Information processing device, computer program product, and recording medium

Abstract

The present invention provides an information processing device, a computer program product, and a recording medium, wherein when the information processing device is shared by multiple organizations with different information protection policies, the information protection policy of the organization to which the user belongs can be applied when the user cannot be determined. In the present invention, regarding the determination element of the information processing device, the information processing device is shared by multiple organizations with different information protection policies, and the determination element determines the organization to which the user belongs before determining the user who uses the information processing device; the application element applies the information protection policy corresponding to the organization determined by the determination element to the information processing device.

Description

Technical Field

[0001] The present invention relates to an information processing device and a recording medium. Background Art

[0002] Patent document 1 discloses the following: compared with a situation where users who are not registered in a system within an organization are treated as guests and are uniformly granted usage rights, the purpose is to grant usage rights in a more detailed manner taking into account the relationship between the guest and the organization. The devices installed in the sites within the organization are managed by the device management system of each site. People belonging to the site are registered as users in the device management system of the site. People who are members of the organization but belong to other sites are not registered in the device management system. The directory service stores information such as the email addresses of all members of the organization. The visitor enters the email address into the device to log in. The device management system queries the directory service whether the email address belongs to a member of the organization. If so, the user is granted usage rights within the organization. If not, the user is granted usage rights outside the organization.

[0003] [Background Technology Literature]

[0004] [Patent Document]

[0005] [Patent Document 1] Japanese Patent Application Publication No. 2017-167716 Summary of the invention

[0006] [Problems to be solved by the invention]

[0007] In the case where an information processing device is shared by multiple organizations with different information protection policies, it has been impossible to apply the information protection policy of the organization to which the user belongs without being able to identify the user. Therefore, an object of the present invention is to provide an information processing device and an information processing program, wherein in the case where an information processing device is shared by multiple organizations with different information protection policies, the information protection policy of the organization to which the user belongs can be applied without being able to identify the user.

[0008] [Methods to solve the problem]

[0009] The gist of the present invention to achieve the object lies in the following inventions.

[0010] The first invention is an information processing device, comprising: a determination element, wherein the information processing device is shared by multiple organizations with different information protection policies, and the determination element first determines the organization to which the user belongs before determining the user who uses the information processing device; and an application element, which applies the information protection policy corresponding to the organization determined by the determination element to the information processing device.

[0011] A second invention is the information processing device according to the first invention, wherein the determination element selectively displays organizations that share the information processing device to the user, and displays the organization of the user who has just sent information to the information processing device in the upper layer.

[0012] The third invention is the information processing device described in the second invention, wherein the information processing device receives information as a processing object from a user, and the information includes information for determining the user, and after determining the user, the information processing device processes the information as a processing object when the determined user matches the user in the received information.

[0013] The fourth invention is the information processing device described in the first invention, which further includes a generating element, which generates information used to determine the organization that shares the information processing device; and the determining element prompts the user to input the information generated by the generating element, and determines the organization to which the user belongs based on the input information.

[0014] A fifth invention is the information processing device according to the first invention, wherein when the organization identified by the identification element does not match the organization sharing the information processing device, the process of identifying the user is not performed.

[0015] The sixth invention is the information processing device described in the fourth invention, wherein the information processing device receives information as a processing object from a user, the information includes information for determining the organization to which the user belongs, and the determination element is controlled in the following manner: prompting the user to input the information generated by the generation element, and determining the organization to which the user belongs based on the input information, and processing the information as a processing object when the determined organization matches the organization in the received information.

[0016] The seventh invention is the information processing device according to the sixth invention, wherein when the received information includes a plurality of organizations, the determination element does not process the information to be processed, or determines the information protection policy according to a predetermined rule.

[0017] The eighth invention is a recording medium recording an information processing program, wherein the information processing program is used to enable a computer in an information processing device to function as the following components: a determination component, wherein the information processing device is shared by multiple organizations with different information protection policies, and the determination component determines the organization to which the user belongs before determining the user who uses the information processing device; and an application component, which applies the information protection policy corresponding to the organization determined by the determination component to the information processing device.

[0018] [Effects of the Invention]

[0019] According to the information processing device of the first invention, when the information processing device is shared by a plurality of organizations having different information protection policies, the information protection policy of the organization to which the user belongs can be applied without specifying the user.

[0020] According to the information processing apparatus of the second aspect of the present invention, if the user has just sent information to the information processing apparatus, the user can easily select the organization to which the user belongs.

[0021] According to the information processing device of the third aspect of the present invention, after the user is identified, the information to be processed can be processed without additional instructions.

[0022] According to the information processing apparatus of the fourth aspect of the present invention, it is possible for the user to input information for specifying an organization generated by the information processing apparatus.

[0023] According to the information processing apparatus of the fifth aspect of the present invention, when the identified organization is not an organization that shares the information processing apparatus, it is not necessary to identify the user.

[0024] According to the information processing apparatus of the sixth aspect of the present invention, when the tissue input by the user matches the tissue among the received treatment targets, the information to be processed can be processed.

[0025] According to the information processing apparatus of the seventh aspect of the present invention, when the received processing targets include a plurality of organizations, the information to be processed can be not processed or the information protection policy can be determined according to a predetermined rule.

[0026] According to the information processing program of the eighth invention, when a plurality of organizations having different information protection policies share an information processing apparatus, the information protection policy of the organization to which the user belongs can be applied without specifying the user. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 This is a conceptual block diagram of a configuration example of the first embodiment.

[0028] Figure 2This is an explanatory diagram showing an example of the system configuration according to the first embodiment.

[0029] Figure 3 This is an explanatory diagram showing an example of the data structure of the user / organization management table.

[0030] Figure 4 This is an explanatory diagram showing an example of the data structure of the organization policy management table.

[0031] Figure 5 This is a flowchart showing a processing example of the first embodiment.

[0032] Figure 6 This is a flowchart showing a processing example of the first embodiment.

[0033] Figure 7 This is a conceptual block diagram of a configuration example of the second embodiment.

[0034] Figure 8 This is a flowchart showing a processing example of the second embodiment.

[0035] Fig. 9 This is a conceptual block diagram of a configuration example of the third embodiment.

[0036] Fig.10 This is a flowchart showing a processing example of the third embodiment.

[0037] Fig.11 This is a conceptual block diagram of a configuration example of the fourth embodiment.

[0038] Fig.12 This is a flowchart showing a processing example of the fourth embodiment.

[0039] Fig.13 This is a conceptual module configuration diagram of a configuration example of the fifth embodiment.

[0040] Fig.14 This is a flowchart showing a processing example of the fifth embodiment.

[0041] Fig.15 This is a block diagram showing an example of the hardware configuration of a computer that realizes the present embodiment.

