JP6773173B2 - Information processing system, information processing device, account registration method and program - Google Patents

Description

The present invention relates to an information processing system, an information processing device, an account registration method and a program.

For example, in a user terminal such as a personal computer or a smartphone, the user generally applies for installation of an application or application for use of the application online. On the other hand, in electronic devices such as image forming devices, it is common for engineers and the like to visit users and perform operations for installing and using programs due to device resource restrictions and support when a problem occurs. In addition, in electronic devices such as conventional image forming devices, it is common to make a contract for use in writing.

In recent years, new service provision forms such that users use only necessary functions when necessary are increasing. For example, SaaS (Software as a Service), which is a new form of software usage that allows users to freely select only the functions they want, and computing resources on the Internet are combined to add more value to end users. It is a form of service provision such as cloud computing that provides services.

When using a service that requires a license, the user purchases a license from the service sales company (sales company). The information processing system that provides the service manages the license issued to the user by the business system, and determines whether or not the service can be provided to the user based on the license (see, for example, Patent Document 1).

For cloud services, a marketing method in which a trial period is set before this contract and the service is provided free of charge is common. As a contract form, a trial license (trial license) is issued. In order to improve the sales promotion effect of the trial, it is necessary to loosen the credit of the user at the time of account registration such as issuing a trial license and simplify the procedure.

However, in the conventional information processing system, since the license of this contract that involves business is targeted as the contract form, the credit of the user at the time of account registration such as the issuance of a trial license is loosened and the procedure is simplified. Is difficult.

An embodiment of the present invention has been made in view of the above points, and an object of the present invention is to provide an information processing system capable of facilitating account registration for trial use.

The claims 1 to achieve the above object, an information processing system including one or more information processing apparatus, the presence or absence of provision of a service to the service using apparatus, and at least one of the tissue or user, more licenses An application for a trial of the service including the management means to be managed, the service providing means for providing the service associated with the license to the service using device, and the identification information identifying the service selected in the service using device. A reception means for accepting, an account registration means for accepting a trial application for the service from the service use device, and an account registration means for registering an account with the management means so that the service can be tried from the service use device. have a, the account registration means, when receiving information on the account registration from different external devices to the service using apparatus performs account registration of the tissue or the user based on the information, the identification information Based on this, the license is registered in association with the organization or the user .

According to the embodiment of the present invention, account registration for trial can be facilitated.

It is a block diagram of an example of an information processing system which concerns on 1st Embodiment. It is a hardware block diagram of an example of the computer which concerns on this embodiment. It is a hardware block diagram of an example of the image forming apparatus which concerns on this embodiment. It is a block diagram of an example of the service provision system which concerns on 1st Embodiment. It is a processing block diagram of an example of the service platform providing system which concerns on 1st Embodiment. It is a block diagram which shows an example of the arrangement of UI and logic (API). It is a block diagram of an example which showed the procedure of providing a service to an image forming apparatus. It is a block diagram of an example which showed the procedure of license issuance of this agreement. It is a block diagram of an example which showed the procedure of the trial license issuance. It is a block diagram of an example of tenant information. It is a block diagram of an example of user information. It is a block diagram of an example of license information. It is a block diagram of an example of the activated device list information. It is a block diagram of an example of device information. It is a sequence diagram (1/2) of an example of a procedure in which a user who has not opened a tenant applies for a trial. It is a sequence diagram (2/2) of an example of a procedure in which a user who has not opened a tenant applies for a trial. It is an image diagram of an example of the application list screen. It is an image diagram of an example of an application screen. It is an image diagram of an example of the account creation screen. It is an image diagram of an example of the mail transmission completion screen. It is an image diagram of an example of the account information input screen. It is an image diagram of an example of the account creation completion screen. It is a sequence diagram of an example of a procedure in which a user who applied for a trial uses the service. It is an image diagram of an example of a login screen. It is a sequence diagram (1/2) of an example of a procedure in which a user who has opened a tenant applies for a trial and tries the service. It is a sequence diagram (2/2) of an example of a procedure in which a user who has opened a tenant applies for a trial and tries the service. It is an image diagram of an example of a service application screen. It is a sequence diagram (1/2) of an example of a procedure in which a user who has opened a tenant registers a user for a service for which a trial application has been made. It is a sequence diagram (2/2) of an example of a procedure in which a user who has opened a tenant registers a user for a service for which a trial application has been made. It is a sequence diagram of an example of a procedure in which a user who has registered as a user in the trial application service uses the service. It is an image diagram of another example of the login screen. It is a screen transition diagram of an example of the information processing system which concerns on this embodiment. It is a sequence diagram of an example of a procedure in which a user applies for a trial by registering an account from the application market. It is a flowchart of an example of access control at the time of opening a tenant. It is a flowchart of an example of access control at the time of license issuance.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[First Embodiment]
<System configuration>
FIG. 1 is a configuration diagram of an example of an information processing system according to the first embodiment. The information processing system 1 of FIG. 1 includes a user system 10, an application market providing system 20, a service providing system 30, a service platform providing system 40, and a business platform providing system 50.

The user system 10, the application market providing system 20, the service providing system 30, and the service platform providing system 40 are connected via a network N1 such as the Internet. Further, the service platform providing system 40 and the business platform providing system 50 are connected by a dedicated line or the like.

The network N2 of the user system 10 is a private network inside the firewall FW. The firewall FW detects and blocks unauthorized access. An image forming device 12 such as a user terminal 11 and a multifunction device is connected to the network N2. The image forming apparatus 12 is an example of an electronic device in which a user tries a service.

The user terminal 11 can be realized by an information processing device equipped with a general OS (operating system) or the like. The user terminal 11 has a means of wireless communication or a means of wired communication. The user terminal 11 is a terminal that can be operated by a user such as a smartphone, a mobile phone, a tablet terminal, or a PC.

The image forming apparatus 12 is an apparatus having an image forming function such as a multifunction device. The image forming apparatus 12 has a means of wireless communication or a means of wired communication. The image forming apparatus 12 is an apparatus that performs processing related to image forming, such as a multifunction device equipped with a browser, a copier, a scanner, a printer, a laser printer, a projector, and an electronic whiteboard. FIG. 1 shows an example in which the user terminal 11 and the image forming apparatus 12 are each one, but there may be a plurality of users.

Further, the application market providing server 21 of the application market providing system 20 is connected to the network N1 via the firewall FW. The application market providing server 21 can be realized by one or more information processing devices equipped with a general OS or the like.

The application market providing system 20 may be provided for each sales area, sales company, or the like. The application market providing server 21 provides the user terminal 11 and the image forming apparatus 12 with application market screens such as a service list screen and an application screen as described later.

The service providing system 30 is connected to the network N1 via the firewall FW. The service providing system 30 provides various services to the user terminal 11 and the image forming apparatus 12. The service providing system 30 can be realized by one or more information processing devices equipped with a general OS or the like. The service provided by the service providing system 30 may be a service provided by an operator of the service platform providing system 40, or a service provided by an external service provider or the like.

The service platform providing system 40 is connected to the network N1 via the firewall FW. The service platform providing system 40 can be realized by one or more information processing devices equipped with a general OS or the like.

The service platform providing system 40 has functions such as authentication / authorization, tenant / user management, license management, and account registration. The service platform providing system 40 receives requests for account registration and login from the user terminal 11 and the image forming apparatus 12. In addition, the service platform providing system 40 accepts an authentication ticket confirmation request and a user information acquisition request from the service providing system 30.

The network N3 of the business platform providing system 50 is a private network inside the firewall FW. A business terminal 51 and a license management server 52 are connected to the network N3. The business terminal 51 and the license management server 52 can be realized by one or more information processing devices equipped with a general OS or the like.

The business terminal 51 has a means of wireless communication or a means of wired communication. The business terminal 51 is a terminal that can be operated by business personnel such as smartphones, mobile phones, tablet terminals, and PCs. The business person can request the license management server 52 to issue a license from the business terminal 51.

The license management server 52 has functions such as license management. The license management server 52 receives requests such as license issuance from the service platform providing system 40 and the business terminal 51. The configuration of the information processing system 1 in FIG. 1 is an example, and may be another configuration.

<Hardware configuration>
The user terminal 11, the application market providing server 21, the business terminal 51, and the license management server 52 of FIG. 1 are realized by, for example, a computer having a hardware configuration as shown in FIG. Further, the information processing device that realizes the service providing system 30 and the service platform providing system 40 of FIG. 1 is realized by, for example, a computer having a hardware configuration shown in FIG. FIG. 2 is a hardware configuration diagram of an example of a computer according to the present embodiment.

The computer 500 shown in FIG. 2 includes an input device 501, a display device 502, an external I / F 503, a RAM 504, a ROM 505, a CPU 506, a communication I / F 507, an HDD 508, and the like, and each of them is connected to each other by a bus B. .. The input device 501 and the display device 502 may be connected and used when necessary.

The input device 501 includes a keyboard, a mouse, and the like, and is used by the user to input each operation signal. The display device 502 includes a display and the like, and displays the processing result by the computer 500.

The communication I / F 507 is an interface for connecting the computer 500 to the networks N1, N2 and N3. As a result, the computer 500 can perform data communication via the communication I / F 507.

