JP6197286B2 - Communication device, information processing system, and information processing system control method - Google Patents

Description

The present invention relates to a communication apparatus, an information processing system, and a control method for the information processing system .

  2. Description of the Related Art Conventionally, an online storage service that allows a user who has registered as a user of a service to access the service using an information device that can be connected to a network and store a file on the online storage has been widely used. In the online storage service, the user can store files edited on the desktop PC in a server on the network according to the capacity allocated for each user. In that case, the user can browse and edit the file stored in the server from a notebook PC, tablet terminal or the like on the go.

  The file stored in the server can also be accessed from information devices shared by a plurality of users. For example, it is possible to print using a location-free print service from a multifunction device installed in an office or convenience store, or to project from a network-connectable projector installed in a conference room.

  However, when accessing a file on the online storage from an information device shared by a plurality of users, it is necessary for the user to manually input his / her account information every time the user uses the file.

  In Patent Document 1, information notified from a provider that provides a service and access information set by the user are input from a touch panel or the like of an arbitrary device that can execute the service without printing the account information of the user. Techniques to do this are disclosed.

  However, in the technique disclosed in the cited document 1, the information notified from the provider includes URL information for printing data, a one-time password for printing, and access information set in advance by the user. It was necessary to input multiple data.

  Therefore, every time the user uses the service, there is a problem that the user has to input the plurality of data from a touch panel of an arbitrary device that can execute the service.

The present invention has been made in view of the above problems, and an object of the present invention is to provide a communication device that can easily access a file of a server providing a service from an information processing device shared by a plurality of users. To do.

In order to solve the above-mentioned problem, a communication device according to claim 1 is a communication terminal that allows a guest device shared by a plurality of users to execute a predetermined process, and logs in to a data management device that manages a user's file And a file for displaying a file list of the user transmitted from the logged-in data management device and transmitting information on the file selected by the user from the file list to the data management device. A selection unit, and authentication information for acquiring the selected file from the data management device, wherein the data management device is associated with information indicating an expiration date of the selected file and the authentication information. Password management means for receiving authentication information to be managed from the data management device, and specifying the data management device Information for, and creates an access information including the authentication information, and the NFC data generating means for generating an NFC data including the access information created, receives the NFC data Then, the NFC data received predetermined If the NFC data includes the access information in a predetermined format, the selected file is acquired from the data management device, and the predetermined processing is performed. NFC communication means for transmitting the NFC data to the guest device to be executed.

According to the embodiment of the present invention, it is possible to provide a communication device that can easily access a file of a server that provides a service from an information processing device shared by a plurality of users.

1 is an overall configuration diagram of an information processing system according to an embodiment. 1 is a block diagram of an information processing system according to an embodiment. It is a block diagram which shows the structure of the information processing part of the communication terminal which concerns on one Embodiment. It is a block diagram which shows the structure of the information processing part of the guest apparatus which concerns on one Embodiment. It is a sequence chart of the information processing system concerning one embodiment. It is a flowchart of the one-time password issuing process of the data management apparatus which concerns on one Embodiment. It is a flowchart of the access information transmission process of the communication terminal which concerns on one Embodiment. It is a flowchart of the process after access information reception of the guest apparatus which concerns on one Embodiment. It is a flowchart of the file provision process of the data management apparatus which concerns on one Embodiment. 6 is a flowchart of a one-time password expiration management process according to an embodiment. It is a figure which shows an example of the data format which the NFC data generation means which concerns on one Embodiment produces | generates. It is a figure which shows an example of the management table of the one-time password which concerns on one Embodiment.

  Embodiments of the present invention will be described below with reference to the accompanying drawings.

<System configuration>
FIG. 1 is an overall configuration diagram of an information processing system according to an embodiment of the present invention.

  The information processing system 100 includes a data management apparatus 101, a communication terminal 102, and a guest device 103 that are commonly connected to the Internet 104.

  The data management apparatus 101 includes a server group that provides an online storage service. The data management apparatus 101 provides an online storage service to client devices including the communication terminal 102 and the guest device 103 via the Internet 104.