[0042] Description of Figure Numbers

[0043] 100: information processing device;

[0044] 105: display module;

[0045] 110: Login interface display control module;

[0046] 115: Organization list generation module;

[0047] 120: policy processing module;

[0048] 125: Organization determination module;

[0049] 130: strategy extraction module;

[0050] 135: Strategy application module;

[0051] 140: user authentication module;

[0052] 145: user management module;

[0053] 150: service processing module;

[0054] 155: communication module;

[0055] 160: sender extraction module;

[0056] 165: Service provision module;

[0057] 200: image processing device;

[0058] 250, 250A, 250B, 250C: user terminals;

[0059] 260, 260A, 260B, 260C: user;

[0060] 290: Communication lines;

[0061] 295: Shared office;

[0062] 300: User and organization management table;

[0063] 305: User ID column;

[0064] 310: Name column;

[0065] 315, 405: Organization ID column;

[0066] 400: Organization and Strategy Management Table;

[0067] 410: Strategy column;

[0068] S500~S599, S600~S699, S800~S899, S1000~S1099, S1200~S1299, S1400~S1499: steps;

[0069] 700: information processing device;

[0070] 715: Organization code (QR code) generation module;

[0071] 720: policy processing module;

[0072] 725: Organization code (QR code) acceptance module;

[0073] 770: Organization code (QR code) notification module;

[0074] 900: information processing device;

[0075] 910: Print receiving module;

[0076] 912: user information extraction module;

[0077] 914: Organization code extraction module;

[0078] 915: Organize code generation module;

[0079] 920: policy processing module;

[0080] 925: Organization determination module;

[0081] 965: printing processing module;

[0082] 970: Organization code notification module;

[0083] 1100: information processing device;

[0084] 1110: print receiving module;

[0085] 1112: user information extraction module;

[0086] 1114: tissue information extraction module;

[0087] 1115: User ID generation module;

[0088] 1120: policy processing module;

[0089] 1125: Organization determination module;

[0090] 1170: User ID notification module;

[0091] 1300: information processing device;

[0092] 1310: print receiving module;

[0093] 1312: user information extraction module;

[0094] 1314: Organization code extraction module;

[0095] 1370: printer driver;

[0096] 1375: Organization code;

[0097] 1380: Printing files;

[0098] 1385: User information;

[0099] 1501: CPU;

[0100] 1502: ROM;

[0101] 1503: RAM;

[0102] 1504: host bus;

[0103] 1505: Bridge;

[0104] 1506: external bus;

[0105] 1507: interface;

[0106] 1508: keyboard;

[0107] 1509: pointing device;

[0108] 1510: Display;

[0109] 1511: HDD;

[0110] 1512: Driver;

[0111] 1513: Removable recording media;

[0112] 1514: connection port;

[0113] 1515: External connection device;

[0114] 1516: Ministry of Communications;

[0115] 1517: data reading unit;

[0116] 1518: Data output unit. DETAILED DESCRIPTION

[0117] Hereinafter, various preferred embodiments of the present invention will be described with reference to the accompanying drawings.

[0118] <<First embodiment>>

[0119] Figure 1 A conceptual block diagram showing a configuration example of the first embodiment.

[0120] In addition, the so-called module refers to software (as an interpretation of "software", including computer programs (computer program)), hardware and other parts that can be logically separated in general. Therefore, the module in this embodiment refers not only to the module in the computer program, but also to the module in the hardware structure. Therefore, this embodiment has both computer programs (for example, programs used to make the computer execute each sequence, programs used to make the computer function as each element, and programs used to make the computer realize each function), system and method descriptions used to make it function as these modules. For the convenience of explanation, "storage", "storing...", and sentences equivalent to them are used. These sentences, when the embodiment is a computer program, indicate that... is stored in a storage device or is controlled in a manner of storing... in a storage device. In addition, the module can also be one-to-one in function, but in installation, one module can be composed of one program, or multiple modules can be composed of one program, or vice versa. One module can be composed of multiple programs. In addition, multiple modules can be executed by one computer, or one module can be executed by multiple computers using computers in a discrete or parallel environment. In addition, other modules can also be included in one module. In addition, below, the so-called "connection" is used for logical connection (for example, data transfer, instruction, reference relationship between data, login, etc.) in addition to physical connection. The so-called "predetermined" means that the process is specified before the process of the object is performed. The specification before the process of this embodiment is naturally included. Even after the process of this embodiment is started, it is still included as long as it is specified according to the situation and state at that time before the process of the object is performed, or according to the situation and state before that. In the case of multiple "predetermined values", they can be different values, or two or more values ​​("two or more values" of course include all values) are the same. In addition, the expression "if it is A, execute B" is used in the sense of "determine whether it is A, and if it is determined to be A, execute B". Among them, the case where it is not necessary to determine whether it is A is excluded. In addition, in the case of listing things like "A, B, C", unless otherwise specified, it is an example listing, including the case of selecting only one (for example, only A).

[0121] In addition, the so-called system or device includes a situation where multiple computers, hardware, devices, etc. are connected through a communication element such as a network ("network" includes a one-to-one communication connection), as well as a situation where it is realized by a single computer, hardware, device, etc. "Device" and "system" are used as synonyms of each other. Of course, "system" does not include a social "mechanism" (that is, a social system) that is a human agreement.

[0122] In addition, in each process of each module, or in each process when multiple processes are performed in a module, the information as the object is read from the storage device, and after the process is performed, the processing result is written out to the storage device. Therefore, the reading from the storage device before the process and the writing to the storage device after the process are sometimes omitted. In addition, as the storage device here, a hard disk drive, RAM (abbreviation of Random Access Memory, random access memory), an external storage medium, a storage device via a communication line, a register in a CPU (abbreviation of Central Processing Unit, central processing unit), etc. may also be included.

[0123] The information processing device 100 in this embodiment has the function of providing services to users, such as Figure 1 As shown in the example, it has a display module 105, a login interface display control module 110, an organization list generation module 115, a policy processing module 120, a user authentication module 140, a user management module 145, and a service processing module 150.

[0124] The information processing device 100 is shared by multiple organizations with different information protection policies. That is, the information processing device 100 can be used by users belonging to different organizations. The information protection policies of each organization may be different. Moreover, each user must comply with the information protection policy of the organization to which he belongs to use the information processing device 100.

[0125] The "information protection policy" mentioned here refers to the standard of information security measures for information assets in an organization, and generally includes a part called "security policy". For example, as an information protection policy stipulated by an organization, there are conditions such as authentication method, communication method, and whether monitoring log is required for information processing device 100. If the information processing device 100 does not meet these conditions, people belonging to the organization cannot use the services of the information processing device 100.

