 touches the electrode of the receiver 202 directly or indirectly so that the distance in which the charge can be propagated becomes the distance between the authentication information transmitter 201 and the receiver. It is possible to communicate between 202. The contact method between the user 203 and the electrode of the receiver 202 is, for example, a method in which the user 203 as a communication medium steps on a plate-like electrode installed on the floor as shown in FIG. It is based on the method of touching the electrode provided on the hand. In the latter case, the image processing apparatus 204 can be implemented in a built-in format.

[Processing of image processing apparatus corresponding to operation of communication circuit]
When the user 203 stands at the operation position of the image processing apparatus 204 in order to use the image processing apparatus 204, the authentication information transmitter 201 and the receiver 202 possessed by the user are in a state where communication is possible by capacitive coupling. Thereafter, when communication is established, the authentication information transmitter 201 transmits the authentication information stored in the internal memory to the receiver 202.
The image processing apparatus that receives the authentication information obtained by the receiver 202 restoring the received signal performs user authentication by comparing the received authentication information with the authentication information registered in the database in advance. Note that a database for registering authentication information may be stored in the image processing apparatus 204. However, a method of receiving an externally provided authentication server (not shown) connected via a network or the like and receiving data from the server is provided. It may be adopted.

When user authentication is established, the image processing apparatus 204 permits login. The login permission is set to a state in which functions and data permitted for the authenticated user 203 can be used among the functions and accumulated data of the image processing apparatus 204. For example, an instruction such as key input for accepting a job processing request allowed by the authenticated user 203 from an operation panel (not shown) can be made.
After the input operation of the job requested by the user is completed and the processing is started, the user 203 may leave the image processing apparatus 204 even if the processing is being performed depending on the processing content. When a certain user 203 leaves the receiver 202 and is disconnected, the user is logged out. When you log out, you are limited to the functions that do not require authentication, and you return to the state that accepts login. When logging out, it is possible to restrict the use of the functions of the image processing apparatus as described above so that some functions can be used, but it is also possible to disable all functions. This use restriction may be made so that a function restricted by the use environment can be selected.
In this embodiment, when the communication is disconnected, the image processing apparatus 204 immediately changes from the normal operation mode to the power saving mode if the processing is completed or waits for the processing to end if the processing is in progress. Perform the operation to move to. When processing is in progress, as described above, in the operation mode that restricts the use of some functions, the operation mode is shifted to the power saving mode.

Hereinafter, the authentication information transmitter 201, the receiver 202, and the image processing apparatus 204 that perform the above operations and processes will be described in more detail.
<Internal configuration of authentication information transmitter>
FIG. 3 is a diagram showing a schematic configuration inside the authentication information transmitter 201 shown in FIG.
As shown in FIG. 3, the authentication information transmitter 201 includes a memory 206 that stores authentication information and the like, and a transmission unit 207 that generates an AC signal modulated by transmission data such as authentication information and performs capacitive coupling communication. A control unit 205 that controls the memory 206 and the transmission unit 207, and a power supply circuit 208 that supplies power to each unit in the authentication information transmitter 201.
The memory 206 may be a non-rewritable memory such as a mask ROM (Read Only Memory), but is a rewritable nonvolatile memory such as an EEP (Electrically Erasable Programmable) ROM or FRAM (registered trademark) or a FLASH ROM. May be a memory.

The control unit 205 may be a computer having a CPU (Central Processing Unit), a memory for storing programs, data, and the like necessary for the processing of the control unit 205, a work memory, and the like as elements, but with a simpler circuit. There may be. In addition, according to a system that operates with a signal from an external control unit, the authentication information transmitter 201 can be configured without providing the control unit 205.
In FIG. 3, only transmission is performed. However, a configuration in which a signal transmitted from the receiver 202 can also be received can be employed. If reception is also possible, the receiver 202 on the image processing apparatus 204 side can be checked on the authentication information transmitter 201 side. That is, before transmitting the authentication information, it is confirmed by the device ID received from the transmission destination whether or not the transmission destination is recognized as the authorized receiver 202, and is determined to be the authorized receiver 202 It is possible to perform a check operation in which authentication information is sent only to. By performing this check, leakage of authentication information can be prevented and security can be ensured.

<Internal configuration of receiver and image processing apparatus>
FIG. 4 is a diagram illustrating a schematic configuration inside each of the image processing apparatus illustrated in FIG. 2 and a receiver connected thereto.
As shown in FIG. 4, the receiver 202 receives an AC signal transmitted from the authentication information transmitter 201 by capacitive coupling communication, and demodulates data such as authentication information from the received signal. A control unit 209 that controls 210 and is connected to a controller 212 (to be described later) of the image processing apparatus 204, and a power supply circuit 211 that supplies power to each unit in the receiver 202. In this embodiment, a USB is used for connection between the control unit 209 and the controller 212 of the image processing apparatus 204, and power is supplied from the image processing apparatus 204 to the power supply circuit 211 by the USB V _BUS (power supply). . However, the connection between the control unit 209 and the controller 212 may be other wired connection or wireless connection, but in this case, a separate power supply is required, which is different from the USB.