The HDD 508 is a non-volatile storage device that stores programs and data. The stored programs and data are, for example, an OS that is basic software that controls the entire computer 500, application software that provides various functions on the OS, and the like.

The external I / F 503 is an interface with an external device. The external device includes a recording medium 503a and the like. As a result, the computer 500 can read and / or write to the recording medium 503a via the external I / F 503. The recording medium 503a includes a flexible disk, a CD, a DVD, an SD memory card, a USB memory, and the like.

The ROM 505 is a non-volatile semiconductor memory (storage device) capable of holding programs and data even when the power is turned off. The ROM 505 stores programs and data such as BIOS, OS settings, and network settings that are executed when the computer 500 starts up. The RAM 504 is a volatile semiconductor memory that temporarily holds programs and data.

The CPU 506 is an arithmetic unit that realizes control and functions of the entire computer 500 by reading a program or data from a storage device such as a ROM 505 or an HDD 508 onto the RAM 504 and executing processing.

The user terminal 11, the application market providing server 21, the business terminal 51, and the license management server 52 according to the present embodiment can realize various processes described later by the hardware configuration of the computer 500 described above. Further, the information processing device that realizes the service providing system 30 and the service platform providing system 40 according to the present embodiment can realize various processes described later by the hardware configuration of the computer 500 as described above.

The image forming apparatus 12 of FIG. 1 is realized by, for example, a computer having a hardware configuration as shown in FIG. FIG. 3 is a hardware configuration diagram of an example of the image forming apparatus according to the present embodiment. The image forming apparatus 12 shown in FIG. 3 includes a controller 601, an operation panel 602, an external I / F 603, a communication I / F 604, a printer 605, a scanner 606, and the like.

The controller 601 includes a CPU 611, a RAM 612, a ROM 613, an NVRAM 614, an HDD 615, and the like. The ROM 613 stores various programs and data. The RAM 612 temporarily holds programs and data. The NVRAM 614 stores, for example, setting information and the like. Further, the HDD 615 stores various programs and data.

The CPU 611 reads a program, data, setting information, etc. from the ROM 613, NVRAM 614, HDD 615, etc. onto the RAM 612, executes processing, and realizes control and functions of the entire image forming apparatus 12.

The operation panel 602 includes an input unit for receiving input from the user and a display unit for displaying. The external I / F 603 is an interface with an external device. The external device includes a recording medium 603a and the like. As a result, the output device 14 can read and / or write to the recording medium 603a via the external I / F 603. The recording medium 603a includes an IC card, a flexible disk, a CD, a DVD, an SD memory card, a USB memory, and the like.

The communication I / F 604 is an interface for connecting the image forming apparatus 12 to the network N2. As a result, the image forming apparatus 12 can perform data communication via the communication I / F 604. The printer 605 is a printing device that prints print data on paper. The scanner 606 is a reading device that reads image data (electronic data) from a document. The description of the hardware configuration of the firewall FW shown in FIG. 1 will be omitted.

<Software configuration>
<< Service provision system >>
The service providing system 30 according to the first embodiment can be realized by, for example, the configuration shown in FIG. FIG. 4 is a configuration diagram of an example of the service providing system according to the first embodiment. The service providing system 30 of FIG. 4 has a configuration including an authentication agent device 31 and a service providing device 32.

The authentication agent device 31 receives various requests from the user terminal 11 and the image forming device 12 to the service providing device 32. The authentication agent device 31 transmits a request from the user terminal 11 or the image forming device 12 including the legitimate authentication ticket issued by the service platform providing system 40 to the service providing device 32. Further, the authentication agent device 31 redirects a request from the user terminal 11 or the image forming device 12 that does not include a valid authentication ticket to the service platform providing system 40. In this way, the authentication agent device 31 causes the user terminal 11 and the image forming device 12 to acquire a legitimate authentication ticket, and then transmits the request from the user terminal 11 and the image forming device 12 to the service providing device 32.

The service providing device 32 provides a service according to a request from the user terminal 11 and the image forming device 12. In addition, the service providing device 32 inquires about the validity of the authentication ticket from the service platform providing system 40, and requests the acquisition of information necessary for providing the service.

For example, there is a translation service as an example of the service provided by the service providing device 32. The image forming apparatus 12 can use the translation service provided by the service providing apparatus 32 by transmitting the image data scanned from the original by OCR (optical character recognition) to the service providing apparatus 32. For example, the user may access the service providing device 32 from the user terminal 11 to view the translation result, or may receive the translation result by e-mail.

<< Service platform provision system >>
The service platform providing system 40 according to the first embodiment is realized by, for example, the processing block shown in FIG. FIG. 5 is a processing block diagram of an example of the service platform providing system according to the first embodiment. The service platform providing system 40 realizes a processing block as shown in FIG. 5 by executing a program.

The service platform providing system 40 of FIG. 5 realizes an application 101, a common service 102, a database (DB) 103, and a platform API 104.

The application 101 includes a portal service application 111, a scan service application 112, a print service application 113, and an account registration application 114 as examples.

The portal service application 111 is an application that provides a portal service. The portal service provides a service that serves as an entrance for using the information processing system 1. The scan service application 112 is a UI (user interface) of an application that provides a scan service.

Further, the print service application 113 is a UI of an application that provides a print service. The account registration application 114 is a UI of an application that provides an account registration service. The application 101 may include other service applications.

Even if the UI of the scan service application 112, the print service application 113, and the account registration application 114 includes Native application and HTML / JavaScript (registered trademark) data displayed or executed by the user terminal 11 or the image forming apparatus 12. Good. The Native application is a type of application in which the main processing is performed by the user terminal 11 or the image forming apparatus 12 in comparison with the Web application. The Web application is a type of application in which the main processing is performed by the service platform providing system 40.

The platform API (Application Programming Interface) 104 is an interface for an application 101 such as the portal service application 111 to use the common service 102.

The platform API 104 is a predefined interface provided for the common service 102 to receive a request from the application 101, and is composed of, for example, a function or a class. The platform API 104 can be realized by, for example, a Web API that can be used via a network when the service platform providing system 40 is composed of a plurality of information processing devices.

The common service 102 includes a scan service unit 121, a print service unit 122, an account registration unit 123, an authentication / authorization unit 131, a tenant management unit 132, a user management unit 133, a license management unit 134, a device management unit 135, and a temporary image storage unit 136. It has a data storage unit 137, an image processing workflow control unit 138, and a log collection unit 139. Further, the image processing workflow control unit 138 has a message queue 141 and one or more workers 142. The worker 142 realizes functions such as image conversion and image transmission.

The scan service unit 121 functions as a logic (API) of the scan service application 112. The print service unit 122 functions as a logic (API) of the print service application 113. Further, the account registration unit 123 functions as a logic (API) of the account registration application 114.

The authentication / authorization unit 131 executes authentication / authorization based on a login request from an office device such as a user terminal 11 or an image forming apparatus 12. Office equipment is a general term for user terminals 11, image forming devices 12, and the like.

The authentication / authorization unit 131 accesses, for example, the user information storage unit 153 and the license information storage unit 154, which will be described later, to authenticate / authorize the user. Further, the authentication / authorization unit 131 accesses, for example, the tenant information storage unit 152, the license information storage unit 154, the device information storage unit 155, etc., which will be described later, to authenticate the image forming apparatus 12 and the like as a client.

The tenant management unit 132 manages the tenant information stored in the tenant information storage unit 152, which will be described later. The user management unit 133 manages the user information stored in the user information storage unit 153, which will be described later.

The license management unit 134 manages the license information stored in the license information storage unit 154, which will be described later. The device management unit 135 manages the device information stored in the device information storage unit 155, which will be described later. The temporary image storage unit 136 stores the temporary image in the temporary image storage unit 156, which will be described later, and acquires the temporary image from the temporary image storage unit 156. The data storage unit 137 stores data in a job information storage unit 157 or the like, which will be described later.

The image processing workflow control unit 138 controls the workflow related to image processing based on the request from the application 101. The message queue 141 has a queue corresponding to the type of processing. The image processing workflow control unit 138 puts the message of the request related to the processing (job) into the queue corresponding to the type of the job.

Worker 142 is monitoring the corresponding queue. Then, when the message is input to the queue, the worker 142 performs processing such as image conversion and image transmission according to the corresponding job type. The message put into the queue may be read by the worker 142 independently (Pull), or may be provided from the queue to the worker 142 (Push). The log collection unit 139 stores the collected log information in the log information storage unit 151, which will be described later, for example.

The database 103 includes a log information storage unit 151, a tenant information storage unit 152, a user information storage unit 153, a license information storage unit 154, a device information storage unit 155, a temporary image storage unit 156, a job information storage unit 157, and application-specific. It has a setting information storage unit 158.

The log information storage unit 151 stores log information. The tenant information storage unit 152 stores the tenant information described later. The user information storage unit 153 stores the user information described later. The license information storage unit 154 stores the license information described later. The device information storage unit 155 stores the device information described later. The temporary image storage unit 156 stores a temporary image. The temporary image is, for example, a file or data such as a scanned image processed by the worker 142.

The job information storage unit 157 stores request information (job information) related to processing (job). The application-specific setting information storage unit 158 stores the setting information unique to the application 101.

