Information processing device, information processing system, and computer readable medium

Abstract

An information processing device, an information processing system, and a computer-readable medium are provided. The information processing device includes a processor, the processor obtaining first permission information indicating a device permitted to be used by a first user, the processor permitting the first user to use the device when the first permission information indicates the device, and the processor permitting the first user to use the device when the first permission information does not indicate the device and a second user is permitted to use the device, the processor permitting the first user to use the device, the second user having the following attributes having a predetermined relationship with an attribute of the first user.

Description

Technical Field

[0001] The present invention relates to an information processing device, an information processing system and a computer-readable medium. Background Art

[0002] The following technology is described in Japanese Patent Gazette No. 2017-184286: an image output device displays a code pattern containing permission information that permits temporary use of the device by a user who does not have permission to use the device in a readable manner, and when the read code pattern contains the permission information, an information processing device outputs image data to the image output device.

[0003] However, in a system where the devices permitted to be used are registered in advance for each user, each device will not permit use by a user who has not registered the device. However, there are cases where a user who should have been permitted to use the device may simply be forgotten to be registered by the administrator, for example.

[0004] Furthermore, the Japanese Patent Application Laid-Open Publication implements a process of temporarily permitting use of the device to a user without permission by using an operation key such as a "try print" button that accepts operation in the same manner for any user, but this structure cannot filter out users who should be granted permission from users without permission. On the other hand, if other people similar to the user have been permitted to use the device, it is highly likely that the user should also be permitted to use the device. Summary of the invention

[0005] The purpose of the present invention is to permit a user who is not permitted to use an information processing device to use the information processing device if another user having an attribute having a prescribed relationship with the attribute of the user who is not permitted to use the information processing device has been permitted.

[0006] According to the first scheme of the present invention, an information processing device is provided, wherein the information processing device has a processor, the processor obtains first permission information indicating a device permitted to be used by a first user, when the first permission information indicates the device, the processor permits the first user to use the device, when the first permission information does not indicate the device and a second user is permitted to use the device, the processor permits the first user to use the device, and the second user has the following attributes, which have a prescribed relationship with the attributes of the first user.

[0007] According to the second scheme of the present invention, the processor obtains the first permission information from the terminal operated by the first user, and when the first permission information shows the present device, the processor notifies the terminal that the first user is permitted to use the present device; when the first permission information does not show the present device, the processor notifies the terminal that the first user is prohibited from using the present device; when receiving the second permission information showing that the second user is permitted to use the present device from the terminal that has been notified of the prohibited use, the processor notifies the terminal that the use is permitted.

[0008] According to the third scheme of the present invention, the processor obtains attribute information showing the attributes of the first user. When the first permission information shows the present device, the processor permits the first user to use the present device and causes the log server to store the attribute information of the first user. When the first permission information does not show the present device, the processor inquires the log server whether the attribute information of the second user is stored. When the processor receives the second permission information from the log server indicating that the attribute information of the second user is stored, the processor permits the first user to use the present device.

[0009] According to the fourth scheme of the present invention, the processor obtains the first permission information indicating the device that permits the first user to use the first function, and when the first permission information indicates the device, the processor permits the first user to use the first function of the device, and when the first permission information does not indicate the device and the second user is permitted to use the first function of the device, the processor permits the first user to use the second function of the device that is more restricted than the first function.

[0010] According to the fifth scheme of the present invention, when the first permission information does not indicate the present device and the second user is permitted to use the present device, the processor accepts an instruction from a third user who manages the present device, and when the processor accepts the instruction from the third user to permit the first user to use the present device, the processor permits the first user to use the present device.

[0011] According to a sixth aspect of the present invention, there is provided an information processing system, wherein the information processing system comprises: a first device; a plurality of second devices; and a server, wherein the first device receives authentication information of a first user and sends the authentication information to the server, wherein the server, when authenticating the first user using the authentication information, sends first permission information to the first device, wherein the first permission information indicates the second device among the plurality of second devices that the first user is permitted to use, and wherein the first device sends the first permission information to any one of the plurality of second devices, and when the first permission information indicates the present device, the second device to which the first permission information is sent permits the first user to use the present device, and when the first permission information does not indicate the present device and the following second user is permitted to use the present device, the second device to which the first permission information is sent permits the first user to use the present device, wherein the second user has the following attributes, and the attributes have a prescribed relationship with the attributes of the first user.

[0012] According to the seventh scheme of the present invention, the information processing system has a log server, and when the log server receives attribute information of a user who is permitted to use by the second device, the log server stores the attribute information. When the log server receives an inquiry as to whether the attribute information of the second user is stored, if the attribute information of the second user is stored, the log server sends second permission information for the first user to the first device. When the second device receives the second permission information from the first device, it permits the first user to use the device.

[0013] According to the 8th scheme of the present invention, the information processing system has a log server, and when the log server receives the attribute information of the user who is permitted to use by the second device, the log server stores the attribute information. When the log server receives an inquiry as to whether the attribute information of the second user is stored, if the attribute information of the second user is stored, the log server sends the second permission information for the first user to the first device. When the received first permission information does not show the second device, the second device inquires from the log server whether the attribute information of the second user is stored. When the second device receives the second permission information from the log server, it permits the first user to use the device.

[0014] According to the ninth aspect of the present invention, when the received first permission information indicates the own device, the second device permits the first user to use the own device and transmits the attribute information of the first user to a log server.

[0015] According to the 10th scheme of the present invention, when the first device receives the second permission information from the log server, it requests the server to update the first permission information. When the server is requested by the first device to perform the update, it updates the first permission information to show the second device. The second device is a device that is authorized to use this device through the second permission information.

[0016] According to the 11th scheme of the present invention, there is provided a computer-readable medium storing a program for causing a computer having a processor to execute processing, wherein first permission information indicating a device permitted to be used by a first user is obtained, and in a case where the first permission information indicates the device, the first user is permitted to use the device, and in a case where the first permission information does not indicate the device and the following second user is permitted to use the device, the first user is permitted to use the device, and the second user has the following attributes, which have a prescribed relationship with the attributes of the first user.

[0017] (Effect)

[0018] According to the first or eleventh aspect, a user who is not permitted to use the information processing device is permitted to use the information processing device if another user having an attribute having a predetermined relationship with the user's attribute is permitted.

[0019] According to the second aspect, the user operates the terminal to receive permission to use a device that has been permitted to be used by another user having an attribute having a predetermined relationship with the user's attribute and that the user has not permitted to use.

[0020] According to the third aspect, the attribute information of the user who is permitted to use is stored in the log server.

[0021] According to the fourth aspect, if a second user having an attribute having a predetermined relationship with the first user who is not permitted to use the information processing device is permitted, the first user is permitted to use a function more restricted than the second user.

[0022] According to the fifth aspect, a first user who is not permitted to use the information processing device is permitted to use the information processing device if a second user having an attribute having a predetermined relationship with the first user's attribute is permitted and an instruction from a third user who manages the information processing device is accepted.

[0023] According to the sixth aspect, if a second user having an attribute having a predetermined relationship with the first user's attribute is permitted, the first user who is not permitted to use the second device is permitted to use the second device.

[0024] According to the seventh aspect, when the second device receives the second permission information from the first device that has accepted the authentication information of the first user who is not permitted to use the device, the second device permits the first user to use the device.

[0025] According to the eighth aspect, the second device inquires of the log server whether the second user having an attribute having a predetermined relationship with an attribute of the first user who is not permitted to use the device is permitted to use the device.

[0026] According to the ninth aspect, the log server stores the attribute information of the user whose use is permitted by the second device.

[0027] According to the tenth aspect, the server updates the first license information so as to indicate the second device permitted to use by the second license information. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] Figure 1 1 is a diagram showing an example of the overall configuration of the information processing system 9 .

[0029] Figure 2 It is a diagram showing an example of the configuration of the server 3 .

[0030] Figure 3 : is a diagram showing an example of the authentication information DB 321.

[0031] Figure 4 3 is a diagram showing an example of the permission information DB 322 .

[0032] Figure 5 2 is a diagram showing an example of the configuration of the log server 4 .

[0033] Figure 6 is a diagram showing an example of the use history DB 421 .

[0034] Figure 7 1 is a diagram showing an example of the configuration of the terminal 1 .

[0035] Figure 8 2 is a diagram showing an example of the configuration of the information processing device 2 .

[0036] Fig. 9 It is a diagram showing an example of the functional configuration of the server 3 .

[0037] Fig.10 2 is a diagram showing an example of the functional configuration of the log server 4 .

[0038] Fig.11 1 is a diagram showing an example of the functional configuration of the terminal 1 .

[0039] Fig.12 2 is a diagram showing an example of the functional configuration of the information processing device 2 .

[0040] Fig.13 2 is a sequence diagram showing an example of the flow of operations of the information processing device 2 transmitting a permission notification.

[0041] Fig.14 It is a diagram showing an example of the terminal 1 that accepts input of authentication information.

[0042] Fig.15 2 is a diagram showing an example of display of the terminal 1 .

[0043] Fig.16 It is a diagram showing an example of the first license information issued by the server 3 .

[0044] Fig.17 It is a diagram showing a specific example of the first permission information.

[0045] Fig.18 2 is a sequence diagram showing an example of the flow of operations in which the information processing device 2 transmits a temporary permission notification.

