JP6102607B2 - Service providing support system, image forming apparatus, portable computer, service providing support method, and computer program - Google Patents

Description

  The present invention relates to a technique for setting authentication information for receiving a service to a client.

  In recent years, portable computers such as smartphones and tablet computers have become increasingly popular. By using these computers, the user can receive a service provided by the server via a communication line.

  In order to receive the service, it is usually required to input information such as a user ID and a password. In recent years, in view of security, a complicated character string may be used as such information.

  However, it is difficult for a portable computer to input characters compared to a personal computer.

  Therefore, the following method has been proposed. The image forming apparatus detects the mobile terminal device, acquires the machine identifier of the mobile terminal apparatus, and when the acquired machine identifier is the same as the previously registered machine identifier, the login used for user authentication at the time of login Information is transmitted to the portable terminal device. The portable terminal device receives login information from the image forming apparatus, stores the received login information, and uses the stored login information for user authentication processing when executing a print job (Patent Document 1).

  However, according to this method, the image forming apparatus needs a function of detecting the mobile terminal device. Therefore, it is conceivable to use the following method for transmitting information from the portable terminal device to the image forming apparatus. The image forming apparatus displays a two-dimensional code obtained by converting the address information. The user photographs the displayed two-dimensional code by the photographing means of the mobile terminal. The photographed two-dimensional code is automatically converted into address information, and the converted address is accessed from the mobile terminal and information is transmitted (Patent Document 2).

  In addition, the following method has been proposed as a method for realizing short-range wireless communication in a mobile terminal and a service device that do not have communication settings necessary for communication with each other without performing communication settings by the user. The mobile terminal acquires device unique identification information of the service device from the service device, and transmits the device unique identification information to the connection support server. The connection support server selects access information to the service device associated with the device unique identification information received from the mobile terminal. Then, the connection support server transmits communication setting information necessary for short-range wireless communication between the mobile terminal and the service device to the mobile device, and transmits the communication setting information to the service device based on the access information to the selected service device. Send. The mobile terminal and the service device that have received the communication setting information set the communication setting information in each main body so that it can be used for short-range wireless communication (Patent Document 3).

JP 2012-178083 A JP 2007-34443 A JP 2010-74420 A

  By the way, if a user logs in to a device that he / she uses regularly, he or she may receive a service that originally requires another authentication.

  In such an environment, it is convenient if the user can easily receive this service by a portable computer such as the above-described smartphone or tablet computer.

  In view of such problems, the present invention makes it easier than ever to use a portable computer in an environment where a user logs in to a device that he or she uses regularly and can receive a service that originally requires different authentication. The purpose is to be able to receive.

  A service providing support system according to an aspect of the present invention includes a first device, a second device, and a portable computer, and provides a service providing support that supports providing a service to a user of the portable computer. In the system, the first device includes a display, an identifier acquisition unit that acquires the identifier of the user, an authentication unit that authenticates the user based on the acquired identifier, and the first device. Address display control means for displaying the address on the display, and the portable computer includes a camera, an address reading control means for causing the camera to read the address displayed on the display, and a reading Access means for accessing the first device based on the given address. Further includes identifier transmitting means for transmitting the identifier to the second device when the user is authenticated by the authenticating means and accessed from the portable computer. The authentication information storage means for storing authentication information used for receiving authentication when the user receives the service is associated with the identifier and transmitted from the first device. Authentication information providing means for transmitting the authentication information corresponding to the identifier to the first device is provided, and the first device is further transmitted from the second device. Authentication information display control means for displaying authentication information on the display instead of the address is provided, and the portable computer further displays on the display. Authentication information reading control means for causing the camera to read the authentication information that has been read continuously following the address, and setting means for setting the read authentication information to receive the service. It is done.

  Preferably, the address display control unit displays the address as a two-dimensional barcode, and the authentication information display control unit displays the authentication information as a two-dimensional barcode.

  Alternatively, the identifier acquisition means acquires the identifier by reading it from the user's card.