  As described in the background art, the online storage service is a service in which a user registered in the service can access the information terminal that can be connected to the network and store the file on the online storage. The online storage service is an example of a network service provided by the data management apparatus 101, and may be another service such as a print service or music download.

  The communication terminal 102 is a communication terminal that can be connected to the Internet 104, and a preferred example is a mobile communication terminal that can be connected to the Internet 104 via a wireless LAN or a mobile communication network. The communication terminal 102 starts data communication by being brought close to the guest device 103 by NFC (Near Field Communication).

  The guest device 103 is an information device that can be connected to the Internet 104 and is shared by a plurality of users, and can exchange data with the communication terminal 102 by NFC. The guest device 103 is, for example, an information processing device such as a multifunction machine having a scanner / fax / copy function, a printer, or a projector, or may be an information processing device such as a personal computer shared by a plurality of users. .

  The Internet 104 is a network to which the data management apparatus 101, the communication terminal 102, and the guest device 103 are commonly connected, and may be a network other than the Internet, such as a corporate network.

  In the configuration of FIG. 1, the data management apparatus 101 generates authentication information corresponding to a file designated by the user. The communication terminal 102 is configured to acquire the generated authentication information from the data management apparatus 101, generate access information including the URL information of the data management apparatus 101 and the authentication information, and transmit it by NFC. When the guest device 103 receives the access information in a predetermined format by NFC, the guest device 103 accesses the data management apparatus 101 based on the access information and acquires a file corresponding to the authentication information.

  With the above configuration, the user can automatically acquire and use the file designated by the user on the guest device 103 by starting the NFC communication by bringing the communication terminal 102 close to the guest device 103.

  FIG. 2 is a block diagram showing a configuration of the information processing system 100 according to an embodiment of the present invention. The configuration of the information processing system 100 will be described with reference to FIG.

  As already described in FIG. 1, the information processing system 100 includes a data management apparatus 101, a communication terminal 102, and a guest device 103 that are commonly connected to the Internet 104.

<Data management device>
With reference to FIG. 2, the configuration of the data management apparatus 101 will be described first.

  The data management apparatus 101 includes an authentication server 240 having an authentication function, an application server 250 that provides an online storage service, and a storage server 260 for managing files registered by a user.

  The authentication server 240 includes a user information management unit 241, a user information storage unit 242, an authentication unit 243, and a network communication unit 244, and authenticates account information of a user who requests access to the data management apparatus 101.

  The user information management means 241 stores and manages information on users registered for use in the service in the user information storage means 242.

  Based on the user information managed by the user information management unit 241, the authentication unit 243 authenticates whether the user who requests access to the data management apparatus 101 is a user who is registered for use in the service.

  The network communication unit 244 connects the authentication server 240 to a network such as the Internet 104.

  The application server 250 includes a temporary file management unit 251, a temporary file storage unit 252, a one-time password management unit 253, a file selection unit 254, a file providing unit 255, and a network communication unit 256. The application server 250 performs processing related to provision of an online storage service.

  The file selection unit 254 creates a list of files stored in the storage server by the user registered in the service, transmits the file list to the communication terminal 102, and acquires file information specified by the user via the communication terminal 102.

  The temporary file management unit 251 stores and manages the file designated by the user as a temporary file in the temporary file storage unit 252.

  The one-time password management unit 253 generates and manages a one-time password corresponding to the temporary file stored in the temporary file storage unit 252. The one-time password will be described later.

  The file providing unit 255 performs processing for providing a file in response to an access request from the guest device 103.

  The network communication unit 256 connects the application server 250 to a network such as the Internet 104.

  The storage server 260 includes a file management unit 261, a storage unit 262, and a network communication unit 263, and stores and manages a file registered by a user registered in the service.

  The file management unit stores and manages the file registered by the user registered in the online storage service in the storage unit 262.

  The network communication unit 263 connects the storage server 260 to a network such as the Internet 104.