[0126] In addition, the so-called "the information processing device 100 is shared by multiple organizations with different information protection policies" refers to the following state: for example, the information processing device 100 may be used by multiple users, and the information protection policy stipulated by the organization to which the first user belongs is different from the information protection policy stipulated by the organization to which the second user belongs. In addition, the information processing device 100 can only be used after the user is identified. For example, as a method of identifying the user, there is authentication. There are cases where it is necessary to operate the information processing device 100 before the user is identified. For example, the operation of entering authentication information when authenticating the user belongs to this case. When entering authentication information, there are cases where the following measures are stipulated as information protection policies: the text to be entered is directly displayed on the display device, or displayed as hidden text, or nothing is displayed, etc. In this case, it is necessary to apply the information protection policy before the user is identified.

[0127] The display module 105 is connected to the login interface display control module 110. The display module 105 performs display according to the control of the login interface display control module 110. For example, under the control of the login interface display control module 110, a login operation interface is displayed to accept the service provided by the information processing device 100. The display module 105 is, for example, a display device such as a liquid crystal display or an organic EL display. In addition to being used for display, a touch screen or the like can also be used to accept user operations.

[0128] The login interface display control module 110 is connected to the display module 105, the organization list generation module 115, the policy processing module 120, and the user authentication module 140. The login interface display control module 110 controls the display module 105 to display the user login operation interface. For example, the user's organization list generated by the organization list generation module 115 and the user login operation interface are displayed on the display module 105. In addition, the user's operation can also be accepted. As such an operation, there are, for example, an operation of selecting an organization to which the user belongs from the organization list, an operation for login, and the like.

[0129] In addition, the login interface display control module 110 may also display the organization list in such a way that the organization that shares the information processing device 100 is displayed to the user, and the organization of the user who has just sent information to the information processing device 100 is displayed on the upper layer. For example, if the information processing device 100 has a printer function, the file information to be printed belongs to the information sent to the information processing device 100. Specifically, Figure 2As shown in the example of , when the user 260 issues a printing instruction using the user terminal 250 and the user 260 causes the printing to be performed in the image processing apparatus 200 , the organization to which the user 260 belongs may be displayed at the head of the list.

[0130] In addition, when displaying multiple organizations, in addition to this, they can also be displayed in order of the number of users belonging to them from most to least, or they can be displayed in order of the cumulative number of times used by the users belonging to them from most to least, or they can be displayed in order of the cumulative usage time of the users belonging to them from most to least.

[0131] The belonging organization list generation module 115 is connected to the login interface display control module 110, the user management module 145, and the service processing module 150. The belonging organization list generation module 115 generates a list of organizations to which the user who uses the information processing device 100 belongs. For example, the list of organizations may be generated by managing a plurality of organizations that can use the information processing device 100 or a plurality of organizations that can use the office where the information processing device 100 is installed.

[0132] Alternatively, the belonging organization list generating module 115 may generate the organization list so that the organization of the user who has just sent information to the information processing device 100 is displayed at the top.

[0133] The policy processing module 120 includes an organization determination module 125, a policy extraction module 130, and a policy application module 135, and is connected to the login interface display control module 110 and the user management module 145. The policy processing module 120 performs processing related to the policy of the information processing device 100. For example, by applying the information protection policy of the organization to which a user who wants to use the service of the information processing device 100 belongs, the user can use the information processing device 100.

[0134] Before determining the user who uses the information processing device 100 , the organization determination module 125 first determines the organization to which the user belongs.

[0135] For example, the affiliated organization identification module 125 receives an operation from a user from the organization list displayed by the display module 105 and identifies the organization selected from the list.

[0136] The policy extraction module 130 extracts the information protection policy corresponding to the organization specified by the belonging organization specification module 125 .

[0137] The policy application module 135 applies the information protection policy extracted by the policy extraction module 130 to the information processing device 100 .

[0138] The user authentication module 140 is connected to the login interface display control module 110 and the user management module 145. The user authentication module 140 authenticates the user according to the login operation. If the user passes the authentication, the user can use the information processing device 100 and receive the provision of services. If the user fails the authentication, the user cannot use the information processing device 100. For example, authentication includes checking the combination of the user ID and password of the user, biometric authentication such as fingerprints, authentication using objects held by the user such as IC cards, etc.

[0139] The user management module 145 is connected to the organization list generation module 115, the policy processing module 120, the user authentication module 140, and the service processing module 150. The user management module 145 manages users and the organizations to which the users belong.

[0140] The service processing module 150 includes a communication module 155, a sender extraction module 160, and a service provision module 165, and is connected to the organization list generation module 115 and the user management module 145. The service processing module 150 provides services to logged-in users.

[0141] The communication module 155 communicates with the terminal used by the user. Figure 2 As shown, the communication module 155 communicates with the user terminal 250. The communication module 155 may also receive information to be processed from the user, and the information includes information identifying the user.

[0142] The sender extraction module 160 extracts information identifying a user from the information received by the communication module 155 .

[0143] The service providing module 165 provides services to the user when the user authentication module 140 identifies the user. Figure 2 When the information processing apparatus 100 is incorporated into the image processing apparatus 200, the information processing apparatus 100 can perform printing, scanning, copying, fax transmission and reception, and the like.

[0144] The service providing module 165 may also process the information to be processed after the user is determined by the user authentication module 140 and when the determined user matches the user extracted by the sender extraction module 160. That is, when the user is determined, after the user sends the information to be processed, the sent processing is implemented. For example, in the case of a print job, an operation of "executing the print job without additional instructions" is performed. The "additional instructions" mentioned here, for example, printing instructions, etc. belong to this case. Specifically, after the user logs in, the user's print job can be executed immediately.

[0145] In addition, the so-called "information sent from the user terminal 250 to the information processing device 100 but not related to the process after the user logs in" is, for example, information such as the remote transmission of the settings of the information processing device 100. As a specific example, it can be instruction information for changing the time when the information processing device 100 enters the power saving mode (for example, instruction information for changing from 60 seconds to 2 minutes). In addition, when the information processing device 100 also has the function of storing information like a file server, it can also be information that is stored.

[0146] Figure 2 This is an explanatory diagram showing an example of the system configuration according to the first embodiment.

[0147] The image processing apparatus 200 includes the information processing apparatus 100. The image processing apparatus 200, the user terminal 250A, the user terminal 250B, and the user terminal 250C are connected to each other via a communication line 290. The communication line 290 may be wireless, wired, or a combination of both, and may be, for example, the Internet, an intranet, or the like as a communication infrastructure.

[0148] An image processing device 200 is set in a shared office 295, and there are a user 260 who is a user of the image processing device 200, a user 260A holding a user terminal 250A, a user 260B holding a user terminal 250B, and a user 260C holding a user terminal 250C. Each user 260 belongs to a different organization. In addition, the organization mentioned here refers to a group that can set security policies, such as a company, a department, etc. A security policy can be set for each organization separately, and the content of the security policy of each organization may be different. Therefore, when the user 260 uses the image processing device 200, the image processing device 200 needs to comply with the security policy to which the user 260 who wants to use it belongs. However, the security policies of each organization do not necessarily have to be different from each other, and can also be the same.

