JP6701405B2 - Information processing equipment - Google Patents

Description

  The present invention relates to an information processing device such as a multifunction peripheral.

  2. Description of the Related Art In recent image processing apparatuses such as multifunction peripherals, there are many apparatuses configured to perform user authentication and restrict access to jobs and resources according to a logged-in user. In such an image processing apparatus, when a certain user performs a certain operation during login and the execution authority for the operation is insufficient, an authentication screen is displayed and a different authorized user is often prompted to log in. ..

  In such user session management, all the information related to the user (for example, the user profile such as the user name and the user's e-mail address, and the user authority) is completely switched at the time of logging in by a different user (hereinafter, referred to as “user profile”). , Background Art Example 1). In this case, the user who has previously logged in is configured to be automatically logged out immediately before logging in as a different user (for example, see Patent Document 1).

  As for other user session management, of the user information that has already logged in, the user profile such as the user name and the email address of the user is not switched, and only the user authority is re-evaluated (hereinafter, background art example 2). Is. As a re-evaluation method in this case, the authority of the user who logged in later is often added to the authority of the user who logged in first.

JP, 11-25040, A

  FIG. 16 is a timing chart showing the user session management of Background Art Example 1 above.

  Item 4001 in the figure represents a user profile such as a user name and a user's email address that are actually applied in the user session. Item 4002 represents user authority. Item 4003 represents login user information stored in association with the user session by the image forming apparatus in order to determine the contents of items 4001 and 4002. FIG. 17 is a table format diagram showing the user profiles and user authority settings of the users A and B used in FIG.

  According to the background art example 1, at time t401, user information is entered on the login screen and the user logs in as user A. The user A is permitted to perform color copying according to the setting information shown in FIG. 17, and can execute color copying.

  Next, at time t402, the user tries to execute the network management function, but since the user A is prohibited from performing the network management function, the user A is required to authenticate. By inputting the authentication information of user B here, user A logs in as user B as an administrator. At this point, the user profile 4001 is changed to the user B authority like 4021 and the user authority 4002 is changed to the user B authority like 4022.

  Next, at the time t403, when trying to execute the color copy again, since the user B is prohibited from performing the color copy, the authentication by the authorized user is required, and the authentication information of the user A needs to be input again. Be forced.

  As described above, the background art example 1 employs a configuration in which a logged-in user is logged out when a new user logs in. In this configuration, since all the information related to the user is switched, there is a case where the function that was available as a certain user becomes unavailable at the time of logging in as a different user. The user must log in again to regain the functionality that was no longer available. As a result, there is a problem in that it is inconvenient to use because login is required many times.

  FIG. 18 is a timing chart showing user session management of Background Art Example 2.

  Reference numerals 6001 to 6003 in the figure have the same meanings as reference numerals 4001 to 4003 in FIG. In the example of FIG. 18, the user profiles of the user A and the user B and the user authority setting are the same as those of the example of FIG.

  At time t601, user information is entered on the login screen to log in as user A. The user A is allowed to perform color copying as a usable function according to the setting information in the example of FIG. 17, and can execute color copying.

  At the next time t602, the user tries to execute the network management function, but since the user A is prohibited from the network management function, the authorized user is required to authenticate. By inputting the authentication information of user B here, user A logs in as user B as an administrator. At this point, the user profile 6001 remains the user A (see 6021 in FIG. 18), but the user authority 6002 is changed to all the items permitted to the user A and the user B (6022 in FIG. 18). reference).

  At the next time t603, when the color copy is to be executed again, since the authority of the user A is valid, the color copy can be executed without displaying the authentication screen again.

  As described above, in the background art example 2, if the user who has logged in first or the user who logged in later is permitted, the authority is re-evaluated to be permitted. For this reason, the function that was used as a certain user will not be disabled even if logged in as a different user, and the convenience will be improved.

  However, it is intuitively possible for the user to determine whether the user profile such as the user name and the user's email address remains the same as the user profile of the previously logged in user or is switched to the user profile of the later logged in user. Hateful.