  Alternatively, when the access unit accesses the first device, the access unit transmits a solid identifier that is an identifier of the portable computer itself to the first device, and the identifier transmission unit includes the identifier, The solid identifier received from the portable computer is transmitted to the second device, and the second device further includes the user based on the identifier and the solid identifier received from the first device. The authentication information providing means transmits the authentication information when the user is authenticated by the second authentication means.

  According to the present invention, setting for receiving services can be performed more easily on a portable computer than before. Therefore, the service can be received more easily than in the past.

It is a figure which shows the example of the whole structure of a network system. 2 is a diagram illustrating an example of a hardware configuration of an image forming apparatus. FIG. It is a figure which shows the example of the hardware constitutions of a terminal device. It is a figure which shows the example of the hardware constitutions of an authentication server. It is a figure which shows the example of a functional structure of an image forming apparatus, a terminal device, and an authentication server. It is a figure which shows the example of user information. It is a figure which shows the example of a top screen. It is a figure which shows the example of the initial state of an authentication information registration screen. It is a figure which shows the example of the state after the update of an authentication information registration screen. 1 is a diagram illustrating an example of an overall configuration of an image forming apparatus. It is a figure which shows the example of the whole structure of a terminal device. It is a figure which shows the example of the whole structure of an authentication server.

  FIG. 1 is a diagram illustrating an example of the overall configuration of the network system 4. FIG. 2 is a diagram illustrating an example of a hardware configuration of the image forming apparatus 1. FIG. 3 is a diagram illustrating an example of a hardware configuration of the terminal device 20. FIG. 4 is a diagram illustrating an example of the hardware configuration of the authentication server 3. FIG. 5 is a diagram illustrating an example of functional configurations of the image forming apparatus 1, the terminal device 20, and the authentication server 3.

  As shown in FIG. 1, the network system 4 includes an image forming apparatus 1, a terminal device 20, an authentication server 3, and a communication line NW.

  The image forming apparatus 1, the terminal device 20, and the authentication server 3 can perform communication via the communication line NW. As the communication line NW, a so-called LAN (Local Area Network) line, the Internet, a public line, a dedicated line, or the like is used.

  The image forming apparatus 1 is an apparatus that integrates functions such as copying, PC printing, fax, and scanner. Generally, it is sometimes called “multifunction machine” or “MFP (Multi Function Peripherals)”.

  “PC print” is a function for printing an image on paper based on image data received from the terminal device 20. It may also be called “network printing” or “network printing”.

  The image forming apparatus 1 is shared by a plurality of users. An IC (Integrated Circuit) card 58 is provided for each user. The IC card 27 stores a unique card number.

  As shown in FIG. 2, the image forming apparatus 1 includes a central processing unit (CPU) 10a, a random access memory (RAM) 10b, a read only memory (ROM) 10c, a mass storage device 10d, a touch panel display 10e, an operation key panel. 10f, NIC (Network Interface Card) 10g, modem 10h, card reader 10i, scan unit 10j, and print unit 10k.

  The touch panel display 10e displays a screen showing a message for the user, a screen for the user to input a command or information, a screen showing a result of processing executed by the CPU 10a and the like. Further, the touch panel display 10e sends a signal indicating the touched position to the CPU 10a.

  The operation key panel 10f is a so-called hardware keyboard, and includes a numeric keypad, a start key, a stop key, a function key, and the like.

  The NIC 10g communicates with other devices using a protocol such as TCP / IP (Transmission Control Protocol / Internet Protocol).

  The modem 10h exchanges image data with a facsimile terminal using a protocol such as G3.

  The card reader 10i reads data from the IC card. In particular, in this embodiment, it is used for reading a card number from the IC card 27.

  The scan unit 10j reads an image written on a sheet set on the platen glass and generates image data.

  In addition to the image read by the scan unit 10j, the print unit 10k prints an image received from another device by the NIC 10g or the modem 10h on a sheet.

  The ROM 10c or the large-capacity storage device 10d stores software for realizing each function such as copying described above. Further, an authentication information providing program 10P is stored. The authentication information providing program 10P will be described later.

  These programs are loaded into the RAM 10b as necessary and executed by the CPU 10a. A hard disk drive, SSD (Solid State Drive), or the like is used as the mass storage device 10d.