[0046] Fig.19 2 is a diagram showing an example of a display of the terminal 1 which has received a prohibition notification.

[0047] Fig. 20 It is a diagram showing a specific example of the second permission information.

[0048] Fig.21 This is a sequence diagram showing an example of the flow of operations for requesting permission from an administrator.

[0049] Fig. 22 1 is a diagram showing an example of a terminal 1 that issues a permission request.

[0050] Fig.23 1 is a diagram showing an example of the overall configuration of an information processing system 9a in a modified example.

[0051] Fig.24 2 is a sequence diagram showing an example of the flow of operations in which the information processing device 2a transmits a permission notification.

[0052] Fig.25 2 is a sequence diagram showing an example of the flow of operations in which the information processing device 2a transmits a temporary permission notification.

[0053] Fig.26 1 is a diagram showing an example of the overall configuration of an information processing system 9 b in a modified example.

[0054] Fig. 27 1 is a diagram showing an example of a functional configuration of an information processing device 2 b in a modified example.

[0055] Fig.28 2 is a sequence diagram showing an example of the flow of operations of the information processing device 2a transmitting a prohibition notification.

[0056] Fig.29 2 is a diagram showing an example of the configuration of the log server 4 a.

[0057] Fig.30 It is a diagram showing an example of a database stored in the memory 42a.

[0058] Fig.31 2 is a diagram showing an example of the functional configuration of the log server 4 a. DETAILED DESCRIPTION

[0059] <Implementation Method>

[0060] <Structure of Information Processing System>

[0061] Figure 1 1 is a diagram showing an example of the overall configuration of the information processing system 9 . Figure 1 The information processing system 9 shown is a system that authenticates users and stores information processing devices that are permitted to be used by each authenticated user, and issues permission information to each user when using the information processing device. Figure 1 As shown, the information processing system 9 includes a terminal 1, an information processing device 2, a server 3, a log server 4, and a communication line 5. Hereinafter, the terminal 1 is also referred to as a first device, and the information processing device 2 is also referred to as a second device.

[0062] Terminal 1 is a terminal device operated by a user of information processing system 9, such as a personal computer such as a smartphone or a tablet. Terminal 1 receives user operations and issues instructions for user authentication in information processing system 9 and instructions for using information processing device 2.

[0063] in addition, Figure 1 The terminal 1a shown has the same function as the terminal 1, but is a terminal device operated by an administrator (hereinafter also referred to as a third user) who manages the information processing device 2.

[0064] The information processing device 2 is a device that receives instructions from a user who has been permitted to use the device in advance via the terminal 1 to use the functions of the device. The information processing device 2 is, for example, an image forming function that forms an image on a medium such as paper, an image reading function that reads a medium with an image formed thereon by an optical system and generates data representing the image (referred to as image data), and the like. The embodiment described below uses an image processing device as the information processing device 2, but the information processing device 2 in the information processing system 9 may not be an image processing device.

[0065] The terminal 1 and the information processing device 2 can connect to each other when both parties are at a distance closer than a specified distance (called a close distance) according to the standard of Near Field Communication (NFC), such as ISO / IEC18092 (NFCIP-1), ISO / IEC14443, ISO / IEC15693 or IEEE802.15.

[0066] The server 3 is, for example, a computer, and is a server device that provides information of an information processing device that authenticates a user of the information processing system 9 and permits the user to use the information processing system 9.

[0067] The log server 4 is, for example, a computer, and is a device that stores a history of actual use of the device by a user who has permitted the information processing device 2 to use the device in the information processing system 9 .

[0068] The communication line 5 is a line that connects the terminal 1, the server 3, and the log server 4 so that they can communicate. For example, the communication line 5 may be a WAN (Wide Area Network), the Internet, or a combination thereof, in addition to a LAN (Local Area Network), etc. In addition, the communication line 5 may include a public switched telecommunication network (PSTN) or an integrated services digital network (ISDN).

[0069] In addition, the number of terminals 1, information processing devices 2, servers 3, log servers 4, and communication lines 5 in the information processing system 9 is not limited to Figure 1 For example, the server 3 and the log server 4 may each be constituted by a cluster system in which functions are shared by a plurality of devices.

[0070] <Server Structure>

[0071] Figure 2 It is a diagram showing an example of the configuration of the server 3 . Figure 2 The server 3 has a processor 31, a memory 32 and an interface 33. These structures are interconnected via a bus, for example, so as to be able to communicate.

[0072] The processor 31 controls each part of the server 3 by reading and executing the program stored in the memory 32. The processor 31 is, for example, a CPU (Central Processing Unit).

[0073] The interface 33 is a communication circuit that connects the server 3 and the terminal 1 to communicate with each other via the communication line 5 in a wired or wireless manner.

[0074] The memory 32 is a storage unit that stores an operating system, various programs, data, etc. read by the processor 31. The memory 32 includes a RAM (Random Access Memory) and a ROM (Read Only Memory). Alternatively, the memory 32 may include a solid state drive, a hard disk drive, or the like.

[0075] Furthermore, the memory 32 stores an authentication information DB 321 and a permission information DB 322 .

[0076] Figure 3 : is a diagram showing an example of the authentication information DB 321. Figure 3 The illustrated authentication information DB 321 is a database storing authentication information of users. Figure 3 The authentication information DB 321 shown stores the items of user ID, password, job type, department, and work location in association with each other.

[0077] exist Figure 3 In the authentication information DB 321 shown, the user ID is identification information for identifying each user of the information processing system 9. The password is a character string known only to the user identified by the corresponding user ID. The combination of the user ID and the password is authentication information used by the server 3 for user authentication.

[0078] exist Figure 3 In the authentication information DB 321 shown, the type of work is a character string indicating the occupation type of the user identified by the corresponding user ID. The department is a character string indicating the name of the department to which the user identified by the corresponding user ID belongs. The place of work is a character string indicating the place of work of the user identified by the corresponding user ID. The type of work, the department and the place of work are attribute information of the corresponding user.

[0079] Figure 4 3 is a diagram showing an example of the permission information DB 322. The permission information DB 322 is a database that stores, for each user, information processing devices 2 that the user is permitted to use. Figure 4 The illustrated permission information DB 322 has a user list 3221 and a device list 3222 .

[0080] Figure 4 The user list 3221 shown is a list of user IDs recorded in the authentication information DB 321 . Figure 4 The device list 3222 shown is provided for each user ID described in the user list 3221 and is a list that lists information on the information processing devices 2 permitted to be used by the user identified by the user ID.

[0081] In the device list 3222, the device ID is identification information for identifying each information processing device 2, such as a manufacturing number, a serial number, etc. The device ID can be any device ID as long as it can identify each information processing device 2 in the information processing system 9, and can be, for example, a MAC (Media Access Control) address or an IP (Internet Protocol) address.

[0082] In the device list 3222 , the device name is a character string indicating the name of the information processing device 2 identified by the corresponding device ID, such as a product name, a brand name, or the like.

[0083] In the device list 3222, the term is information indicating the term during which the user identified by the corresponding user ID can use the information processing device 2 identified by the corresponding device ID.

[0084] <Log Server Structure>

[0085] Figure 5 2 is a diagram showing an example of the configuration of the log server 4 . Figure 5 The log server 4 shown has a processor 41, a memory 42, and an interface 43. These structures are connected, for example, via a bus so as to be able to communicate with each other.

[0086] The processor 41 controls each part of the log server 4 by reading and executing the program stored in the memory 42. The processor 41 is, for example, a CPU.

[0087] The interface 43 is a communication circuit that connects the log server 4 and the terminal 1 to communicate with each other via the communication line 5 in a wired or wireless manner.

[0088] The memory 42 is a storage unit that stores an operating system, various programs, data, etc. read by the processor 41. The memory 42 has a RAM and a ROM. In addition, the memory 42 may also have a solid state drive, a hard disk drive, etc. In addition, the memory 42 stores a use history DB 421.

[0089] Figure 64 is a diagram showing an example of the usage history DB 421. The usage history DB 421 is a database that stores the history of the user's use of the information processing device 2 (hereinafter, also referred to as the usage history). Figure 6 The use history DB 421 shown stores the items of date and time, user ID, device ID, type of work, department, and work location in association with each other.

[0090] In the use history DB 421 , the date and time is information on the date and time when the information processing device 2 was used.

[0091] In the use history DB 421 , the user ID is identification information of a user who used the information processing device 2 identified by the corresponding device ID at the corresponding date and time.

[0092] Furthermore, in the use history DB 421 , the device ID is identification information of the information processing device 2 used by the user identified by the corresponding user ID at the corresponding date and time.

[0093] Furthermore, in the use history DB 421 , the type of work, the department to which the work belongs, and the place of work are attribute information of the user identified by the corresponding user ID.

[0094] <Terminal Structure>

[0095] Figure 7 1 is a diagram showing an example of the configuration of the terminal 1 . Figure 7 The terminal 1 shown has a processor 11, a memory 12, an interface 13, an operation unit 14, and a display unit 15. These components are connected via a bus, for example, so as to be able to communicate with each other.

[0096] The processor 11 controls each part of the terminal 1 by reading and executing a program stored in the memory 12. The processor 11 is, for example, a CPU.