  For example, it is assumed that there is an image processing apparatus that has an electronic mail transmission function and automatically sets the mail address of the login user to the sender address of the transmitted mail. When it is necessary to change a certain management setting item while logged in to the image processing apparatus as the user A, the user A who is the administrator B re-logs in and changes the setting, and then sends an e-mail. It is difficult to know which user B is automatically set. As a problem similar to this, user data that is charged as a print job of an unintended user, the sender name of the fax becomes an unintended name, and personal data such as routine tasks and address books that are not intended For example, refer to it.

  The present invention has been made in view of the above conventional problems, and an object thereof is to provide the following information processing apparatus, control method thereof, and program. That is, in an apparatus configured so that access to jobs and resources can be restricted according to the logged-in user, the number of times the user inputs authentication information is reduced, and convenience is improved.

  In addition, the user can easily determine which of the logged-in users the user profile is used to execute the function.

In order to achieve the above object, the information processing apparatus according to claim 1 is an information processing apparatus, and a control unit that performs login processing to the information processing apparatus for an unspecified user having a first usage right. If, for use in the state in which the user logs into the information processing apparatus of the first use authorized unspecified, the first function and the first usage rights are allowed to use in the usage rights display control means for but is displayed on the display means a menu screen for selecting a function from a plurality of functions including the unauthorized function, the selected function in the previous texture menu screen, the first use of when used in authorization is permitted, and a execution control means for permitting the execution of the selected function, the display control means, for the selected function in the previous texture menu screen, the first If the use of one of the usage rights is not permitted to display an authentication screen for user authentication, the execution control means corresponds to the authentication information input through the authentication screen user Of the selected function is permitted to be used with the second usage right of the user who has succeeded in the authentication processing , the selected function is selected. allowed to perform the function, before a case authentication processing Kiyu over tHE succeeds, and, for the selected function, when used in the second usage rights is not permitted, limit the execution of the selected function, wherein said at least one function of the plurality of functions, the first use is permitted for use in authority, for use in the second usage rights are allowed It is characterized by not being.

  According to the present invention, it is possible to reduce the number of times of user authentication information input work and improve convenience. In addition, the user can easily determine which user, out of the multiple login users, performs the predetermined function based on the user information.

1 is a schematic diagram showing a configuration of a system in which an image processing device according to an embodiment is used. It is a block diagram which shows the hardware constitutions of the image processing apparatus in FIG. It is a block diagram which shows the software structure of the image processing apparatus in FIG. 6 is a timing chart showing user session management according to the first embodiment. It is a figure which shows a login screen. It is a figure which shows the menu screen used in 1st Embodiment. It is a figure which shows the login screen displayed at the time of insufficient authority used by 1st Embodiment. It is a figure which shows an execution user selection screen. 6 is a flowchart showing characteristic processing according to the first embodiment. 9 is a timing chart showing user session management according to the second embodiment. FIG. 11 is a table format diagram showing user profile and user authority settings used in FIG. 10. It is a menu screen used in the second embodiment. It is a figure which shows the login screen displayed at the time of authority shortage used in 2nd Embodiment. It is a figure which shows the error screen used in 2nd Embodiment. It is a flowchart which shows the process which concerns on 2nd Embodiment. 9 is a timing chart showing user session management of Background Art Example 1. FIG. 17 is a table format diagram showing user profile and user authority settings used in FIG. 16. 9 is a timing chart showing user session management of Background Art Example 2.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

[First Embodiment]
<System configuration>
FIG. 1 is a schematic diagram showing the configuration of a system in which an image processing apparatus according to an embodiment of the present invention is used.

  This system includes a server PC (personal computer) 1000, a user information server device 1001, a ticket issuing server device 1002, a client PC 1003, and an image processing device 1004 (information processing device) connected on a network. There is. This system is a print management system that restricts access to users who use the device and restricts job execution such as the number of printed sheets. The user here includes individual users, departments, organizations and the like.

  A system administrator utility runs on the server PC 1000 to set and manage the system. In particular, it is possible to set the function restriction information (hereinafter, ACE) of the user information server device 1001. The user information server device 1001 includes user information such as a user ID and a password, and a function restriction information list (hereinafter ACL), which is a set of ACEs indicating which functions are permitted to be used for each user or each device in the system. ) Is held.

  The ticket issuing server device 1002 issues a ticket in which information about usable functions is described based on the ACL stored in the user information server device 1001. It is assumed that the client PC 1003 operates a printer driver and needs to log in to clarify which user is using the client PC when using the client PC.