The image processing apparatus 204 also includes a controller 212 that controls the entire image processing apparatus 204, an image processing unit 215 that operates under the control of the controller 212 and processes an image according to a user request, and an authentication received through the receiver 202. An authentication processing unit 216 that performs an authentication process based on information, each unit of a power control unit 217 that performs an operation of controlling a power circuit 218 described later to supply power necessary for a device to be operated, and the image processing apparatus 204. A power supply circuit 218 for supplying power to each of the components is provided.
In this embodiment, the controller 212 controls the power supply circuit 218 via the power supply control unit 217 to suppress unnecessary power consumption when the conditions for shifting to the power saving mode are satisfied. Perform the action.
In this embodiment, the transition condition to the power saving mode is that the logout is the transition condition when logging in through user authentication. Logout is when the user 203 leaves the receiver 202 and is disconnected.

In order to perform the transition operation to the power saving mode under the above conditions, it is necessary to provide means for monitoring the disconnection of communication.
One method for monitoring the disconnection of communication is to periodically send a signal indicating connection from the authentication information transmitter 201, and the image processing apparatus 204 that receives this signal through the receiver 202 receives the received signal. It is a method of determining the disconnection of communication when it is no longer available.
As another method, instead of a signal indicating connection, a method of continuously sending authentication information may be used. According to this method, it can be confirmed that the user has not changed on the way.
In addition, the image processing device 204 may determine whether the connection or disconnection is based on the state of the electric charge generated at the electrode of the receiver 202 without sending a signal indicating the connection.
The process for shifting to the power saving mode will be described later in <Processing for shifting to the power saving mode> as a process unique to this embodiment.

Also, as shown in FIG. 4, when the receiver 202 and the image processing apparatus 204 are connected via USB, when the image processing apparatus 204 shifts to the power saving mode, the controller 212 cannot use the USB, and the user Authentication cannot be performed. As a means for solving this inconvenience, in the power saving mode, a configuration is prepared in which the controller 212 and the receiver 202 are connected by another control line to perform user authentication. By preparing this configuration, user authentication can be performed even when the mode is shifted to the power saving mode, and when the user authentication is established, the controller 212 is returned to the controller 212 from the power saving mode. A configuration can be adopted in which a trigger can be input.
In FIG. 4, the receiver 202 is configured to receive only, but can be configured to be able to transmit to the authentication information transmitter 201. If transmission is also possible, information for checking the receiver 202 on the image processing apparatus 204 side can be sent on the authentication information transmitter 201 side. That is, before the authentication information transmitter 201 transmits the authentication information, the device ID of the receiver 202 necessary for confirming whether or not the transmission destination is recognized as the authorized receiver 202 is acquired. The legitimate receiver 202 can be checked. By this checking operation, leakage of authentication information can be prevented and security can be ensured.

<Transition to power saving mode>
Next, transition processing to the power saving mode corresponding to disconnection of communication performed by the image processing apparatus 204 will be described with reference to the flowchart of FIG.
This processing flow is activated when the controller 212 of the image processing apparatus 204 that constantly monitors the reception state of the receiver 202 receives a signal transmitted from the authentication information transmitter 201 via the receiver 202.
When this processing flow is activated, user authentication is first performed based on the received authentication information, and the user is allowed to log in on the condition that authentication is established, and operation is started by supplying power in the normal operation mode. (Step S101). In this example, there are two types, a normal mode that does not reduce power consumption and a power saving mode that reduces power consumption. In the power saving mode, the power saving mode is selected by selecting the operable range. You may carry out by the method which can set a level in several steps.

After the permitted login, it is continuously monitored whether or not the ongoing communication with the authentication information transmitter 201 possessed by the logged-in user is disconnected (step S102).
Here, if it is detected that the communication with the authentication information transmitter 201 is disconnected (step S102-YES), a logout process for the logged-in user is immediately executed (step S103). Note that any of the monitoring methods described in the above <Internal configuration of receiver and image processing apparatus> is used as a method for monitoring disconnection of communication. The logout process allows other users to log in. In this embodiment, the log-in process is limited to image processing apparatuses that can be used by anyone until login is performed through user authentication. However, until login is performed through user authentication, a method of restricting the use of all functions may be used.

