JP6696326B2 - Information processing system, information processing apparatus, and information processing method - Google Patents

Description

  The present invention relates to an information processing system, an information processing device, and an information processing method.

  In recent years, services that provide functions that combine a plurality of functions (for example, scanning, printing, mail delivery, etc.) have become known. For example, a service and the like that delivers electronic data generated by scanning by mail is known. Such a service is realized by executing a job as a series of one or more processes for realizing each function.

  There is also known an image forming apparatus that executes a series of processes based on an instruction sheet including process information that represents one or more processes as a series of processes (see, for example, Patent Document 1).

  The service as described above can be used by executing a series of processes using an application installed in the device, for example. Here, when the application installed in the device executes a series of processes, it is preferable to authenticate the application from the viewpoint of prevention of illegal use.

  The embodiment of the present invention has been made in view of the above points, and an object thereof is to authenticate a device before executing a series of processes.

  In order to achieve the above object, an embodiment of the present invention is an information processing system including one or more information processing devices and having a plurality of programs that respectively execute predetermined processes, and a series of electronic data is used. For each process, the flow information defining the program identification information that identifies one or more programs that execute each of the series of processes and the execution order of the one or more programs is identified. Information relating to electronic data from one of the one or more devices connected to the information processing system, the flow identification information, and the storage device that stores the flow identification information. Based on the first receiving means for receiving a first request including authentication information for performing authentication, and the authentication information included in the first request received by the first receiving means, An authentication unit that authenticates one device, and if the authentication by the authentication unit is successful, the first request received by the first receiving unit out of the flow information stored in the storage unit. Identified by the acquisition means for acquiring the flow information stored in the storage means in association with the flow identification information included in the flow identification information, and the program identification information defined in the flow information acquired by the acquisition means. By executing each of the programs according to the execution order defined in the flow information, the electronic data based on the information about the electronic data included in the first request received by the first receiving unit is stored. And an execution unit that executes the series of processes used.

  According to the embodiment of the present invention, it is possible to authenticate a device before executing a series of processes.

It is a figure which shows the system configuration of an example of the information processing system which concerns on this embodiment. It is a figure which shows the hardware constitutions of an example of the service provision system which concerns on this embodiment. It is a figure which shows the hardware constitutions of an example of the apparatus which concerns on this embodiment. It is a figure which shows the functional structure of an example of the information processing system which concerns on this embodiment. It is a figure which shows the functional structure of an example of the logic processing part which concerns on this embodiment. It is a figure which shows an example of a type conversion information table. FIG. 3 is a diagram illustrating a functional configuration of an example of a job management unit according to the present exemplary embodiment. It is a figure which shows an example of process flow information. It is a sequence diagram which shows an example of the whole process of service utilization. It is a figure which shows an example of a service utilization screen. It is a sequence diagram which shows an example of the execution process of a process flow. It is a figure which shows an example of job information. It is a sequence diagram which shows an example of a registration process of a referenceable application. It is a figure which shows an example of reference information. FIG. 9 is a sequence diagram illustrating an example of job information reference processing. It is a figure which shows an example of the reference screen of job information. FIG. 9 is a sequence diagram showing another example (1) of the job information reference processing. It is a figure which shows the other example of job information. FIG. 16 is a sequence diagram showing another example (No. 2) of the job information reference processing.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

<System configuration>
First, the system configuration of the information processing system 1 according to the present embodiment will be described with reference to FIG. FIG. 1 is a diagram showing a system configuration of an example of an information processing system 1 according to the present embodiment.

  The information processing system 1 illustrated in FIG. 1 includes a service providing system 10 and a device 20, and is communicably connected via a wide area network N1 such as the Internet.

  The service providing system 10 is realized by one or more information processing devices, and is realized by a series of processes that combine one or more processes of a plurality of processes that respectively realize various functions via the network N1. Providing various services.

  Here, the function is a function related to an electronic file such as a document file or an image file. The functions include, for example, printing, scanning, facsimile transmission, data format conversion, mail delivery, OCR (Optical character recognition) processing, processing, compression / decompression, and storage in a repository.

  Specific examples of services provided by the service providing system 10 according to the present embodiment will be described later. In the following, a series of processes will also be referred to as a “process flow”.

  The device 20 is various electronic devices used by a user. That is, the device 20 is, for example, an image forming apparatus such as an MFP (Multifunction Peripheral), a PC (personal computer), a projector, an electronic blackboard, or a digital camera. The user can use the device 20 to use various services provided by the service providing system 10.

In addition, hereinafter, when distinguishing each of the plurality of devices 20, the device 20 is described by using subscripts such as "device 20 ₁ " and "device 20 ₂ ".

  The configuration of the information processing system 1 shown in FIG. 1 is an example, and other configurations may be used. For example, the information processing system 1 according to the present embodiment includes various devices that perform at least one of input and output of electronic data, and these devices may use the service provided by the service providing system 10. ..

<Hardware configuration>
Next, the hardware configuration of the service providing system 10 included in the information processing system 1 according to the present embodiment will be described with reference to FIG. FIG. 2 is a diagram showing a hardware configuration of an example of the service providing system 10 according to the present embodiment.

  The service providing system 10 illustrated in FIG. 2 includes an input device 11, a display device 12, an external I / F 13, and a RAM (Random Access Memory) 14. The service providing system 10 also includes a ROM (Read Only Memory) 15, a CPU (Central Processing Unit) 16, a communication I / F 17, and an HDD (Hard Disk Drive) 18. The respective pieces of hardware are connected by a bus B.

  The input device 11 includes a keyboard, a mouse, a touch panel, etc., and is used by the user to input each operation signal. The display device 12 includes a display and the like, and displays the processing result by the service providing system 10. At least one of the input device 11 and the display device 12 may be connected to the service providing system 10 and used when necessary.

  The communication I / F 17 is an interface that connects the service providing system 10 to the network N1. As a result, the service providing system 10 can communicate via the communication I / F 17.

  The HDD 18 is a non-volatile storage device that stores programs and data. The programs and data stored in the HDD 18 include an OS (Operating System) that is basic software that controls the entire service providing system 10 and application software that provides various functions on the OS.

  The service providing system 10 may use a drive device (for example, a solid state drive: SSD) that uses a flash memory as a storage medium instead of the HDD 18. Further, the HDD 18 manages stored programs and data by a predetermined file system and / or DB.

  The external I / F 13 is an interface with an external device. The external device includes a recording medium 13a and the like. As a result, the service providing system 10 can read and write the recording medium 13a via the external I / F 13. The recording medium 13a includes a flexible disk, a CD, a DVD, an SD memory card, a USB memory and the like.

  The ROM 15 is a non-volatile semiconductor memory that can retain programs and data even when the power is turned off. The ROM 15 stores programs and data such as a BIOS (Basic Input / Output System) executed when the service providing system 10 is started, OS settings, and network settings. The RAM 14 is a volatile semiconductor memory that temporarily holds programs and data.

  The CPU 16 is an arithmetic device that realizes control and functions of the entire service providing system 10 by reading programs and data from a storage device such as the ROM 15 and the HDD 18 onto the RAM 14 and executing processing.

  The service providing system 10 according to the present embodiment has the hardware configuration shown in FIG.