The service platform providing system 40 functions as an integrated platform that provides common services such as workflows related to authentication / authorization and image processing, and a group of services that provide application services such as scan services and print services by using the functions of the integrated platform. ..

The integrated platform is composed of, for example, a common service 102, a database 103, and a platform API 104. The service group is composed of, for example, the application 101. As described above, the service platform providing system 40 shown in FIG. 4 has a configuration in which the service group and the integrated platform are separated.

The service platform providing system 40 shown in FIG. 5 can easily develop an application 101 using the platform API 104 by a configuration in which the service group and the integrated platform are separated. Further, the service platform providing system 40 shown in FIG. 5 can easily develop a service providing device 32 using the platform API 104.

The classification form of the processing block of the service platform providing system 40 shown in FIG. 5 is an example, and it is not essential that the application 101, the common service 102, and the database 103 are classified in the hierarchy shown in FIG. For example, if the processing of the service platform providing system 40 according to the first embodiment can be performed, the hierarchical relationship shown in FIG. 5 is not limited to a specific one.

<< Arrangement of UI and logic >>
In the service platform providing system 40 of FIG. 5, the UI or logic (API) of the application 101 such as the scan service application 112 is accessed from the client 200 such as the user terminal 11 or the image forming apparatus 12 as shown in FIG. FIG. 6 is a configuration diagram showing an example of arrangement of UI and logic (API).

The UI 211 of the service platform providing system 40 of FIG. 6 interprets the user operation performed by the client 200, calls the logic 212 from the platform API 104, and generates HTML data 202. The browser 201 of the client 200 changes the screen by the HTML data 202 generated on the service platform providing system 40 side.

Further, the browser 201 may use a single page Web application (SPA). The browser 201 of the client 200 downloads HTML / Javascript / CSS data from the service platform providing system 40. The browser 201 can call the logic 212 of the service platform providing system 40 by, for example, Ajax by the Javascript data, and can change the screen by the DOM operation.

Here, Ajax (Asynchronous JavaScript + XML) is an example of an implementation form of a Web application that uses the HTTP communication function of JavaScript implemented in the browser 201 to proceed with processing without reloading the Web page. The DOM operation is an example of an operation of accessing the value of each element of HTML data and dynamically rewriting it.

Further, the client 200 may use the Native application 204 installed in the Native OS. The Native application 204 interprets the user operation on the client 200 side, calls the logic 212, and changes the screen according to the result.

In FIG. 6, the UI 211 of the service platform providing system 40 calls the logic 212 from the platform API 104, but the same applies when the UI of the service providing system 30 calls the logic 212 from the platform API 104.

<< Cooperation between service provision system and service platform provision system >>
Further, the service providing system 30 and the service platform providing system 40 cooperate with each other as shown in FIG. 7 to provide a service to the user terminal 11 or the image forming apparatus 12. FIG. 7 is a configuration diagram of an example showing a procedure for providing a service to the image forming apparatus.

As shown in FIG. 7, the user who uses the information processing system 1 can make various settings for the service platform providing system 40 from the user terminal 11 or the image forming apparatus 12. When the service provided by the service providing system 30 is used from the user terminal 11 or the image forming apparatus 12, the user requests the service providing system 30 to use the service from the user terminal 11 or the image forming apparatus 12.

As described above, the authentication agent device 31 of the service providing system 30 redirects the request from the user terminal 11 or the image forming device 12 that does not include a valid authentication ticket to the service platform providing system 40. The user who operates the user terminal 11 or the image forming apparatus 12 performs a login process for the service platform providing system 40 and obtains a legitimate authentication ticket.

The user terminal 11 and the image forming apparatus 12 request the service providing system 30 to use the service including the acquired legitimate authentication ticket. The authentication agent device 31 of the service providing system 30 can confirm the validity of the authentication ticket included in the request from the user terminal 11 or the image forming device 12 by inquiring to the service platform providing system 40. Further, when the authentication agent device 31 needs to add the user information to the request from the user terminal 11 or the image forming device 12, the authentication agent device 31 may inquire of the service platform providing system 40 and add the user information to the HTTP header or the like. Good.

The service providing device 32 provides a service (XX service) in response to a request from the user terminal 11 or the image forming device 12. The service providing device 32 may use the information acquired from the service platform providing system 40 to provide a service in response to a request from the user terminal 11 or the image forming device 12.

《License issuance》
In the information processing system 1 according to the first embodiment, the license of this contract and the license for trial (trial license) are treated as the contract form. The information processing system 1 according to the first embodiment issues the license of this contract and the trial license as follows.

FIG. 8 is a configuration diagram of an example showing the procedure for issuing the license of this contract. The business person requests the license management server 52 to issue a license from the business terminal 51. The license management server 52, which is requested to issue a license by the business person, issues the license of this contract, and stores the issued license in the license information storage unit 250. The license management server 52 and the license information storage unit 250 are arranged in a data center near the center of business operation (such as the head office) to centralize management.

Further, the license management server 52 notifies the service platform providing system 40 of the issued license (license notification), and stores a copy (reproduction) of the license in the license information storage unit 154.

The service platform providing system 40 is arranged in a data center close to the user, for example, to improve the response performance. There may be a plurality of data centers in which the service platform providing system 40 is located.

For example, a customer engineer (CE) requests the service platform providing system 40 from the user terminal 11 or the image forming apparatus 12 to activate the license. The service platform providing system 40 that has received the request for activation of the license activates the copy of the license that is the object of activation stored in the license information storage unit 154.

Further, the service platform providing system 40 notifies the license management server 52 of the activation of the license. The license management server 52 activates the license that is the target of activation stored in the license information storage unit 250.

As shown in FIG. 8, the license management server 52 receives a request from the person in charge of business or the like for issuing the license of this contract. In addition, the service platform providing system 40 receives a request from a customer engineer or the like for the license activation of this contract.

FIG. 9 is a configuration diagram of an example showing the procedure for issuing a trial license. For example, a user who uses the image forming apparatus 12 applies for a trial (trial) from the image forming apparatus 12 to the service platform providing system 40. The service platform providing system 40 that has received the trial application from the user requests the license management server 52 to issue a trial license.

The license management server 52 requested to issue a trial license from the service platform providing system 40 issues a trial license, and stores the issued trial license in the license information storage unit 250. Further, the license management server 52 notifies the service platform providing system 40 of the issued trial license (trial license notification), and stores a copy (reproduction) of the trial license in the license information storage unit 154.

The service platform providing system 40 notified of the trial license activates a copy of the trial license to be activated stored in the license information storage unit 154.

Further, the service platform providing system 40 notifies the license management server 52 of the activation of the trial license. The license management server 52 activates the trial license that is stored in the license information storage unit 250 and is the target of activation.

As shown in FIG. 9, the service platform providing system 40 accepts a trial application that triggers the issuance of a trial license from a user who uses the image forming apparatus 12. The license management server 52 accepts the trial license activation from the service platform providing system 40 notified of the trial license. In FIG. 9, the trial license activation is notified from the service platform providing system 40 to the license management server 52, but the license management server 52 may notify the service platform providing system 40.

"information"
FIG. 10 is a configuration diagram of an example of tenant information. The tenant information shown in FIG. 10 has a tenant ID, a tenant name, a display language, a time zone, a state, a country, and the like as data items.

The tenant ID is information that identifies a group (organization) such as a company or a department. The tenant ID is not limited to the language of the tenant, and may be, for example, information that identifies the contract. The tenant ID is unique.

The tenant name represents the name of a group such as a company or department. The display language represents a language for displaying the names of groups such as companies and departments. In addition, the display language represents the display for access from the browser and the language of the body of the email. The time zone represents the standard time used by groups such as companies and departments. The status represents the status of a group such as a company or department. The country represents the name of the country to which the group such as a company or department belongs.

FIG. 11 is a configuration diagram of an example of user information. The user information shown in FIG. 11 has a tenant ID, a user ID, an email address, a password, a user name, a display language, a time zone, a state, and the like as data items.

The e-mail address and password are examples of information that identifies the user (user-specific information). The user-specific information may be a user ID, a user name, or the like instead of an e-mail address. Also, the password is not required. The email address must be unique. In addition, the user ID managed by the same tenant ID is also unique. User IDs managed by different tenant IDs may be duplicated.

Further, as the user-specific information, information for identifying an electronic medium (for example, an IC card) possessed by the user may be used. As the electronic medium possessed by the user, an IC card, a mobile phone, a tablet terminal, an electronic book terminal, or the like can be used. As the information for identifying the electronic medium, a card ID, a serial ID, a mobile phone telephone number, a terminal profile information, and the like can be used. Information that identifies an electronic medium may be used in combination.

The email address is the user's email address. The display language represents the language in which the user name is displayed. In addition, the display language represents the display for access from the browser and the language of the body of the email. The time zone represents the standard time used by the user. The state represents the state of the user.

FIG. 12 is a configuration diagram of an example of license information. License information includes service type, license ID, sales area, country, time zone, product code, quantity (units), usage start date, billing start date, usage end date, scheduled cancellation date, status, parent service type, as data items. It has a parent license ID, registration code, model number, next license type, next license ID, license type, license type, quantity (number of users), number of units in use, number of users in use, contract type, and the like.