[0149] For example, when user 260A uses user terminal 250A to send a print job to image processing device 200, user 260A comes to image processing device 200, logs in to image processing device 200, and makes it execute the print job, so that the file can be printed. In this case, image processing device 200 needs to comply with the security policy of the organization to which user 260A belongs. Therefore, information processing device 100 in this embodiment will first determine the organization to which the user belongs before the user logs in, and apply the security policy corresponding to the organization.

[0150] The user management module 145 manages the correspondence between users and organizations to which the users belong using the user / organization management table 300 . Figure 3 3 is an explanatory diagram showing an example of the data structure of the user / organization management table 300. The user / organization management table 300 has a user ID column 305, a name column 310, and an organization ID column 315. In the present embodiment, the user ID column 305 stores information for uniquely identifying a user who may use the information processing device 100 (specifically, a user ID (IDentification)). The name column 310 stores the name of the user. The organization ID column 315 stores information for uniquely identifying the organization to which the user belongs (in the present embodiment, the user belongs to) (specifically, the organization ID).

[0151] The policy extraction module 130 manages the correspondence between the organization and the security policy required by the organization using the organization policy management table 400 . Figure 4 4 is an explanatory diagram showing an example of the data structure of the organization·policy management table 400. The organization·policy management table 400 has an organization ID column 405 and a policy column 410. The organization ID column 405 stores the organization ID. The policy column 410 stores the security policy of the organization. For example, as the security policy stipulated by the organization, there are conditions such as the authentication method, the communication method, and whether the monitoring log is required. If the image processing device 200 does not meet these conditions, the user 260 belonging to the organization cannot use the image processing device 200. In particular, for example, with regard to the authentication method in the security policy, if it is specified whether to hide the user ID, password, etc. with characters such as "*" in "Information concealment in the login information input interface", or if the user ID is required to be entered before the organization is determined, then the security policy cannot be set, and therefore the login itself cannot be achieved.

[0152] In addition, the information processing device 100 may also perform the following processing.

[0153] The information processing device 100 determines (1) whether there is an organization that adopts a security policy that sets "information anonymity in the login information input interface" to "ON (anonymity required)". Furthermore, if the determination (1) determines that "yes" exists, a determination (2) is made as to whether a user belonging to an organization that adopts the security policy is likely to use the information processing device 100. Then, if the determination (2) determines that "yes" exists, the organization to which the user belongs can be determined before determining the user. In addition, with respect to the determination (1), it is sufficient to implement it using the organization·policy management table 400. Moreover, with respect to the determination (2), it is sufficient to implement it using the user·organization management table 300.

[0154] Figure 5 This is a flowchart showing a processing example of the first embodiment (information processing device 100 ).

[0155] In step S502 , the organization list generating module 115 generates a list of organizations to which the registered user belongs.

[0156] In step S504, according to the user's operation, jump to the login interface.

[0157] In step S506 , the login interface display control module 110 displays the organization list on the interface.

[0158] In step S508, the user selects his / her affiliation from the list.

[0159] In step S510 , the policy processing module 120 determines a policy corresponding to the selected entity and applies it to the information processing device 100 .

[0160] In step S512, the user inputs information required for login.

[0161] In step S514, user authentication is performed, and if the authentication is successful, the process proceeds to step S516, and if the authentication fails, the process proceeds to step S520.

[0162] In step S516, it is determined that the login is successful.

[0163] In step S518, services are provided to users.

[0164] In step S520, it is determined that the login has failed.

[0165] Figure 6 This is a flowchart showing a processing example of the first embodiment (information processing device 100 ). Figure 6 The flowchart shown in the example is Figure 5 In the flowchart shown in the example of FIG.

[0166] In step S602 , the organization list generating module 115 generates a list of organizations to which the registered user belongs.

[0167] In step S604, according to the user's operation, jump to the login interface.

[0168] In step S606, the sender is extracted from the information just received. As described above, for example, the case where the user 260 uses the user terminal 250 to send a print job to the image processing apparatus 200 is a case in which the user 260 sends a print job to the image processing apparatus 200.

[0169] In step S608, the organization to which the sender belongs is extracted.

[0170] In step S610, the extracted organization is inserted at the beginning of the belonging organization list.

[0171] In step S612, the login interface display control module 110 displays the organization list on the interface.

[0172] In step S614, the user selects his / her affiliation from the list.

[0173] In step S616 , the policy processing module 120 determines a policy corresponding to the selected entity and applies it to the information processing device 100 .

[0174] In step S618, the user inputs information required for login.

[0175] In step S620, user authentication is performed, and if the authentication is successful, the process proceeds to step S622, and if the authentication fails, the process proceeds to step S626.

[0176] In step S622, it is determined that the login is successful.

[0177] In step S624, services are provided to the user.

[0178] In step S626, it is determined that the login has failed.

[0179] <<Second embodiment>>

[0180] Figure 7 This is a conceptual block diagram of a configuration example of the second embodiment (information processing device 700 ).

[0181] The information processing device 700 has a display module 105, a login interface display control module 110, an organization code (QR code (registered trademark)) generation module 715, a policy processing module 720, a user authentication module 140, a user management module 145, a service processing module 150, and an organization code (QR code) notification module 770.

[0182] In addition, the same reference numerals are used to denote the same parts as those in the first embodiment, and overlapping descriptions are omitted (the same applies hereinafter).

[0183] The display module 105 is connected to the login interface display control module 110 .

[0184] The login interface display control module 110 is connected to the display module 105 , the organization code (QR code) generation module 715 , the policy processing module 720 , and the user authentication module 140 .

[0185] The organization code (QR code) generation module 715 is connected to the login interface display control module 110, the user management module 145, and the organization code (QR code) notification module 770. The organization code (QR code) generation module 715 generates information for identifying the organization that shares the information processing device 700. As "information for identifying the organization", there is, for example, an organization code or an information image embedded with information for identifying the organization. In addition, the so-called information image refers to a graphic code systematically created to represent electronic data in a machine-readable manner, specifically, a one-dimensional barcode, a two-dimensional code, etc. Among them, as for the two-dimensional code, the QR code (Quick Response code: registered trademark) has recently begun to be used, and in this embodiment, the QR code is also exemplified.

[0186] exist Figure 1 In the first embodiment shown in the example of , it is conceivable that, in the case of "selectively displaying organizations that share the information processing device 100", a malicious user may select an organization that is not his / her own. Therefore, the information processing device 700 generates "information for determining organizations that share the information processing device 700" by itself and prompts the user to input the information.

[0187] The so-called "input of information for identifying the organization" can be input by the user, or an information image indicating the organization to which the user using the present information processing device 700 belongs can be read. For example, the former is the case where an alphanumeric organization code indicating the organization is input using a keyboard. As for the latter, for example, the organization code (QR code) generation module 715 generates an information image such as a QR code indicating the organization to which the user using the present information processing device 700 belongs, and a camera or other imaging device of the present information processing device 700 reads the information image, and then the "information for identifying the organization" embedded in the information image is extracted.