  With the above configuration, the data management apparatus 101 provides an online storage service to the user.

<Communication terminal>
Next, the configuration of the communication terminal 102 will be described with reference to FIG.

  The communication terminal 102 includes an NFC communication unit 211, a display control unit 212, an input control unit 213, a network communication unit 214, an information processing unit 215, and a data storage unit 216.

  The NFC communication unit 211 performs data communication in a non-contact manner by bringing it close to other NFC-compatible devices in accordance with a wireless communication standard including a non-contact IC called NFC. By positioning the NFC communication unit 211 of the communication terminal 102 within the communication range (for example, within 10 cm) of the NFC communication unit 224 of the guest device 103, data communication is performed with the NFC communication unit 224 of the guest device 103.

  The display control unit 212 displays a login screen and a file selection screen on the display unit of the communication terminal 102.

  The input control unit 213 processes information input by a user via an input key of the communication terminal 102 or a GUI (Graphical User Interface).

  The network communication unit 214 is an interface for connecting the communication terminal 102 to the Internet 104. The network communication unit 214 can be connected to the Internet 104 using, for example, a wireless LAN or a mobile communication network. The network communication unit 214 may be connected to the Internet 104 by wired connection or the like.

  The information processing unit 215 is a block that executes a program for using an online storage service, and is realized by, for example, a microcomputer, a CPU, or a memory. The functional configuration of the information processing unit 215 will be described later.

  The data storage unit 216 stores data to be processed under the control of the information processing unit 215.

  With this configuration, the communication terminal 102 can use the online storage service provided by the data management apparatus 101 and can communicate data acquired from the data management apparatus 101 by NFC.

  Here, a functional configuration of the information processing unit 215 of the communication terminal 102 will be described with reference to FIG.

  The information processing unit 215 includes a login unit 301, a file selection unit 302, a password management unit 303, and an NFC data generation unit 304.

  In FIG. 2, the display control unit 212 and the input control unit 213 have been described as separate configurations. However, when data is input / output using a GUI, the input / output control is performed together with the input / output control as shown in FIG. The unit 305 may be used.

  The login unit 301 provides a user with a function for accessing an online storage service provided by the data management apparatus 101. The login unit 301 displays an online storage service login screen on the input / output control unit 305, and performs login processing to the data management apparatus 101 using account information input by the user. Further, when the communication terminal 102 is a user dedicated terminal, the login unit 301 can store the user information, thereby saving the trouble of inputting the account information every time the user uses it.

  The file selection unit 302 displays a list of files sent from the data management apparatus 101 after login on the input / output control unit 305, and allows the user to select a necessary file.

  When the user designates a file, the file selection unit 302 transmits information on the designated file to the data management apparatus 101, and requests issuance of a one-time password. The one-time password is authentication information for accessing the specified file and is generated by the data management apparatus 101.

  The password management unit 303 receives the one-time password generated by the data management apparatus 101 and stores the received one-time password in the data storage unit 216 for management.

  The NFC data generation unit 304 creates access information including at least information for specifying an access destination to the data management apparatus 101 and a one-time password corresponding to the specified file. Further, the NFC data generation unit 304 generates data that can be transmitted by NFC including the access information.

  It should be noted that the format of data that can be transmitted by NFC generated by the NFC data generation unit 304 is arbitrary as long as it is a predetermined format so that the guest device 103 can recognize it as access information. Therefore, here, the specific configuration of the access information is not specified, and only an outline will be described with an example.

  FIG. 11 shows an example of a data format generated by the NFC data generation unit 304.

  The lower part of FIG. 11 is an example of access information created by the NFC data generation unit 304. In the service type of FIG. 11, a value indicating that this message is a message related to the online storage service is set. In the message type, a value indicating a specific operation of the guest device 103, for example, printing, display, data acquisition, data deletion, or the like is set.

  Here, the values set for the service type and message type are predetermined values for each system, and the NFC data generation unit 304 of the communication terminal 102 and the data determination unit 401 of the guest device 103 use the same value. To do.