  Next, a hardware configuration when the device 20 included in the information processing system 1 according to the present embodiment is an image forming apparatus will be described with reference to FIG. FIG. 3 is a diagram showing a hardware configuration of an example of the device 20 according to the present embodiment.

  The device 20 illustrated in FIG. 3 includes a controller 21, an operation panel 22, an external I / F 23, a communication I / F 24, a printer 25, and a scanner 26. The controller 21 also includes a CPU 31, a RAM 32, a ROM 33, an NVRAM 34, and an HDD 35.

  The ROM 33 is a non-volatile semiconductor memory that stores various programs and data. The RAM 32 is a volatile semiconductor memory that temporarily holds programs and data. The NVRAM 34 stores, for example, setting information and the like. The HDD 35 is a non-volatile storage device that stores various programs and data.

  The CPU 31 is an arithmetic unit that realizes control and functions of the entire device 20 by reading programs, data, setting information and the like from the ROM 33, NVRAM 34, HDD 35, etc. onto the RAM 32 and executing processing.

  The operation panel 22 includes an input unit that receives an input from the user and a display unit that displays. The external I / F 23 is an interface with an external device. The external device includes a recording medium 23a and the like. Accordingly, the device 20 can read and / or write the recording medium 23a via the external I / F 23. The recording medium 23a may be, for example, an IC card, a flexible disk, a CD, a DVD, an SD memory card, a USB memory, or the like.

  The communication I / F 24 is an interface that connects the device 20 to the network. This allows the device 20 to communicate via the communication I / F 24. The printer 25 is a printing device that prints print data. The scanner 26 is a reading device that reads a document and generates an electronic file (image file).

  By having the hardware configuration shown in FIG. 3, the device 20 according to the present embodiment can realize various types of processing described below.

<Services provided by the service providing system>
Here, the services provided by the service providing system 10 according to the present embodiment will be described. In the following description, the device 20 will be described as an image forming apparatus.

  The service providing system 10 according to the present embodiment provides a service of performing OCR processing on an electronic file (image file) generated by scanning a document in the device 20 and delivering the mail to a mail address designated by the user. ..

  Hereinafter, the service providing system 10 according to the present embodiment will be described as providing the above-described service (“scan To mail delivery” service).

  However, the service provided by the service providing system 10 is not limited to this. The service providing system 10 may provide a service of compressing an electronic file generated by scanning an original in the device 20 and storing the compressed electronic file in a repository. The service providing system 10 may also provide a service of, for example, processing an electronic file generated by scanning a document in the device 20 (for example, adding a predetermined wording to the electronic file) and transmitting the facsimile. good.

  Further, for example, when the device 20 is an electronic blackboard or the like, the service providing system 10 according to the present embodiment provides a service of processing an electronic file generated by the device 20 which is an electronic blackboard and delivering a mail. You may provide it.

<Functional configuration>
Next, the functional configuration of the information processing system 1 according to the present embodiment will be described with reference to FIG. FIG. 4 is a diagram showing a functional configuration of an example of the information processing system 1 according to the present embodiment.

  The device 20 illustrated in FIG. 4 has a client application 210 executed by, for example, the CPU 31 or the like. The client application 210 is an application program for using the service provided by the service providing system 10. The user can use the “scan To mail delivery” service provided by the service providing system 10 by using the client application 210 installed in the device 20. The client application 210 is provided with an application ID that identifies the client application 210.

  The service providing system 10 illustrated in FIG. 4 includes an input / output service processing unit 110, an authentication service unit 120, and a document service unit 130. Each of these functional units is realized by a process that causes the CPU 16 to execute one or more programs installed in the service providing system 10.

  Further, the service providing system 10 illustrated in FIG. 5 includes an application information storage unit 140, a job information storage unit 150, and a reference information storage unit 160. Each of these storage units can be realized using the HDD 18. Note that at least one of these storage units may be realized by using a storage device or the like connected to the service providing system 10 via the network N1.

  The input / output service processing unit 110 performs processing relating to services provided by the service providing system 10. Here, the input / output service processing unit 110 has an application management unit 111, a logic processing unit 112, and a job management unit 113.

  The application management unit 111 manages the application information 1000 stored in the application information storage unit 140 and the reference information stored in the reference information storage unit 160.

  The application information 1000 is an application for providing a service realized by a series of processes. That is, various services provided by the service providing system 10 (for example, “scan To mail delivery” service) are provided by the application information 1000. Further, the reference information is for determining whether the client application 210, the application information 1000, or the like can refer to information (job information) of a job executed by another client application 210, the application information 1000, or the like. Information.

  The application management unit 111 also returns the process flow information 1100 included in the application information 1000 in response to a request from the logic processing unit 112. The process flow information 1100 is information defining a series of processes for realizing the service provided by the application information 1000.

  The logic processing unit 112 acquires the process flow information 1100 included in the application information 1000 from the application management unit 111 in response to a request from the client application 210. Then, the logic processing unit 112 executes a series of processes (processing flow) for realizing the service provided by the application information 1000, based on the processing flow information 1100 acquired from the application management unit 111. As a result, the service providing system 10 according to the present embodiment can provide various services (for example, “scan To mail delivery” service).

  The job management unit 113 manages the job information stored in the job information storage unit 150. Note that the job information is information including various kinds of information regarding the job (for example, the creation date and status of the job). A job is a concept in which a series of processes (process flow) for realizing various services is regarded as one execution unit.

  The authentication service unit 120 performs authentication by various authentication methods when the client application 210 makes various requests to the input / output service processing unit 110.

  The document service unit 130 executes a predetermined process included in a series of processes (process flow) based on the process flow information 1100. Here, the document service unit 130 has an OCR processing unit 131 and a mail delivery unit 132.

  The OCR processing unit 131 performs OCR processing on an electronic file (image file). The mail delivery unit 132 creates a mail with an electronic file attached, and delivers the mail to the specified mail address.

  The document service unit 130 may include, for example, a data conversion unit that converts the data format of the electronic file into predetermined data, a compression / decompression unit that compresses or decompresses the electronic file, and the like.

  As described above, the document service unit 130 includes various functional units that execute a predetermined process included in a series of processes (process flow). Therefore, the document service unit 130 is realized by a group of programs (modules) that provide these various functions.

  The application information storage unit 140 stores the application information 1000. The application information 1000 is stored in the application information storage unit 140 in association with the application ID that identifies the application information 1000. Therefore, the application ID is identification information that identifies the client application 210 and the application information 1000.

  Here, the application information 1000 includes process flow information 1100. For example, the application information 1000 that provides the “scan To mail delivery” service includes process flow information 1100 that defines a series of processes that implement the service. That is, in the application information 1000 that provides the “scan To mail delivery” service, the process flow information 1100 that defines a process of performing OCR processing on an electronic file generated by scanning and then delivering the mail to a specified mail address. Is included.

  The application information 1000 may include two or more pieces of processing flow information 1100. For example, in the application information 1000 that provides “scan To mail delivery”, the processing flow information 1100A that defines the processing to perform the OCR processing in English and then the mail distribution, and the processing to perform the OCR processing in Japanese and the mail distribution Processing flow information 1100B in which is defined may be included.

  As described above, the processing flow information 1100 is information defining a series of processing (processing flow) for realizing the service provided by the application information 1000. A flow ID for identifying the processing flow information 1100 is attached to the processing flow information 1100. The details of the processing flow information 1100 will be described later.