  The terminal device 20 is a client of the image forming apparatus 1. The user can remotely use the various functions described above of the image forming apparatus 1 by operating the terminal device 20.

  The terminal device 20 is also a client for receiving a service provided by a server called a web server or a cloud server. An application for receiving this service is installed in the terminal device 20. The user can receive the service remotely by operating the terminal device 20. Examples of services include online storage, online shopping, schedule management, document creation, and SNS (Social Networking Service). Hereinafter, a case where the service provided by the web server 50 is received by the terminal device 20 will be described as an example.

  As the terminal device 20, a personal computer, a smart phone, a mobile phone terminal, a tablet computer, or the like is used. Hereinafter, a case where a tablet computer is used as the terminal device 20 will be described as an example.

  As shown in FIG. 3, the terminal device 20 includes a CPU 20a, a RAM 20b, a flash memory 20c, a touch panel display 20d, an operation button group 20e, a wireless LAN communication device 20f, a mobile phone communication device 20g, a digital camera 20h, a microphone 20i, and a speaker. 20j or the like.

  The touch panel display 20d displays a screen for giving a message to the user, a screen showing a result of processing, a screen for the user to input an instruction, and the like. The touch panel display 20d detects the touched position and notifies the CPU 20a of the position.

  The operation button group 20e includes a button for returning to a so-called home screen, a button for adjusting the volume, a button for switching power on / off, and the like.

  The wireless LAN communication device 20f performs communication based on a wireless LAN standard, that is, an IEEE (Institute of Electrical and Electronics Engineers) 802.11 standard.

  The mobile phone communication device 20g performs communication via a so-called mobile phone network based on standards such as CDMA (Code Division Multiple Access) 2000, W-CDMA (Wideband-CDMA), or LTE (Long Term Evolution).

  The digital camera 20h captures an image and generates image data. In the present embodiment, it is particularly used for photographing a two-dimensional barcode described later. Hereinafter, a case where a QR (Quick Response) code is used as the two-dimensional barcode will be described as an example.

  The microphone 20i collects sound and generates voice data. The speaker 20j outputs sound based on the sound data.

  The flash memory 20c includes a driver for controlling the image forming apparatus 1 and an application for receiving the service of the web server 50, an application for creating a document (for example, word processing software), a mailer, a web browser, and the like. The program is stored. Further, an authentication information acquisition program 20P is stored. The authentication information acquisition program 20P will be described later. These programs are loaded into the RAM 20b as necessary and executed by the CPU 20a.

  The authentication server 3 is a so-called intermediate authentication server that mainly manages authentication information for receiving services provided by other devices.

  As shown in FIG. 4, the authentication server 3 includes a CPU 30a, a RAM 30b, a ROM 30c, a mass storage device 30d, a USB (Universal Serial Bus) interface board 30e, a graphic board 30f, a NIC 30g, and the like.

  The USB interface board 30e is a user interface for connecting an input device such as a keyboard or a pointing device.

  The graphic board 30f generates an image signal and outputs it to the display. Thereby, an image is displayed on the display.

  The NIC 30g is a device for communicating with other devices using a protocol such as TCP / IP.

  An authentication information providing program 30P is stored in the ROM 30c or the mass storage device 30d. The authentication information providing program 30P is loaded into the RAM 30b and executed by the CPU 30a. The authentication information providing program 30P will be described later.

  By the way, the user must be authenticated by the image forming apparatus 1 when using the image forming apparatus 1. Further, when the terminal device 20 is used to receive the service of the web server 50, the web server 50 must be authenticated.

  The image forming apparatus 1 authenticates the user based on the card number read from the IC card 27 by the card reader 10i. Therefore, when using the image forming apparatus 1, the user only has to hold his / her IC card 27 over the card reader 10i.

  However, the web server 50 performs user authentication based on information other than the card number. Therefore, conventionally, the user has to input part or all of this information to the terminal device 20 by operating the touch panel display 20d or the operation button group 20e.

  According to the authentication information provision program 10P, the authentication information acquisition program 20P, and the authentication information provision program 30P, information necessary for authentication can be registered in the terminal device 20 more easily than in the past. Hereinafter, this mechanism will be described using an example in which a user code and a password are required.