  In the URL information area, information for specifying an access destination to the online storage service is set, and the data length is set as the URL data length.

  Further, the one-time password provided from the data management apparatus 101 is set in the one-time password area, and the data length is set as the PW data length.

  When this access information is transmitted by NFC communication, it may be transmitted after being encapsulated in a message format defined by NFC communication.

  For example, referring to FIG. 11, it is assumed that the above diagram is a format when data is transmitted between the NFC communication unit 211 and the NFC communication unit 224. The header portion includes the data length of the payload (PAYLOAD), and data of an arbitrary size can be transmitted.

  Here, when the communication terminal 102 transmits the access information to the guest device 103, the data length of the access information may be set in the header portion, and the access information may be set in the payload portion.

Note that the configuration in FIG. 11 is merely an example of data generated by the NFC data generation unit 304, and does not limit the scope of the present invention.
For example, it is needless to say that a new NFC message may be defined instead of encapsulating with an existing NFC message as shown in FIG.

  In the present embodiment, the URL information for accessing the data management apparatus 101 uses information acquired and held when the communication terminal 102 registers with this service. However, as a modification, it goes without saying that a notification may be received from the data management apparatus 101 when a one-time password is issued.

  In addition, when the guest device 103 has URL information of a plurality of corresponding online storage servers, information that can specify the access destination such as the name of the online storage server and the corresponding management number instead of the URL information. You may just notify.

  Note that the communication terminal 102 does not have to be a dedicated terminal having the function of the information processing unit 215. That is, the above function may be realized by downloading an application corresponding to the online storage service to a general mobile terminal such as a smartphone.

<Guest equipment>
Returning to FIG. 2, the configuration of the guest device 103 will be described.

  The guest device 103 includes a network communication unit 221, an output control unit 222, an input control unit 223, an NFC communication unit 224, an information processing unit 225, and a data storage unit 226.

  The network communication unit 221 is an interface for connecting the guest device 103 to the Internet 104.

  The output control unit 222 performs control to output a file acquired from the data management apparatus 101. Specifically, if the guest device 103 is a printer, the acquired file is printed, and if the guest device 103 is a projector, control is performed to project the acquired file.

  The input control unit 223 processes information input by the user via the input key or GUI of the guest device 103.

  Since the operation unit of a device such as a printer has a unique shape and the operation procedure varies depending on the model, it often takes time to input. It is also an object of the present invention to provide a means for using the guest device 103 without performing input from the guest device 103.

  The NFC communication unit 224 establishes NFC communication with the NFC communication unit 211 of the communication terminal 102 and is transmitted from the communication terminal 102 when the communication terminal 102 is located within the communication range of the NFC communication unit 224 of the guest device 103. Receive data including access information.

  The information processing unit 225 is a block that executes a program for using the online storage service provided by the data management apparatus 101, and is realized by, for example, a microcomputer, a CPU, a memory, or the like. The functional configuration of the information processing unit 215 will be described later.

  The data storage unit 226 stores data according to the control of the information processing unit 225.

  With the above configuration, the guest device 103 can use the online storage service provided by the data management apparatus 101 in accordance with data received from NFC.

  Here, the functional configuration of the information processing unit 225 of the guest device 103 will be described with reference to FIG.

  The information processing unit 225 includes data determination means 401, password management means 402, access control means 403, and data acquisition means 404.

  When the NFC communication unit 224 receives data, the data determination unit 401 determines whether the received data includes access information in a predetermined format. If the received data has correct access information, the access information includes information necessary for accessing the data management apparatus 101 and a one-time password to a file designated by the user.

  When the data received from the NFC communication unit 224 is access information in a predetermined format, the password management unit 402 stores the access information in the data storage unit 226 for management.

  The access control unit 403 accesses the data management apparatus 101 based on the access information stored in the data storage unit 226. More specifically, access is requested to the URL included in the access information using a one-time password that is authentication information.

  Upon receiving access permission from the data management apparatus 101, the data acquisition unit 404 acquires data corresponding to the one-time password from the data management apparatus 101 and stores the acquired data in the data storage unit 226.