[0097] The interface 13 is a communication circuit that connects the terminal 1 via the communication line 5 in a wired or wireless manner so that the terminal 1 can communicate with the server 3 and the log server 4 respectively.

[0098] Furthermore, the interface 13 includes a near field wireless communication unit 131. The near field wireless communication unit 131 is connected to the information processing device 2 located at a short distance so as to be communicable in accordance with the near field wireless communication standard described above.

[0099] The operation unit 14 includes operation buttons, a keyboard, a touch panel, a mouse, and other operation keys for performing various instructions, receives an operation, and transmits a signal corresponding to the operation content to the processor 11 .

[0100] In addition, the operation unit 14 may include, for example, an imaging element that captures an image formed on a medium such as paper. The operation unit 14 only needs to extract characters or patterns included in the image data shown by the image data from the image data generated by the imaging element, and provide the encoded data obtained by encoding the characters or patterns to the processor 11. The operation unit 14 is, for example, a digital still camera or a barcode reader.

[0101] The display unit 15 has a display screen such as a liquid crystal display, and displays an image under the control of the processor 11. The transparent touch panel of the operation unit 14 may be arranged to overlap on the display screen.

[0102] The memory 12 is a storage unit that stores an operating system, various programs, data, etc. read by the processor 11. The memory 12 has a RAM and a ROM. In addition, the memory 12 may also have a solid state drive, a hard disk drive, etc.

[0103] <Structure of Information Processing Device>

[0104] Figure 8 2 is a diagram showing an example of the configuration of the information processing device 2 . Figure 8 The information processing device 2 shown includes a processor 21, a memory 22, an interface 23, an operation unit 24, a display unit 25, and an image processing unit 26. These components are connected by a bus, for example, so as to be able to communicate with each other.

[0105] The processor 21 controls each part of the information processing device 2 by reading and executing a program stored in the memory 22. The processor 21 is, for example, a CPU.

[0106] The interface 23 includes a near field wireless communication unit 231. The near field wireless communication unit 231 has the same structure as the near field wireless communication unit 131, and is communicatively connected to the terminal 1 at a short distance in accordance with the near field wireless communication standard similar to that of the terminal 1.

[0107] The operation unit 24 includes operation buttons, a keyboard, a touch panel, a mouse, and other operation keys for performing various instructions, receives an operation, and transmits a signal corresponding to the operation content to the processor 21 .

[0108] In addition, the operation unit 24 may include, for example, an imaging element that captures an image formed on a medium such as paper. The operation unit 24 only needs to extract characters or patterns included in the image data shown by the image data from the image data generated by the imaging element and provide the encoded data obtained by encoding the characters or patterns to the processor 21. The operation unit 24 is, for example, a digital still camera or a barcode reader.

[0109] The display unit 25 has a display screen such as a liquid crystal display, and displays an image under the control of the processor 21. The transparent touch panel of the operation unit 24 may be arranged in a superimposed manner on the display screen.

[0110] In addition, the display unit 25 may include a light emitting circuit that notifies the user of permission or prohibition of use of the device by emitting light in different colors. The light emitting circuit may include, for example, two light emitting diodes that emit light of different colors.

[0111] The memory 22 is a storage unit that stores an operating system, various programs, data, etc. read by the processor 21. The memory 22 has a RAM and a ROM. The memory 22 stores, for example, identification information for identifying the device, i.e., the device ID 221, in the ROM. In addition, the memory 22 may also have a solid state drive, a hard disk drive, etc.

[0112] The image processing unit 26 is a device that performs various image-related processes, and provides, for example, an image forming function that forms an image on a medium such as paper by electrophotography or an image reading function that reads a medium with an image formed thereon by an optical system and generates image data representing the image.

[0113] <Functional structure of the server>

[0114] Fig. 9 3 is a diagram showing an example of the functional configuration of the server 3. The processor 31 of the server 3 functions as a receiving unit 311, an authenticating unit 312, an issuing unit 313, and a sending unit 314 by executing a program stored in the memory 32. Fig. 9 The processor 31 shown also functions as an update unit 315 .

[0115] Receiving unit 311 receives authentication information from terminal 1 (ie, first device) via communication line 5. Authentication unit 312 compares the authentication information received by receiving unit 311 with the contents of authentication information DB 321, and attempts to authenticate the user indicated by the authentication information (hereinafter also referred to as first user).

[0116] When the first user indicated by the authentication information is authenticated by the authentication unit 312, the issuing unit 313 issues information (hereinafter referred to as first permission information) indicating the information processing device 2 permitted to be used by the first user among the plurality of information processing devices 2 (i.e., second devices) possessed by the information processing system 9, with reference to the permission information DB 322. The first permission information is, for example, information called a verification token.

[0117] The transmission unit 314 transmits the first license information issued by the issuance unit 313 to the terminal 1 which has transmitted the authentication information received by the reception unit 311 .

[0118] That is, the server 3 having the processor 31 that functions as the above-mentioned receiving unit 311, authentication unit 312, issuing unit 313 and sending unit 314 is an example of a server that, when authenticating a first user using authentication information, sends to a first device the first permission information representing a second device among multiple second devices that the first user is permitted to use.

[0119] When the user instructs a request for updating the permission information DB 322 (hereinafter also referred to as an update request) via the terminal 1, Fig. 9 The receiving unit 311 shown receives the request from the terminal 1. When the receiving unit 311 receives the above-mentioned update request, Fig. 9 The updating unit 315 shown updates the permission information DB 322 in accordance with the request.

[0120] <Functional structure of log server>

[0121] Fig.10 3 is a diagram showing an example of the functional configuration of the log server 4. The processor 41 of the log server 4 functions as a receiving unit 411, a storage control unit 412, an issuing unit 413, and a sending unit 414 by executing a program stored in the memory 32.

[0122] The receiving unit 411 receives the device ID of the information processing device 2 (i.e., the second device) used in the information processing system 9, the user ID of the user who used the information processing device 2, and date and time information indicating the date and time of the use from the terminal 1 operated by the user. Fig.10 The receiving unit 411 shown receives, in addition to the user ID, attribute information of the user identified by the user ID.

[0123] When the receiving unit 411 receives the above-mentioned device ID, user ID and date and time information from the terminal 1, the storage control unit 412 stores them in the use history DB 421 of the memory 42. In addition, when the receiving unit 411 receives attribute information in addition to the above-mentioned user ID, Fig.10 The storage control unit 412 shown stores the attribute information in the use history DB 421 in association with the user ID.

[0124] That is, the log server 4 including the processor 41 functioning as the above-mentioned receiving unit 411 and storage control unit 412 is an example of a log server that stores the attribute information when receiving the attribute information of the user permitted to be used by the second device.

[0125] Furthermore, when the device ID of the information processing device 2 requested to be used is not included in the first permission information, the user (i.e., the first user) who is authenticated by the server 3 and obtains the first permission information from the server 3 via the terminal 1 is prohibited from using the information processing device 2. At this time, the first user may inquire the log server 4 via the terminal 1 whether there is a history of another user (hereinafter also referred to as the second user) having an attribute that is in a prescribed relationship with the first user's attribute using the information processing device 2 that the first user is prohibited from using. The receiving unit 411 receives the inquiry.

[0126] When receiving unit 411 receives the above-mentioned inquiry about whether the usage history of the second user using information processing device 2 is stored, issuing unit 413 refers to usage history DB 421 to search for the history of the specified second user using the specified information processing device 2. Then, when the history is retrieved, permission information (hereinafter referred to as second permission information) indicating that the specified information processing device 2 is permitted to be used by the second user is issued.

[0127] Here, as mentioned above, Fig.10 The log server 4 shown in the usage history DB 421 stores, in addition to the user ID of the user who used the information processing device 2, the attribute information of the user identified by the user ID. In this case, the above-mentioned inquiry is equivalent to an inquiry as to whether the attribute information of the second user has been stored in the usage history DB 421. Therefore, when the receiving unit receives the inquiry as to whether the attribute information of the second user is stored and the attribute information of the second user is stored in the usage history DB 421, Fig.10 The issuing unit 413 shown issues the second license information.

[0128] The sending unit 414 sends the second permission information issued by the issuing unit 413 to the terminal 1 (i.e., the first device) that sent the inquiry. That is, the log server 4 having the processor 41 that functions as the receiving unit 411, the issuing unit 413, and the sending unit 414 is an example of a log server that, when receiving an inquiry about whether the attribute information of the second user is stored, sends the second permission information for the first user to the first device if the attribute information of the second user is stored. Here, "the second permission information for the first user" refers to permission information indicating that the second user relative to the first user is permitted to use the present device.

[0129] <Functional structure of the terminal>

[0130] Fig.111 is a diagram showing an example of the functional configuration of the terminal 1 . The processor 11 of the terminal 1 functions as a receiving unit 111 , a display control unit 112 , a receiving unit 113 , and a transmitting unit 114 by executing a program stored in the memory 12 .

[0131] When the receiving unit 111 obtains the first permission information from the server 3, the receiving unit 111 stores the first permission information in the memory 12. When the receiving unit 111 obtains the second permission information from the log server 4, the receiving unit 111 stores the second permission information in the memory 12.

[0132] In addition, the receiving unit 111 receives a notification of permission for use (called a permission notification), a message of temporary permission for use (called a temporary permission notification), or a message of prohibition for use (called a prohibition notification) from the information processing device 2 connected to communicate via near-field wireless communication.