  The image processing apparatus 1004 is, for example, a multi-function copying machine. The image processing apparatus 1004 has not only a function of copying a paper original, but also a function of printing print data sent from an external printer driver, reading a paper original, and transmitting the image data to an external file server or an email address. It also has a function (SEND function). Further, it has a function of transmitting data to another image processing apparatus and printing it by the destination image processing apparatus (remote copy function, facsimile function).

  ACT is an abbreviation for Access Control Token. The ACT 1005 is data that describes information about functions that the user can execute in the image processing apparatus 1004 and function restriction information for the image processing apparatus 1004, and has a role of transmitting the information from the server to the device. ..

  The server PC 1000, the user information server device 1001, the ticket issuing server device 1002, and the client PC 1003 described above are connected by an Ethernet (registered trademark) (not shown), but this is merely an example of a system. .. The server PC 1000 other than the image processing apparatus 1004, the user information server apparatus 1001, the ticket issuing server apparatus 1002, and the client PC 1003 may all be configured by the same computer. Further, the server PC 1000, the user information server device 1001, the ticket issuing server device 1002, and the client PC 1003 may be mounted on the image processing device 1004, and may be configured by only the image processing device 1004.

<Hardware configuration of image processing device>
FIG. 2 is a block diagram showing the hardware configuration of the image processing apparatus 1004 in FIG.

  The controller unit 2000 is connected to a scanner 2070 which is an image input device and a printer 2095 which is an image output device, and is also connected to a network 1008 and a public line 1009 to input/output image information and device information. The CPU 2001 is a controller that controls the entire system. The RAM 2002 is a system work memory for the CPU 2001 to operate and also an image memory for temporarily storing image data. The ROM 2003 is a boot ROM that stores a system boot program. The HDD 2004 is a hard disk drive and stores system software, applications, and image data.

  The operation unit I/F 2006 is an interface unit with the operation unit 2012 having a touch panel, and outputs image data to be displayed on the operation unit 2012 to the operation unit 2012. In addition, the information input by the system user from the operation unit 2012 is transmitted to the CPU 2001. The Network I/F 2010 connects to the network 1008 and inputs/outputs information. The MODEM 2050 is connected to the public line 1009 and inputs/outputs information.

  The SRAM 2100 is a non-volatile recording medium that can operate at high speed. The RTC 2110 is a real-time clock and performs a process of continuously counting the current time even when the controller unit 2000 is not powered on. The above devices are arranged on the system bus 2007.

  The Image Bus I/F 2005 is a bus bridge that connects the system bus 2007 and the image bus 2008 that transfers image data at high speed, and converts the data structure. The image bus 2008 is composed of a PCI bus or IEEE1394. The following devices are arranged on the image bus 2008.

  The RIP2060 is a raster image processor and expands the PDL code into a bitmap image. The device I/F unit 2020 connects the scanner 2070 or printer 2095, which is an image input/output device, to the controller unit 2000, and performs synchronous/asynchronous conversion of image data. The scanner image processing unit 2080 corrects, processes, and edits input image data. The printer image processing unit 2090 performs printer correction, resolution conversion, and the like on print output image data. The image rotation unit 2030 rotates image data. The image compression unit 2040 performs compression/expansion processing.

<Software configuration of image processing device>
FIG. 3 is a block diagram showing the software configuration of the image processing apparatus 1004 in FIG.

  This software is installed in the controller unit 2000 incorporated in the image processing apparatus 1004. Software built in the image processing apparatus 1004 and processed by the controller unit 2000 is implemented as so-called firmware, and is executed by the CPU 2001.

  The real-time OS 3001 is a real-time operating system, and provides various resource management services and frameworks optimized for control of an embedded system for software operating on it.

  The controller platform 3002 includes a file system 3003, job/device control 3004, and counter 3005. The file system 3003 is a mechanism for storing data constructed on a storage device such as the HDD 2004 or the RAM 2002. The job/device control 3004 controls the hardware of the image processing apparatus 1004, and also executes a job that mainly uses the basic functions (print, scan, communication, image conversion, etc.) provided by the hardware of the image processing apparatus 1004. Control. The counter 3005 manages the expiration date for each application and the print and scan counter values stored in the SRAM 2100.