  According to the authentication information providing program 10P, as shown in FIG. 5, a card number storage unit 101, a user authentication unit 102, a first two-dimensional barcode presentation unit 103, a terminal information acquisition unit 104, and a two-dimensional barcode acquisition unit 105 , And functions of the second two-dimensional barcode presenting unit 106 and the like are realized.

  According to the authentication information acquisition program 20P, the first two-dimensional barcode acquisition unit 201, the first two-dimensional barcode analysis unit 202, the terminal information transmission unit 203, the second two-dimensional barcode acquisition unit 204, the second Functions such as a two-dimensional barcode analysis unit 205 and an authentication information setting unit 206 are realized.

  According to the authentication information providing program 30P, functions such as a user information storage unit 301, a user authentication unit 302, a two-dimensional barcode generation unit 303, and a two-dimensional barcode transmission unit 304 are realized.

  In the following, each function of each device will be broadly described as advance preparation and processing at the time of registration of authentication information. In addition, a user operation will be described.

[Preparation]
FIG. 6 is a diagram illustrating an example of the user information 6A.

  The card number storage unit 101 of the image forming apparatus 1 stores in advance the card number of the IC card 27 for each user. Hereinafter, the card number stored in the card number storage unit 101 is referred to as “card number 6C”.

  The user information storage unit 301 of the authentication server 3 stores user information 6A for each user in advance as shown in FIG. The user information 6A includes a card number 6Ar, a user code 6As, a password 6At, and a MAC (Media Access Control) address 6Au.

  The card number 6Ar is the card number of the user's IC card 27 having the user information 6A. The user code 6As and the password 6At are an account identifier (ID) and a password for the user to use the service of the web server 5, respectively. The MAC address is the MAC address of the terminal device 20 of the user.

[Processing when registering authentication information]
FIG. 7 is a diagram illustrating an example of the top screen WN1. FIG. 8 is a diagram illustrating an example of an initial state of the authentication information registration screen WN2. FIG. 9 is a diagram illustrating an example of a state after the authentication information registration screen WN2 is updated.

  The user goes to the image forming apparatus 1 with his / her terminal device 20 and the IC card 27. Then, the following operation is performed.

  First, the user brings his IC card 27 into contact with a predetermined position of the card reader 10i, and causes the card reader 10i to read the card number. Hereinafter, the read card number is referred to as “card number 6R”.

  The user authentication unit 102 performs user authentication as follows. The card number (that is, card number 6R) read by the card reader 10i is collated with each card number (that is, card number 6C) stored in the card number storage unit 101. If the card number 6R matches one of the card numbers 6C, the user is authenticated as a valid user. As a result, the user logs in to the image forming apparatus 1. If none of the card numbers 6C match, the subsequent processing is stopped.

  After the user logs in, the top screen WN1 as shown in FIG. 7 is displayed on the touch panel display 10e as usual. Here, the user inputs a predetermined command for registering authentication information. For example, the user presses the “authentication information registration” button.

  When a predetermined command is input, the first two-dimensional barcode presenting unit 103 closes the top screen WN1 and displays an authentication information registration screen WN2 as shown in FIG. 8 on the touch panel display 10e.

  If a predetermined setting is made (for example, if the authentication information registration screen WN2 is set to be the default screen), after the user logs in, the top screen WN1 is not displayed and the authentication information is registered immediately. The screen WN2 may be displayed.

  The authentication information registration screen WN2 is provided with a message area RY21 and a two-dimensional barcode area RY22. A message for the user is arranged in the message area RY21. At this time, the first two-dimensional barcode presenting unit 103 arranges a message for requesting the photographing range of the digital camera 20h of the terminal device 20 to match the two-dimensional barcode until the shutter sound is emitted twice. A two-dimensional barcode is arranged in the two-dimensional barcode area RY22. At this time, the first two-dimensional barcode presenting unit 103 arranges the first two-dimensional barcode TC21 indicating address information for the terminal device 20 to access the image forming apparatus 1 and transmit data. For example, the address information is information including the IP address and port number of the image forming apparatus 1 such as “192.168.1.101:50000”. Alternatively, it may be information including the host name (DNS name) and port number of the image forming apparatus 1 such as “sv1.example.com:50000”. Both information combining an IP address and a port number and information combining a host name and a port number may be included.