  The job information storage unit 150 stores job information. The reference information storage unit 160 stores reference information. Details of the job information and the reference information will be described later.

  The input / output service processing unit 110, the authentication service unit 120, and the document service unit 130 may be realized by different information processing devices.

  Here, a detailed functional configuration of the logic processing unit 112 will be described with reference to FIG. FIG. 5 is a functional configuration diagram of an example of the logic processing unit 112 according to the present embodiment.

  The logic processing unit 112 illustrated in FIG. 5 includes a flow execution unit 301, a component management unit 302, a component group 303, a type conversion management unit 304, and a type conversion group 305. Further, the logic processing unit 112 has a type conversion information table 3000.

  When receiving the application execution request from the client application 210 via the authentication service unit 120, the flow execution unit 301 acquires the process flow information 1100 included in the application information 1000 corresponding to the execution request from the application management unit 111. .. Then, the flow execution unit 301 executes a series of processes (process flow) based on the process flow information 1100 acquired from the application management unit 111.

  Here, a series of processes based on the process flow information 1100 is executed by combining components for executing each process included in the series of processes. The component is realized by a program or module for executing a process for realizing a predetermined function, and is defined by, for example, a class or a function.

  The component management unit 302 manages components. The component management unit 302 generates a component in response to a request from the flow execution unit 301, and returns the generated component to the flow execution unit 301. It should be noted that the generation of a component means, for example, expanding a component defined by a class, a function, or the like on a memory (for example, the RAM 14).

  The component group 303 is a set of components. The component group 303 includes an OCR component 1310 and a mail delivery component 1320.

  The OCR component 1310 is a component for OCR processing an electronic file. The OCR component 1310 performs the OCR processing of the electronic file by requesting the OCR processing section 131 of the document service section 130 for the OCR processing.

  The mail delivery component 1320 is a component for delivering a mail to a designated mail address. The mail delivery component 1320 delivers the mail to the designated mail address by requesting the mail delivery processing from the mail delivery unit 132 of the document service unit 130.

  In this way, each component uses the document service unit 130 to execute processing for realizing a predetermined function. In addition to the above components, the component group 303 includes various components such as a conversion component for converting the data format of an electronic file into a predetermined data format and a compression component for compressing an electronic file. included.

  Further, each component included in the component group 303 has a component common I / F 1300. The component common I / F 1300 is an API (Application Programming Interface) commonly defined for each component, and includes an API for generating a component and an API for executing a process of the component.

  As described above, since each component has the component common I / F 1300, it is possible to localize the influence of addition of a component and the like. That is, for example, it is possible to add components without affecting the flow execution unit 301, the component management unit 302, and the like. As a result, in the service providing system 10 according to the present embodiment, it is possible to reduce the development man-hours associated with addition of a predetermined function or the like (that is, addition of a component for executing processing for realizing the function).

  The type conversion management unit 304 manages the type conversion of data types. Here, each component has a predetermined data type that it can handle. Therefore, the type conversion management unit 304 generates the type conversion included in the type conversion group 305 by referring to, for example, the type conversion information table 3000 illustrated in FIG. 6 in response to a request from the component.

  Then, the type conversion management unit 304 requests the generated type conversion to execute the type conversion process. The type conversion is realized by a program, a module, or the like that executes a data type type conversion process, and is defined by, for example, a class or a function. The generation of the type conversion is to expand the type conversion defined by, for example, a class or a function in a memory (for example, the RAM 14).

  The data type is, for example, a data type “InputStream” indicating stream data, “LocalFilePath” indicating a path (address) of an electronic file stored in a storage device, and “File” indicating the substance of the electronic file. Etc.

  Here, the type conversion information table 3000 will be described with reference to FIG. FIG. 6 is a diagram showing an example of the type conversion information table.

  The type conversion information table 3000 illustrated in FIG. 6 has, as data items, a data type before conversion, a data type after conversion, and a type conversion to be generated. That is, the type conversion information stored in the type conversion information table 3000 is for converting the data type before conversion into the data type after conversion for each of the data type before conversion and the data type after conversion. This is the information associated with the type conversion.

  The type conversion group 305 is a set of type conversions. The type conversion group 305 includes a first type conversion 1410 for converting the data type “InputStream” into “LocalFilePath”. The type conversion group 305 includes, for example, a second type conversion for converting the data type “LocalFilePath” into “File” in addition to this.

  Further, each type conversion included in the type conversion group 305 has a type conversion common I / F 1400. The type conversion common I / F 1400 is an API commonly defined for each type conversion, and includes an API for generating a type conversion and an API for executing a type conversion process of the type conversion.

  As described above, since each type conversion has the type conversion common I / F 1400, it is possible to localize the influence caused by the addition of the type conversion. That is, for example, type conversion can be added without affecting the type conversion management unit 304 and the like. As a result, in the service providing system 10 according to the present embodiment, it is possible to reduce the development man-hours associated with the addition of type conversion.

  Here, a detailed functional configuration of the job management unit 113 will be described with reference to FIG. FIG. 7 is a diagram showing a functional configuration of an example of the job management unit 113 according to this embodiment.

  The job management unit 113 illustrated in FIG. 7 includes a job information management unit 401 and an access control unit 402.

  Upon receiving the job information registration request from the logic processing unit 112, the job information management unit 401 creates job information and stores it in the job information storage unit 150. As a result, the job information is registered in the service providing system 10.

  Further, when the job information management unit 401 receives the job information acquisition request from the access control unit 402, the job information management unit 401 acquires the job information from the job information storage unit 150. Then, the job information management unit 401 returns the acquired job information to the access control unit 402.

  Upon receiving the job information reference request from the client application 210 via the authentication service unit 120, the access control unit 402 transmits a job information acquisition request to the job information management unit 401.

  Further, when the job information is returned from the job information management unit 401, the access control unit 402 acquires the application ID (referenceable application ID described later) included in the reference information via the application management unit 111. Then, the access control unit 402 performs an access right check for determining whether the client application 210 can refer to the job information returned from the job information management unit 401.

  The reference information is associated with the application ID of the client application 210 or the application information 1000 and the application ID (referenceable application ID) of another application that can refer to the client application 210 or the application information 1000.

  As a result, access control is performed when the client application 210 or the like refers to the job information of another application (other client application 210 or other application information 1000).

  Here, the processing flow information 1100 included in the application information 1000 that provides the “scan To mail delivery” service will be described with reference to FIG. FIG. 8 is a diagram showing an example of the processing flow information 1100.

  The process flow information 1100 shown in FIG. 8 is information defining a series of processes (process flow) that realizes the “scan To mail delivery” service. That is, the process flow information 1100 shown in FIG. 8 defines a flow ID 1101 and a process definition 1102 and a process definition 1103 that indicate respective processes that constitute a series of processes that realize the “scan To mail delivery” service. There is.

  The flow ID 1101 is a flow ID that identifies the process flow information 1100 shown in FIG.

  The process definition 1102 and the process definition 1103 are defined in the format of “component name: process content? Option parameter”. The optional parameter may be defined, for example, only when the component indicated by the component name and the processing content is necessary to perform the processing (that is, the definition of the optional parameter is arbitrary). Further, when a plurality of option parameters are defined, they are defined by combining the option parameters with "&".