[0188] The organization code (QR code) notification module 770 is connected to the organization code (QR code) generation module 715. The organization code (QR code) notification module 770 notifies the "information for identifying the organization" generated by the organization code (QR code) generation module 715. As notifications, there are, for example, e-mail, chat, electronic bulletin, SNS (abbreviation of Social Networking Service, social network service) communication function, push notification, automatic voice answering method telephone broadcast, etc. As telephone broadcast, for example, Lync (registered trademark) can be used to implement it. In addition, in the case of an information image such as a QR code, the information image can also be printed out and handed over to each user of each organization by the responsible person.

[0189] The policy processing module 720 includes an organization code (QR code) receiving module 725 , a policy extracting module 130 , and a policy applying module 135 , and is connected to the login interface display control module 110 and the user management module 145 .

[0190] The organization code (QR code) acceptance module 725 prompts the user to input the information generated by the organization code (QR code) generation module 715, and determines the organization to which the user belongs based on the input information.

[0191] In addition, if the organization identified by the organization code (QR code) receiving module 725 does not match the organization of the shared information processing device 700, the process of identifying the user is not performed. Figure 1 In the first embodiment shown in the example of FIG, a list of organizations is displayed and the user is allowed to select one, so there is no situation where the organization of the shared information processing device 100 does not match. Figure 7 In the second embodiment shown in the example of , the user reads the organization code or QR code, so it is possible that the organization code or QR code is not generated by the organization code (QR code) generation module 715, so this processing is required. Moreover, since the user is not originally a person who can use the information processing device 700, there is no need to perform user authentication processing or other processing to identify the user.

[0192] The user authentication module 140 is connected to the login interface display control module 110 and the user management module 145 .

[0193] The user management module 145 is connected to the organization code (QR code) generation module 715 , the policy processing module 720 , the user authentication module 140 , and the service processing module 150 .

[0194] The service processing module 150 includes a communication module 155 , a sender extraction module 160 , and a service provision module 165 , and is connected to the user management module 145 .

[0195] Figure 8 This is a flowchart showing a processing example of the second embodiment (information processing device 700). Note that the processing of step S802 and step S804 is performed before the processing of step S806, and the second and subsequent processing may be performed starting from the processing of step S806.

[0196] In step S802, the organization code (QR code) generation module 715 distributes organization codes or QR codes to the organizations to which the registered users belong.

[0197] In step S804, the organization code (QR code) notification module 770 notifies the user of the organization code or QR code in advance.

[0198] In step S806, according to the user's operation, jump to the login interface.

[0199] In step S808, the user inputs an organization code or a QR code. The organization code can be input by using a virtual keyboard displayed on the display device. In addition, the QR code can be input by using a camera equipped on the information processing device 700 to read the QR code.

[0200] In step S810 , the policy processing module 720 checks the organization code or QR code.

[0201] In step S812, the verification result in step S810 is confirmed, and if the verification is successful, the process proceeds to step S814, and if the verification fails, the process proceeds to step S824.

[0202] In step S814 , the policy processing module 720 applies the policy corresponding to the checked organization to the information processing device 700 .

[0203] In step S816, the user inputs information required for login.

[0204] In step S818, user authentication is performed, and if the authentication is successful, the process proceeds to step S820, and if the authentication fails, the process proceeds to step S826.

[0205] In step S820, it is determined that the login is successful.

[0206] In step S822, services are provided to users.

[0207] In step S824, it is determined that the login has failed.

[0208] In step S826, it is determined that the login has failed.

[0209] <<Third embodiment>>

[0210] Fig. 9 This is a conceptual block diagram of a configuration example of the third embodiment (information processing device 900 ).

[0211] The information processing device 900 includes a print receiving module 910, an organization code generating module 915, a policy processing module 920, a user authentication module 140, a user management module 145, a print processing module 965, and an organization code notification module 970. The information processing device 900 is particularly shown as an example in which it is built into the image processing device 200, and includes the print processing module 965 instead of the service providing module 165 of the information processing device 100.

[0212] The print receiving module 910 includes a user information extraction module 912 and an organization code extraction module 914, and is connected to an organization code generation module 915, a policy processing module 920, and a user authentication module 140. The print receiving module 910 receives information to be processed by the information processing device 900 from a user. The received information includes at least information for identifying the organization to which the user belongs. Examples of "information to be processed by the information processing device 900" include print jobs, etc.

[0213] The user information extraction module 912 extracts user information from the received information.

[0214] The organization code extraction module 914 extracts information to determine the organization to which the user belongs from the received information.

[0215] The organization code generation module 915 is connected to the print receiving module 910, the user management module 145, and the organization code notification module 970. The organization code generation module 915 generates information for identifying the organization that shares the information processing device 900. As "information for identifying the organization", there is, for example, an organization code. In addition, the information for identifying the organization is included in the information received as the processing object by the print receiving module 910. For example, when the user issues a print instruction, the information for identifying the organization may be input and included in the print job.

[0216] The policy processing module 920 includes an organization determination module 925 , a policy extraction module 130 , and a policy application module 135 , and is connected to the print reception module 910 and the user management module 145 .

[0217] The organization determination module 925 prompts the user to input the information generated by the organization code generation module 915, and determines the organization to which the user belongs based on the input information. If the determined organization matches the organization determined based on the information for determining the organization extracted by the organization code extraction module 914, the information for determining the organization is handed over to the policy extraction module 130. Then, the policy application module 135 applies the information protection policy corresponding to the organization to the information processing device 900. The print processing module 965 processes the information to be processed.

[0218] In addition, when the received information includes multiple organizations, the organization identification module 925 may not process the information to be processed, or may determine the information protection policy according to a predetermined rule.

[0219] Examples of the “predetermined rules” mentioned here include application of the first recorded organizational information protection policy, application of the strongest information protection policy among a plurality of organizational information protection policies, and the like.

[0220] The user authentication module 140 is connected to the print receiving module 910 and the user management module 145 .

[0221] The user management module 145 is connected to the organization code generation module 915 , the policy processing module 920 , and the user authentication module 140 .

[0222] After applying the information protection policy, the print processing module 965 performs processing according to the information to be processed received by the print receiving module 910. For example, when the information to be processed is a print job, print processing is performed.

[0223] The organization code notification module 970 is connected to the organization code generation module 915. The organization code notification module 970 notifies each user of the "information for specifying the organization" generated by the organization code generation module 915.

[0224] Fig.10 This is a flowchart showing a processing example of the third embodiment (information processing device 900). The processing of step S1002 and step S1004 is performed before the processing of step S1006, and the second and subsequent processing may be performed starting from the processing of step S1006.

[0225] In step S1002, the organization code generation module 915 distributes organization codes to the organizations to which the registered users belong.