  Note that the guest device 103 also needs to have the function shown in the information processing unit 225 corresponding to the online storage service. However, like the communication terminal 102, the guest device 103 is not necessarily a dedicated terminal. That is, the function of the information processing unit 225 may be realized by installing an application corresponding to the online service.

<Description of operation>
Subsequently, an operation of the information processing system according to the embodiment of the present invention will be described.

  FIG. 5 is a sequence chart illustrating an example of a file acquisition procedure in the information processing system 100.

  The user connects to the online storage service provided by the data management apparatus 101 from the communication terminal 102 via the Internet 104 and requests login with the registered account information (processing 1 and 2).

  Upon receiving the login request from the user, the data management apparatus 101 authenticates the account information, and if the account information belongs to the user registered for use in the service, the data management apparatus 101 permits the user to log in (processing 3). .

  When the login of the user is permitted, the data management apparatus 101 transmits a list of files registered by the user to the communication terminal 102 (process 4).

  The user selects a file to be used from the list of files displayed on the communication terminal 102 (process 5).

  The communication terminal 102 notifies the data management apparatus 101 of the information on the file designated by the user, and requests the issuance of a one-time password for accessing the designated file (processing 6).

  The data management apparatus 101 stores the specified file as a temporary file in the temporary file storage unit 252 and generates and stores a one-time password for accessing the stored temporary file (process 7).

  Thereafter, the data management apparatus 101 transmits a one-time password to the communication terminal 102 (process 8).

  Upon receiving the one-time password, the communication terminal 102 creates access information including the one-time password and the URL information of the data management apparatus 101 in a predetermined format, and creates data that can be transmitted by NFC (process 9). .

  Thereafter, when the user brings the communication terminal 102 close to the NFC communication unit 224 of the guest device 103 (process 10), NFC communication is established between the communication terminal 102 and the guest device 103. At this time, the access information including the one-time password and the URL information of the data management apparatus 101 is transmitted from the communication terminal 102 to the guest device 103 in a predetermined format (process 11).

  When the transmission of the access information to the guest device 103 is completed, the communication terminal 102 discards the transmitted one-time password (processing 12).

  When the guest device 103 receives the data by NFC communication, the guest device 103 determines whether the received data is correct access information in a predetermined format (process 13).

  When it is determined that the data received from the NFC communication is access information, the guest device 103 makes an access request to the data management apparatus 101 using the one-time password based on the received access information (processing 14).

  The data management apparatus 101 searches the temporary file storage unit 252 for a file corresponding to the one-time password included in the access request (process 15). The access permission is notified (process 16).

  Upon receiving the access permission, the guest device 103 requests the data management apparatus 101 to acquire the specified file (process 17), and acquires the specified file (process 18).

  The guest device 103 acquires and stores the specified file (process 19), then notifies the data management apparatus 101 of the completion of file acquisition (process 20), and discards the one-time password (process 21).

  When the data management apparatus 101 receives a notification of completion of file acquisition from the guest device 103, the data management apparatus 101 invalidates the one-time password (processing 22).

  The guest device 103 performs output such as printing and display of the designated file automatically or in response to a user operation (process 23).

  The guest device outputs the designated file and then deletes it as necessary (process 24).

  As described above, according to the sequence shown in FIG. 5, the user designates a file from the communication terminal 102 and then needs to access the designated file only by bringing the communication terminal 102 close to the NFC unit of the guest device 103. Information can be input to the guest device 103.

  Therefore, the user can output the specified file from the guest device 103 without directly inputting account information, a one-time password, or the like from the operation unit. In addition, since the designated file and the one-time password are deleted after the designated file is output, it is possible to prevent use by an unauthorized user.

  Next, the procedure of the one-time password issuing process of the data management apparatus 101 will be described in more detail with reference to FIGS.

  When the data management apparatus 101 receives a login request from the communication terminal 102 (S601), the user information management unit 241 authenticates the login request based on the user information of the online storage service stored in the user information storage unit 242. This is performed (S602).