  In the process definition 1102, “ocr: ocr_process” is defined. This means that OCR processing is performed by the OCR component 1310. Note that the process definition 1102 does not define any optional parameter.

  In the process definition 1103, “mail: send” is defined. This means that the mail delivery process is performed by the mail delivery component 1320.

  Further, in the process definition 1103, “? Mail_address = null & filename = null” is defined. This means that the electronic file having the file name specified by "filename" is mail-delivered to the mail address specified by "mail_address". In the example shown in FIG. 8, no value is specified for “mail_address” and “filename” (that is, null).

  As described above, in the process flow information 1100, the process definition of each process forming a series of processes (process flow) is defined. As a result, the service providing system 10 according to the present embodiment performs a series of processes for realizing the service provided by the application information 1000 by performing the process by each component according to each process definition included in the process flow information 1100. Can be executed.

  The processes defined in each process definition included in the process flow information 1100 shown in FIG. 8 are sequentially executed from the top. That is, in the series of processes based on the process flow information 1100 shown in FIG. 8, the process defined in the process definition 1102 and the process defined in the process definition 1103 are executed in this order. However, the processing flow information 1100 is not limited to this, and, for example, information indicating the execution order of the processing defined in each processing definition may be defined.

<Details of processing>
Next, details of the processing of the information processing system 1 according to the present embodiment will be described. First, an overall process when the user of the device 20 uses the “scan To mail delivery” service will be described with reference to FIG. 9. FIG. 9 is a sequence diagram showing an example of the entire process of using the service.

  First, the client application 210 displays, for example, the service use screen 2100 shown in FIG. 10 (step S901). Such a service use screen 2100 is displayed, for example, when the user performs a display operation of the service use screen 2100.

  The service use screen 2100 shown in FIG. 10 includes a file name input field 2101, a mail address input field 2102, and a scan execution button 2103.

  The file name input field 2101 is an input area in which the user specifies the file name of the electronic file attached to the mail (that is, the electronic file obtained by OCR processing the electronic file generated by scanning). The mail address input field 2102 is an input area in which the user specifies a mail address to which the mail is delivered. The scan execution button 2103 is a button for executing the scan of the document and starting the use of the service.

  Here, on the service use screen 2100 shown in FIG. 10, after the user specifies the file name and the mail address in the file name input field 2101 and the mail address input field 2102, the scan execution button 2103 is pressed to execute the scan. It is assumed that the operation has been performed.

  Then, the client application 210 creates an image file (scan image file) by reading the document with the scanner 26 (step S902).

  Here, when the authentication method between the client application 210 and the authentication service unit 120 is “application authentication”, the client application 210 transmits a process flow execution request including a client ID and a client secret to the authentication service unit 120 (step). S903).

  The client ID is, for example, the application ID of the client application 210. The client secret is a password for the client ID or the like. That is, the process flow execution request includes the client ID and the client secret as the authentication information.

  The processing flow execution request also includes the flow ID, the scan image file, and the user designation information. The user-specified information is the file name and mail address specified in the file name input field 2101 and the mail address input field 2102, respectively.

  For example, assume that “test.pdf” is specified in the file name input field 2101 and “hoge@hogehoge.co.jp” is specified in the email address input field 2102. In this case, the user designation information is information including “mail_address=hoge@hogehoge.co.jp” and “filename = test.pdf”.

  Next, when the authentication service unit 120 receives the processing flow execution request, it performs application authentication based on the client ID and the client secret included in the execution request (step S904). That is, the authentication service unit 120 performs application authentication by determining whether the set of client ID and client secret included in the execution request matches a predetermined set of client ID and client secret. ..

  Then, when the application authentication is successful, the authentication service unit 120 transmits a process flow execution request to the logic processing unit 112 (step S905). The process flow execution request includes the flow ID, the scan image file, the user designation information, and the application ID.

  When the application authentication fails in step S904 described above, the authentication service unit 120 returns, for example, a notification indicating that the application authentication has failed to the client application 210.

  When the authentication method between the client application 210 and the authentication service unit 120 is “user authentication”, the client application 210 transmits a process flow execution request including a tenant ID, a user ID, and a password to the authentication service unit 120 ( Step S906).

  The tenant ID is, for example, identification information that identifies an organization such as a group or a company to which the user of the device 20 equipped with the client application 210 belongs. The user ID is, for example, identification information that identifies the user of the device 20 in which the client application 210 is installed. That is, the process flow execution request includes the tenant ID, the user ID, and the password as the authentication information.

  The tenant ID, the user ID, and the password may be input by the user on the service use screen 2100 shown in FIG. 10, for example. The process flow execution request includes the flow ID, the scan image file, and the user designation information, as in the above.

  Next, when the authentication service unit 120 receives the process flow execution request, the authentication service unit 120 performs user authentication based on the tenant ID, the user ID, and the password included in the execution request (step S907). That is, the authentication service unit 120 determines whether or not the set of tenant ID, user ID, and password included in the execution request matches a predetermined set of tenant ID, user ID, and password. Then, perform user authentication.

  Then, when the user authentication is successful, the authentication service unit 120 transmits a process flow execution request to the logic processing unit 112 (step S908). The process flow execution request includes the flow ID, the scan image file, the user designation information, and the user ID.

  If the user authentication fails in step S907, the authentication service unit 120 returns, for example, a notification indicating that the user authentication has failed to the client application 210.

  When the authentication method between the client application 210 and the authentication service unit 120 is “access token authentication”, the client application 210 sends a request to execute the processing flow including the access token to the authentication service unit 120 (step S909).

  The access token is, for example, a token used for authentication by OAuth. That is, the processing flow execution request includes the access token as the authentication information. The process flow execution request includes the flow ID, the scan image file, and the user designation information, as in the above.

  Next, when the authentication service unit 120 receives the process flow execution request, the authentication service unit 120 performs access token authentication based on the access token included in the execution request (step S910). That is, the authentication service unit 120 performs access token authentication by determining whether the access token included in the execution request is valid.

  Then, when the access token authentication is successful, the authentication service unit 120 transmits a process flow execution request to the logic processing unit 112 (step S911). The processing flow execution request includes the flow ID, the scan image file, the user designation information, and the user ID associated with the access token.

  In addition, when the access token authentication fails in step S910, the authentication service unit 120 returns, for example, a notification indicating that the access token authentication has failed to the client application 210.

  Finally, the logic processing unit 112 performs the processing of executing the processing flow (step S9126). That is, the logic processing unit 112 executes a series of processes based on the process flow information 1100 of the flow ID included in the execution request.

  Then, the logic processing unit 112 returns the processing result of the execution processing of the processing flow to the client application 210. As a result, the service providing system 10 according to the present embodiment can provide the “scan To mail delivery” service to the device 20.

  Here, whether the authentication method between the client application 210 and the authentication service unit 120 is “application authentication”, “user authentication”, or “access token authentication” is determined in advance for each client application 210, for example. Has been. Therefore, the client application 210 transmits to the authentication service unit 120, for example, a processing flow execution request including designation of an authentication method. However, for example, in the service use screen 2100 shown in FIG. 10, the user may be able to select which authentication method to use.