[0226] In step S1004 , the organization code notification module 970 notifies the user of the organization code in advance.

[0227] In step S1006, the user assigns an "organization code" and "information required for authentication" and prints and sends the information.

[0228] In step S1008, the policy processing module 920 checks the organization code. The checking here only requires the user to input the organization code and determines whether the input organization code matches the organization code in the print job sent in step S1006.

[0229] In step S1010, the organization code verification result in step S1008 is confirmed, and if the verification is successful, the process proceeds to step S1012, and if the verification fails, the process proceeds to step S1020.

[0230] In step S1012 , the policy processing module 920 applies the policy corresponding to the checked organization to the information processing device 900 .

[0231] In step S1014, the user authentication module 140 performs user authentication using the "information required for authentication" in the print job sent in step S1006. For example, if the "information required for authentication" is a user ID and a password, the user only needs to enter the user ID and password to determine whether they match the user ID and password in the print job.

[0232] In step S1016, the user authentication result in step S1014 is confirmed, and the process proceeds to step S1018 if the authentication is successful, or proceeds to step S1022 if the authentication fails.

[0233] In step S1018, printing processing is performed.

[0234] In step S1020, it is determined that the printing process has failed.

[0235] In step S1022 , the information processing device 900 operates according to the applied policy.

[0236] <<Fourth embodiment>>

[0237] Fig.11 This is a conceptual block diagram of a configuration example of the fourth embodiment (information processing device 1100 ).

[0238] The information processing apparatus 1100 includes a print receiving module 1110, a user ID generating module 1115, a policy processing module 1120, a user authentication module 140, a user management module 145, a print processing module 965, and a user ID notification module 1170. The information processing apparatus 1100 is particularly shown as an example in which it is built into the image processing apparatus 200, and includes the print processing module 965 instead of the service providing module 165 of the information processing apparatus 100.

[0239] The print receiving module 1110 includes a user information extraction module 1112 and an organization information extraction module 1114, and is connected to a user ID generation module 1115, a policy processing module 1120, and a user authentication module 140. The print receiving module 1110 receives information to be processed by the information processing device 1100 from a user. The received information includes at least a user ID generated by the user ID generation module 1115. Examples of "information to be processed by the information processing device 1100" include print jobs, etc. In addition, as described below, the user ID generated by the user ID generation module 1115 includes information that specifies an organization in addition to the user ID.

[0240] The user information extraction module 1112 extracts user information from the user ID in the received information.

[0241] The organization information extraction module 1114 extracts information identifying the organization to which the user belongs from the user ID in the received information.

[0242] The user ID generation module 1115 is connected to the print receiving module 1110, the user management module 145, and the user ID notification module 1170. The user ID generation module 1115 generates a user ID for a user who may use the information processing device 1100. However, in addition to the information used to identify the user, the user ID also includes information that identifies the organization to which the user belongs. For example, it can also be information that is a combination of a pure user ID (the pure user ID mentioned here refers to a user ID that does not include information that identifies the organization) and information that identifies the organization. Specifically, it can also be information that is followed by an organization ID after the pure user ID. In addition, the user ID is included in the information received by the print receiving module 1110 as a processing object. For example, when the user issues a print instruction, the user ID can be input and included in the print job.

[0243] The policy processing module 1120 includes an organization determination module 1125 , a policy extraction module 130 , and a policy application module 135 , and is connected to the print reception module 1110 and the user management module 145 .

[0244] The organization determination module 1125 prompts the user to input the user ID generated by the user ID generation module 1115, and determines the organization to which the user belongs based on the input user ID. If the determined organization matches the organization determined based on the information for determining the organization extracted by the organization information extraction module 1114, the organization determination information is handed over to the policy extraction module 130. Then, the policy application module 135 applies the information protection policy corresponding to the organization to the information processing apparatus 1100. The print processing module 965 processes the information to be processed.

[0245] In addition, when the received user ID includes a plurality of organizations, the affiliated organization identification module 1125 may not process the information to be processed.

[0246] The user authentication module 140 is connected to the print receiving module 1110 and the user management module 145 .

[0247] The user management module 145 is connected to the user ID generation module 1115 , the policy processing module 1120 , and the user authentication module 140 .

[0248] After applying the information protection policy, the print processing module 965 performs processing according to the information to be processed received by the print receiving module 1110. For example, when the information to be processed is a print job, print processing is performed.

[0249] The user ID notification module 1170 is connected to the user ID generation module 1115. The user ID notification module 1170 notifies the user thereof of the user ID generated by the user ID generation module 1115.

[0250] Fig.12 This is a flowchart showing a processing example of the fourth embodiment (information processing device 1100). The processing of step S1202, step S1204, and step S1206 is performed before the processing of step S1208, and the second and subsequent processing can also be performed starting from the processing of step S1208.

[0251] In step S1202, a new user is registered.

[0252] In step S1204, the user ID generation module 1115 generates a user ID (with organization information). As described above, the user ID includes information identifying the user and information identifying the organization to which the user belongs.

[0253] In step S1206, the user ID notification module 1170 notifies the user of the user ID (with the organization information) in advance.

[0254] In step S1208, the user assigns "user ID (with organization information)" and prints and sends.

[0255] In step S1210, the policy processing module 1120 decodes the user ID (with the organization information) and determines the organization code.

[0256] In step S1212, the organization check is performed. If the check succeeds, the process proceeds to step S1214. If the check fails, the process proceeds to step S1222. The check here is performed by asking the user to input the organization code and determining whether the input organization code matches the organization code determined in step S1210. Alternatively, the user-organization management table 300 may be used to determine whether the determined organization code matches the organization ID corresponding to the pure user ID.

[0257] In step S1214 , the policy processing module 1120 applies the policy corresponding to the checked organization to the information processing device 1100 .

[0258] In step S1216, the user authentication module 140 performs user authentication using the "user ID (with organization information)", for example, by asking the user to input a user ID and password, determining whether the user ID and password match, and further determining whether the user ID in the print job matches the user ID input by the user.

[0259] In step S1218, the user authentication result in step S1216 is confirmed, and the process proceeds to step S1220 if the authentication is successful, or proceeds to step S1224 if the authentication fails.

[0260] In step S1220, printing processing is performed.

[0261] In step S1222, it is determined that the printing process has failed.

[0262] In step S1224, the information processing device 1100 operates according to the applied policy.

[0263] <<Fifth embodiment>>

[0264] Fig.13 This is a conceptual block diagram of a configuration example of the fifth embodiment (information processing device 1300 ).

[0265] The information processing apparatus 1300 includes a print receiving module 1310, an organization code generating module 915, a policy processing module 920, a user authentication module 140, a user management module 145, a print processing module 965, and an organization code notification module 970. The information processing apparatus 1300 is particularly shown as an example in which it is built into the image processing apparatus 200, and includes the print processing module 965 instead of the service providing module 165 of the information processing apparatus 100.