  When the user information management unit 241 determines that the logged-in user is a registered user in the service, the file selection unit 254 creates a list of files stored by the user in the storage server 260 and stores the file in the communication terminal 102. Transmit (S603).

  On the other hand, if the user information management unit 241 determines that the login user is not a user registered in the service, the process ends as a login failure (S604).

  After the file selection unit 254 transmits the list of files to the communication terminal 102, the file selection unit 254 receives a message specifying the file and requesting the issuance of a one-time password from the communication terminal 102 (S605).

  Here, the temporary file management unit 251 acquires the designated file from the user data stored in the storage server 260 and stores it in the temporary file storage unit 252 (S606).

  Next, the one-time password management unit 253 generates a one-time password for accessing a file stored in the temporary file storage unit 252 and notifies the communication terminal 102 of the generated one-time password (S607).

  Here, the one-time password management unit 253 indicates the correspondence relationship between the file name, the storage location, the issue date and time, the expiration date and time of the one-time password, etc. of the file stored in the temporary file storage unit 252 as shown in FIG. It may be managed in a simple table format.

  Note that the size of the one-time password portion in FIG. 12 is set to a required length according to the system.

  In this embodiment, since the one-time password is transmitted by NFC communication, it is not necessary to limit the length of the one-time password as in the case of manually inputting the one-time password. Can be set sufficiently long.

  Therefore, even when the number of files to be managed increases, the one-time password management unit 253 can issue a unique one-time password for each file, and the file can be specified and managed with only the one-time password. .

  The one-time password management unit 253 generates a unique one-time password so that the one-time password has a one-to-one correspondence with the corresponding temporary file. For example, the one-time password may be created based on the date and time when the one-time password is generated, the file name, and the like. Also, a random number may be used in combination with the date / time and file name.

  In the present embodiment, the corresponding file of the one-time password generated by the one-time password management unit 253 by a legitimate procedure is stored in the temporary file storage unit 252. Therefore, if there is no file corresponding to the one-time password in the temporary file storage means 252, it can be determined that the file is an invalid one-time password.

  As described above, the one-time password according to the present embodiment is information for specifying the corresponding file on the temporary file storage unit 252 and authentication information for confirming the validity of the one-time password.

  Next, a procedure of data transmission processing by NFC communication of the communication terminal 102 will be described with reference to FIGS. 3 and 7.

  The user starts NFC communication by bringing the communication terminal 102 close to (holding over) the NFC communication unit 224 of the guest device 103 that wants to output a specified file (S701).

  As a result, the NFC communication unit 211 of the communication terminal 102 automatically establishes NFC communication with the NFC communication unit 224 of the guest device 103 (S702).

  At this time, the access information in a predetermined format generated by the NFC data generation unit 304 of the communication terminal 102 is transmitted to the guest device 103 (S703).

  The password management unit 303 of the communication terminal 102 confirms that the access information is correctly transmitted to the guest device 103 (S704), and then discards (deletes) the stored one-time password as necessary ( S705).

  Next, with reference to FIG. 4 and FIG. 8, processing of the file acquisition operation of the guest device 103 after receiving access information from the communication terminal 102 will be described.

  When data is received from the NFC communication unit 224 of the communication terminal 102, the data determination unit 401 of the guest device 103 determines whether the received data includes access information in a predetermined format (S801, S802).

  If the data determination unit 401 determines that the received data is not correct access information, the process ends.

  On the other hand, when the data determination unit 401 determines that the received data is correct access information, the password management unit 402 stores the access information in the data storage unit 226 (S803).

  Next, the access control unit 403 requests access to the data management apparatus 101 using the access information stored in the data storage unit 226 (S804).

  If the access fails in S805, for example, if a notification that there is no corresponding file is received from the data management device, the access control means displays an error and terminates the processing (S807).

  On the other hand, when the access is successful in S805, the data acquisition unit 404 downloads the specified file from the data management apparatus 101 (S806), and stores the acquired file in the data storage unit 226 (S808).