[0133] The display control unit 112 causes the display unit 15 to display screens corresponding to the first permission information, the second permission information, the permission notification, the temporary permission notification, and the prohibition notification received by the reception unit 111 .

[0134] The accepting unit 113 accepts authentication information of a user (i.e., the first user) via the operating unit 14. The sending unit 114 sends the authentication information accepted by the accepting unit 113 to the server 3. That is, the terminal 1 having the processor 11 that functions as the accepting unit 113 and the sending unit 114 is an example of a first device that accepts authentication information of the first user and sends the authentication information to the server.

[0135] Furthermore, when the receiving unit 111 receives the first permission information from the server 3, the sending unit 114 sends the first permission information to any one of the information processing devices 2 located at a short distance. The information processing device 2 is any one of the plurality of information processing devices 2 constituting the information processing system 9. That is, the terminal 1 having the processor 11 functioning as the receiving unit 111 and the sending unit 114 is an example of a first device that sends the first permission information to any one of the plurality of second devices.

[0136] Furthermore, when the receiving unit 111 receives the second permission information from the log server 4, the sending unit 114 sends the second permission information to the information processing device 2 specified by the second permission information. The information processing device 2 that has received the second permission information from the terminal 1 replies with a temporary permission notification to the terminal 1. Thus, the first user operating the terminal 1 is permitted to temporarily use the information processing device 2.

[0137] At this time, when the first user considers that he should be permitted to use the information processing device 2 not temporarily but permanently, he operates the operation unit 14 to cause the terminal 1 to send an update request. The update request is a request to request the server 3 to update the permission information DB 322 and add the information processing device 2 as the information processing device 2 permitted to be used by the first user. The accepting unit 113 accepts the update request. The sending unit 114 sends the update request accepted by the accepting unit 113 to the server 3.

[0138] Server 3, which has received the update request from terminal 1, associates the device ID of information processing device 2 indicated in the second license information received from terminal 1 with the user ID of the first user operating terminal 1 and stores them in license information DB 322. Thus, the first license information issued with reference to license information DB 322 is updated.

[0139] In addition, the above-mentioned update request may not be accepted by the accepting unit 113 from the user via the operating unit 14. For example, when the receiving unit 111 receives the second permission information from the log server 4, the sending unit 114 may send the above-mentioned update request to the server 3. That is, the terminal 1 having the processor 11 that functions as the receiving unit 111 and the sending unit 114 is an example of the first device that requests the server to update the first permission information when the second permission information is received from the log server.

[0140] <Functional Structure of Information Processing Device>

[0141] Fig.12 2 is a diagram showing an example of the functional configuration of the information processing device 2. The processor 21 of the information processing device 2 functions as an acquisition unit 210, a first permission unit 211, a second permission unit 212, and a notification unit 213 by executing a program stored in the memory 22.

[0142] The acquisition unit 210 acquires the first permission information from the terminal 1 connected by near field wireless communication. The first permission information is information in which the device ID indicating the device permitted to be used by the first user is recorded. That is, the processor 21 functioning as the acquisition unit 210 is an example of a processor that acquires the first permission information from the terminal operated by the first user.

[0143] In addition, the acquisition unit 210 acquires the second permission information by receiving the second permission information from the terminal 1 connected by near-field wireless communication. As described above, the second permission information is information indicating that the information processing device 2 specified by the inquiry permits the second user to use the device, and the second user has the following attributes, which have a prescribed relationship with the attributes of the first user operating the terminal 1.

[0144] In addition, the information processing device 2 may obtain the first permission information from the first user via the operation unit 24. For example, the first user causes the display unit 15 of the terminal 1 operated by the first user to display an image obtained by encoding the first permission information obtained from the server 3, and brings the image close to a digital still camera or a barcode reader included in the operation unit 24 of the information processing device 2 for requesting use. The image is, for example, a character string, a one-dimensional code, or a two-dimensional code.

[0145] The operation unit 24 reads an image displayed on the terminal 1, generates image data representing the image, and supplies the image data to the processor 21. The acquisition unit 210 implemented by the processor 21 may acquire the first permission information by analyzing and converting the image data supplied from the operation unit 24. That is, the processor 21 functioning as the acquisition unit 210 is an example of a processor that acquires the first permission information representing the device permitted to be used by the first user.

[0146] The first permission unit 211 refers to the own device ID 221 stored in the memory 22, compares the own device ID 221 with the device ID included in the first permission information obtained by the obtaining unit 210, and determines whether the device ID of the own device is included in the first permission information. Then, when it is determined that the device ID of the own device is included in the first permission information, the first permission unit 211 permits the first user of the operation terminal 1 to use the own device. That is, the processor 21 that functions as the first permission unit 211 is an example of a processor that permits the first user to use the own device when the first permission information indicates the own device.

[0147] On the other hand, when it is determined that the device ID of the own device is not included in the first permission information, the first permission unit 211 prohibits the first user of the operation terminal 1 from using the own device.

[0148] When the present device permits use by a second user having an attribute having a predetermined relationship with an attribute of the first user prohibited by the first permitting unit 211, the second permitting unit 212 permits use of the present device by a first user.

[0149] For example, when the acquisition unit 210 receives the second permission information, Fig.12 The first permission unit 211 shown delivers the second permission information to the second permission unit 212. When the delivered second permission information is the second permission information indicating that the present device permits the second user to use the present device, the second permission unit 212 issues a temporary permission notification of the present device to the first user, and notifies the terminal 1 of the temporary permission notification from the notification unit 213.

[0150] That is, the processor 21 that functions as the second permission unit 212 is an example of a processor that permits the first user to use the device when the first permission information does not indicate the device and the second user is permitted to use the device, and the second user has the following attributes that have a prescribed relationship with the attributes of the first user.

[0151] When the first permission unit 211 permits or prohibits the use of the present device, the notification unit 213 notifies the terminal 1 of the situation. That is, the processor 21 that functions as the first permission unit 211 and the notification unit 213 is an example of a processor that notifies the terminal that the first user is permitted to use the present device when the first permission information indicates the present device. In addition, the processor 21 that functions as the first permission unit 211 and the notification unit 213 is an example of a processor that notifies the terminal that the first user is prohibited from using the present device when the first permission information does not indicate the present device.

[0152] Furthermore, when the second permission unit 212 permits the use of the present device, the notification unit 213 notifies the terminal 1 of the fact. That is, the processor 21 that functions as the acquisition unit 210, the second permission unit 212, and the notification unit 213 is an example of a processor that, when receiving the second permission information indicating that the second user is permitted to use the present device from the terminal notified of the prohibition of use, notifies the terminal of the permission of use.

[0153] In addition, the information processing device 2 having the processor 21 that functions as the above-mentioned first permission unit 211 and the second permission unit 212 is an example of the following second device: the second device permits the first user to use the device when the first permission information sent indicates the device, and permits the first user to use the device when the first permission information does not indicate the device and the following second user is permitted to use the device, the second user having the following attributes, which have a prescribed relationship with the attributes of the first user.

[0154] Furthermore, the information processing device 2 including the processor 21 functioning as the first permission unit 211 and the second permission unit 212 is an example of a second device that permits the first user to use the device when receiving the second permission information from the first device.

[0155] In addition, the function of the information processing device 2 permitted by the second permission information (hereinafter referred to as the second function) may be set to be more restricted than the function of the information processing device 2 permitted by the first permission information (hereinafter referred to as the first function). In this case, the processor 21 of the information processing device 2 is an example of a processor that obtains the first permission information indicating the device that permits the first user to use the first function, permits the first user to use the first function of the device when the first permission information indicates the device, and permits the first user to use the second function of the device that is more restricted than the first function when the first permission information does not indicate the device and the second user is permitted to use the first function of the device.

[0156] Furthermore, the period during which the second function is permitted to be used by the second license information may be set to be more limited than the period during which the first function is permitted to be used by the first license information. For example, as described above, the period during which the second function is permitted to be used by the second license information may be set to be a temporary period that is shorter than the period during which the first function is permitted to be used by the first license information.

[0157] <Operation of Information Processing System>

[0158] The flow of operations in which the terminal 1 , the information processing device 2 , the server 3 , and the log server 4 mutually exchange information in the information processing system 9 will be described using a sequence diagram.

[0159] <Action to send permission notification>

[0160] Fig.13 1 is a sequence diagram showing an example of the flow of the action of the information processing device 2 sending the permission notification. The first user who operates the terminal 1 inputs his authentication information into the terminal 1. The authentication information may be biometric information such as the fingerprint, vein, or iris of the first user. The authentication information described here is a combination of a user ID and a password.

[0161] Fig.14 1 is a diagram showing an example of a terminal 1 that receives input of authentication information. When a first user starts a program for using the information processing system 9, the terminal 1 Fig.14 The login screen shown is displayed on the display unit 15. The login screen has a text box T1, a text box T2, a button B1, and a button B2.

[0162] The text box T1 is arranged below the character string "User ID" and receives input of a character string indicating the user ID of the first user. The text box T2 is arranged below the character string "Password" and receives input of a character string indicating a password known only to the first user.

[0163] The button B1 has a character “clear” in it. When the button B1 is clicked, the processor 11 of the terminal 1 deletes the contents inputted into the text boxes T1 and T2 and returns to the initial state.