[0266] The print receiving module 1310 includes a user information extraction module 1312 and an organization code extraction module 1314, and is connected to the organization code generation module 915, the policy processing module 920, the user authentication module 140, and a printer driver 1370 of the user terminal 250. The print receiving module 1310 receives a print file 1380 of information to be processed by the information processing device 1300 from the user terminal 250 of the user. The print file 1380 includes user information 1385 and an organization code 1375. Examples of "information to be processed by the information processing device 1300" include a print job.

[0267] The user information extraction module 1312 extracts user information 1385 from the received print file 1380 .

[0268] The organization code extraction module 1314 extracts the organization code 1375 from the received print file 1380 .

[0269] The organization code generation module 915 is connected to the print reception module 1310 , the user management module 145 , and the organization code notification module 970 .

[0270] The policy processing module 920 includes an organization determination module 925 , a policy extraction module 130 , and a policy application module 135 , and is connected to a print reception module 1310 and a user management module 145 .

[0271] The user authentication module 140 is connected to the print receiving module 1310 and the user management module 145 .

[0272] The user management module 145 is connected to the organization code generation module 915 , the policy processing module 920 , and the user authentication module 140 .

[0273] The organization code notification module 970 is connected to the organization code generation module 915. The organization code notification module 970 here notifies the organization code to the person who manages the user terminal 250 of each organization. Then, the person who receives the organization code generates a printer driver 1370 in which the organization code 1375 is embedded. Then, the printer driver 1370 is installed on the user terminal 250 used by the user 260 belonging to the organization in the shared office 295. Thus, each user terminal 250 generates a print file 1380 including the organization code 1375 and the user information 1385 by using the printer driver 1370.

[0274] The user terminal 250 has a printer driver 1370 .

[0275] The printer driver 1370 has an organization code 1375 embedded therein and is connected to the print receiving module 1310 of the information processing device 1300. The printer driver 1370 generates a print file 1380 according to the print operation of the user 260. At this time, the user ID as the user information 1385 and the organization code 1375 embedded in the printer driver 1370 in advance are included in the print file 1380. Then, the print file 1380 is sent to the print receiving module 1310.

[0276] Fig.14 This is a flowchart showing a processing example of the fifth embodiment (information processing device 1300). In addition, the processing of step S1402, step S1404, step S1406, and step S1408 is performed before the processing of step S1410, and the second and subsequent processing can also be performed starting from the processing of step S1410.

[0277] In step S1402, the organization code generation module 915 distributes organization codes to the organizations to which the registered users belong.

[0278] In step S1404 , the organization code notification module 970 notifies the administrator of each organization of the organization code.

[0279] In step S1406 , the administrator sets the “organization code 1375 ” for the printer driver 1370 .

[0280] In step S1408, the administrator distributes the printer driver 1370 to the end user. The end user installs the printer driver 1370 on the user terminal 250 he / she owns.

[0281] In step S1410, the user provides "authentication information" (user information 1385) and issues an instruction to print and send.

[0282] In step S1412, the printer driver 1370 assigns the "organization code 1375" to the print file 1380, and executes print transmission.

[0283] In step S1414, the policy processing module 920 checks the organization code 1375. The checking here can be done by asking the user to input the organization code and determining whether the input organization code matches the organization code 1375 in the print file 1380 sent in step S1412. Alternatively, the user / organization management table 300 can be used to determine whether the organization code 1375 matches the organization ID corresponding to the user information 1385.

[0284] In step S1416, the tissue verification result in step S1414 is confirmed, and if the verification is successful, the process proceeds to step S1418, and if the verification fails, the process proceeds to step S1426.

[0285] In step S1418 , the policy processing module 920 applies the policy corresponding to the checked organization to the information processing device 1300 .

[0286] In step S1420, the user authentication module 140 performs user authentication using the "authentication information", for example, by asking the user to input a user ID and a password, determining whether the user ID and password match, and further determining whether the user ID in the user information 1385 in the print file 1380 matches the user ID input by the user.

[0287] In step S1422, the user authentication result in step S1420 is confirmed, and the process proceeds to step S1424 if the authentication is successful, or proceeds to step S1428 if the authentication fails.

[0288] In step S1424, printing processing is performed.

[0289] In step S1426, it is determined that the printing process has failed.

[0290] In step S1428, the information processing device 1300 operates according to the applied policy.

[0291] Reference Fig.15 , an example of the hardware configuration of the information processing device 100, the image processing device 200, the user terminal 250, the information processing device 700, the information processing device 900, the information processing device 1100, and the information processing device 1300 of this embodiment is described. Fig.15 The illustrated configuration includes, for example, a personal computer, and shows an example of a hardware configuration including a data reading unit 1517 such as a scanner and a data output unit 1518 such as a printer.

[0292] The CPU (abbreviation of Central Processing Unit) 1501 is a control unit that executes processing according to a computer program that records the execution sequence of various modules described in the implementation method, and the modules include: display module 105, login interface display control module 110, organization list generation module 115, policy processing module 120, organization determination module 125, policy extraction module 130, policy application module 135, user authentication module 140, user management module 145, service processing module 150, communication module 155, sender extraction module 160, service provision module 165, organization code (QR code) generation module 715, policy processing module Block 720, organization code (QR code) acceptance module 725, organization code (QR code) notification module 770, print receiving module 910, user information extraction module 912, organization code extraction module 914, organization code generation module 915, policy processing module 920, organization code notification module 970, print receiving module 1110, user information extraction module 1112, organization information extraction module 1114, user ID generation module 1115, policy processing module 1120, user ID notification module 1170, print receiving module 1310, user information extraction module 1312, organization code extraction module 1314, printer driver 1370, etc.

[0293] ROM (abbreviation of Read Only Memory) 1502 stores programs and operation parameters used by CPU 1501. RAM (abbreviation of Random Access Memory) 1503 stores programs used in the execution of CPU 1501 and parameters that change appropriately during the execution. They are connected to each other via a host bus 1504 including a CPU bus.

[0294] The host bus 1504 is connected to an external bus 1506 such as a PCI (Peripheral Component Interconnect / Interface) bus via a bridge 1505 .

[0295] The keyboard 1508 and the pointing device 1509 such as a mouse are devices operated by the operator. As the display 1510, there are liquid crystal display devices, organic EL displays, or CRTs (abbreviation of cathode ray tubes), etc., which display various information in the form of text or messages. In addition, it can also be a touch screen that has the functions of both the pointing device 1509 and the display 1510. In this case, regarding the realization of the keyboard function, even if it is not physically connected like the keyboard 1508, the keyboard function can be realized by drawing a keyboard in the form of software on an interface (for example, a touch screen) (so-called soft keyboard, screen keyboard, etc.).