  After storing the acquired file, the data acquisition unit 404 notifies the data management apparatus 101 of the completion of data acquisition (S809).

  Thereafter, the access control means 403 deletes the access information corresponding to the file for which data acquisition / storage has been completed from the data storage unit 226 (S810).

  Next, with reference to FIG. 2 and FIG. 9, the file providing operation processing on the data management apparatus 101 side will be described.

  When the file providing unit 255 receives the access request (S901), the one-time password management unit 253 searches whether the file corresponding to the one-time password included in the access request is stored in the temporary file storage unit 252 (S903). ).

  When the file corresponding to the one-time password is found, the file providing unit 255 permits the guest device 103 to access the file corresponding to the one-time password stored in the temporary file storage unit 252 (S904). .

  If the file corresponding to the one-time password is not found, the file providing unit 255 notifies the guest device 103 that there is no corresponding file (S905).

  After the guest device 103 acquires a file corresponding to the one-time password (S906), when the file providing unit 255 receives a file acquisition completion notification (S907), the one-time password management unit 253 invalidates the one-time password. (S908).

  Thereafter, the temporary file management unit 251 deletes the file corresponding to the invalidated one-time password from the temporary file storage unit 252 (S909).

  Next, with reference to FIG. 10 and FIG. 12, a process related to the one-time password expiration management of the data management apparatus 101 will be described.

  This is a process corresponding to the accumulation of files corresponding to the one-time password stored in the temporary file storage means 252 when the issued one-time password is not used.

  The one-time password management unit 253 periodically checks the expiration date of the one-time password (S1001).

  When the one-time password management unit 253 generates the one-time password, the one-time password management table 253 manages the relationship between the one-time password and the temporary file and also manages the expiration date and time of the one-time password in the one-time password management table shown in FIG.

  The one-time password management unit 253 determines that the one-time password whose expiration date has passed has expired, and invalidates or deletes it (S1002).

  The temporary file management unit 251 deletes the file corresponding to the invalidated or deleted one-time password from the temporary file storage unit 252 (S1003).

  By the above processing, unnecessary data can be prevented from being accumulated in the temporary file storage unit 252.

  As described above, according to the present embodiment, when the guest device 103 receives the access information in a predetermined format by NFC communication, the guest device 103 automatically accesses the data management apparatus 101, and therefore operates the operation unit of the guest device 103. The user can easily access a desired file without doing so. Accordingly, it is possible to realize an output device that automatically prints or displays a desired file from the guest device 103 by simply holding the communication terminal 102 over the NFC unit of the guest device 103.

  In addition, since the data management apparatus 101 stores a file designated by the user as a temporary file in the temporary file storage unit 252 and manages the file in association with the corresponding one-time password, the data management apparatus 101 stores the designated file corresponding to the one-time password in a short time. Can be provided in time.

  In addition, since the one-time password corresponding to the file designated by the user is received by NFC communication, it can be set sufficiently longer than the manual input. Therefore, the data management apparatus 101 can specify the file designated by the user with only the one-time password, and at the same time, sufficient security can be ensured.

  Note that this embodiment does not limit the scope of the present invention.

  For example, the means for generating access information including the URL information of the data management apparatus 101 and the one-time password performed by the communication terminal 102 may be performed by the data management apparatus 101 and notified to the communication terminal 102.

  Further, although the data management apparatus 101 has been described as three servers, it may be realized by one or more arbitrary numbers of servers.

  Further, although the one-time password has been described as being usable only once, it may be a password with a frequency limit having a frequency limit of two or more. Further, the one-time password may be a password with a time limit that can be used any number of times as long as it is within the time limit without limiting the number of times.

  Further, although the service provided by the data management apparatus 101 has been described as an online storage service that can store user files, it may be a content service that provides music, video, games, and the like.

  It should be noted that the system configuration described in this embodiment is an example, and it goes without saying that there are various system configurations depending on applications and purposes.