[0164] The button B2 has a character “Send” inscribed therein. When the button B2 is clicked, the processor 11 sends the input authentication information to the server 3.

[0165] like Fig.13 As shown, terminal 1 sends the authentication information input by the first user to server 3 (step S101). When server 3 receives the authentication information from terminal 1, it attempts to authenticate the first user based on the authentication information (step S102). Then, if the authentication is successful, server 3 issues first permission information and sends it to terminal 1 (step S103). The first permission information records the device ID of the information processing device 2 that the first user is allowed to use. On the other hand, if the authentication fails, server 3 notifies the first user of the authentication failure via terminal 1 (step S104). Fig.13 (not shown in the figure).

[0166] Fig.15 1 is a diagram showing an example of a display of the terminal 1. In the case where the authentication of the first user fails, the server 3 sends an instruction to the terminal 1, such as Fig.15 The screen shown in (a) is displayed on terminal 1. The first user sees Fig.15 The first user then clicks on the message "Authentication failed" shown in (a) of FIG. Fig.15 The button B11 with the character string "Return" shown in (a) returns the screen displayed on the terminal 1 to the login screen.

[0167] Furthermore, when the authentication of the first user is successful, the server 3 issues the first permission information and sends it to the terminal 1. Fig.15 The screen shown in (b) is displayed on the terminal 1. The first user sees Fig.15 The message "Authentication Success" shown in (b) of FIG. 1 is displayed, thereby knowing that the authentication has been passed. In addition, the first user sees Fig.15 The user receives the message "Device permitted to use: D11, D13" shown in (b), thereby knowing that the device IDs of the information processing devices 2 that the user is permitted to use are "D11" and "D13".

[0168] like Fig.13 As shown in FIG. 1 , when receiving the first license information issued by the server 3, the terminal 1 accepts an instruction to send the first license information to the information processing device 2 (step S104). The screen for accepting the instruction is, for example, Fig.15When the first user moves to the information processing device 2 that he wants to use and clicks the Fig.15 When the button B12 with the character string "Send" shown in (b) is pressed, the terminal 1 sends the first permission information to the information processing device 2 in front (step S105).

[0169] When the information processing device 2 receives the first permission information from the terminal 1, it verifies whether the device is permitted to be used by the first user (step S106). The verification is performed by the following method: Figure 8 The processor 21 of the information processing device 2 shown refers to the own device ID 221 stored in the memory 22, and determines whether the device ID of the own device is included in the received first permission information.

[0170] Fig.16 It is a diagram showing an example of the first license information issued by the server 3 . Fig.16 The first license information P1 shown is the first license information issued by the server 3, and includes the first user information P11 and the second device information P12. The first user information P11 is information related to the first user authenticated by the server 3, and is information about the user ID, type of work, department, and work location of the first user. The second device information P12 is information related to the information processing device 2 (i.e., the second device) that is permitted to be used by the first user, and is information about the device ID, device name, and term of the information processing device 2.

[0171] In addition, if Fig.16 As shown, the first license information P1 may also include a signature P13 of the server 3. The signature P13 is, for example, a signature generated by a private key inherent to the server 3 and verifiable using a public key corresponding to the private key. In addition, the signature P13 may also be generated using a shared key pre-shared by the server 3 and the information processing device 2. When the first license information P1 includes the signature P13, the information processing device 2 can verify that the server 3 has officially issued the first license information P1.

[0172] Fig.17 is a diagram showing a specific example of the first permission information. Fig.17 As shown, the first permission information P1 is expressed in accordance with the provisions of the "Extensible Markup Language" (XML). In this case, for example, the item of user ID is expressed by a start tag and an end tag of an element name such as "id", and the content is recorded in a position sandwiched by the start tag and the end tag.

[0173] For example, when receiving Fig.17In the case of the first permission information P1 shown in FIG. 1 , the information processing device 2 performs a so-called analysis process on the first permission information P1 to generate a list of device IDs of the information processing devices 2 that are permitted to be used by the first user. Then, the information processing device 2 determines whether the device ID representing the own device is included in the generated list.

[0174] exist Fig.13 In the example shown, the authentication of the information processing device 2 is successful. That is, the information processing device 2 determines that the first user has been permitted to use the device, and sends a permission notification indicating this to the terminal 1 (step S107). The terminal 1 that has received the permission notification instructs the log server 4 (such as a storage command) via the communication line 5 to store the situation that the first user has used the information processing device 2 according to the first permission information (step S108).

[0175] Receiving the storage command, the log server 4 stores at least the user ID of the first user and the device ID of the information processing device 2 used by the first user based on the first permission information.

[0176] In addition, here, the terminal 1 issues a storage command including the attribute information of the first user to the log server 4 by sending, for example, the first permission information. The log server 4 that receives the storage command including the attribute information stores the date and time when the first user used the information processing device 2 and the attribute information of the first user (for example, type of work, department, and work location, etc.) in addition to the user ID and the device ID (step S109).

[0177] <Actions for sending ban notifications>

[0178] Fig.18 2 is a sequence diagram showing an example of the flow of operations in which the information processing device 2 transmits a temporary permission notification. Fig.18 The actions shown include until Fig.13 Each process up to step S106 is shown.

[0179] exist Fig.18 In the example shown, the authentication of the information processing device 2 fails. That is, here, the first permission information received by the information processing device 2 from the terminal 1 does not include the device ID of the device. Therefore, the information processing device 2 determines that the first user is prohibited (i.e., not permitted) from using the device, and sends a prohibition notification indicating this to the terminal 1 (step S111).

[0180] The terminal 1 that has received the prohibition notification accepts an instruction from the first user to inquire the log server 4 about the use history of the second user (step S112 ).

[0181] Fig.191 is a diagram showing an example of a display of the terminal 1 that has received a prohibition notification. Fig.19 As shown in (a) of FIG. 1 , the terminal 1 displays a message such as “You are not allowed to use this device. Do you want to inquire about the usage history?” to the first user identified by the user ID “U01”. Then, as shown in FIG. Fig.19 As shown in (a) of FIG. 1 , a button B21 having a character string “return” and a button B22 having a character string “ask” are displayed below the message.

[0182] When the first user clicks the button B21, the terminal 1 returns the screen displayed on the display unit 15 to, for example, Fig.15 On the other hand, when the first user clicks button B22, the terminal 1 inquires the log server 4 whether the second user has used the information processing device 2 prohibited from use by the second user (step S113). As described above, the second user is another user having an attribute having a prescribed relationship with the attribute of the first user.

[0183] “Two attributes have a predetermined relationship” means, for example, that the two attributes are classified as the same group with a certain ratio or more. In the following description, the second user refers to a user whose attribute information of one or more of the job type, department, and workplace is the same as that of the first user.

[0184] The log server 4 that has received the inquiry from the terminal 1 searches the usage history DB 421 for the usage history of the designated information processing device 2 of the second user designated by the inquiry (step S114 ).

[0185] If the search result shows that the above-mentioned usage history is not found in the usage history DB 421, the log server 4 notifies the terminal 1 of the message. On the other hand, if the above-mentioned usage history is found in the usage history DB 421, the log server 4 sends the second permission information to the terminal 1 (step S115). Then, when the terminal 1 receives the second permission information from the log server 4, it sends the second permission information to the information processing device 2 (step S116).

[0186] For example, when the user ID of the first user is "U01", the terminal 1 obtains the Fig.16 Then, when the first user comes to the information processing device 2 identified by the device ID "D12" and operates the terminal 1 to try to use the information processing device 2, the information processing device 2 receives the first permission information P1 from the terminal 1 and sends a prohibition notification to the first user.

[0187] At this time, when the terminal 1 receives the inquiry operation from the first user, it extracts, for example, the attribute information of the first user from the first permission information P1. Then, the terminal 1 specifies the device ID "D12" of the information processing device 2 that sent the prohibition notification, and specifies a user having the same attribute information as one or more of the extracted three attribute information as the second user, and inquires the log server 4.

[0188] In this case, as attribute information, a message recording Fig.16 In addition, a query in which the device ID "D12" of the information processing device 2 is recorded is sent to the log server 4.

[0189] In response to the inquiry received from the terminal 1 , the log server 4 searches the usage history DB 421 for a history of use of the information processing device 2 identified by the device ID “ D12 ” by a second user having the same one or more attribute information.

[0190] Retrieve from log server 4 Figure 6 In the case of the usage history DB 421 shown, since the work place "YMM" of the user identified by the user ID "U02" is the same as the first user identified by the user ID "U01", the user is a member of the second user. Figure 6 The usage history DB 421 shown stores the usage history of the second user identified by the user ID “ U02 ” using the information processing device 2 identified by the device ID “ D12 ”.

[0191] Therefore, in this case, the log server 4 searches the usage history DB 421 for the above-mentioned usage history, and transmits the second permission information to the terminal 1 .

[0192] Fig. 20 2 is a diagram showing a specific example of the second permission information. Fig. 20 As shown, the second permission information P2 is expressed, for example, in accordance with the XML specification. In this case, for example, the device ID of the information processing device 2 permitted for temporary use is expressed by a start tag and an end tag of the element name "serial", and the device ID "D12" as its content is recorded in a position sandwiched by the start tag and the end tag. Fig. 20 The second permission information shown indicates that the second user relative to the first user has used the information processing device 2 identified by the device ID “ D12 ”.