  The user activates the authentication information acquisition program 20P and matches the shooting range of the digital camera 20h of the terminal device 20 with the two-dimensional barcode area RY22.

  The first two-dimensional barcode acquisition unit 201 detects and captures the first two-dimensional barcode TC21 from the image obtained by the digital camera 20h. Thereby, image data of the first two-dimensional barcode TC21 is obtained. At this time, the shutter sound is output once from the speaker 20j. The user keeps the shooting range of the digital camera 20h in accordance with the two-dimensional barcode area RY22 until the next shutter sound is output.

  The first two-dimensional barcode analysis unit 202 analyzes the first two-dimensional barcode TC21 based on the image data obtained by the first two-dimensional barcode acquisition unit 201 and converts it into a character code. Thereby, the character code of address information is obtained.

  The terminal information transmission unit 203 connects to the image forming apparatus 1 based on the character code (address information), and the MAC address of the terminal apparatus 20 itself (hereinafter referred to as “MAC address 6E”) to the image forming apparatus 1. Send. The transmission may be performed via the LAN line by the wireless LAN communication device 20f, or may be performed via the mobile phone line by the mobile phone communication device 20g.

  In the image forming apparatus 1, the terminal information acquisition unit 104 acquires the MAC address 6E from the terminal device 20.

  Then, the two-dimensional barcode acquisition unit 105 executes a process for acquiring the second two-dimensional barcode TC22 from the authentication server 3 as follows.

  The two-dimensional barcode acquisition unit 105 requests the authentication server 3 for a two-dimensional barcode. At this time, the card number (that is, the card number 6R) read by the card reader 10i and the MAC address (that is, the MAC address 6E) acquired by the terminal information acquisition unit 104 are transmitted to the authentication server 3.

  In the authentication server 3, when the user authentication unit 302 receives the card number 6R and the MAC address 6E from the image forming apparatus 1, the user authentication unit 302 performs user authentication as follows.

  The user authentication unit 302 searches the user information storage unit 301 (see FIG. 6) for user information 6A indicating the same card number 6Ar as the card number 6R and indicating the same MAC address 6Au as the MAC address 6E.

  If such user information 6A is found, the user authentication unit 302 determines that this user is a valid user. If not found, the subsequent processing is stopped.

  When the user authentication unit 302 determines (authenticates) that this user is a legitimate user, the two-dimensional barcode generation unit 303 indicates the two-dimensional barcode indicating the user code 6As and the password 6At indicated in the found user information 6A. Generate a barcode. This is the second two-dimensional barcode TC22.

  The two-dimensional barcode transmission unit 304 transmits the generated image data of the second two-dimensional barcode TC22 to the image forming apparatus 1.

  Then, the two-dimensional barcode acquisition unit 105 receives the image data of the second two-dimensional barcode TC22 from the authentication server 3.

  The second two-dimensional barcode presenting unit 106 erases the first two-dimensional barcode TC21 from the two-dimensional barcode area RY22, and performs two-dimensional based on the image data received from the authentication server 3 as shown in FIG. A second two-dimensional barcode TC22 is arranged in the barcode area RY22.

  In the terminal device 20, when the second two-dimensional barcode acquisition unit 204 detects a different two-dimensional barcode from the previous two-dimensional barcode area RY22, that is, the second two-dimensional barcode TC22, it captures this. To do. Thereby, image data of the second two-dimensional barcode TC22 is obtained. At this time, the second shutter sound is output from the speaker 20j. After outputting the shutter sound, the user can stop shooting the two-dimensional barcode.

  The second two-dimensional barcode analysis unit 205 analyzes the second two-dimensional barcode TC22 based on the image data obtained by the second two-dimensional barcode acquisition unit 204 and converts it into a character code. Thereby, the user code 6As and the password 6At are obtained.

