Communication system, communication control system and program

Abstract

To enable a master unit to acquire an access token used for access based upon a slave unit in a communication system that includes a plurality of devices having a master unit and a slave unit being set, and attains access to the outside from the slave unit by the master unit as a substitute.SOLUTION: The present invention relates to a communication system that includes a plurality of image processing devices having a master unit and a slave unit being set, wherein the slave unit has a function of transmitting an execution request for processing to transmit data to an external server and image data to be transmitted to the master unit, and the master unit has a function of acquiring an access token from an authorized server based upon authentication settings made on the authorized server in advance and using the access token to access the external server, and a function of acquiring the access token from the authorized server based upon authentication settings of an own device upon receiving the execution request and the image data from the slave unit, using the access token to access the external server, and attaching the image data to electronic mail and transmitting the mail to the external server.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to a communication system, a communication control system, and a program. [Background technology]

[0002] There is a system in which multiple image processing devices are set up as a parent device capable of communicating with the outside world and a child device capable of communicating with the parent device, and when an image processing device serving as a child device communicates with the outside world, the communication is performed via the image processing device serving as the parent device. Prior art document 1 (JP 2012-100120 A) discloses an email acquisition system consisting of a master multifunction device (parent device) and a slave multifunction device (child device) connected to each other, in which the master multifunction device downloads emails addressed to the master multifunction device, and also downloads emails addressed to the slave multifunction device in response to an alternative acquisition request from the slave multifunction device, and transmits the alternatively acquired emails addressed to the slave multifunction device to the slave multifunction device. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent Publication No. 2012-100120 Summary of the Invention [Problem to be solved by the invention]

[0004] In a communication system in which an access token is required for a child device to access the outside and such access is performed via a parent device, in advanced authentication such as OAuth authentication, an access token obtained through a predetermined authorization flow is used to access a connection destination. Therefore, in a system in which an access from a child device to the outside is performed on behalf of a parent device, it is necessary to provide a mechanism for the parent device to obtain an access token used for access based on the child device.

[0005] The present invention aims to enable a parent unit to obtain an access token used for access based on a child unit in a communication system that includes multiple devices each having a parent unit and a child unit, and in which access from the child unit to the outside is performed on behalf of the parent unit. [Means for solving the problem]

[0006] The invention described in claim 1 is a communication system including a plurality of image processing devices configured as parent devices and child devices, wherein the image processing device configured as a child device has a function of requesting execution of a process to transmit data to an external server and transmitting image data to be transmitted to the image processing device configured as a parent device, and the image processing device configured as a parent device has a function of acquiring an access token for accessing the external server from an authorization server based on an authentication setting previously made to the authorization server, and accessing the external server using the access token, and a function of, when receiving the execution request and the image data from the image processing device configured as a child device, acquiring an access token for accessing the external server from the authorization server based on the authentication setting of the image processing device, accessing the external server using the access token, and attaching the image data to an e-mail and transmitting it to the external server. The invention described in claim 2 is the communication system described in claim 1, characterized in that the image processing device set as the child device acquires and retains information for making the authentication settings to the authorization server from the image processing device set as the parent device, and when predetermined setting execution conditions are satisfied, performs the authentication settings to the authorization server using the retained information, acquires the access token from the authorization server, accesses the external server, and attaches the image data to an e-mail and sends it to the external server. The invention described in claim 3 is the communication system described in claim 2, characterized in that the image processing device set as the child device acquires information for performing the authentication setting based on predetermined acquisition conditions from the image processing device set as the parent device when the image processing device set as the parent device is operating. The invention described in claim 4 is the communication system described in claim 2, characterized in that the setting execution conditions include at least one of the image processing device set as the parent device not functioning as a parent device and the image processing device set as the parent device being incapable of being connected to. The invention described in claim 5 is the communication system described in claim 1, characterized in that when the image processing device set as the child device cannot transmit the image data based on the execution request via the image processing device set as the parent device, it performs authentication settings on the authorization server to obtain the access token from the authorization server, obtains the access token, accesses the external server, and attaches the image data to an e-mail and transmits it to the external server. The invention described in claim 6 is the communication system described in claim 5, characterized in that the image processing device, which is able to obtain the access token from the authorization server, accepts the execution request and the image data from other image processing devices set as child devices and operates as a parent device. The invention described in claim 7 is the communication system described in claim 5, characterized in that when the parent unit function of the image processing device set as the parent unit is restored, resulting in multiple image processing devices capable of operating as parent units, only one of the multiple image processing devices capable of operating as parent units operates as the parent unit, and the other image processing devices are set to operate as child units. The invention described in claim 8 is the communication system described in claim 5, characterized in that when the parent function of the image processing device set as the parent device is restored, resulting in multiple image processing devices being able to operate as parent devices, the image processing device set as the child device selects one of the multiple image processing devices that can operate as parent devices and sends the execution request and the image data. The invention described in claim 9 is a communication control system that controls data communication in an image processing device that can obtain an access token for accessing an external server from an authorization server, the communication control system having one or more processors, wherein the processor receives a request to execute a process to send data to the external server and image data to be sent from another image processing device, and in response to the request, obtains an access token to be used for accessing the external server from the authorization server based on the authentication settings of the processor, accesses the external server in accordance with the request using the obtained access token, and attaches the image data to an e-mail and sends it to the external server. The invention described in claim 10 is a program for controlling a computer provided in an image processing device capable of obtaining an access token for accessing an external server from an authorization server, characterized in that the program causes the computer to realize the following functions: a function of receiving a request to execute a process to send data to the external server and image data to be sent from another image processing device, a function of obtaining an access token to be used for accessing the external server from the authorization server based on the authentication settings of the device in response to the execution request, and a function of using the obtained access token to access the external server in accordance with the execution request, and attaching the image data to an e-mail and sending it to the external server. Effect of the Invention