  The system service 3006 is a module for monitoring the operating status of the image processing apparatus 1004 and downloading software and licenses from the software distribution server 1006 via the network 1008.

  The application platform 3007 is middleware that enables the mechanisms of the real-time OS 3001 and the controller platform 3002 to be used by the system application 3008 and the addable application 3012. The system application 3008 includes application management 3009, user session management 3010, and access management 3011.

  The application management 3009 is a management module for installing, uninstalling, starting, and stopping the application 3012. The user session management 3010 is a module that independently manages user information about users who are logged in multiple times for each login. That is, it is a module that manages the user profile and user authority according to the login/logout of the user. The access management 3011 is a security module for permitting or prohibiting access to various jobs and resources based on the user authority of the user session management 3010.

  The application 3012 is application software that realizes various business models by using the function provided by the application platform 3007.

<User Session Management According to First Embodiment>
Next, the user session management of the first embodiment will be described with reference to FIG.

  FIG. 4 is a timing chart showing user session management according to the first embodiment.

  The user session management of this embodiment is executed by the CPU 2001 of the image processing apparatus 1004 as a function of the user session management 3010 and the access management 3011. Reference numerals 7001 to 7003 in FIG. 4 have the same meanings as reference numerals 4001 to 4003 in FIG. 16, respectively. The user profiles of the users A and B and the user authority settings are the same as those shown in FIG.

  When the user inputs user information on the login screen (FIG. 5) at time t701 and logs in as the user A, the menu screen (FIG. 6) is displayed on the operation unit 2012. A login user display area 9005 is arranged below the main menu 9000, and at this time, it is displayed that the function as the user A is being executed. The user A is permitted the color copy function according to the setting information of FIG. 17, and can execute the color copy function 9001.

  After the execution of the color copy function is completed, the user selects return to menu 9002 to return to the main menu 9000 and tries to execute the network management function 9003 at time t702. At this time, the access management 3011 determines that the user A is prohibited from executing the network management function. In response to this, the user session management 3010 displays the login screen (FIG. 7) for requesting user authentication by the authorized user.

  Here, the user inputs the authentication information of the user B to log in again as the user B. At this time, the user session management 3010 changes the user profile 7001 to user B as 7021 and the user authority 7002 to user B as 7022. However, the information related to the user A is not deleted or changed, and is retained in the login user information 7003. At the same time, the display of the login user display area 9005 is changed as follows. That is, it is displayed that the network management function is being executed as the user B among the users A and B who are logged in multiple times.

  After the execution of the network management function is completed, the user selects return to menu 9002 to return to the main menu 9000 and tries to execute the color copy function 9001 again at time t703. At this time, the access management 3011 determines that only the user A is permitted as the logged-in user. In response to this, the user session management 3010, based on the information related to the user A held in the login user information 7003, sets the user profile 7001 to the user A as 7023 and the user authority 7002 as the user 7024. Change to A authority. At the same time, the display of the login user display area 9005 is changed again as follows. That is, it is displayed that the network management function is being executed as the user A among the users A and B who are logged in multiple times.

  After executing the color copy function, the user selects return to menu 9002 to return to the main menu 9000 and tries to execute the fax function 9004 at time t704. At this time, the access management 3011 determines that both logged-in users A and B are permitted. In response to this, the user session management 3010 displays the execution user selection screen (9060 in FIG. 8). It is assumed that the user selects, for example, the user B as the executing user who is the executing person who executes the fax function 9004. In this case, the user session management 3010 performs the following processing based on the information related to the user B held in the login user information 7003. That is, the user profile 7001 is changed to the authority of the user B as 7025, and the user authority 7002 is changed to the authority of the user B as 7026. At the same time, the display of the login user display area 9005 is changed again as follows. That is, it is displayed that the network management function is being executed as the user B among the users A and B who are logged in multiple times.

  On the other hand, when the user A is selected as the user who executes the fax function 9004, neither the contents of the user profile 7001 and the user authority 7002 nor the display of the login user display area 9005 are changed.

<Characteristic processing according to the first embodiment>
Next, characteristic processing according to the first embodiment will be described with reference to FIG.