[0193] In addition, the second permission information may also include the signature of the log server 4. For example, Fig. 20As shown, the second permission information P2 describes the signature of the log server 4 at a position sandwiched between a start tag and an end tag of an element name "signature".

[0194] This signature is, for example, a signature generated by a private key inherent to the log server 4 and verifiable using a public key corresponding to the private key. Alternatively, this signature may be generated using a shared key previously shared by the log server 4 and the information processing device 2. When the second license information P2 includes this signature, the information processing device 2 can verify that the second license information P2 has been officially issued by the log server 4.

[0195] When the information processing device 2 receives the second permission information and verifies the information and determines that the information is information that allows temporary use of the device, it sends a temporary permission notification to the terminal 1 (step S117). The terminal 1 that receives the temporary permission notification displays a screen corresponding to the temporary permission notification on the display unit 15. The screen is, for example, Fig.19 The screen shown in (b) is shown in Fig.19 As shown in (b), a message such as "Having a history of use by a person with similar attributes. Temporary permission to use." is displayed to the first user identified by the user ID "U01" on the terminal 1. When the first user who has seen the message clicks a button B23 with a character string "Confirm" arranged below the message, the terminal 1 displays a screen for accepting an operation to temporarily use the information processing device 2.

[0196] Then, terminal 1 transmits an update request to server 3 at the time when the first user starts or ends temporary use of information processing device 2 or at the time when an instruction from the first user is accepted (step S118 ).

[0197] The server 3 that receives the update request adds the device ID of the information processing device 2 that has been permitted to be temporarily used by the first user to the user ID of the first user in correspondence with each other, and updates the permission information DB 322 (step S119). The permission information DB 322 updated in this way shows the information processing device 2 that has been permitted to be temporarily used by the first user.

[0198] The temporary use is permitted by the information processing device 2 to the first user based on the second permission information. That is, the server 3 is an example of a server that updates the first permission information to indicate that the second device has permitted the use of the device through the second permission information when the first device requests an update.

[0199] In addition, in the above step S118, the terminal 1 sends the update request to the server 3 at a specified time after the first user starts temporary use of the information processing device 2, but the time of sending the update request is not limited to this. For example, in the above step S115, the terminal 1 may send the update request to the server 3 before the first user starts temporary use, as long as it is after the log server 4 receives the second permission information.

[0200] By performing the above-described operation, the information processing system 9 can permit the first user who is not permitted to use the information processing device 2 to use the information processing device 2 when the second user having an attribute having a predetermined relationship with the attribute of the first user is permitted.

[0201] <Modification>

[0202] The above is the description of the embodiment, but the contents of the embodiment can be modified as follows. In addition, the following modifications can also be combined with each other.

[0203] <1>

[0204] In the above-mentioned embodiment, the terminal 1, the information processing device 2, the server 3 and the log server 4 respectively have the processor 11, the processor 21, the processor 31 and the processor 41 constituted by the CPU, but the control unit for controlling these devices respectively may also be other structures. For example, these devices may also have various processors in addition to the CPU.

[0205] Here, the processor refers to a processor in a broad sense, including general-purpose processors (for example, the above-mentioned CPU, etc.), special-purpose processors (for example, GPU (Graphics Processing Unit), ASIC (Application Specific Integrated Circuit), FPGA (Field Programmable Gate Array), programmable logic devices, etc.).

[0206] <2>

[0207] The operations of the processors in the above-described embodiments may be performed not only by one processor but also by cooperation of a plurality of processors located in physically separate locations.

[0208] Furthermore, the order of each operation of the processor is not limited to the order described in the above embodiment, and may be changed as appropriate.

[0209] <3>

[0210] In the above-mentioned embodiment, when the terminal 1 receives the second permission information from the log server 4, it sends the second permission information to the information processing device 2. However, it is also possible to accept the instruction of the third user who is the administrator of the information processing device 2 indicated by the second permission information. In this case, the terminal 1 may also send the second permission information to the information processing device 2 after accepting the instruction of the third user.

[0211] Fig.21 This is a sequence diagram showing an example of the flow of operations for requesting permission from an administrator. Fig.21 The actions shown include until Fig.18 Each process up to step S114 is shown.

[0212] In step S114, the log server 4 retrieves the usage history of the second user using the designated information processing device 2 from the usage history DB 421. If the retrieval result is that the above usage history is not retrieved from the usage history DB 421, the log server 4 notifies the terminal 1 of the message. On the other hand, if the above usage history is retrieved from the usage history DB 421, the log server 4 sends the second permission information to the terminal 1 (step S115). The second permission information is information that has not been confirmed by the administrator, that is, the third user (such as the administrator has not confirmed).

[0213] When terminal 1 receives the second permission information that has not been confirmed by the administrator from the log server 4, it requests the terminal 1a of the third user to allow the first user to use the information processing device 2 indicated by the second permission information (step S121), and accepts instructions from the administrator of the information processing device 2 indicated by the second permission information, i.e., the third user.

[0214] When receiving the request (hereinafter also referred to as a permission request) from the terminal 1 that has received the second permission information not confirmed by the administrator, the terminal 1a accepts the operation of the third user (step S122).

[0215] Fig. 22 1 is a diagram showing an example of a terminal 1 that issues a permission request. Fig. 22 (a) of FIG. 1 shows an example of an operation screen displayed by terminal 1a when receiving a permission request from terminal 1. In this example, terminal 1 that has sent the permission request is operated by a first user, and the user ID of the first user is "U01". In addition, in this example, terminal 1a that has received the permission request is operated by a third user, and the user ID of the third user is "U03".

[0216] Fig. 22 The operation screen shown in (a) displays a message "U01 requests permission to temporarily use D12. Do you want to grant permission?" to the third user of the operation terminal 1a.

[0217] When the third user sees the message and wishes to prohibit the first user from temporarily using the information processing device 2 identified by the device ID "D12", the third user clicks, for example, a button B31 with a character string "prohibit" located below the message. On the other hand, when the third user wishes to permit the temporary use, the third user clicks, for example, a button B32 with a character string "permit" located below the message.

[0218] When the third user gives an instruction to allow the first user to use the information processing device 2 managed by the third user in accordance with the permission request (hereinafter also referred to as a permission instruction), Fig.21 As shown, the terminal 1a accepts the permission instruction and responds to the terminal 1 (step S123).

[0219] In addition, step S121 of sending a permission request from terminal 1 to terminal 1a and step S123 of replying a permission instruction from terminal 1a to terminal 1 may be performed respectively via server 3. In this case, server 3 authenticates the first user of terminal 1 and the third user of terminal 1a using authentication information, and approves the delivery of the permission request or permission instruction according to the instruction of the first user or the third user.

[0220] The terminal 1 that receives the permission indication generates the second permission information according to the permission indication, wherein the second permission information indicates that the third user has granted permission according to the second permission information that has not been confirmed by the administrator (such as the administrator has granted permission), and sends the second permission information to the information processing device 2 (step S116).

[0221] When the information processing device 2 receives the second permission information from the terminal 1, after confirming that the second permission information has been permitted by the administrator, it sends a temporary permission notification temporarily permitting the first user to use the device to the terminal 1 (step S117). Here, the second permission information permitted by the administrator is information including instructions from the third user who manages the device for the information processing device 2.

[0222] exist Fig. 22 (b) shows an example of an operation screen displayed by terminal 1 when receiving a temporary permission notification from information processing device 2. This operation screen displays a message such as "You have a usage history of a person with similar attributes and have obtained permission from U03. Temporary permission for use." to the first user operating terminal 1.

[0223] When the first user confirms the message, he clicks the button B33 arranged below the message and having a character string “Confirm.” As a result, the first user starts to temporarily use the information processing device 2 to which the temporary permission notification was sent.

[0224] That is, the processor 21 of the information processing device 2 is an example of a processor that accepts an instruction from a third user who manages the device when the first permission information does not indicate the device and the second user is permitted to use the device, and permits the first user to use the device when an instruction to permit the first user to use the device is accepted from the third user.

[0225] According to this structure, in the information processing device 2, even if there is a history of permitting the second user to use the device, the first user cannot be permitted to use the device unless the permission of the third user who manages the device is received, and the second user has the following attribute, which has a prescribed relationship with the attribute of the first user. Therefore, compared with the case where the permission of the third user is not required, the security of the information processing device 2 is improved.

[0226] <4>

[0227] In the above-mentioned embodiment, the log server 4 receives the storage command from the terminal 1 when the terminal 1 uses the information processing device 2 according to the first permission information, but the source of the storage command is not limited to the terminal 1. For example, the storage command may be issued by the information processing device that permits the use of the terminal 1 according to the first permission information. In this case, the information processing device may also be connected to the log server 4 so as to be able to communicate.

[0228] Fig.23 1 is a diagram showing an example of the overall configuration of an information processing system 9a in a modified example. Fig.23 In the information processing system 9a shown in FIG. Figure 1 The information processing device 2 shown has an information processing device 2 a and a communication line 6 . In addition, a log server 4 is connected to the communication line 6 .