  The authentication information setting unit 206 applies the user code 6As and the password 6At obtained by the second two-dimensional barcode analysis unit 205 to the service application of the web server 5. For example, the user profile is changed so that the user code 6As and the password 6At are used as a user code (ID) and a password for accessing and logging in to the web server 5 by this application.

  With the above processing and operation, the setting for receiving the service provided by the web server 50 at the terminal device 20 is completed.

  The terminal device 20 has the web server 5 authenticate the user using the authentication information (user code 6As and password 6At) input by photographing the second two-dimensional barcode TC22. Alternatively, the authentication server 3 may authenticate instead of the web server 5. Alternatively, another server that is neither the authentication server 3 nor the web server 5 may authenticate. Which server performs authentication is described in the service application.

  FIG. 10 is a diagram illustrating an example of the overall configuration of the image forming apparatus 1. FIG. 11 is a diagram illustrating an example of the overall configuration of the terminal device 20. FIG. 12 is a diagram illustrating an example of the overall configuration of the authentication server 3.

  Next, the overall processing flow of each of the image forming apparatus 1, the terminal device 20, and the authentication server 3 will be described with reference to the flowcharts of FIGS.

  When reading the card number from the IC card 27 (# 701 in FIG. 10), the image forming apparatus 1 authenticates the user (# 702). If it is determined that this user is a legitimate user (Yes in # 703), a default screen is displayed. Therefore, if the default screen is the authentication information registration screen WN2 (see FIG. 8) (Yes in # 704), the authentication information registration screen WN2 is displayed (# 707). On the other hand, if the default screen is the top screen WN1 (see FIG. 7) (No in # 704), the top screen WN1 is displayed (# 705). When the “authentication information registration” button is pressed (Yes in # 706), the authentication information registration screen WN2 is displayed (# 707).

  At this time, as shown in FIG. 8, the first two-dimensional barcode TC21 is arranged in the two-dimensional barcode area RY22 of the authentication information registration screen WN2.

  The terminal device 20 captures the first two-dimensional barcode TC21 (# 721 in FIG. 11) and analyzes it (# 722). Thereby, address information of the image forming apparatus 1 is obtained. Authentication information is requested by accessing the image forming apparatus 1 based on the address information and transmitting the MAC address (MAC address 6E) of the terminal apparatus 20 itself (# 723).

  Upon receiving the MAC address 6E from the terminal device 20 (# 708 in FIG. 10), the image forming apparatus 1 transmits the MAC address 6E and the card number (card number 6R) acquired in step # 701 to the authentication server 3 The authentication information is requested (# 709).

  Upon receiving the card number 6R and the MAC address 6E (# 731 in FIG. 12), the authentication server 3 authenticates the user (# 732). If it is determined that this user is a legitimate user (Yes in # 733), a two-dimensional barcode indicating the user code 6As and the password 6At (see FIG. 6) of the user is generated as the second two-dimensional barcode TC22. (# 734), and transmit to the image forming apparatus 1 (# 735).

  When the image forming apparatus 1 receives the second two-dimensional barcode TC22 (# 710 in FIG. 10), the image forming apparatus 1 replaces the first two-dimensional barcode TC21 with the second two-dimensional barcode area RY22 as shown in FIG. The second two-dimensional barcode TC22 is displayed (# 711).

  The terminal device 20 captures and analyzes the second two-dimensional barcode TC22 (# 724 in FIG. 11) (# 725). Thereby, the user code 6As and the password 6At of this user are obtained. Note that the terminal device 20 continuously captures the first two-dimensional barcode TC21 and the second two-dimensional barcode TC22 in a time within several seconds to several tens of seconds.

  Then, the terminal device 20 sets the user code 6As and the password 6At as account information for using the service of the web server 5 (# 726).

  According to the present embodiment, the user can set authentication information (user code 6As and password 6At) for receiving services in the terminal device 20 more easily than in the past. In particular, two two-dimensional barcodes can be photographed continuously, that is, as if they were once, rather than being photographed twice, so that the operation is easy for the user.

  In the present embodiment, the authentication server 3 generates the second two-dimensional barcode TC22. However, the image forming apparatus 1 may acquire authentication information from the authentication server 3 and generate the second two-dimensional barcode TC22. .