  As described above, in the information processing system 1 according to the present embodiment, before the service providing system 10 provides a service to the device 20, authentication is performed with the device 20 by various authentication methods. That is, in the information processing system 1 according to the present embodiment, the client application 210 installed in the device 20 authenticates the client application 210 before executing the series of processes. As a result, the service providing system 10 according to the present embodiment can provide services only to legitimate users (the client application 210 installed in the device 20 or the user of the device 20).

  Hereinafter, details of the process flow execution process (the process of step S912 in FIG. 9) will be described with reference to FIG. 11. FIG. 11 is a sequence diagram showing an example of execution processing of the processing flow according to the present embodiment.

  Upon receiving the processing flow execution request, the flow execution unit 301 transmits a job information registration request to the job information management unit 401 (step S1101). Here, when the authentication method between the client application 210 and the authentication service unit 120 is “application authentication”, the job information registration request includes the application ID and the flow ID. On the other hand, when the authentication method between the client application 210 and the authentication service unit 120 is “user authentication” or “access token authentication”, the job information registration request includes the user ID and the flow ID. ..

  Upon receiving the job information registration request, the job information management unit 401 creates job information and stores it in the job information storage unit 150 (step S1102). Then, the job information management unit 401 returns the registration result to the flow execution unit 301. As a result, the job information is registered in the service providing system 10. The registration result returned from the job information management unit 401 includes the job ID.

  Here, the job information stored in the job information storage unit 150 will be described with reference to FIG. FIG. 12 is a diagram showing an example of job information.

  As shown in FIG. 12, the job information has a job ID, an application name, a flow ID, a creation date, a state, an application ID, and a user ID.

  The job ID is identification information that identifies a job. The application name is the name of the application (client application 210 or application information 1000) corresponding to the application ID. The flow ID is the flow ID included in the job information registration request. The creation date is the date when the job information was created.

  The status is the status of the job. The state includes, for example, “accepted” indicating that the job is not yet executed and “processing” indicating that the job is being executed. Further, the status includes, for example, "error" indicating that an error has occurred during the execution of the job, "completed" indicating that the execution of the job has completed normally, and the like. The job information management unit 401 creates job information with the status being "accepted".

  The application ID is the application ID included in the job information registration request. When the job information registration request does not include the application ID (that is, when the authentication method between the client application 210 and the authentication service unit 120 is “application authentication”), the application ID is not set.

  The user ID is the user ID included in the job information registration request. When the user information registration request does not include the user ID (that is, when the authentication method between the client application 210 and the authentication service unit 120 is “user authentication” or “access token authentication”), the user The ID is not set.

  In this way, the job information management unit 401 creates job information including a job ID, application name, flow ID, creation date, state, application ID, user ID, and the like. Then, the job information management unit 401 stores the created job information in the job information storage unit 150.

  Next, the flow execution unit 301 transmits a process flow information acquisition request to the application management unit 111 (step S1103). The acquisition request for the process flow information includes the flow ID.

  Upon receiving the process flow information acquisition request, the application management unit 111 acquires the process flow information 1100 of the flow ID included in the acquisition request from the application information storage unit 140 (step S1104). Then, the application management unit 111 returns the process flow information 1100 acquired from the application information storage unit 140 to the flow execution unit 301. Here, in the following description, it is assumed that the application management unit 111 returns the process flow information 1100 shown in FIG. 8 to the flow execution unit 301.

  Next, the flow execution unit 301 transmits a component acquisition request to the component management unit 302 based on the processing flow information 1100 returned from the application management unit 111 (step S1105). That is, the flow execution unit 301 transmits to the component management unit 302 a component acquisition request that includes “ocr: ocr_process” defined in the process definition 1102 of the process flow information 1100 illustrated in FIG.

  Upon receiving the component acquisition request, the component management unit 302 generates an OCR component 1310 corresponding to “ocr: ocr_process” included in the acquisition request (step S1106). The OCR component 1310 can be generated using the component common I / F 1300.

  Then, the component management unit 302 returns the generated OCR component 1310 to the flow execution unit 301. That is, the component management unit 302 returns, for example, the address on the memory (for example, the RAM 14) in which the OCR component 1310 is expanded to the flow execution unit 301.

  When the OCR component 1310 is returned, the flow execution unit 301 transmits a component process execution request to the OCR component 1310 (step S1107). The component process execution request includes data and parameters.

  Here, in step S1107, the data is an electronic file (scan image file included in the execution request of the processing flow) received from the authentication service unit 120 as a data type “InputStream”. That is, the flow execution unit 301 transmits the scan image file included in the processing flow execution request to the OCR component 1310 simply as “data” (without being aware of the data type). Hereinafter, an electronic file or the like that is not aware of the data type in this way is simply referred to as “data”.

  Since no optional parameter is defined in the process definition 1102, null is designated as the parameter in step S1107.

  The OCR component 1310, upon receiving the process execution request of the component, transmits the type conversion request to the type conversion management unit 304 (step S1108). The type conversion request includes the data and the designation of “LocalFilePath” indicating the data type that can be handled by the OCR component 1310.

  Upon receiving the type conversion request, the type conversion management unit 304 checks whether or not the data type of the data included in the type conversion request matches the designated data type (step S1109).

  Here, the data type of the data included in the type conversion request is “InputStream”, while the designated data type is “LocalFilePath”. Therefore, the type conversion management unit 304 determines that the data type of the data included in the type conversion request does not match the designated data type.

  Then, the type conversion management unit 304 refers to the type conversion information table 3000 to specify the type conversion for converting the data type “InputStream” into “LocalFilePath” (here, the first type conversion 1410 is specified). Be done.). Then, the type conversion management unit 304 generates the identified first type conversion 1410 (step S1110). The first type conversion 1410 can be generated using the type conversion common I / F 1400.

  Next, the type conversion management unit 304 sends a request to execute the type conversion process to the first type conversion 1410 (step S1111). The execution request includes data.

  Upon receiving the type conversion execution request, the first type conversion 1410 performs a type conversion process for converting the data type of the data included in the execution request from "InputStream" to "LocalFilePath" (step S1112). Then, the first type conversion 1410 returns the data whose data type has been converted to the type conversion management unit 304.

  Upon receiving the data from the first type conversion 1410, the type conversion management unit 304 transmits the data to the OCR component 1310 (step S1113).

  Upon receiving the data from the type conversion management unit 304, the OCR component 1310 executes processing on the data (step S1114). That is, the OCR component 1310 causes the OCR processing unit 131 of the document service unit 130 to perform OCR processing of the scan image file indicated by the data (data type “LocalFilePath”).

  Then, the OCR component 1310 returns data indicating the processing result to the flow execution unit 301. The data returned here is data (data type “LocalFilePath”) indicating the scan image file subjected to the OCR processing by the OCR component 1310.

  Next, the flow execution unit 301 transmits a component acquisition request to the component management unit 302 based on the processing flow information 1100 (step S1115). That is, the flow execution unit 301 transmits to the component management unit 302 an acquisition request for a component that includes “mail: send” defined in the process definition 1103 of the process flow information 1100 illustrated in FIG.

  Upon receiving the component acquisition request, the component management unit 302 generates a mail delivery component 1320 corresponding to "mail: send" included in the acquisition request (step S1116). The mail delivery component 1320 can be generated using the component common I / F 1300.