[0229] The communication line 6 is a line that connects the information processing device 2a and the log server 4 in a wired or wireless manner so that they can communicate. The communication line 6 is, for example, a LAN within a company or organization, and is a dedicated line that connects a plurality of information processing devices 2 to each other.

[0230] Fig.24 2 is a sequence diagram showing an example of the flow of operations in which the information processing device 2a transmits a permission notification. Fig.24 The actions shown include Fig.13 Each process other than step S108 shown.

[0231] The information processing device 2a verifies whether the first user is permitted to use the device based on the first permission information received from the terminal 1 (step S106), and when the verification succeeds, sends a permission notification to the terminal 1 (step S107). Furthermore, after the above verification succeeds, the information processing device 2a sends a storage command to the log server 4 via the communication line 6 (step S201).

[0232] The log server 4 that receives the storage command stores the user ID of the first user and the device ID of the information processing device 2a used by the first user according to the first permission information (step S109). In addition, in this modified example, the order of executing steps S107 and S201 is not limited to the above order, and can also be reversed.

[0233] Fig.25 2 is a sequence diagram showing an example of the flow of operations in which the information processing device 2a transmits a temporary permission notification. Fig.25 The actions shown include Fig.18 The steps to step S106 and the steps after step S117 are shown.

[0234] When the verification fails in step S106, the information processing device 2a inquires the log server 4 whether the second user has used the device (step S211). At this time, the information processing device 2a may send a prohibition notification to the terminal 1 (step S111), but it may not send it.

[0235] The log server 4 that has received the inquiry from the information processing device 2a retrieves the usage history of the second user using the inquired information processing device 2a from the usage history DB 421 (step S114). Then, when the usage history is retrieved from the usage history DB 421, the log server 4 sends the second permission information to the information processing device 2a (step S212).

[0236] The information processing device 2a receiving the second permission information sends a temporary permission notification to the terminal 1 (step S117), and the terminal 1 receiving the temporary permission notification sends an update request to the server 3 (step S118). Then, the server 3 updates the permission information DB 322 according to the received update request (step S119).

[0237] According to this structure, the terminal 1 that receives the permission notification from the information processing device 2a does not need to send the storage command to the log server 4. In addition, when the information processing device 2a does not permit the use of the device according to the first permission information sent by the terminal 1, the terminal 1 does not need to make the above inquiry to the log server 4.

[0238] <5>

[0239] In the above-mentioned variation, the storage command sent by the information processing device 2a to the log server 4 may include the attribute information of the first user. In this case, the log server 4 that receives the storage command may store the attribute information included in the storage command in correspondence with the user ID of the first user and the device ID of the information processing device 2a.

[0240] That is, the processor 21 of the information processing device 2a is an example of a processor that obtains attribute information representing attributes of the first user, permits the first user to use the device when the first permission information indicates the device, and causes the log server to store the attribute information of the first user.

[0241] Furthermore, the information processing device 2a is an example of a second device that permits the first user to use the device and transmits the attribute information of the first user to the log server when the received first permission information indicates the device.

[0242] Furthermore, in the above-mentioned variation, the information processing device 2a asks the log server 4 whether the second user has used the device when the verification fails. However, when the above-mentioned storage command includes attribute information, the log server 4 may be asked whether the attribute information of the second user is stored. In this case, when the log server 4 determines that the attribute information of the second user is stored, it only needs to send the second permission information to the information processing device 2a, and the information processing device 2a that receives the second permission information sends a temporary permission notification to the terminal 1.

[0243] That is, the processor 21 of the information processing device 2a is an example of a processor that, when the first permission information does not indicate the present device, inquires from the log server whether attribute information of the second user is stored, and, when receiving second permission information from the log server indicating that attribute information of the second user is stored, permits the first user to use the present device.

[0244] In addition, the information processing device 2a is an example of a second device as follows: when the received first permission information does not indicate the present device, the second device inquires from the log server whether the attribute information of the second user is stored, and when the second permission information is received from the log server, the second device permits the first user to use the present device.

[0245] <6>

[0246] In addition, in the above-mentioned modification, the information processing device 2a is connected to the log server 4 as an external device via the communication line 6, but the information processing device 2a may also have the function of the log server 4. In this case, the information processing device 2a does not send a storage command to the log server 4, but only stores the usage history in the memory 22 of the device. In addition, in this case, the information processing device 2a does not inquire the log server 4, but only needs to retrieve the usage history of the second user from the usage history stored in the memory 22 of the device.

[0247] <7>

[0248] In the above-mentioned variation, upon receiving the second permission information from the log server 4 in response to the inquiry, the information processing device 2a sends a temporary permission notification to the terminal 1. However, the information processing device 2a may accept instructions from the administrator of the device, i.e., the third user, before sending the temporary permission notification.

[0249] Fig.26 1 is a diagram showing an example of the overall configuration of an information processing system 9b in a modified example. Fig.26 In the information processing system 9b shown, instead of Fig.23 The information processing device 2a described above includes an information processing device 2b, and the terminal 1a is connected to the information processing device 2b via a communication line 6 so as to be communicable.

[0250] Fig. 27 is a diagram showing an example of the functional configuration of an information processing device 2b in a modified example. Fig.12 The processor 21 shown in the figure has a processor 21b. The processor 21b has Fig.12 The processor 21 shown in the figure functions as a receiving unit 214 in addition to the acquiring unit 210 , the first permitting unit 211 , the second permitting unit 212 , and the notifying unit 213 implemented therein.

[0251] Fig. 27 The second permission unit 212 shown is delivered the second permission information from the acquisition unit 210 via the first permission unit 211. The second permission information is not permitted by the third user and is therefore the second permission information not confirmed by the administrator. When the second permission unit 212 is delivered the second permission information not confirmed by the administrator, it generates a permission request for the third user who is the administrator of the device. The notification unit 213 notifies the terminal 1a operated by the third user of the permission request generated by the second permission unit 212.

[0252] The accepting unit 214 accepts the permission instruction from the third user who has responded to the permission request from the terminal 1a. When the accepting unit 214 accepts the permission instruction, the second permission unit 212 issues a temporary permission notification to the first user. The notifying unit 213 transmits the temporary permission notification issued by the second permission unit 212 to the terminal 1a.

[0253] Fig.28 2 is a sequence diagram showing an example of the flow of operations of the information processing device 2b transmitting a prohibition notification. Fig.28 The actions shown include Fig.25 The steps up to step S212 and the steps after step S117 are shown.

[0254] exist Fig.28 In step S212 shown, the log server 4 sends the second permission information not confirmed by the administrator to the information processing device 2b. When the information processing device 2b receives the second permission information not confirmed by the administrator, it sends a permission request to the terminal 1a of the third user via the communication line 6 (step S213). The permission request is a request to the third user to permit the first user to use the information processing device 2b.

[0255] When the above permission request is received from the information processing device 2b, the terminal 1a accepts the operation of the third user (step S122). Then, when the third user issues a permission instruction to allow the first user to use the information processing device 2b, as shown in FIG. Fig.28 As shown, the terminal 1a replies the permission instruction to the information processing device 2b (step S214). Upon receiving the permission instruction from the terminal 1a, the information processing device 2b transmits a temporary permission notification temporarily permitting the first user to use the device to the terminal 1 (step S117).

[0256] In this configuration as well, the security of the information processing device 2b is improved compared to a case where the third user's permission is not required.

[0257] <8>

[0258] In the above-mentioned embodiment, the terminal 1 sends a storage command including the attribute information of the first user to the log server 4. However, the storage command may not include the attribute information.

[0259] Fig.29 4a is a diagram showing an example of the structure of the log server 4a. Fig.29 In the log server 4a shown, instead of Figure 5 The processor 41 shown in the figure has a processor 41a, and the memory 42 is replaced by a memory 42a. In the memory 42a, in the replacement Figure 5The usage history DB 421 shown in FIG. 4 is different from the usage history DB 421 in that it has a usage history DB 421a and an attribute information DB 422. Figure 5 The memory 42 shown is different.

[0260] Fig.30 FIG. 4 is a diagram showing an example of a database stored in the memory 42a. Fig.30 (a) of FIG. 4 shows an example of the attribute information DB 422. The attribute information DB 422 is a database that stores attribute information of a user identified by the user ID in association with each user ID.

[0261] exist Fig.30 An example of the use history DB 421a is shown in (b) of FIG. The use history DB 421a has Figure 6 The use history DB 421 shown has items of date and time, user ID, and device ID, but does not have items of type of work, department, and work location.

[0262] Fig.31 2 is a diagram showing an example of the functional configuration of the log server 4 a. Fig.31 The processor 41a shown is similar to the processor 41a in that it has an issuing unit 413a instead of the issuing unit 413. Fig.10 The processor 41 shown is different.

[0263] The receiving unit 411 receives the user ID of the user, the device ID of the information processing device 2 used by the user, and the date and time information indicating the date and time of the use via the interface 43. Then, the storage control unit 412 stores the user ID, device ID, and date and time information received by the receiving unit 411 in the use history DB 421a of the memory 42a. The receiving unit 411 does not receive the attribute information of the user, and therefore, the attribute information is not stored in the use history DB 421a.

[0264] On the other hand, the receiving unit 411 receives an inquiry about whether there is a history of use of the information processing device 2 prohibited from being used by the first user by the second user, the second user having an attribute having a predetermined relationship with the attribute of the first user. The inquiry is sent from the terminal 1 operated by the first user, for example, and includes the user ID of the first user and the device ID of the information processing device 2 prohibited from being used by the first user.