[0296] The HDD (abbreviation of Hard Disk Drive) 1511 has a built-in hard disk (in addition to the hard disk, it may also be a flash memory, etc.), drives the hard disk, and records or reproduces the program or information executed by the CPU 1501. The HDD 1511 stores data such as the user-organization management table 300, the organization-policy management table 400, the print file 1380 received from the user terminal 250, and the processing result data of the belonging organization list generation module 115, etc. Furthermore, it stores various other data, various computer programs, etc.

[0297] The drive 1512 reads data or programs recorded in a removable recording medium 1513 such as a mounted magnetic disk, optical disk, magneto-optical disk, or semiconductor memory, and supplies the data or programs to the RAM 1503 connected via the interface 1507, the external bus 1506, the bridge 1505, and the host bus 1504. In addition, the removable recording medium 1513 can also be used as a data recording area.

[0298] The connection port 1514 is a port for connecting an external connection device 1515, and has a connection unit such as USB, IEEE1394, etc. The connection port 1514 is connected to the CPU 1501, etc. via the interface 1507, the external bus 1506, the bridge 1505, and the host bus 1504, etc. The communication unit 1516 is connected to the communication line and performs data communication processing with the outside. The data reading unit 1517 is, for example, a scanner, and performs a document reading process. The data output unit 1518 is, for example, a printer, and performs a document data output process.

[0299] Regarding the embodiment executed according to the computer program in the above-mentioned embodiment, the computer program as software is read into the system constituted by the hardware, and the software and hardware resources are made to cooperate to realize the above-mentioned embodiment.

[0300] also, Fig.15 The hardware configuration of the information processing device 100 and the like shown in the figure is only an example of a configuration, and the present embodiment is not limited to Fig.15 The structure shown can be any structure as long as it is capable of executing the modules described in this embodiment. For example, a GPU (Graphics Processing Unit, including GPGPU (General-Purpose computing on Graphics Processing Units)) can be used as a processor, and some modules can be composed of dedicated hardware (such as integrated circuits for specific purposes (as a specific example, there are ASICs (Application Specific Integrated Circuits)) or reconfigurable integrated circuits (as a specific example, there are FPGAs (Field-Programmable Gate Arrays)), and some modules can be located in an external system and connected via communication lines, and can also be multiple Fig.15 The systems shown are connected to each other via communication lines, and thus operate in coordination with each other. In addition, in addition to personal computers, they can also be incorporated into mobile information communication devices (mobile information communication devices include mobile phones, smart phones, mobile devices, wearable computers, etc.), smart home appliances, robots, copiers, faxes, scanners, printers, multifunction machines (the so-called multifunction machine refers to an image processing device that has the functions of any two or more of scanners, printers, copiers, faxes, etc.), etc.

[0301] In addition, the program described above can be provided by being stored in a recording medium, or by providing the program via a communication element. In this case, for example, the program described above can also be understood as an invention of a "computer-readable recording medium having a program recorded thereon".

[0302] The “computer-readable recording medium recording a program” refers to a computer-readable recording medium recording a program that is used for installation, execution, distribution, etc. of the program.

[0303] In addition, as a recording medium, for example, there are: as a digital versatile disk (DVD), there are "DVD-R, DVD-RW, DVD-RAM, etc." as the specifications established by the DVD forum, and "DVD+R, DVD+RW, etc." as the specifications established by the DVD+RW; as a compact disk (CD), there are read-only memory (CD-ROM), recordable CD (CD-R), rewritable CD (CD-RW), etc.; Blu-ray disc (Blu-ray (registered trademark) Disc); magneto-optical disk (MO); floppy disk (FD); magnetic tape; hard disk; read-only memory (ROM); electrically erasable and rewritable read-only memory (EEPROM (registered trademark)); flash memory; random access memory (RAM); SD (abbreviation of Secure Digital, secure digital) memory card, etc.

[0304] Furthermore, all or part of the program may be recorded in the recording medium and stored or circulated, etc. In addition, the program may be transmitted by communication, for example, using a transmission medium such as a wired network or wireless communication network used for a local area network (LAN), a metropolitan area network (MAN), a wide area network (WAN), the Internet, an intranet, an extranet, etc., or a combination thereof, or may be loaded onto a carrier wave for transmission.

[0305] Furthermore, the program may be part or all of other programs, or may be recorded in a recording medium together with different programs. In addition, it may be divided and recorded in multiple recording media. In addition, it may be recorded in any manner such as compression or encryption, as long as it can be restored.

Claims

1. An information processing device, comprising: a determination element, wherein the information processing device is shared by a plurality of organizations having different information protection policies, and the determination element determines the organization to which the user belongs before determining the user who uses the information processing device; and an application component that applies the information protection policy corresponding to the organization determined by the determination component to the information processing device, The determination element optionally displays organizations that share the information processing device to the user according to the information protection policy corresponding to the organization to which the user belongs, and displays the organization of the user who has just sent information to the information processing device in the upper layer.

2. The information processing device according to claim 1, wherein the information processing device receives information to be processed from a user, the information including information identifying the user, and After identifying the user, the information processing device processes the information to be processed if the identified user matches the user in the received information.

3. The information processing device according to claim 1, further comprising a generating element that generates information for identifying an organization that shares the information processing device; and The determining component prompts the user to input the information generated by the generating component, and determines the organization to which the user belongs based on the input information. 4 . The information processing device according to claim 1 , wherein when the organization identified by the identification element does not match the organization sharing the information processing device, a process of identifying the user is not performed.

5. The information processing device according to claim 3, wherein the information processing device receives information as a processing target from a user, the information including information identifying an organization to which the user belongs, and The determination element is controlled in the following manner: prompting the user to input the information generated by the generation element, and determining the organization to which the user belongs based on the input information, and processing the information as a processing object when the determined organization matches the organization in the received information.

6. The information processing device according to claim 5, wherein when the received information includes a plurality of organizations, the determination component does not process the information to be processed, or determines the information protection policy according to a predetermined rule.

7. A recording medium recording an information processing program for causing a computer in an information processing device to function as: a determination element, wherein the information processing device is shared by a plurality of organizations having different information protection policies, and the determination element determines the organization to which the user belongs before determining the user who uses the information processing device; and an application component that applies the information protection policy corresponding to the organization determined by the determination component to the information processing device, The determination element optionally displays organizations that share the information processing device to the user according to the information protection policy corresponding to the organization to which the user belongs, and displays the organization of the user who has just sent information to the information processing device in the upper layer.

8. A computer program product comprising a program for causing a computer in an information processing device to function as: a determination element, wherein the information processing device is shared by a plurality of organizations having different information protection policies, and the determination element determines the organization to which the user belongs before determining the user who uses the information processing device; and an application component that applies the information protection policy corresponding to the organization determined by the determination component to the information processing device, The determination element optionally displays organizations that share the information processing device to the user according to the information protection policy corresponding to the organization to which the user belongs, and displays the organization of the user who has just sent information to the information processing device in the upper layer.

Images