The service type is information that identifies the type of service such as portal, scan, and print. The license ID is identification information that identifies the license of this contract and the license for trial use (trial license). The license ID is, for example, a tenant ID in the case of a tenant license and a service ID in the case of a service license.

The sales area is information representing the area where the license is sold. The country represents the name of the country in which the license is used. The time zone represents the standard time of the country in which the license is used. The product code is identification information that identifies the product corresponding to the license. The quantity (unit) is information indicating the quantity (unit) of devices whose services can be used by a license.

The usage start date is information indicating the date when the license became effective. The billing start date is information indicating the billing start date, and is the same day as or later than the usage start date (for example, the first day of the following month). The usage end date is information indicating the license expiration date on the display, for example, one year after the billing start date. The scheduled cancellation date is information indicating the date when the license is invalidated. The status is information indicating the status of the license. The license status includes, for example, provisional registration indicating before the start of use, registration indicating that the license is in use, and cancellation indicating the end of use.

For the parent service type, the tenant is set in the case of a service license. As the parent license ID, the tenant ID is set in the case of a service license. The registration code is set in the case of a tenant license. The registration code is a code to be entered when opening a tenant.

The model number is set in the case of a service license. The model machine number is information that identifies the device subject to the license. In the case of a volume license in which there are multiple devices subject to license, the model number of the device that is activated earliest is set.

The next license type is set for an updated service license. The next license type has the same value as the service type. The next license ID is set in the case of an updated service license. The next license ID will be the service ID of the license that becomes valid after the use of the updated service license is completed.

The license type is information that identifies the type of service license such as a device license or a user license. The license type is information that sets devices, users, etc. that are subject to usage restrictions depending on the service license. The license form is information indicating whether to permit the use in combination with other types of service licenses or to permit the use only with its own service license.

For example, information such as "device license only" or "device license + user license" is set in the license form. When the license type is "device license only", the use of the service is permitted by registering the service license whose license type is "device license". If the license type is "device license + user license", the service can be used by registering the service license whose license type is "device license" and the service license whose license type is "user license". Will be done.

The quantity (number of users) is information representing the number of users who can use the service by license. The number of devices in use is information indicating the number of devices whose services are available by license. The number of users in use is information indicating the number of users whose services are available by license. The contract type is information indicating whether the license of this contract or the license of the trial contract (trial license).

In the license information of FIG. 12, the quantity (number of units) and the quantity (number of users) are separately provided as data items, but they may be treated as the same data item.

As shown in the license information of FIG. 12, the tenant license and the service license have a parent-child relationship. In the license information of FIG. 12, the tenant license is the parent license and the service license is the child license. The tenant license that becomes the parent license is set in the parent license ID. Although the license information in FIG. 12 shows the parent-child relationship between the tenant license and the service license, there may be a relationship of three or more layers such as a parent-child relationship.

The tenant license is a license required to use the service platform providing system 40. Without a tenant license, the service platform providing system 40 cannot open a tenant. By handling the tenant license in the same data format as the service license, it is possible to charge the tenant itself, or to make a difference in the service level (speed and capacity) by charging. The service platform providing system 40 provides services to a plurality of tenants and provides independent user management for each tenant.

In addition, the service platform providing system 40 restricts access so that data cannot be referenced between tenants. Therefore, in the service platform providing system 40, it is necessary to open a tenant before using all the services. Since the parent-child relationship of licenses is a very flexible data structure, it is possible to express the grouping of licenses in volume licenses and the like.

In the case of a volume license, the activated devices are managed by the activated device list information as shown in FIG. 13, for example. FIG. 13 is a configuration diagram of an example of the activated device list information. The activated device list information is stored in, for example, the license information storage unit 154.

The activated device list information in FIG. 13 has a service ID, a tenant ID, a model machine number, an activated date, and the like as data items. The service ID is identification information that identifies the service license.

The tenant ID and model machine number are information on the model machine number and tenant ID of the device activated by using the service ID. The date when the device is activated is set by using the service ID.

FIG. 14 is a configuration diagram of an example of device information. The device information shown in FIG. 14 has tenant ID, device authentication information, business establishment information, capabilities, etc. as data items. The device authentication information is information for device authentication that determines that an office device has a specific condition.

The device authentication information may be an ID indicating that a specific application is installed in the office device, a model number indicating that the office device is a specific office device, or the like. The business establishment information represents, for example, a business establishment where office equipment is installed. Capabilities represent, for example, the capabilities of office equipment.

<Details of processing>
In the information processing system 1 according to the first embodiment, for example, the following three use cases can be mentioned as use cases in which the user receives the service by the trial license.

The first use case is an example in which a user who has not opened a tenant applies for a trial and tries the service. The second use case is an example in which a user who has already opened a tenant applies for a trial and tries the service. In addition, the third use case is an example in which a user who has opened a tenant registers a user for a service for which a trial application has been made and tries the service.

<< First use case >>
15 and 16 are sequence diagrams of an example of a procedure in which a user who has not opened a tenant applies for a trial. In step S1, the user operates the image forming apparatus 12 and presses, for example, the application market icon displayed on the operation panel 602 of the image forming apparatus 12. In the following description, the processing execution in the image forming apparatus 12 means that, for example, the browser interprets and executes JavaScript.

In step S2, the image forming apparatus 12 acquires the application market screen data from the application market providing server 21. The application market screen data includes data for displaying the application list screen 1000 of FIG. 17, as well as data for displaying the application screen described later.

The image forming apparatus 12 displays, for example, the application list screen 1000 of FIG. 17 on the operation panel 602. FIG. 17 is an image diagram of an example of the application list screen. The application list screen 1000 of FIG. 17 is an example of a screen that allows the user to select a service to be tried. The application list screen 1000 includes a button 1001 for the user to select a service to be tried.

In step S3, the user operates the image forming apparatus 12 and presses the button 1001 of the "XXX service" to be tried from the application list screen 1000 displayed on the operation panel 602. The image forming apparatus 12 displays, for example, the application screen 1010 of FIG. 18 on the operation panel 602. FIG. 18 is an image diagram of an example of the application screen.

The application screen 1010 of FIG. 18 proceeds to the process of creating an account for the "XXX service" to be tried. The "Create account" button 1011 and the "Login" button 1012 to proceed to the process of logging in with the account of the "XXX service" to be tried. And are included.

In the first use case, since the user does not have an account, in step S4, the "create account" button 1011 on the application screen 1010 displayed on the operation panel 602 is pressed.

In step S5, the image forming apparatus 12 generates the "XXX service start" icon in which the URL of the "XXX service" selected by the user is set. For example, the URL of "XXX service" is displayed on the "Start XXX service" icon.
"Https://xxx.example.com/top?q=service%3Dxxx%26productId%3D12345%26country%3DJP" is set.

In step S6, the image forming apparatus 12 acquires the account creation screen data from the account registration unit 123. When the image forming apparatus 12 acquires the account creation screen data, the service type (service), the product code (productId), the country (country), and the URL (url) of the "XXX service" are set in the query parameters. deep. The URL is, for example
It becomes "https://spf.example.com/signup.html?service=xxx&productId=12345&country=JP&url=https%3A%2F%2Fxxx.example.com%2Ftop".

In step S7, the image forming apparatus 12 confirms whether or not the tenant ID is stored. As will be described later, the image forming apparatus 12 stores the tenant ID when the login to the service platform providing system 40 has been successful. The first use case is an example in which a tenant has not been opened. Therefore, the image forming apparatus 12 does not store the tenant ID. The image forming apparatus 12 displays, for example, the account creation screen 1020 of FIG. 19 on the operation panel 602.

FIG. 19 is an image diagram of an example of the account creation screen. The account creation screen 1020 of FIG. 19 includes an e-mail address input field 1021 and an "apply" icon 1022. In step S8, the user inputs an e-mail address in the e-mail address input field 1021 on the account creation screen 1020 and presses the "apply" icon 1022.

In step S9, the image forming apparatus 12 applies to the account registration unit 123 to open a tenant. When applying to open a tenant, specify the email address, service type, product code, and country. In step S9, the account registration unit 123 may authenticate the client of the image forming apparatus 12 and return an error if it is not a reliable device.

In step S10, the account registration unit 123 specifies the e-mail address included in the application for opening the tenant in step S9, and requests the user management unit 133 to search for user information. The user management unit 133 searches the user information storage unit 153, and returns the search result of whether or not the e-mail address included in the application for opening the tenant in step S9 has been registered to the account registration unit 123. If it is a registered e-mail address, the account registration unit 123 returns an error to the image forming apparatus 12 so as not to open a plurality of tenants with one e-mail address.

In step S11, the account registration unit 123 saves the application information. The application information includes the URL (including random numbers), the expiration date of the URL, the context = tenant opening, the email address, the service type, the product code, and the country. The URL (including random numbers) is a URL for displaying the account information input screen described later. In addition, the context is an example of information for selecting the processing content.

In step S12, the account registration unit 123 sends an e-mail containing a URL for displaying the account information input screen described later to the e-mail address included in the application for opening the tenant in step S9. If the e-mail address is incorrect, the user will not be able to receive the e-mail, so it is possible to prevent the tenant from opening with the wrong e-mail address.