  FIG. 9 is a flowchart showing the characteristic processing according to the first embodiment. This process is a process of automatically determining execution user information when a function is selected, or determined in accordance with the user selection, and is executed by the CPU 2001 of the image processing apparatus 1004 as a function of the user session management 3010 and the access management 3011.

  When the user selects a function in step S121, the access management 3011 confirms whether or not there are a plurality of logged-in users who are permitted to execute the selected function in the next step S122. If the number of users is not plural, the user session management 3010 automatically selects the only user permitted in step S123 as the executing user. Then, the process proceeds to the next step S126.

  When there are a plurality of logged-in users who are permitted to execute the selected function, the user session management 3010 displays the execution user selection screen (FIG. 8) in step S124. Then, in the subsequent step S125, the result selected by the user is received, and based on this, the execution user of the selected function is determined. Then, the process proceeds to the next step S126.

  From the above, the process of the flow from step S122 to step S123 to step S126 is basically the following process. That is, even if there are a plurality of logged-in users, if there is only one user who is permitted to execute the selected function, the user is not prompted to reselect from the list of logged-in users. The user who automatically executes the selected function is automatically selected.

  Next, the user session management 3010 determines whether or not the executing user determined in the above procedure in step S126 is the same as the current executing user. If they are the same, the process directly proceeds to step S129, and the application 3012 executes the selected function. If they are not the same, the user session management 3010 changes the user profile to the determined execution user in step S127, and further changes the user authority to the determined execution user in step S128. Then, in step S129, the selected function is executed.

<Advantages of First Embodiment>
According to the present embodiment, in a device configured to be able to restrict access to jobs and resources according to a logged-in user, the number of times of user authentication information input work is reduced, and convenience is improved. be able to.

  In addition, a login user display area is provided to display which of the logged-in users is to execute the predetermined function. This allows the user to easily determine which of the logged-in users the user profile is used to perform the function.

[Second Embodiment]
Next, a second embodiment of the present invention will be described.

  The basic configuration of the second embodiment is the same as that described in the first embodiment with reference to FIGS. 1, 2 and 3. Hereinafter, a characteristic part of the second embodiment will be described.

<User session management of the second embodiment>
FIG. 10 is a timing chart showing user session management according to the second embodiment of the present invention.

  The user session management of this embodiment is executed by the CPU 2001 of the image processing apparatus 1004 as a function of the user session management 3010 and the access management 3011. Reference numerals 5001 to 5003 in FIG. 10 have the same meanings as reference numerals 4001 to 4003 in FIG. 16, respectively.

  FIG. 11 is a table format diagram showing the user profiles and user authority settings of the users A and B used in FIG.

  Unlike the example of FIG. 17 used in the first embodiment, the example shown in FIG. 11 has user type information 8001 indicating the user type (type) registered as a user profile. The user types include, for example, anonymous users and real name users. Anonymous users are special users used by an unspecified number of people, and do not have user-specific elements such as user name information regarding user names or email addresses. The real name user is a user who has these user specific elements.

  When the user inputs user information on the login screen (FIG. 5) at time t801 and logs in as an anonymous user, a menu screen (FIG. 12) is displayed on the operation unit 2012. A login user display area 9015 is arranged at the bottom of the menu 9010, and it is displayed that the function is being executed as an anonymous user at this point. The anonymous user is permitted the color copy function according to the setting information of FIG. 11, and can execute the color copy function 9011. The anonymous user may log in automatically when the image processing apparatus 1004 is started.

  After the execution of the color copy function is completed, the user selects return to menu 9012 to return to the main menu 9010, and tries to execute the network management function 9013 at time t802. At this time, the access management 3011 determines that the anonymous user is prohibited from the network management function. Then, the user session management 3010 displays a login screen (9070 in FIG. 13) requesting authentication by an authorized user. Here, the user inputs the authentication information of the user B to log in again as the user B. At this time, the user session management 3010 changes the user profile 5001 to the user B as indicated by 5021 in FIG. 10, and sets the user authority 5002 to the items permitted by the anonymous user and the user B as indicated by 5022 in FIG. Change all to permission. At the same time, the login user display area 9015 is changed so that the execution as the user B is displayed.