  In the present embodiment, the authentication server 3 manages the authentication information for receiving the service provided by the web server 5 as described with reference to FIGS. 5 and 12. However, the authentication server 3 receives the service provided by the image forming apparatus 1. Authentication information may be managed. Alternatively, authentication information for receiving a service provided by the authentication server 3 itself may be managed.

  In the present embodiment, the user inputs the card number by causing the card reader 10i to read the IC card 27 and receives authentication by the image forming apparatus 1, but the card is operated by operating the touch panel display 10e or the operation key panel 10f. You may enter a number. However, in this case, it is desirable to input a password for logging in to the image forming apparatus 1 together for confirmation of the person.

  Alternatively, when there are a plurality of services and necessary authentication information differs for each service, the authentication server 3 may manage the authentication information for each service. The image forming apparatus 1 may notify the authentication server 3 of the service that the user of the terminal device 20 will receive and download the second two-dimensional barcode TC22 of authentication information for the service.

  When the terminal device 20 incorporates RFID (Radio Frequency Identification), this RFID may be used instead of the IC card 27.

  The terminal device 20 informs the user that shooting of the first two-dimensional barcode TC21 and the second two-dimensional barcode TC22 has been completed by sounding a shutter sound, but may also inform the user by displaying a message. Good. Or you may notify by emitting a flashlight.

  In the present embodiment, the authentication server 3 performs the authentication based on the MAC address of the terminal device 20, but may perform the authentication based on other information. For example, it may be performed based on other unique information such as an IP address, a mobile phone number, or a SIM (Subscriber Identity Module) card ID. Or you may perform based on the information regarding matters other than the terminal device 20, such as a user's date of birth, a keyword, or an address.

  In the present embodiment, the terminal device 20 notifies the image forming apparatus 1 of the MAC address 6E based on the host name (or IP address) and port number acquired from the first two-dimensional barcode TC21. The e-mail address of the image forming apparatus 1 may be described in the two-dimensional barcode TC21, and the MAC address 6E may be notified by e-mail.

  In addition, the entire network system 4, the image forming apparatus 1, the terminal apparatus 20, and the authentication server 3 or the configuration of each unit, the processing content, the processing order, the data configuration, and the like can be appropriately changed in accordance with the spirit of the present invention. .

4 Network system (service provision support system)
1 Image forming device (first device)
10e Touch panel display (display)
10i card reader (identifier acquisition means)
102 User authentication unit (authentication means)
103 1st two-dimensional barcode presentation part (address display control means)
104 Terminal information acquisition unit (identifier transmission means)
106 Second two-dimensional bar code presentation unit (authentication information display control means)
20 Terminal device (portable computer)
20h Digital camera (camera)
201 First two-dimensional barcode acquisition unit (address reading control means)
203 Terminal information transmitter (access means)
204 Second two-dimensional barcode acquisition unit (authentication information reading control means)
206 Authentication information setting section (setting means)
3 Authentication server (second device)
301 User information storage unit (authentication information storage means)
302 User authentication unit (second authentication means)
304 Two-dimensional barcode transmission unit (authentication information providing means)
TC21 First two-dimensional barcode (address)
TC22 Second 2D barcode (authentication information)

Claims (10)