Further, in step S13, the image forming apparatus 12 causes the operation panel 602 to display the mail transmission completion screen as shown in FIG. FIG. 20 is an image diagram of an example of the mail transmission completion screen. The email transmission completion screen 1030 of FIG. 20 includes a message prompting the user to confirm the email and register an account.

In step S14, the user operates the user terminal 11 and requests access to the URL for displaying the account information input screen described in the e-mail. In step S15, the user terminal 11 requests the account registration unit 123 to access the URL for displaying the account information input screen described in the e-mail.

In step S16, the account registration unit 123 reads out the application information corresponding to the URL requested to be accessed. The application information read out here is the one saved in step S11. After step S16, the account registration unit 123 holds the application information in association with the session ID (Cookie) or the like.

The account registration unit 123 causes the display device 502 of the user terminal 11 to display the account information input screen 1040 as shown in FIG. 21 if the expiration date of the URL included in the application information has not passed. The account registration unit 123 returns an error to the user terminal 11 if the expiration date of the URL included in the application information has passed.

FIG. 21 is an image diagram of an example of the account information input screen. The account information input screen 1040 of FIG. 21 includes a password, surname, and first name input fields 1041 and an "account creation" button 1042.

In step S17, the user operates the user terminal 11, inputs the password, the surname, and the first name in the input field 1041, and then presses the "create account" button 1042. In step S18, the user terminal 11 requests the account registration unit 123 to create an account by designating a password, a surname, and a first name.

In step S19, the account registration unit 123 requests the license management unit 134 to specify the country and issue a tenant ID for the trial contract. In step S20, the license management unit 134 requests the license management server 52 to issue a tenant ID for the trial contract. The license management unit 134 does not request the license management server 52 to issue the tenant ID of the trial contract every time, but may request and hold the tenant ID collectively.

The license management server 52 issues the tenant ID of the trial contract and stores the tenant ID of the issued trial contract. Further, the license management server 52 notifies the license management unit 134 of the tenant ID of the issued trial contract. The license management unit 134 stores the tenant ID of the trial contract in the license information storage unit 154.

Further, the license management unit 134 notifies the account registration unit 123 of the tenant ID of the trial contract. In step S21, the account registration unit 123 notified of the tenant ID of the trial contract specifies the tenant ID, country, and e-mail address, and requests the license management unit 134 to activate the tenant ID of the trial contract.

In step S22, the license management unit 134 activates the tenant ID of the trial contract that is the target of activation stored in the license information storage unit 154. Further, the license management unit 134 notifies the license management server 52 of the tenant ID of the trial contract to be activated, and activates the tenant ID of the trial contract.

In step S23, the account registration unit 123 specifies the tenant ID of the trial contract and requests the tenant management unit 132 to create a tenant. The tenant management unit 132 creates a tenant and stores the tenant information in the tenant information storage unit 152. Here, the tenant information stored in the tenant information storage unit 152 does not necessarily have to include all the items of the tenant information in FIG.

Further, in step S24, the account registration unit 123 specifies the tenant ID, e-mail address, password, surname, first name, and administrator role of the trial contract, and requests the user management unit 133 to create a user. The user management unit 133 creates user information and stores it in the user information storage unit 153. Here, the user information stored in the user information storage unit 153 does not necessarily have to include all the items of the user information shown in FIG. In addition, since the first use case is an example in which a tenant has not been opened, the role is the administrator. Since each tenant requires at least one administrator, the role of the first user is administrator.

In step S25, the account registration unit 123 specifies the service type, product code, and contract type (trial), and requests the license management unit 134 to issue a service license for the trial contract.

In step S26, the license management unit 134 requests the license management server 52 to issue a license ID for the trial contract. If the product code specified in step S27 does not correspond to the specified service type and contract type, the license management server 52 returns an error. The license management server 52 issues the license ID of the trial contract and stores the license ID of the issued trial contract.

Further, the license management server 52 notifies the license management unit 134 of the license ID of the issued trial contract. The license management unit 134 stores the license ID of the trial contract in the license information storage unit 154.

In addition, the license management unit 134 notifies the account registration unit 123 of the license ID of the trial contract. In step S28, the account registration unit 123 notified of the license ID of the trial contract specifies the license ID and requests the license management unit 134 to activate the license ID of the trial contract.

In step S29, the license management unit 134 activates the license ID of the trial contract that is the target of activation stored in the license information storage unit 154. Further, the license management unit 134 notifies the license management server 52 of the license ID of the trial contract to be activated, and activates the license ID of the trial contract.

In step S30, the account registration unit 123 specifies management and use as an e-mail address, service type, and authority, and requests the authentication / authorization unit 131 to set the access right. After the authentication / authorization unit 131 sets the access right, the account registration unit 123 transmits the account creation completion screen 1050 as shown in FIG. 22 to the user terminal 11 and displays it on the display device 502 of the user terminal 11 in step S31. ..

FIG. 22 is an image diagram of an example of the account creation completion screen. The account creation completion screen 1050 of FIG. 22 includes a message notifying the user that the user is ready to use the “XXX service”.

FIG. 23 is a sequence diagram of an example of a procedure in which a user who has applied for a trial uses the service. In step S51, the user operates the image forming apparatus 12 and presses, for example, the "XXX service" icon displayed on the operation panel 602 of the image forming apparatus 12 to request the activation of the "XXX service".

For example, the "XXX service" icon has the URL of the "XXX service".
"Https://xxx.example.com/top?q=service%3Dxxx%26productId%3D12345%26country%3DJP" is embedded.

In step S52, the image forming apparatus 12 requests the authentication agent apparatus 31 of the service providing system 30 to acquire the “XXX service” screen data. In step S53, the authentication agent device 31 confirms whether or not the authentication ticket is included. Here, it is assumed that the authentication ticket is not included.

Since the authentication ticket was not included, the authentication agent device 31 redirects the acquisition request of the "XXX service" screen data in step S52 in step S54. The authentication agent device 31 uses the query parameter (redirect) of step S54 as the URL of the "XXX service" that is the access destination of step S52.
"? Redirect = https% 3A% 2F% 2Fxxx.example.com% 2Ftop% 3Fq% 3Dservice% 253Dxxx% 2526productId% 253D12345% 2526country% 253DJP"
Embed.

In step S55, the image forming apparatus 12 acquires login screen data from the authentication / authorization unit 131 of the service platform providing system 40. In step S56, the image forming apparatus 12 confirms whether or not the tenant ID is stored. Here, it is assumed that the tenant ID has not been saved.

In step S57, the image forming apparatus 12 displays, for example, the login screen 1060 of FIG. 24 on the operation panel 602. FIG. 24 is an image diagram of an example of the login screen. The login screen of FIG. 24 includes an e-mail address and password input field 1061 and a "login" button 1062. In step S58, the user enters an e-mail address and password in the input field 1061 of the login screen 1060 and presses the "login" button 1062.

In step S59, the image forming apparatus 12 specifies an e-mail address, a password, and a service type, and requests the authentication / authorization unit 131 to log in. For example, the process of step S59 can be realized by a primitive authentication function and a higher-level API that reads various information.

In step S60, the authentication / authorization unit 131 authenticates the user by using the e-mail address, password, and service type specified in step S59. If the user is successfully authenticated, the authentication / authorization unit 131 issues an authentication ticket. The authentication / authorization unit 131 notifies the image forming apparatus 12 of the issued authentication ticket, the tenant ID of the authenticated user, the user information, the authority information, and the license information. User information, authority information, and license information are acquired from the management module of each information in steps (not shown). In step S61, the image forming apparatus 12 saves the notified tenant ID.

Further, in step S62, the image forming apparatus 12 confirms the notified license information and authority information. Here, a case where the service license of the trial contract of "XXX service" has been registered and the service usage authority is given will be described.

In step S63, the image forming apparatus 12 requests the authentication agent apparatus 31 of the service providing system 30 to acquire the “XXX service” screen data including the authentication ticket. In step S64, the authentication agent device 31 confirms whether or not the authentication ticket is included.

Here, the explanation will be continued assuming that the authentication ticket was included. In step S65, the authentication agent device 31 requests the authentication / authorization unit 131 to confirm the validity of the authentication ticket. Here, it is assumed that the validity of the authentication ticket has been confirmed. In step S66, the authentication agent device 31 acquires the "XXX service" screen data from the service providing device 32, and provides the image forming device 12 with the "XXX service" screen data.

In the first use case, a user who has not opened a tenant can try the service after applying for a trial.

《Second use case》
25 and 26 are sequence diagrams of an example of a procedure in which a user who has already opened a tenant applies for a trial and tries the service. Since the second use case is the same as the first use case except for a part, the description thereof will be omitted as appropriate.

The processing of steps S101 to S103 is the same as that of steps S1 to S3 of FIG. In the second use case, it is assumed that the user presses the "login" button 1012 on the application screen 1010 displayed on the operation panel 602 in step S104.

For example, the "Login" button 1012 has the URL of the "XXX service".
"Https://xxx.example.com/top?q=service%3Dxxx%26productId%3D12345%26country%3DJP" is embedded.