  After the execution of the network management function is completed, the user selects return to menu 9012 to return to the main menu 9010, and tries to execute the color copy function again at time t803. At this time, the access management 3011 refers to the user authority 5002 shown in 5022 of FIG. 10 and determines that the color copy function is permitted. As a result, the color copy function can be executed without displaying the authentication screen again, and the login user display area 9015 is also displayed without change, indicating that the user B is being executed.

  After the execution of the color copy function again, the user selects return to menu 9012 to return to the main menu 9010, and executes the fax function 9014 at time t804. At this time, the access management 3011 refers to the user authority indicated by 5022 in FIG. 10 and determines that the fax function 9014 is not permitted. At this time, the user session management 3010 displays an error screen (FIG. 14) notifying that the user cannot be changed. This is because in the second embodiment, further authentication is prohibited when a real name user logs in, and the user profile 5001 and the user authority 5002 are not changed.

  Note that when the user information is input on the login screen (FIG. 5), if the user logs in as the real user A and tries to execute the network management function 9013, similarly, an error screen notifying that the user cannot be changed is displayed. (FIG. 14) is displayed.

<Characteristic processing according to the second embodiment>
Next, the characteristic processing according to the second embodiment will be described with reference to FIG.

  FIG. 15 is a flowchart showing the processing according to the second embodiment. This process is a process of determining whether to re-authenticate according to the type of user who has logged in when the authority is insufficient, and is executed by the CPU 2001 of the image processing apparatus 1004 as a function of the user session management 3010 and the access management 3011. ..

  When the user selects a function in step S131, the access management 3011 determines in step S132 whether the logged-in user is permitted to execute the selected function. If it is determined that the application is permitted, the process proceeds to step S141, and the application 3012 executes the selected function. On the other hand, if it is determined that the login is not permitted, the user session management 3010 determines in step S133 whether the logged-in user is an anonymous user. If the user is not an anonymous user, the process proceeds to step S134, and the error screen (FIG. 14) is displayed.

  On the other hand, when it is determined that the logged-in user is an anonymous user, the process proceeds to step S135, the login screen (for example, 9070 in FIG. 13) is displayed, and the input of authentication information is received from the user in step S136. In step S137, it is determined whether the authentication information received is correct. If not, the process returns to step S135 to repeat the steps S135 and S137. On the other hand, if the received authentication information is correct, the access management 3011 determines whether or not execution of the selected function is permitted for the authentication information received in step S138. If not permitted, the process returns to step S135 to repeat the procedure from step S135 to step S138.

  On the other hand, when the execution of the selected function is permitted, the user session management 3010 overwrites the user profile with the newly logged-in user in step S139. Subsequently, the user authority information is merged in step S140, and the selected function is executed in step S141.

<Advantages of Second Embodiment>
Even when the anonymous user and the real name user are combined as the logged-in user, the same advantages as those of the first embodiment are obtained.

  The object of the present invention is also achieved by executing the following processing. That is, a storage medium recording a program code of software that realizes the functions of the above-described embodiments is supplied to a system or apparatus, and the computer (or CPU, MPU, etc.) of the system or apparatus is stored in the storage medium. This is the process of reading the program code.

  In this case, the program code itself read from the storage medium realizes the functions of the above-described embodiments, and the program code and the storage medium storing the program code constitute the present invention.

  Moreover, the following can be used as a storage medium for supplying the program code. For example, floppy (registered trademark) disk, hard disk, magneto-optical disk, CD-ROM, CD-R, CD-RW, DVD-ROM, DVD-RAM, DVD-RW, DVD+RW, magnetic tape, non-volatile memory card, ROM, etc. Alternatively, the program code may be downloaded via a network.

  The present invention also includes the case where the functions of the above-described embodiments are realized by executing the program code read by the computer. In addition, when the OS (operating system) or the like running on the computer performs some or all of the actual processing based on the instructions of the program code, and the processing realizes the functions of the above-described embodiments. Is also included.

  Further, the present invention also includes a case where the functions of the above-described embodiment are realized by the following processing. That is, the program code read from the storage medium is written in the memory provided in the function expansion board inserted into the computer or the function expansion unit connected to the computer. After that, the CPU or the like included in the function expansion board or the function expansion unit performs a part or all of the actual processing based on the instruction of the program code.