A service providing support system that includes a first device, a second device, and a portable computer, and supports provision of a service to a user of the portable computer,
The first device includes
Display,
An identifier acquisition means for acquiring the identifier of the user;
Authentication means for authenticating the user based on the obtained identifier;
Address display control means for displaying the address of the first device on the display;
Is provided,
The portable computer includes
A camera,
Address reading control means for causing the camera to read the address displayed on the display;
Access means for accessing the first device based on the read address;
Is provided,
The first device further includes:
Identifier transmitting means for transmitting the identifier to the second device when the user is authenticated by the authenticating means and accessed from the portable computer;
Is provided,
The second device includes
Authentication information storage means for storing authentication information used for receiving authentication when the user receives the service in association with the identifier;
Authentication information providing means for transmitting the authentication information corresponding to the identifier transmitted from the first device to the first device;
Is provided,
The first device further includes:
Authentication information display control means for displaying the authentication information transmitted from the second device on the display instead of the address;
Is provided,
The portable computer further includes:
Authentication information reading control means for causing the camera to continuously read the authentication information displayed on the display following the address;
Setting means for setting the read authentication information to receive the service;
Is provided,
A service providing support system characterized by that. The address display control means displays the address as a two-dimensional barcode,
The authentication information display control means displays the authentication information as a two-dimensional barcode.
The service provision support system according to claim 1. The identifier acquisition means acquires the identifier by reading it from the user's card.
The service provision support system according to claim 1 or 2. The access means, when accessing the first device, transmits a solid identifier that is an identifier of the portable computer itself to the first device;
The identifier transmitting means transmits the solid identifier received from the portable computer together with the identifier to the second device,
The second device is further provided with second authentication means for authenticating the user based on the identifier and the solid identifier received from the first device,
The authentication information providing means transmits the authentication information when the user is authenticated by the second authentication means.
The service provision support system according to any one of claims 1 to 3. The authentication information is a third identifier and password for identifying the user.
The service provision support system according to any one of claims 1 to 4. An image forming apparatus having a function of communicating with an authentication information server that stores authentication information used for receiving authentication when a portable computer user receives a service,
Display,
An identifier acquisition means for acquiring the identifier of the user;
Authentication means for authenticating the user based on the obtained identifier;
Address display control means for displaying the address of the image forming apparatus on the display;
Identifier transmitting means for transmitting the identifier to the authentication information server when the user is authenticated by the authentication means and accessed from the portable computer based on the address;
Authentication information display control means for displaying the authentication information transmitted from the authentication information server on the display instead of the address;
An image forming apparatus comprising: A camera,
Displayed on the display of the first device, to read the address of the first device to the camera, and the address reading control means,
Requesting means for accessing the first device based on the read address and requesting authentication information used for authentication when the user receives a predetermined service;
The authentication information acquired from a second device different from the first device displayed on the display instead of the address is read by the camera continuously following the address. Authentication information reading control means,
Setting means for setting the read authentication information to receive the service;
A portable computer characterized by comprising: A service provision support method for supporting provision of a service to a user of a portable computer by a first computer having a display, a second device, and a portable computer having a camera,
In the second device, authentication information used for authentication when the user receives the service is stored in association with an identifier of the user ,
Causing the first device to execute a process of acquiring the identifier;
Causing the first device to execute a process of authenticating the user based on the acquired identifier;
Causing the display of the address of the first device on the display;
Causing the portable computer to execute a process of reading the address displayed on the display by the camera;
Causing the portable computer to execute a process of accessing the first device based on the read address;
Causing the first device to execute a process of transmitting the identifier to the second device when the user is authenticated and accessed from the portable computer;
Causing the second device to execute a process of transmitting the authentication information corresponding to the identifier transmitted from the first device to the first device;
Causing the first device to execute a process of displaying the authentication information transmitted from the second device on the display instead of the address;
Causing the portable computer to execute a process of continuously reading the authentication information displayed on the display by the camera following the address;
Causing the portable computer to execute processing for setting the read authentication information to receive the service;
Service provision support method. A computer program used for a computer having a function of communicating with an authentication information server that stores authentication information used for receiving authentication when a user of a portable computer receives a service, and a display,
In the computer,
A process of acquiring the user identifier;
A process for authenticating the user based on the acquired identifier;
A process of displaying an address of a predetermined device on the display;
When the user is authenticated and accessed from the portable computer based on the address, a process of transmitting the identifier to the authentication information server is executed.
Causing the authentication information transmitted from the authentication information server to be displayed on the display instead of the address;
A computer program characterized by the above. A computer program used for a portable computer having a camera,
In the portable computer,
Causing the camera to read the address of the first device displayed on the display of the first device;
Based on the read address, the first device is accessed, and a process for requesting authentication information used for authentication when the user receives a predetermined service is executed,
Displayed on the display instead of the address, read by different second the authentication information obtained from the device, continuously the camera following a corresponding address from said first device said first device Let the process run,
Causing the read authentication information to be set to receive the service;
A computer program characterized by the above.

Images