In step S105, the image forming apparatus 12 requests the authentication agent apparatus 31 of the service providing system 30 to acquire the “XXX service” screen data.

Since the processing of steps S106 to S114 is the same as the processing of steps S53 to S61 of FIG. 23, the description thereof will be omitted. In step S115, the image forming apparatus 12 confirms the notified license information and authority information. If the service license of the "XXX service" has been registered and the service usage authority is granted, the process proceeds to step S125. If the service license of the "XXX service" has been registered and the service usage authority is not obtained, the image forming apparatus 12 displays an error screen on the operation panel 602. If the service license of "XXX service" has been registered and the license has expired, the image forming apparatus 12 displays an error screen on the operation panel 602, and once the trial contract or the license of this contract is registered, the trial contract cannot be made again. To do so. If the service license of the trial contract of "XXX service" is not registered and the tenant administrator authority is not registered, the image forming apparatus 12 displays an error screen on the operation panel 602. The case where the service license of the trial contract of "XXX service" is not registered and the tenant administrator authority is described below will be described. In step S116, the image forming apparatus 12 acquires the service application screen data from the authentication / authorization unit 131 of the service platform providing system 40.

The image forming apparatus 12 displays, for example, the service application screen 1070 of FIG. 27 on the operation panel 602. FIG. 27 is an image diagram of an example of the service application screen. The service application screen 1070 includes a check box 1071 for "agreeing to the terms" and a "apply" button 1072.

In step S117, the user presses the "apply" button 1072 after checking the check box 1071. In step S118, the image forming apparatus 12 specifies an authentication ticket, a service type, and a product code, and applies for service registration to the account registration unit 123. In step S118, the account registration unit 123 may authenticate the client of the image forming apparatus 12 and return an error if it is not a reliable device.

In step S119, the account registration unit 123 specifies an authentication ticket, a service type, a product code, and a contract type (trial), and requests the license management unit 134 to issue a service license for the trial contract. If the role of the user identified from the authentication ticket is not administrator, the license management unit 134 returns an error. If the tenant specified from the authentication ticket already holds a license for the specified service type, the license management unit 134 returns an error to prevent multiple trial contracts.

In step S120, the license management unit 134 requests the license management server 52 to issue a license ID for the trial contract. The license management server 52 issues and stores the license ID of the trial contract.

Further, the license management server 52 notifies the license management unit 134 of the license ID of the issued trial contract. The license management unit 134 stores the license ID of the trial contract in the license information storage unit 154.

In addition, the license management unit 134 notifies the account registration unit 123 of the license ID of the trial contract. In step S121, the account registration unit 123 notified of the license ID of the trial contract specifies the authentication ticket and the license ID, and requests the license management unit 134 to activate the license ID of the trial contract.

In step S122, the license management unit 134 activates the license ID of the trial contract that is the target of activation stored in the license information storage unit 154. The license management unit 134 notifies the license management server 52 of the license ID of the trial contract to be activated, and activates the license ID of the trial contract.

In step S123, the account registration unit 123 specifies management and use as the authentication ticket, e-mail address, service type, and authority, and requests the authentication / authorization unit 131 to set the access right. After the authentication / authorization unit 131 sets the access right, the account registration unit 123 transmits the account creation completion screen 1050 as shown in FIG. 22 to the image forming apparatus 12 and displays it on the operation panel 602.

In step S124, the user operates the image forming apparatus 12 and presses, for example, the "XXX service" icon displayed on the operation panel 602 of the image forming apparatus 12 to request the activation of the "XXX service".

In step S125, the image forming apparatus 12 requests the authentication agent apparatus 31 of the service providing system 30 to acquire the “XXX service” screen data. In step S126, the authentication agent device 31 confirms whether or not the authentication ticket is included.

Here, the explanation will be continued assuming that the authentication ticket was included. In step S127, the authentication agent device 31 requests the authentication / authorization unit 131 to confirm the validity of the authentication ticket. Here, it is assumed that the validity of the authentication ticket has been confirmed.

In step S128, the authentication agent device 31 acquires the "XXX service" screen data from the service providing device 32, and provides the image forming device 12 with the "XXX service" screen data.

In the second use case, a user who has already opened a tenant can try the service after applying for a trial.

《Third use case》
28 and 29 are sequence diagrams of an example of a procedure in which a user who has opened a tenant registers a user for a service for which a trial application has been applied. Since the third use case is the same as the first use case except for a part, the description thereof will be omitted as appropriate.

The processing of steps S151 to S156 is the same as that of steps S1 to S6 of FIG. In step S157, the image forming apparatus 12 confirms whether or not the tenant ID is stored. Here, it is assumed that the image forming apparatus 12 stores the tenant ID.

In step S158, the image forming apparatus 12 requests the license management unit 134 of the service platform providing system 40 to specify the tenant ID and search for the license information. The license management unit 134 searches for the license information registered in the designated tenant and provides it to the image forming apparatus 12.

In step S159, the image forming apparatus 12 confirms the license information and displays the account creation screen as shown in FIG. 19 on the operation panel 602. The image forming apparatus 12 displays an error screen when the account cannot be created. If you cannot create an account, for example, if the number of users in use has reached the upper limit of the quantity (number of users), or if you do not have a valid trial license (this contract has been completed, the license has expired, you have not applied for a trial), etc. is there.

In step S160, the user inputs an e-mail address in the e-mail address input field 1021 on the account creation screen 1020 and presses the "apply" icon 1022. The image forming apparatus 12 applies to the account registration unit 123 to add a user in step S161. In the application for adding a user, the tenant ID, e-mail address, and service type are specified. In step S161, the account registration unit 123 may authenticate the client of the image forming apparatus 12 and return an error if it is not a reliable device. Further, if the user cannot be added for the same reason as in step S159, the account registration unit 123 may return an error.

In step S162, the account registration unit 123 specifies the e-mail address included in the application for adding a user in step S161, and requests the user management unit 133 to search for user information. The user management unit 133 searches the user information storage unit 153, and returns the search result of whether or not the e-mail address included in the application for adding the user in step S161 has been registered to the account registration unit 123. If it is a registered e-mail address, the account registration unit 123 cannot create a user with the same e-mail address, so an error is returned to the image forming apparatus 12.

In step S163, the account registration unit 123 saves the application information. The application information includes the URL (including random numbers), the expiration date of the URL, the context = user addition, the email address, and the service type. The URL (including random numbers) is a URL for displaying the account information input screen 1040 of FIG.

In step S164, the account registration unit 123 sends an e-mail containing the URL for displaying the account information input screen of FIG. 21 to the e-mail address included in the application for adding the user in step S161. Further, in step S165, the image forming apparatus 12 causes the operation panel 602 to display the mail transmission completion screen 1030 of FIG.

In step S166, the user operates the user terminal 11 and requests access to the URL for displaying the account information input screen described in the e-mail. In step S167, the user terminal 11 requests the account registration unit 123 to access the URL for displaying the account information input screen described in the e-mail.

In step S168, the account registration unit 123 reads out the application information corresponding to the URL requested to be accessed. The application information read in step S168 is the one saved in step S163. After step S168, the account registration unit 123 holds the application information in association with the session ID (Cookie) or the like.

The account registration unit 123 causes the display device 502 of the user terminal 11 to display the account information input screen 1040 as shown in FIG. 21 if the expiration date of the URL included in the application information has not passed. The account registration unit 123 returns an error to the user terminal 11 if the expiration date of the URL included in the application information has passed.

In step S169, the user operates the user terminal 11, enters the password, surname, and first name in the input field 1041, and then presses the "create account" button 1042. In step S170, the user terminal 11 requests the account registration unit 123 to create an account by designating a password, a surname, and a first name.

Further, in step S171, the account registration unit 123 specifies a tenant ID, an e-mail address, a password, a surname, a first name, and an administrator role, and requests the user management unit 133 to create a user. The user management unit 133 creates a user and stores it in the user information storage unit 153. Since the third use case is an example in which a tenant has already been opened, the role may be a general user.

In step S172, the account registration unit 123 specifies management and use as an e-mail address, service type, and authority, and requests the authentication / authorization unit 131 to set the access right. The authority may be use only. If the usage authority cannot be added for the same reason as in step S159, the authentication / authorization unit 131 may return an error. After the authentication / authorization unit 131 sets the access right, the account registration unit 123 transmits the account creation completion screen 1050 of FIG. 22 to the user terminal 11 and displays it on the display device 502 of the user terminal 11 in step S173.

FIG. 30 is a sequence diagram of an example of a procedure in which a user who has registered as a user for the trial application service uses the service. The processing of steps S201 to S205 is the same as that of steps S51 to S55 of FIG.

In step S206, the image forming apparatus 12 confirms whether or not the tenant ID is stored. Here, it is assumed that the tenant ID has been saved. In step S207, the image forming apparatus 12 displays, for example, the login screen 1080 of FIG. 31 on the operation panel 602. FIG. 31 is an image diagram of another example of the login screen.

The login screen 1080 of FIG. 31 is the login screen 1060 of FIG. 24 with the "add account" button 1083 added. When the "add account" button 1083 of FIG. 31 is pressed, the process proceeds to step S156 of FIG. 28.