1003 Client PC
1004 image processing apparatus 2001 CPU
2002 RAM
2003 ROM
2012 operation part

Claims (14)

An information processing device,
Control means for performing a login process for an unspecified user having a first use authority , to the information processing device ;
In a state in which the user of the unspecified with the first use rights logs into said information processing apparatus, allowed to be used in the first function is used for use in authorization is permitted, and the first usage rights display control means for displaying on the display means a menu screen for selecting a function from among a plurality of functions including a function that is not,
For the selected function in the previous texture menu screen, when the use of in the first usage rights is permitted, and a execution control means for permitting the execution of the selected function,
Wherein the display control unit, for the selected function in the previous texture menu screen, when the use of in the first use rights is not permitted to display an authentication screen for user authentication,
It said execution control means is a case where the authentication process of the user corresponding to the authentication information input through the authentication screen has been successful, and, for the selected function, the user that the authentication process is successful have if used at the second usage rights is permitted permits the execution of the selected function, before a case authentication processing Kiyu over tHE succeeds, and said selected for functions, when used in the second usage rights is not permitted, limit the execution of the selected function,
An information processing apparatus , wherein at least one function of the plurality of functions is permitted to be used with the first use authority and not to be used with the second use authority . 2. The information processing according to claim 1, wherein the function that is permitted to be used by the first usage right and is not permitted to be used by the second usage right is a color copy function. apparatus. The information processing apparatus according to claim 1, wherein the function displayed on the menu screen includes at least one of a color copy function, a fax function, an electronic mail function, and a network management function. The information processing apparatus according to claim 1, further comprising an acquisition unit that acquires information necessary for the user authentication when the function is selected. The information processing apparatus according to claim 1, further comprising a reception unit that receives a selection of one function of the plurality of functions displayed on the menu screen. When a function permitted to be used with the first use authority is selected from the plurality of functions, the execution control unit is selected without acquiring the information necessary for the user authentication. Perform the function
When a function that is not permitted to be used with the first usage right is selected from among the plurality of functions, and the user authentication based on the information acquired by the acquisition unit is successful, and The execution control unit permits the execution of the selected function when the use of the function is permitted by the second use authority of the user corresponding to the information. 4. The information processing device according to item 4. 7. The reception unit according to claim 1, further comprising a reception unit that receives a selection of a function of the information processing device when an unspecified user is logged in to the information processing device. Information processing device. The information processing apparatus according to claim 1, wherein the user authentication is authentication for logging in to the information processing apparatus. A control step of performing a login process of an unspecified user having a first usage right to the information processing device;
A function permitted to be used with the first use authority and a use with the first use authority are permitted while an unspecified user having the first use authority is logged in to the information processing apparatus. A display control step of displaying on the display means a menu screen for selecting a function from a plurality of functions including a function not performed,
An execution control step of permitting execution of the selected function when use with the first usage right is permitted for the function selected on the menu screen;
The display control step displays an authentication screen for performing user authentication when the use with the first use authority is not permitted for the function selected on the menu screen,
The execution control step is a case where the authentication process of the user corresponding to the authentication information input via the authentication screen is successful, and the user who has succeeded in the authentication process has the selected function. When the use with the second use authority is permitted, the execution of the selected function is permitted, and the user authentication process is successful, and the selected function is Restricting execution of the selected function when use with the second usage right is not permitted,
At least one function of the plurality of functions is permitted to be used with the first use authority, and is not permitted to be used with the second use authority. The information processing method according to claim 9, further comprising a receiving step of receiving a selection of one of the plurality of functions displayed on the menu screen. When a function permitted to be used with the first usage right is selected from among the plurality of functions, the information selected for the user authentication is not acquired and the selected function is selected in the execution control step. Perform the function
When a function that is not permitted to be used with the first usage right is selected from among the plurality of functions, the user authentication based on the information necessary for the user authentication is successful, and The execution of the selected function is permitted in the execution control step when the use of the function is permitted by the second use authority of the user corresponding to the information. 9. The information processing method described in 9 or 10. The information processing according to any one of claims 9 to 11, further comprising a reception step of receiving a selection of a function of the information processing device in a state where an unspecified user is logged in to the information processing device. Method. 13. The information processing method according to claim 9, wherein the user authentication is authentication for logging in to the information processing device. A program for causing a computer to execute the information processing method according to any one of claims 9 to 13.

Images