  Then, the component management unit 302 returns the generated mail delivery component 1320 to the flow execution unit 301. That is, the component management unit 302 returns, for example, the address on the memory (for example, the RAM 14) where the mail delivery component 1320 is expanded to the flow execution unit 301.

  When the mail delivery component 1320 is returned, the flow execution unit 301 sends a process execution request for the component to the mail delivery component 1320 (step S1117). The component process execution request includes data and parameters.

  Here, in step S1117, the parameters include the option parameter “mail_address = null & filename = null” of the process definition 1103 and the user designation information.

  Upon receiving the component process execution request, the mail delivery component 1320 sends a type conversion request to the type conversion management unit 304 (step S1118). The type conversion request includes the data and the designation of “LocalFilePath” indicating the data type that the mail delivery component 1320 can handle.

  Upon receiving the type conversion request, the type conversion management unit 304 checks whether or not the data type of the data included in the type conversion request matches the designated data type (step S1119).

  Here, the data type of the data included in the type conversion request is “LocalFilePath”, and the designated data type is also “LocalFilePath”. Therefore, the type conversion management unit 304 determines that the data type of the data included in the type conversion request matches the designated data type.

  Then, the type conversion management unit 304 transmits the data included in the type conversion request to the mail delivery component 1320 (step S1120). Thus, in the data type check (process of step S1118), when it is determined that the data type of the data matches the designated data type, the type conversion management unit 304 generates the type conversion. Not performed.

  Upon receiving the data from the type conversion management unit 304, the mail delivery component 1320 executes processing on the data based on the parameter (step S1121). That is, the mail delivery component 1320 causes the mail delivery unit 132 of the document service unit 130 to deliver the electronic file indicated by the data by mail based on the parameter.

  More specifically, the mail delivery component 1320 first defines the user specification information in the option parameter included in the parameter, and sets “mail_address=hoge@hogehoge.co.jp & filename = test.pdf”. Next, the mail delivery component 1320 causes the mail delivery unit 132 to attach a mail attached with an electronic file in which the file name of the electronic file (that is, the scanned image file after OCR processing) indicated by the data is “test.pdf”. To create. Finally, the mail delivery component 1320 uses the mail delivery unit 132 to deliver (send) the created mail to “hoge@hogehoge.co.jp”.

  Then, the mail delivery component 1320 returns data indicating the processing result to the flow execution unit 301. The data returned here is, for example, information indicating that the mail has been normally delivered by the mail delivery component 1320.

  Upon receiving the data from the mail delivery component 1320, the flow execution unit 201 sends a job information update request to the job information management unit 401 (step S1122). The job information update request includes the job ID returned in step S1102 described above.

  Upon receiving the job information update request, the job information management unit 401 updates the job information of the job ID included in the update request among the job information stored in the job information storage unit 150 (step S1123). That is, the job information management unit 401 updates the status included in the job information of the job ID to “completed”. This manages the normal completion of job execution.

  As described above, the service providing system 10 according to the present embodiment executes a series of processes (process flow) by performing the process by each component based on the process flow information 1100. As a result, the service providing system 10 according to the present embodiment can provide the service realized by the series of processes.

  Note that, for example, when an error or the like occurs during execution of a series of processes, the flow execution unit 301 sends a job information update request to the job information management unit 401, and updates the job information status to “error”. To do.

  Hereinafter, a case where the client application 210 refers to job information will be described. By referring to the job information, the client application 210 can analyze the cause of an error, for example.

  First, a process of registering an application (other client application or application information 1000) that can refer to job information will be described with reference to FIG. FIG. 13 is a sequence diagram illustrating an example of registration processing of a referenceable application.

  First, the client application 210 transmits a referenceable application registration request to the authentication service unit 120 (step S1301). Such a registration request can be transmitted, for example, when the user performs a registration operation of the referenceable application.

  Note that the referenceable application registration request includes the application ID of the client application 210, the application ID of the application that can refer to the job information (referenceable application ID), the tenant ID, the user ID, and the password. Is included.

  Upon receiving the reference request registration request, the authentication service unit 120 authenticates the user based on the tenant ID, the user ID, and the password included in the registration request (step S1302). That is, the authentication service unit 120 determines whether the set of tenant ID, user ID, and password included in the registration request matches a predetermined set of tenant ID, user ID, and password. Then, perform user authentication.

  Then, when the user authentication is successful, the authentication service unit 120 transmits a referenceable application registration request to the application management unit 111 (step S1303). Note that the referenceable application registration request includes the application ID of the client application 210 and the referenceable application ID.

  Upon receiving the referenceable application registration request, the application management unit 111 creates reference information in which the application ID included in the registration request and the referenceable ID are associated with each other, and stores the reference information in the reference information storage unit 160 (step S1304). .. Then, the application management unit 111 returns the registration result to the client application 210. Thereby, the reference information is registered in the service providing system 10.

  Here, the reference information stored in the reference information storage unit 160 will be described with reference to FIG. FIG. 14 is a diagram showing an example of reference information.

  As shown in FIG. 14, the reference information has an application ID and a referenceable application ID. The application ID is the application ID of the application (the client application 210 or the application information 1000) that refers to the job information. The referable application ID is an application ID of another application (the client application 210 or the application information 1000) that can refer to the job information.

  In this way, the reference information stored in the reference information storage unit 160 is associated with the application ID and the application IDs of other applications with which the application having the application ID can refer to the job information. Accordingly, as described later, the client application 210 can perform access control when referring to the job information of the other client application 210 or the application information 1000.

  Next, a process when the client application 210, the application information 1000, and the like refer to the job information will be described. First, processing when the client application 210 whose authentication method with the authentication service unit 120 is “application authentication” refers to job information will be described with reference to FIG. FIG. 15 is a sequence diagram showing an example of job information reference processing.

  First, the client application 210 transmits a job information reference request to the authentication service unit 120 (step S1501). Such a reference request can be made, for example, by the user pressing the reference button 3102 after inputting the job ID in the job ID input field 3101 on the reference screen 3100 of the job information shown in FIG.

  The job information reference request includes the job ID input to the job ID input field 3101 and the client secret.

  Upon receiving the job information reference request, the authentication service unit 120 performs application authentication based on the client ID and the client secret included in the reference request (step S1502). That is, the authentication service unit 120 performs application authentication by determining whether the set of client ID and client secret included in the reference request matches a predetermined set of client ID and client secret. ..

  Then, when the application authentication is successful, the authentication service unit 120 sends a reference request for job information to the access control unit 402 (step S1503). The job information reference request includes the job ID and the application ID.

  If the application authentication fails in step S1502 described above, the authentication service unit 120 returns, for example, a notification indicating that the application authentication has failed to the client application 210.

  Upon receiving the job information reference request, the access control unit 402 transmits a job information acquisition request to the job information management unit 401 (step S1504). The job information acquisition request includes the job ID.

  Upon receiving the job information acquisition request, the job information management unit 401 acquires the job information of the job ID included in the acquisition request from the job information storage unit 150 (step S1505). For example, when the job ID included in the job information acquisition request is “job 4”, the job information management unit 401 acquires the job information of the job ID “job 4” from the job information storage unit 150. When the job information acquisition request includes a plurality of job IDs, the job information management unit 401 acquires a plurality of job information from the job information storage unit 150.