[0265] When the receiving unit 411 receives the inquiry, the issuing unit 413a retrieves the user ID of the first user included in the inquiry from the attribute information DB 422 and identifies the attribute information. Then, based on the identified attribute information, the issuing unit 413a extracts a user having attribute information having a predetermined relationship with the attribute information, that is, a second user, from the attribute information DB 422.

[0266] For example, when the query includes the user ID "U01" and the device ID "D12" of the first user, the issuing unit 413a searches for Fig.30 The attribute information DB 422 shown in (a) of FIG. 41 is used to identify the job type "developer", the department "EDS" and the work location "YMM" as the attribute information of the first user. Then, the issuing unit 413a extracts users having one or more of these attribute information from the attribute information DB 422. Here, the work location of the user identified by the user ID "U02" is "YMM", which is the same as the work location of the first user. Therefore, this user is a candidate for the second user. Multiple people can be extracted as candidates for the second user.

[0267] Then, the issuing unit 413a determines whether the extracted user ID of each candidate of the second user is stored in the usage history DB 421a. Fig.30 The usage history DB 421a shown in (b) of FIG. 1 stores the usage history of the user identified by the user ID "U02" using the information processing device 2 identified by the device ID "D12". Fig.30 When the use history DB 421a shown in (b) of FIG. 1 is accessed, the issuing unit 413a finds the use history shown in the inquiry. Then, the issuing unit 413a issues the second permission information indicating that the second user is permitted to use the information processing device 2 identified by the device ID "D12". The sending unit 414 sends the second permission information issued by the issuing unit 413a to the terminal 1 as the inquiry source via the interface 43.

[0268] In addition, the processor 41a may store the issuance history in the memory 42a each time the issuance unit 413a issues the second license information or each time the transmission unit 414 transmits the second license information. The history includes, for example, the date and time of issuance, the content of the issued second license information, the content of the inquiry, etc. The history may be viewed by, for example, the administrator of the information processing device 2 indicated in each of the second license information, that is, the third user.

[0269] <9>

[0270] In the above-mentioned embodiment, the program executed by the processor 31 of the server 3 is an example of the following program: the program causes a computer having a processor to perform the following steps: obtaining the first permission information indicating a device permitted to be used by the first user; permitting the first user to use the device when the first permission information indicates the device; and permitting the first user to use the device when the first permission information does not indicate the device and a second user having attributes having a prescribed relationship with the attributes of the first user is permitted to use the device.

[0271] These programs can be provided in a state stored in a computer-readable recording medium such as a magnetic recording medium such as a magnetic tape or a magnetic disk, an optical recording medium such as an optical disk, an optical magnetic recording medium, or a semiconductor memory, etc. Alternatively, the program can be downloaded via a communication line such as the Internet.

Claims

1. An information processing device, wherein: The information processing device has a processor. the processor acquires, from a terminal operated by a first user, first permission information indicating a device permitted to be used by the first user, When the first permission information indicates the own device, the processor notifies the terminal that the first user is permitted to use the own device, When the first permission information does not indicate the own device, the processor notifies the terminal that the first user is prohibited from using the own device, When receiving second permission information indicating that a second user is permitted to use the present device from the terminal notified of the prohibition of use, the processor sends a notification to the terminal permitting the first user to temporarily use the present device, the second user having an attribute having a prescribed relationship with an attribute of the first user, The first user who is permitted to temporarily use the device can operate the terminal to request the server to update the first permission information. When the terminal requests the update, the server updates the first permission information so as to indicate the own device permitted to be used by the second permission information.

2. An information processing device, wherein: The information processing device has a processor. the processor acquires, from a terminal operated by a first user, first permission information indicating a device permitted to be used by the first user, When the first permission information indicates the present device, the processor notifies the terminal that the first user is permitted to use the present device and causes the log server to store attribute information of the first user. In a case where the first permission information does not indicate the present device, the processor inquires whether the log server stores attribute information of a second user, the second user being permitted to use the present device and having the following attributes, the attributes having a prescribed relationship with the attributes of the first user, When receiving second permission information indicating that attribute information of the second user is stored from the log server, the processor sends a notification to the terminal that the first user is permitted to temporarily use the device, The first user who is permitted to temporarily use the device can operate the terminal to request the server to update the first permission information. When the terminal requests the update, the server updates the first permission information so as to indicate the own device permitted to be used by the second permission information.

3. The information processing device according to claim 1 or 2, wherein: the processor acquiring the first permission information indicating a device that permits the first user to use the first function, When the first permission information indicates the own device, the processor permits the first user to use the first function of the own device, When the first permission information does not indicate the own device and the second user is permitted to use the first function of the own device, the processor permits the first user to use a second function of the own device that is more restricted than the first function.

4. The information processing device according to claim 1 or 2, wherein: When the first permission information does not indicate the own device and the second user is permitted to use the own device, the processor accepts an instruction from a third user who manages the own device, The processor permits the first user to use the device when receiving the instruction to permit the first user to use the device from the third user.

5. An information processing system comprising: Device 1; A plurality of second devices; Servers; and Log Server, The first device receives authentication information of the first user and sends the authentication information to the server. When the server authenticates the first user using the authentication information, the server transmits first permission information to the first device, the first permission information indicating the second device that the first user is permitted to use among the plurality of second devices. The first device sends the first permission information to any one of the plurality of second devices. In a case where the first permission information indicates the present device, the second device to which the first permission information is sent permits the first user to use the present device, and in a case where the first permission information does not indicate the present device and the following second user is permitted to use the present device, the second device to which the first permission information is sent permits the first user to use the present device, the second user having the following attributes having a prescribed relationship with the attributes of the first user, When the log server receives attribute information of a user permitted to use by the second device, the log server stores the attribute information. When the log server receives the inquiry about whether the attribute information of the second user is stored, if the attribute information of the second user is stored, the log server sends the second permission information for the first user to the first device. The second device permits the first user to temporarily use the device when receiving the second permission information from the first device. When the first device receives the second permission information from the log server, the first device requests the server to update the first permission information. When the server is requested by the first device to perform the update, the server updates the first permission information so as to indicate the second device that is permitted to use the own device by the second permission information.

6. An information processing system comprising: Device 1; A plurality of second devices; Servers; and Log Server, The first device receives authentication information of the first user and sends the authentication information to the server. When the server authenticates the first user using the authentication information, the server transmits first permission information to the first device, the first permission information indicating the second device that the first user is permitted to use among the plurality of second devices. The first device sends the first permission information to any one of the plurality of second devices. In a case where the first permission information indicates the present device, the second device to which the first permission information is sent permits the first user to use the present device, and in a case where the first permission information does not indicate the present device and the following second user is permitted to use the present device, the second device to which the first permission information is sent permits the first user to use the present device, the second user having the following attributes having a prescribed relationship with the attributes of the first user, When the log server receives attribute information of a user permitted to use by the second device, the log server stores the attribute information. When the log server receives the inquiry about whether the attribute information of the second user is stored, if the attribute information of the second user is stored, the log server sends the second permission information for the first user to the first device. When the received first permission information does not indicate the second device, the second device inquires of the log server whether the attribute information of the second user is stored. The second device permits the first user to temporarily use the device when receiving the second permission information from the log server. When the first device receives the second permission information from the log server, the first device requests the server to update the first permission information. When the server is requested by the first device to perform the update, the server updates the first permission information so as to indicate the second device that is permitted to use the own device by the second permission information.

7. The information processing system according to claim 5 or 6, wherein: When the received first permission information indicates the own device, the second device permits the first user to use the own device and transmits the attribute information of the first user to a log server.

8. A computer-readable medium storing a program for causing a computer having a processor to execute a process, wherein: In the process described, acquiring, from a terminal operated by a first user, first permission information indicating a device permitted to be used by the first user, When the first permission information indicates the own device, notifying the terminal that the first user is permitted to use the own device, If the first permission information does not indicate the own device, notifying the terminal that the first user is prohibited from using the own device, When receiving second permission information indicating that a second user is permitted to use the device from the terminal notified of the prohibition of use, sending a notification permitting the first user to temporarily use the device to the terminal, the second user having an attribute having a predetermined relationship with an attribute of the first user, The first user who is permitted to temporarily use the device can operate the terminal to request the server to update the first permission information. When the terminal requests the update, the server updates the first permission information so as to indicate the own device permitted to be used by the second permission information.

9. A program product comprising a program causing a computer having a processor to execute the following processing, wherein: In the process described, acquiring, from a terminal operated by a first user, first permission information indicating a device permitted to be used by the first user, When the first permission information indicates the own device, notifying the terminal that the first user is permitted to use the own device, If the first permission information does not indicate the own device, notifying the terminal that the first user is prohibited from using the own device, When receiving second permission information indicating that a second user is permitted to use the device from the terminal notified of the prohibition of use, sending a notification permitting the first user to temporarily use the device to the terminal, the second user having an attribute having a predetermined relationship with an attribute of the first user, The first user who is permitted to temporarily use the device can operate the terminal to request the server to update the first permission information. When the terminal requests the update, the server updates the first permission information so as to indicate the own device permitted to be used by the second permission information.

Images