DESCRIPTION OF SYMBOLS 100 Information processing system 101 Data management apparatus 102 Communication terminal 103 Guest apparatus 211 NFC communication part 212 Display control part 213 Input control part 214 Network communication part 215 Information processing part 216 Data storage part 221 Network communication part 222 Output control part 223 Input control part 224 NFC communication unit 225 Information processing unit 226 Data storage unit 240 Authentication server 241 User information management unit 242 User information storage unit 243 Authentication unit 244 Network communication unit 250 Application server 251 Temporary file management unit 252 Temporary file storage unit 253 One-time password management Means 254 File selection means 255 File providing means 256 Network communication means 260 Storage server 261 File management means 262 Storage means 263 Network communication means 301 Login means 302 File selection means 303 Password management means 304 NFC data generation means 401 Data determination means 402 Password management means 403 Access control means 404 Data acquisition means

JP 2006-164158 A

Claims (6)

A communication terminal that allows a guest device shared by multiple users to execute a predetermined process,
Login means for logging in to a data management device for managing user files;
A file selection means for displaying a list of files of the user transmitted from the logged-in data management device, and transmitting information of the file selected by the user from the list of files to the data management device;
Authentication information for acquiring the selected file from the data management device, wherein the authentication is managed in the data management device in association with information indicating an expiration date of the selected file and the authentication information Password management means for receiving information from the data management device;
NFC data generating means for generating information for specifying the data management device and access information including the authentication information, and generating NFC data including the generated access information ;
When the NFC data is received , it is determined whether the received NFC data includes the access information in a predetermined format. If the NFC data includes the access information in a predetermined format, the data NFC communication means for acquiring the selected file from a management device and transmitting the NFC data to the guest device that executes the predetermined process;
A communication terminal. The guest device is
The communication terminal according to claim 1, further comprising: means for acquiring the selected file corresponding to the authentication information from the data management device. The data management device includes:
Means for storing the selected file as a temporary file;
The communication terminal according to claim 1, further comprising means for managing a relationship between the temporary file and the authentication information corresponding to the temporary file. The data management device includes:
The communication terminal according to any one of claims 1 to 3, wherein the guest device has means for invalidating the authentication information after acquiring data from the data management device. An information processing system including a guest device shared by a plurality of users, a communication terminal that allows the guest device to execute a predetermined process, and a data management device that manages user files,
The communication terminal is
Login means for logging in to a data management device for managing user files;
A file selection means for displaying a list of files of the user transmitted from the logged-in data management device, and transmitting information of the file selected by the user from the list of files to the data management device;
Authentication information for acquiring the selected file from the data management device, wherein the authentication is managed in the data management device in association with information indicating an expiration date of the selected file and the authentication information Password management means for receiving information from the data management device;
NFC data generating means for generating information for specifying the data management device and access information including the authentication information, and generating NFC data including the generated access information ;
When the NFC data is received , it is determined whether the received NFC data includes the access information in a predetermined format. If the NFC data includes the access information in a predetermined format, the data NFC communication means for acquiring the selected file from a management device and transmitting the NFC data to the guest device that executes the predetermined process;
An information processing system having A control method of an information processing system including a guest device shared by a plurality of users, a communication terminal that causes the guest device to execute a predetermined process, and a data management device that manages user files,
The communication terminal is
Logging into a data management device that manages user files;
Displaying a list of files of the user transmitted from the logged-in data management device;
Transmitting information of a file selected by the user from the list of files to the data management device;
Authentication information for acquiring the selected file from the data management device, wherein the authentication is managed in the data management device in association with information indicating an expiration date of the selected file and the authentication information Receiving information from the data management device;
Creating information for specifying the data management device and access information including the authentication information, and generating NFC data including the created access information ;
When the NFC data is received , it is determined whether the received NFC data includes the access information in a predetermined format. If the NFC data includes the access information in a predetermined format, the data Obtaining the selected file from a management device and transmitting the NFC data to the guest device executing the predetermined process;
A method for controlling an information processing system comprising:

Images