  Then, the job information management unit 401 returns the acquired job information to the access control unit 402.

  Next, the access control unit 402 checks the access right (step S1506). That is, the access control unit 402 determines whether or not the application ID included in the job information reference request and the application ID included in the job information acquired in step S1502 described above match.

  Then, when the access control unit 402 determines that the application ID included in the job information reference request and the application ID included in the job information acquired in step S1502 described above match, the job information is sent to the client application 210. Reply.

  On the other hand, when the access control unit 402 determines that these application IDs do not match, the access control unit 402 transmits a referenceable application ID acquisition request to the application management unit 111 (step S1508). The referenceable application ID acquisition request includes the application ID included in the job information reference request.

  When a plurality of pieces of job information are acquired in step S1502, if the job information determined to have the same application ID in step S1506 among these pieces of job information is processed in step S1508 and subsequent steps, good.

  Next, when receiving the referenceable application ID acquisition request, the application management unit 111 acquires the reference information of the application ID included in the acquisition request (step S1508). Then, the application management unit 111 returns the referenceable application ID included in the acquired reference information to the access control unit 402.

  Next, the access control unit 402 checks the access right (step S1509). That is, the access control unit 402 determines whether or not the application ID included in the job information acquired in step S1502 described above and at least one referenceable application ID of the referenceable application IDs match.

  Then, when the access control unit 402 determines that the application ID matches at least one of the referenceable application IDs of the referenceable application IDs, the access control unit 402 returns the job information to the client application 210.

  On the other hand, when the access control unit 402 determines that the application ID does not match all the referenceable application IDs, the access control unit 402 returns a notification indicating that the reference of the job information is not permitted to the client application 210. Therefore, in this case, the client application 210 cannot refer to the job information.

  When the job information is returned from the access control unit 402, the client application 210 displays the job information in the job information column 3103 of the job information reference screen 3100 shown in FIG. 16 (step S1510). Accordingly, the client application 210 can display the job information including the application ID of the client application 210 and the job information including the referenceable application ID. Therefore, by referring to the job information displayed by the client application 210, the user of the device 20 can perform, for example, error cause analysis of a job in which an error has occurred.

  As described above, in the information processing system 1 according to the present embodiment, when the client application 210 installed in the device 20 refers to job information, it is determined whether or not the client application 210 has the authority to refer to the job information. As a result, in the information processing system 1 according to the present embodiment, the service providing system 10 can cause the client application 210 to display only the job information having the reference authority.

  Next, a process when the client application 210 whose authentication method with the authentication service unit 120 is “user authentication” refers to job information will be described with reference to FIG. FIG. 17 is a sequence diagram showing another example (No. 1) of the job information reference processing.

  First, the client application 210 transmits a job information reference request to the authentication service unit 120 (step S1701). The job information reference request includes the job ID, the tenant ID, the user ID, and the password. The tenant ID, the user ID, and the password may be input by the user on the job information reference screen 3100 shown in FIG. 16, for example.

  Upon receiving the job information reference request, the authentication service unit 120 performs user authentication based on the tenant ID, the user ID, and the password included in the reference request (step S1702). That is, the authentication service unit 120 determines whether the set of tenant ID, user ID, and password included in the reference request matches a predetermined set of tenant ID, user ID, and password. Then, perform user authentication.

  Then, if the user authentication is successful, the authentication service unit 120 sends a reference request for job information to the access control unit 402 (step S1703). The job information reference request includes the job ID and the user ID.

  When the user authentication fails in step S1702 described above, the authentication service unit 120 returns, for example, a notification indicating that the user authentication has failed to the client application 210.

  Upon receiving the job information reference request, the access control unit 402 transmits a job information acquisition request to the job information management unit 401 (step S1704). The job information acquisition request includes the job ID.

  Upon receiving the job information acquisition request, the job information management unit 401 acquires the job information of the job ID included in the acquisition request from the job information storage unit 150 (step S1705). Then, the job information management unit 401 returns the acquired job information to the access control unit 402.

  Next, the access control unit 402 checks the access right (step S1706). That is, the access control unit 402 determines whether the user ID included in the job information reference request and the user ID included in the job information acquired in step S1702 described above match.

  If the access control unit 402 determines that the user ID included in the job information reference request and the user ID included in the job information acquired in step S1702 described above match, the job information is sent to the client application 210. Reply.

  On the other hand, when the access control unit 402 determines that the user IDs do not match, the access control unit 402 returns a notification indicating that the reference of the job information is not permitted, to the client application 210. Therefore, in this case, the client application 210 cannot refer to the job information.

  When the job information is returned from the access control unit 402, the client application 210 displays the job information (step S1707). Thereby, the client application 210 can display the job information including the user ID of the user of the device 20.

  Note that, although the case where the authentication method between the client application 210 and the authentication service unit 120 is “user authentication” has been described with reference to FIG. 17, the authentication method is “access token authentication” after step S1703. Can be similarly applied. In this case, the job information reference request in step S1701 includes the job ID and the access token, and the access token authentication is performed in step S1702, which is different from FIG.

  Here, as shown in FIG. 12, the job information stored in the job information storage unit 150 includes the user ID, but instead of the user ID (or in addition to the user ID), the tenant ID May be included. That is, for example, as shown in FIG. 18, the job information stored in the job information storage unit 150 may include a tenant ID instead of the user ID.

  In this case, a process when the client application 210 whose authentication method with the authentication service unit 120 is “user authentication” refers to the job information will be described with reference to FIG. FIG. 19 is a sequence diagram showing another example (No. 2) of the job information reference processing.

  First, the client application 210 transmits a job information reference request to the authentication service unit 120 (step S1901). The job information reference request includes the job ID, the tenant ID, the user ID, and the password. The tenant ID, the user ID, and the password may be input by the user on the job information reference screen 3100 shown in FIG. 16, for example.

  Upon receipt of the job information reference request, the authentication service unit 120 performs user authentication based on the tenant ID, user ID, and password included in the reference request (step S1902). That is, the authentication service unit 120 determines whether the set of tenant ID, user ID, and password included in the reference request matches a predetermined set of tenant ID, user ID, and password. Then, perform user authentication.

  Then, when the user authentication is successful, the authentication service unit 120 sends a reference request for job information to the access control unit 402 (step S1903). The job information reference request includes the job ID and the tenant ID.

  When the user authentication fails in step S1702 described above, the authentication service unit 120 returns, for example, a notification indicating that the user authentication has failed to the client application 210.

  Upon receiving the job information reference request, the access control unit 402 transmits a job information acquisition request to the job information management unit 401 (step S1904). The job information acquisition request includes the job ID.

  Upon receiving the job information acquisition request, the job information management unit 401 acquires the job information of the job ID included in the acquisition request from the job information storage unit 150 (step S1905). Then, the job information management unit 401 returns the acquired job information to the access control unit 402.

  Next, the access control unit 402 checks the access right (step S1906). That is, the access control unit 402 determines whether the tenant ID included in the job information reference request matches the tenant ID included in the job information acquired in step S1902.

  Then, when the access control unit 402 determines that the tenant ID included in the job information reference request and the tenant ID included in the job information acquired in step S1902 described above match, the job information is sent to the client application 210. Reply.