In step S208, the user enters an e-mail address and password in the input field 1081 of the login screen 1080 and presses the "login" button 1082. In step S209, the image forming apparatus 12 specifies an e-mail address, a password, and a service type, and requests the authentication / authorization unit 131 to log in.

In step S210, the authentication / authorization unit 131 authenticates the user by using the e-mail address, password, and service type specified in step S209. If the user is successfully authenticated, the authentication / authorization unit 131 issues an authentication ticket. The authentication / authorization unit 131 notifies the image forming apparatus 12 of the issued authentication ticket, the tenant ID of the authenticated user, the user information, the authority information, and the license information. User information, authority information, and license information are acquired from the management module of each information in steps (not shown).

In step S211 the image forming apparatus 12 confirms the notified license information and authority information. Here, a case where the service license of the trial contract of "XXX service" has been registered and the service usage authority is given will be described. The processing after step S212 is the same as the processing after step S63 in FIG.

In the third use case, a user who has opened a tenant can register as a user for a service for which a trial application has been made and try the service.

"Screen transition"
The screen transitions in the first to third use cases can be represented as shown in FIG. FIG. 32 is a screen transition diagram of an example of the information processing system according to the present embodiment. The image forming apparatus 12 transitions to the display of the application screen 1010 when the user presses, for example, the "use" button 1001 to select a service to be tried while the application list screen 1000 is displayed on the operation panel 602. ..

When the "Create account" button 1011 on the application screen 1010 is pressed, the image forming apparatus 12 shifts the display of the operation panel 602 to the account creation screen 1020 or the error screen.

For example, in the first use case, the account creation screen 1020 is displayed when the tenant ID is not stored in the image forming apparatus 12. Further, in the third use case, when the tenant ID is stored in the image forming apparatus 12 and the number of users using the license information has not reached the quantity (number of users), the screen transitions to the account creation screen 1020. ..

Further, in the third use case, when the tenant ID is stored in the image forming apparatus 12 and the number of users using the license information has reached the quantity (number of users), the error screen is displayed. Furthermore, if there is no valid trial license, such as this contract has been completed, the license has expired, or you have not applied for a trial, the error screen will be displayed. If you have not applied for a trial, you may automatically issue a license.

When the "apply" icon 1022 on the account creation screen 1020 is pressed, the image forming apparatus 12 shifts the display of the operation panel 602 to the mail transmission completion screen 1030. When the URL for displaying the account information input screen described in the e-mail is clicked by the user, the user terminal 11 causes the display device 502 to display the account information input screen 1040.

When the user terminal 11 receives an operation for displaying the terms of use from the user, the user terminal 11 transitions the account information input screen 1040 to the terms of use screen. Therefore, the user can confirm the contents of the terms of use. When the "account creation" button 1042 on the account information input screen 1040 is pressed, the user terminal 11 displays the account creation completion screen 1050 on the display device 502.

In the first use case, when the account creation completion screen 1050 is displayed on the display device 502 of the user terminal 11, tenant opening, user creation, license issuance, and authority setting are completed. Further, in the third use case, after the account creation completion screen 1050 is displayed on the display device 502 of the user terminal 11, the user creation and the authority setting are completed.

When the "login" button 1012 on the application screen 1010 is pressed, the image forming apparatus 12 displays the login screen 1060 on the operation panel 602 when the tenant ID is not saved. Further, the image forming apparatus 12 displays the login screen 1080 on the operation panel 602 when the tenant ID is saved.

When the "login" button 1062 of the login screen 1060 is pressed, the image forming apparatus 12 displays the service application screen 1070, the service use screen, or the error screen on the operation panel 602.

If the license is not registered and the tenant administrator authority is available, the image forming apparatus 12 displays the service application screen 1070 on the operation panel 602. When the image forming apparatus 12 receives an operation for displaying the terms of use from the user, the service application screen 1070 is changed to the terms of use screen.

Further, when the "apply" button 1072 on the service application screen 1070 is pressed, the image forming apparatus 12 displays the application completion screen on the operation panel 602. In the second use case, when the application completion screen is displayed on the operation panel 602, the license issuance and the authority setting are completed.

If the license has been issued and the service use authority is granted, the image forming apparatus 12 displays the service use screen on the operation panel 602. If the license is not registered and the tenant administrator authority is not registered, the image forming apparatus 12 displays an error screen on the operation panel 602. If the license has been issued, the license has expired, or the service usage authority is not granted, the image forming apparatus 12 displays an error screen on the operation panel 602.

When the "login" button 1082 of the login screen 1080 that transitions when the tenant ID is saved is pressed, the image forming apparatus 12 displays the service use screen or the error screen on the operation panel 602.

If the license has been issued and the service use authority is granted, the image forming apparatus 12 displays the service use screen on the operation panel 602. If the license has been issued and the service usage authority is not granted, the image forming apparatus 12 displays an error screen on the operation panel 602. If the license has not been issued, the image forming apparatus 12 displays an error screen on the operation panel 602.

When the "add account" button 1083 on the login screen 1080 is pressed, the image forming apparatus 12 transitions to the account creation screen 1020 of FIG. 19 and proceeds to the process of creating an account.

(Summary)
In the information processing system 1 according to the first embodiment, an account registration for a trial in which a trial application for a service provided to an electronic device such as an image forming apparatus 12 can be made from a user terminal 11 and an image forming apparatus 12. The function is realized.

Since the information processing system 1 according to the first embodiment can apply for a trial from the user terminal 11 and the image forming apparatus 12, it is highly convenient for the user. Further, the information processing system 1 according to the first embodiment is provided with an account registration application 114 and an account registration unit 123 that realize an account registration function for a trial in the service platform providing system 40. The developer of the service provided to the electronic device can easily develop a service that can be tried by using the account registration function for the trial provided by the service platform providing system 40.
[Second Embodiment]
The first embodiment is an example in which an account registration for the service platform providing system 40 is performed from the user terminal 11 or the image forming apparatus 12. In the second embodiment, the account registration for the service platform providing system 40 is performed from the application market providing server 21. Since the second embodiment is the same as the first embodiment except for a part, the description of the same part will be omitted as appropriate.

FIG. 33 is a sequence diagram of an example of a procedure in which a user applies for a trial or makes a contract by registering an account from the application market. In step S301, the user operates the user terminal 11 and requests login to the application market providing system 20. In step S302, the user terminal 11 specifies the customer ID and password of the application market providing system 20 and requests the application market providing system 20 to log in. The customer management unit 22 of the application market providing system 20 authenticates with the designated customer ID and password, and permits the login of the user who succeeds in the authentication.

The user who is permitted to log in operates the user terminal 11 in step S303 to request the acquisition of the product / service list. In step S304, the user terminal 11 requests the product management unit 23 of the application market providing system 20 to acquire the product / service list. The product management unit 23 displays a list of products / services on the display device 502 of the user terminal 11.

In step S305, the user operates the user terminal 11 and requests the purchase of the service from the product / service list. The user terminal 11 requests the contract management unit 24 of the application market providing system 20 to purchase the service. In step S307, the contract management unit 24 requests the customer management unit 22 to acquire the account information, and acquires the e-mail address, password, surname, and first name. The contract management unit 24 may have the user input the password instead of acquiring the password from the customer management unit 22. The application market providing system 20 and the service platform providing system 40 may introduce a single sign-on (SSO) mechanism.

In step S308, the contract management unit 24 requests the account registration unit 123 of the service platform providing system 40 to create an account by designating an e-mail address, password, surname, first name, service type, product code, and country. Since the processes after step S309 excluding step S315 are the same as the processes after step S19 in FIG. 16, the description thereof will be omitted.

In the sequence diagram of FIG. 33, since the request for account creation in step S308 uses the API for important account registration such as tenant opening, user creation, and license issuance, access control is required. ..

According to the sequence diagram of FIG. 33, the trial contract and the main contract can be made online, and the account can be automatically registered, so that the account registration can be facilitated. For example, the service platform providing system 40 may allow account registration without additional credit if requested by a trusted electronic device.

When this contract is made online, it is necessary to register customer information in the application market providing system 20 on credit. Therefore, when registering an account for this contract online, it is necessary to realize it in cooperation with the reliable application market providing system 20.

Unlike step S25 of FIG. 16, step S315 does not have to pass the contract form. Since it is a request from the reliable application market providing system 20, the license is issued by believing in the specified product code.

However, the presence or absence of credit may be different depending on the difference in customer information registration in the application market providing system 20. For example, only a trial license is issued to a customer who is simply registered without credit in the application market providing system 20. It is also possible to issue this contract license to customers who have credit and are registered in the application market provision system 20 including payment methods.

The service platform providing system 40 cannot determine the difference in customer information registration in the application market providing system 20. Therefore, the platform providing system 40 does not check which contract type license is issued, but the application market providing system 20 controls it.

FIG. 34 is a flowchart of an example of access control at the time of opening a tenant. The account registration unit 123 of the service platform providing system 40 performs client authentication in step S351.

If the request is from a system that allows API calls such as the application market providing system 20 in step S352, the account registration unit 123 proceeds to step S353 and opens a tenant without reconfirming the e-mail address.