After the logout process, some users may leave the image processing apparatus 204 without waiting for the process. If the user enters the power saving mode immediately after the logout process, the job such as image processing cannot be completed. It is confirmed whether or not there is any processing (step S104).
If there is a process that has not been completed as a result of this confirmation (step S104-YES), an unfinished process is executed (step S105), and after the process, the mode is shifted to the power saving mode (step S106). The process ends. For example, when printing is started but not finished, the unprocessed printing is finished and the mode is shifted to the power saving mode. However, in the case where a function capable of interrupting the process is prepared, the mode may be immediately shifted to the power saving mode.
On the other hand, when all the processes are completed in step S104 (step S104-NO), the process immediately shifts to the power saving mode (step S106), and the process of this flow ends.
In addition, as described above, when a mode that can be set is selected from a plurality of power saving modes, a procedure for determining which mode to shift to is added as described above, and the determination of this procedure is followed. Switch to power saving mode.

As described above, according to the image processing apparatus 204 of this embodiment, there is no need to physically attach or detach something like the authentication key in the prior art (Patent Document 1), for example, while wearing shoes. By using a capacitively coupled communication (human body communication) method that allows authentication by simply touching the user, such as stepping on the plate-like electrode of the receiver 202, an authentication key or a card is physically connected. This eliminates the need for the user to move to and close, making it easier to use.
In addition, when an authenticated user leaves the receiver 202, it is possible to log out and restrict the use of the functions of the image processing apparatus 204, and others can use it by forgetting to remove the authentication key or card. This eliminates the problem of security and enhances the security performance.
Moreover, it becomes possible to shift to the power saving mode when the authenticated user leaves the receiver 202, and wasteful power consumption that occurs because it becomes impossible to shift to the power saving mode due to forgetting to remove the authentication key or card. Can be prevented.

  100 ... Communication circuit 101 ... Transmitter 101e ... Transmitter electrode 102 ... Receiver 102e ... Receive electrode 103 ... Communication medium 201 ... Authentication information transmitter 202 ... Receiver 203 ..Communication medium (user), 204 ..Image processing device, 205 ..Control unit, 206 ..Memory, 207 ..Transmission unit, 208 ..Power supply circuit, 209 ..Control unit, 210. , 211... Power supply circuit, 212... Controller, 215... Image processing unit, 216 .. Authentication processing unit, 217.

JP 2007-172493 A JP 2009-276866 A

Yuichi Mon, 1 other person, “Near-body electric field communication technology“ Red Tacton ”and its application”, [online], NTT Technical Journal 2010 vol.22 NO.1 P.16-19, [April 26, 2010 Day search], Internet <URL: http://www.ntt.co.jp/journal/1001/files/jn201001016.pdf>

Claims (5)

An authentication information transmitter that transmits user authentication information via a method of transmitting the user's human body, a receiver that receives the authentication information transmitted from the authentication information transmitter, and a receiver that receives the authentication information. An image processing system having an image processing apparatus that performs predetermined processing after performing user authentication based on the authentication information,
The authentication information transmitter
When the device information transmitted from the receiver is received before transmitting the authentication information, and the validity of the receiver is confirmed based on the device information, the authentication information is transmitted to the receiver. ,
The image processing device permits login on the condition that authentication based on the received authentication information is established, and monitors establishment or disconnection of communication between the authentication information transmitter and the receiver, When disconnection of communication is detected, it is possible to select whether to permit use of only some functions of the image processing apparatus or to restrict use of all functions, and to supply power to the image processing apparatus An image processing system that shifts from a normal operation mode to a power saving mode having a plurality of power saving levels according to the use permission or the use restriction by restricting supply . The image processing system according to claim 1,
The image processing apparatus includes:
Monitoring whether communication between the authentication information transmitter and the receiver is established,
When the cutting of the communication is detected, it shifts from the normal operation mode to the power saving mode,
When shifting to the power saving mode, user authentication is performed by connecting the controller that controls the receiver and the image processing apparatus with a control line that is different from the control line that is connected in the normal operation mode. An image processing system characterized by that. In the image processing system according to claim 1 or 2 ,
The image processing system, wherein the authentication information transmitter is portable. In the image processing system according to claim 1 or 2 ,
The image processing system, wherein the receiver can be installed on a floor. An authentication information transmitter, a receiver, a operation management method in an image processing system including an image processing apparatus, the,
The authentication information transmitter is a step of transmitting user authentication information through a method of transmitting through the user's human body, and receives device information transmitted from the receiver before transmitting the authentication information. And an authentication information transmission step of transmitting the authentication information to the receiver when the validity of the receiver is confirmed based on the device information ;
A receiving step in which the receiver receives the authentication information transmitted from the authentication information transmitter;
An authentication step intends line user authentication based on the authentication information the image processing apparatus, received by the receiver,
Permitting login on condition that user authentication is established by the authentication step; and
A communication monitoring step for monitoring establishment or disconnection of communication between the authentication information transmitter and the receiver;
When disconnection of the communication is detected by the communication monitoring step, it is possible to select whether only a part of the functions of the image processing apparatus is permitted to use or to restrict the use of all functions, and And a control step of shifting from a normal operation mode to a power saving mode having a plurality of power saving levels according to the use permission or the use restriction by restricting power supply to the image processing apparatus. Operation management method.

Images