  On the other hand, when the access control unit 402 determines that these tenant IDs do not match, the access control unit 402 returns a notification indicating that the reference of the job information is not permitted to the client application 210. Therefore, in this case, the client application 210 cannot refer to the job information.

  When the job information is returned from the access control unit 402, the client application 210 displays the job information (step S1907). Thereby, the client application 210 can display the job information including the tenant ID of the user of the device 20.

<Summary>
As described above, the information processing system 1 according to the present embodiment authenticates the client application 210 when the client application 210 executes a series of processes for realizing a service. Moreover, in the information processing system 1 according to the present embodiment, it is possible to perform authentication by various authentication methods according to the client application 210.

  Therefore, in the information processing system 1 according to the present embodiment, only the legitimate user (the user of the client application 210 or the device 20) can use the service provided by the service providing system 10.

  Further, in the information processing system 1 according to the present embodiment, the client application 210 or the like can refer to job information of a series of processes executed by another application (other client application 210, application information 1000, or the like). . Moreover, in the information processing system 1 according to the present embodiment, access control is performed by determining whether the client application 210 or the like has the authority to reference the job information. As a result, in the information processing system 1 according to the present embodiment, it is possible to permit the reference of the job information only to the authorized user (the client application 210, the application information 1000, etc.).

  The present invention is not limited to the above specifically disclosed embodiments, and various modifications and changes can be made without departing from the scope of the claims.

DESCRIPTION OF SYMBOLS 1 Information processing system 10 Service providing system 20 Equipment 110 Input / output service processing unit 111 Application management unit 112 Logic processing unit 113 Job management unit 120 Authentication service unit 130 Document service unit 140 Application information storage unit 150 Job information storage unit 160 Reference information storage Part 210 Client application 301 Flow execution part 302 Component management part 303 Component group 304 Type conversion management part 305 Type conversion group 401 Job information management part 402 Access control part

Japanese Patent No. 4039191

Claims (9)

An information processing system including a plurality of programs, each of which includes one or more information processing devices and executes a predetermined process,
Flow information in which, for each series of processing using electronic data, program identification information for identifying one or more programs for executing respective processing of the series of processing and execution order of the one or more programs are defined. And a storage unit that stores the flow information in association with the flow identification information for identifying the flow information,
A first device including information about electronic data, the flow identification information, and authentication information for authenticating the one device from one device of one or more devices connected to the information processing system. First receiving means for receiving the request;
Authentication means for authenticating the one device based on the authentication information included in the first request received by the first receiving means;
When the authentication by the authentication unit is successful, the flow information stored in the storage unit is associated with the flow identification information included in the first request received by the first receiving unit, and is associated with the flow identification information. Acquisition means for acquiring the flow information stored in the storage means,
By executing each of the programs identified by the program identification information defined in the flow information acquired by the acquisition means according to the execution order defined in the flow information, the first reception means Executing means for executing the series of processes using electronic data based on information about the electronic data included in the first request received by
Information processing system having. The authentication information is
The application identification information, which is installed in the one device and identifies the application program that transmits the first request, and a first password for the application identification information,
The authentication means is
The information processing system according to claim 1, wherein authentication of the one device is performed based on the application identification information included in the authentication information and the first password. The authentication information is
Including user identification information for identifying a user who uses the one device, group identification information for identifying a group to which the user belongs, and a second password for the user identification information and the group identification information,
The authentication means is
The information processing system according to claim 1, wherein authentication of the one device is performed based on the user identification information included in the authentication information, the group identification information, and the second password. The authentication information is
Including an access token by OAuth,
The authentication means is
The information processing system according to claim 1, wherein the one device is authenticated based on an access token included in the authentication information. A job information storage unit that stores job information including the job identification information of the job indicating the series of processes and the execution state of the job;
Second receiving means for receiving a second request including the job identification information and the authentication information from one of the one or more devices connected to the information processing system;
Job information acquisition means for acquiring the job information of the job identification information included in the second request received by the second reception means;
Transmission means for transmitting the job information acquired by the job information acquisition means to the one device that is the request source of the second request,
The authentication means is
Authenticating the one device based on the authentication information included in the second request received by the second receiving means;
The job information acquisition means,
The job information of the job identification information included in the second request received by the second receiving unit is acquired when the authentication by the authenticating unit is successful. Information processing system according to item. The job information further includes first application identification information for identifying an application program that has executed the series of processes among application programs installed in one or more devices connected to the information processing system. Included,
The second receiving means is
Second application identification information for identifying the job identification information, the authentication information, and an application program installed in the one device from one of the one or more devices connected to the information processing system Receiving a second request containing
The transmitting means is
When the first application identification information included in the job information acquired by the job information acquisition unit and the second application identification information included in the second request match, the job information, The information processing system according to claim 5, wherein the information is transmitted to the one device that is a request source of the second request. A reference for storing reference information including application identification information for identifying an application program installed in the device and referenceable application identification information for identifying another application program with which the application program can refer to the job information. Has information storage means,
The transmitting means is
When the first application identification information included in the job information acquired by the job information acquisition unit and the second application identification information included in the second request match, or the first application identification information And the referenceable application identification information included in the reference information corresponding to the second application identification information are matched, the job information is set to the one of the request source of the second request. The information processing system according to claim 6, which is transmitted to the device. An information processing apparatus having a plurality of programs that respectively execute predetermined processes,
Flow information in which, for each series of processing using electronic data, program identification information for identifying one or more programs for executing respective processing of the series of processing and execution order of the one or more programs are defined. And a storage unit that stores the flow information in association with the flow identification information for identifying the flow information,
A first device including information related to electronic data, the flow identification information, and authentication information for authenticating the one device from one of the one or more devices connected to the information processing apparatus. First receiving means for receiving the request;
Authentication means for authenticating the one device based on the authentication information included in the first request received by the first receiving means;
When the authentication by the authentication unit is successful, the flow information stored in the storage unit is associated with the flow identification information included in the first request received by the first receiving unit, and is associated with the flow identification information. Acquisition means for acquiring the flow information stored in the storage means,
By executing each of the programs identified by the program identification information defined in the flow information acquired by the acquisition means according to the execution order defined in the flow information, the first reception means Executing means for executing the series of processes using electronic data based on information about the electronic data included in the first request received by
Information processing device having a. An information processing method used in an information processing system including a plurality of programs each including one or more information processing devices, the programs each executing a predetermined process, wherein each of the series of processes using electronic data Program identification information that identifies one or more programs that execute respective processes and flow information that defines the execution order of one or more programs are stored in association with the flow identification information that identifies the flow information. In an information processing system having storage means,
A first device including information about electronic data, the flow identification information, and authentication information for authenticating the one device from one device of one or more devices connected to the information processing system. A first receiving procedure for receiving the request,
An authentication procedure for authenticating the one device based on the authentication information included in the first request received by the first reception procedure;
When the authentication by the authentication procedure is successful, the flow information stored in the storage means is associated with the flow identification information included in the first request received by the first receiving procedure, An acquisition procedure for acquiring the flow information stored in the storage means,
By executing each of the programs identified by the program identification information defined in the flow information acquired by the acquisition procedure according to the execution order defined in the flow information, the first reception procedure An execution procedure for executing the series of processes using electronic data based on information about the electronic data included in the first request received by
Information processing method having.

Images