If the request is not from the system that allows the API call, the account registration unit 123 proceeds to step S354. If the request is from a reliable device in step S354, the account registration unit 123 proceeds to step S355 and opens a tenant with confirmation of the e-mail address. If the request is not from a reliable device in step S354, the account registration unit 123 proceeds to step S356 and returns an error.

FIG. 35 is a flowchart of an example of access control at the time of issuing a license. The account registration unit 123 authenticates the client in step S361. If the request is from a system that allows API calls such as the application market providing system 20 in step S362, the account registration unit 123 proceeds to step S363 and issues a license.

If the request is not from the system that allows the API call, the account registration unit 123 proceeds to step S364. If the request is from a reliable device in step S364, the account registration unit 123 proceeds to step S365. If the trial license issuance request is made in step S365, the account registration unit 123 proceeds to step S363 to issue the trial license.

If the request is not from a reliable device in step S364, the account registration unit 123 proceeds to step S366 and returns an error. Even if the request for issuing the trial license is not made in step S365, the account registration unit 123 returns an error in step S366. The confirmation of the product code in step S27 of FIG. 16 corresponds to step S365.

(Summary)
In the information processing system 1 according to the second embodiment, the account registration of the trial license and the contract license can be performed from the application market providing system 20.

The present invention is not limited to the above-described embodiments specifically disclosed, and various modifications and modifications can be made without departing from the scope of claims. The tenant management unit 132, the user management unit 133, and the license management unit 134 are examples of management means. The image forming apparatus 12 is an example of a service utilization apparatus. The account registration unit 123 is an example of an account registration means. The authentication / authorization unit 131 is an example of an authentication means.

1 Information processing system 10 User system 11 User terminal 12 Image forming device 20 App market providing system 21 App market providing server 30 Service providing system 31 Authentication agent device 32 Service providing device 40 Service platform providing system 50 Business platform providing system 51 Business terminal 52 License management server 101 Application 102 Common service 103 Database (DB)
104 Platform API (Application Programming Interface)
111 Portal Service App 112 Scan Service App 113 Print Service App 114 Account Registration App 121 Scan Service Department 122 Print Service Department 123 Account Registration Department 131 Authentication / Authorization Department 132 Tenant Management Department 133 User Management Department 134 License Management Department 135 Equipment Management Department 136 Temporary image storage unit 137 Data storage unit 138 Image processing workflow control unit 139 Log collection unit 141 Message queue 142 Worker 151 Log information storage unit 152 Tenant information storage unit 153 User information storage unit 154 License information storage unit 155 Equipment information storage unit 156 Temporary Image storage unit 157 Job information storage unit 158 Application-specific setting information storage unit 500 Computer 501 Input device 502 Display device 503 External I / F
503a Recording medium 504 RAM
505 ROM
506 CPU
507 Communication I / F
508 HDD
601 Controller 602 Operation Panel 603 External I / F
603a Recording medium 604 Communication I / F
605 Printer 606 Scanner 611 CPU
612 RAM
613 ROM
614 NVRAM
615 HDD
B Bus FW Firewall N1-N3 Network

Japanese Unexamined Patent Publication No. 2014-170522

Claims (19)

An information processing system that includes one or more information processing devices.
The presence or absence of provision of a service to the service using apparatus, and at least one of the tissue or user management means for more management license,
A service providing means for providing a service associated with the license to the service-using device, and
A reception means for accepting a trial application for the service, which includes identification information for identifying the service selected in the service use device, and
An account registration means that accepts an application for trial of the service from the service use device and registers an account with the management means so that the service can be tried from the service use device.
Have a,
The account registration method is
When information regarding the account registration is received from an external device different from the service use device, the account registration of the organization or the user is performed based on the information, and the account is linked to the organization or the user based on the identification information. An information processing system characterized in that the license is registered . 1. The account registration means is characterized in that at least one account of an organization, a license and a user is registered with the management means so that the service can be tried from the service use device. The information processing system described. The account registration means manages the service so that when an application for trial use of the service is received from the service use device whose organization is not registered in the management means, the service can be tried from the service use device. The information processing system according to claim 2, wherein an organization, a license, and a user's account are registered for the means. 3. The account registration means is characterized in that an e-mail address is specified in an application for a trial of the service, and the account registration is not performed when the specified e-mail address has already been registered. The information processing system described. The account registration means is such that when an organization receives an application for trial use of the service from the service use device registered in the management means, the service use device can try the service. The information processing system according to claim 2, wherein a license and a user account are registered. The information processing system according to claim 5, wherein the account registration means does not register the license when the license of the service is registered in the organization registered in the management means. The account registration means is such that when an application for trial use of the service is received from the service use device whose organization and license are registered in the management means, the service can be tried from the service use device. The information processing system according to claim 2, wherein a user's account is registered with respect to the management means. The information processing system according to claim 7, wherein the account registration means does not register the user's account when the license registered in the management means is the license of this contract. Based on the login request from the service use device, the service use device authenticates with the user information managed by the management means, and when the authentication is successful, the organization, license and user information managed by the previous term management means is used. The information processing system according to claim 2, further comprising an authentication means for returning to. The account registration means is characterized in that the client authentication of the service use device that has received the application for trial of the service is performed, and the account registration is performed when the service use device is a reliable device. 9. The information processing system according to any one of the items. The account registration means is characterized in that, as a result of client authentication of the service use device, when the service use device is registered as the service use device for which this contract is permitted, an application for this contract is further accepted. The information processing system according to claim 10. An information processing system including a service utilization device and one or more information processing devices that provide services to the service utilization device.
One or more information processing devices
The presence or absence of provision of a service to the service using apparatus, and at least one of the tissue or user management means for more management license,
A service providing means for providing a service associated with the license to the service-using device, and
A reception means for accepting a trial application for the service, which includes identification information for identifying the service selected in the service use device, and
An account registration means that accepts an application for trial of the service from the service use device and registers an account with the management means so that the service can be tried from the service use device.
Based on the login request from the service use device, the service use device authenticates with the user information managed by the management means, and when the authentication is successful, the organization, license and user information managed by the previous term management means is used. Authentication means to return to
Have,
The account registration method is
When information regarding the account registration is received from an external device different from the service use device, the account registration of the organization or the user is performed based on the information, and the account is linked to the organization or the user based on the identification information. To register the above license
Characterized by
The service utilization device stores the information of the organization acquired from the authentication means when the authentication by the authentication means is successful, and displays the information input screen required for the login request to the authentication means on the organization. An information processing system characterized by switching according to the presence or absence of storage of information. When the information of the organization is stored, the service use device has a mechanism for receiving a transition instruction from the user to the screen for registering the user's account on the input screen of the information required for the login request to the authentication means. The information processing system according to claim 12, wherein the information processing system is provided. The service use device receives an account registration request from the account registration screen, and when the information of the organization is not saved, requests the account registration means of the organization, the license, and the user to register the account of the organization. The information processing system according to claim 12, wherein when the information is stored, the user's account registration is requested from the account registration means. When the information of the organization is stored, the service utilization device requests the management means for the information of the license held by the organization, and when the organization holds the trial license, the user's account registration. The information processing system according to claim 14, further comprising requesting the account registration means. The service use device receives a login request from the input screen, and if the license information received from the authentication means does not have a license for the service, the service use device requests the account registration means to register the license, and the license for the service is released. The information processing system according to claim 12, wherein if there is, the information processing apparatus is requested to use the service. The presence or absence of provision of a service to the service using apparatus, and at least one of the tissue or user management means for more management license,
A service providing means for providing a service associated with the license to the service-using device, and
A reception means for accepting a trial application for the service, which includes identification information for identifying the service selected in the service use device, and
An account registration means that accepts an application for trial of the service from the service use device and registers an account with the management means so that the service can be tried from the service use device.
Have a,
The account registration method is
When information regarding the account registration is received from an external device different from the service use device, the account registration of the organization or the user is performed based on the information, and the account is linked to the organization or the user based on the identification information. An information processing device characterized in that the license is registered . An account registration method executed in an information processing system including one or more information processing devices.
The presence or absence of provision of services to the management means the service using apparatus, and at least one of the tissue or user, and a management step of more management license,
A service provision step of providing a service associated with the license to the service-using device, and
A reception step for accepting a trial application for the service including identification information that identifies the service selected in the service use device, and
An account registration step of accepting an application for trial of the service from the service-using device and registering an account with the management means so that the service can be tried from the service-using device.
Have a,
The account registration step
When information regarding the account registration is received from an external device different from the service use device, the account registration of the organization or the user is performed based on the information, and the account is linked to the organization or the user based on the identification information. An account registration method characterized by registering the license . Computer,
The presence or absence of provision of a service to the service using apparatus, and at least one of the tissue or user management means for more management license,
A service providing means for providing a service associated with the license to the service-using device,
A reception means for accepting a trial application for the service, which includes identification information for identifying the service selected in the service use device.
An account registration means that accepts an application for trial of the service from the service-using device and registers an account with the management means so that the service can be tried from the service-using device.
To function as,
The account registration method is
When information regarding the account registration is received from an external device different from the service use device, the account registration of the organization or the user is performed based on the information, and the account is linked to the organization or the user based on the identification information. To register the license
A program characterized by that .

Images