[0007] According to the invention of claim 1, it is possible to reduce the time and effort required for authentication setting, as compared with a configuration in which each image processing device performs authentication setting and acquires an access token. According to the invention of claim 2, the robustness of the system is increased compared to a configuration in which only the parent device can obtain an access token. According to the invention of claim 3, the time required for authentication setup can be shortened, compared to a configuration in which information for authentication setup is acquired after the parent unit has stopped functioning. According to the invention of claim 4, it is possible to prevent the management of devices that can obtain an access token from becoming complicated, compared to a configuration in which a child device can obtain an access token when a parent device is operating normally. According to the invention of claim 5, the robustness of the system can be improved compared to a configuration in which the settings of the parent device and the child device are fixed. According to the invention of claim 6, the functions of the communication system can be restored more quickly compared to a configuration in which each slave device acquires an access token by itself. According to the invention of claim 7, compared to a configuration in which a plurality of image processing devices operate as parent devices, it is possible to prevent the management of parent devices that obtain access tokens using the same account from becoming complicated. According to the invention of claim 8, the convenience and robustness of the system are increased compared to a configuration in which only one image processing device operates as a parent device. According to the invention of claim 9, in response to a request from another image processing device which is unable to obtain an access token based on the authentication setting, an access token can be obtained and data can be transmitted. According to the invention of claim 10, a computer having the program of the present invention installed can obtain an access token and transmit data in response to a request from another image processing device that is unable to obtain an access token based on authentication settings. [Brief description of the drawings]

[0008] [Figure 1] FIG. 1 is a diagram illustrating an example of the configuration of a communication system to which the present embodiment is applied. [Diagram 2] FIG. 1 is a diagram showing a connection relationship in a communication system according to an embodiment of the present invention; [Diagram 3] FIG. 2 is a diagram illustrating an example of a hardware configuration of an image processing apparatus. [Figure 4] FIG. 2 illustrates an example of the hardware configuration of an authorization server and an external server. [Diagram 5] FIG. 2 is a diagram illustrating an example of a functional configuration of an image processing apparatus. [Figure 6] FIG. 4 illustrates an example of a functional configuration of a control unit. [Figure 7] FIG. 11 is a flowchart showing the operation of the parent unit when the parent unit accepts a request to execute processing of a service. [Figure 8] 11 is a flowchart showing an operation of the child device making a request to execute processing of a service via the parent device when the child device accepts a request to execute processing of the service; FIG. [Figure 9] FIG. 11 is a flowchart showing an operation of a child device making a request for execution of processing of a service to an external server when a set execution condition is satisfied. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. <Communication system configuration> 1 is a diagram showing an example of the configuration of a communication system to which the present embodiment is applied. The communication system 1 includes a plurality of image processing devices 100, an authorization server 200, and an external server 300. The devices 100, 200, and 300 are connected via a network.

[0010] The image processing device 100 is a device used by a user. The image processing device 100 refers to a device having a function of reading an image, a function of forming an image, and the like. The image processing device 100 in this embodiment has, for example, a copy function, a print function, a scan function, a facsimile function, and the like. The image processing device 100 also has a communication function and communicates with an authorization server 200 and an external server 300.

[0011] The image processing device 100 receives a service processing execution request from a user, acquires an access token from the authorization server 200 in response to the received service processing execution request, and accesses the external server 300 using the acquired access token. In this embodiment, an example of the service processing will be described using an example in which scanned image data is attached to an e-mail and sent to a destination. The access token can be acquired from the authorization server 200 by the image processing device 100 making a request to the authorization server 200 to issue an access token. To acquire the access token, the image processing device 100 needs to perform authentication settings in advance for the authorization server 200. An example of the external server 300 is, for example, an SMTP server having a function of sending e-mail.

[0012] FIG. 2 is a diagram showing connections in the communication system of the present embodiment. In a communication system 1 to which the present embodiment is applied, the image processing device 100 (see FIG. 1) is divided into a parent device 10 and a child device 20. The parent device 10 refers to an image processing device 100 that communicates with an authorization server 200 and an external server 300. The child device 20 refers to an image processing device 100 that does not communicate with an authorization server 200 and an external server 300. The child device 20 communicates with the parent device 10 and makes a request to the external server 300 via the parent device 10 to execute processing of a service. Each image processing device 100 operates as both a parent device 10 and a child device 20 depending on the settings. Hereinafter, the image processing device 100 operating as the parent device 10 will be referred to as the "parent device 10" and the image processing device 100 operating as the child device 20 will be referred to as the "child device 20", but when there is no need to distinguish between the two, they may be referred to as the "image processing device 100".

[0013] The image processing device 100 has a function of operating as both the parent device 10 and the child device 20, but operates as either one depending on the setting in the communication system 1. Note that the setting of the parent device 10 and the child device 20 can be switched in each image processing device 100. The parent device 10 and the child device 20 will be further described below.

[0014] As described above, the parent device 10 is the image processing device 100 that communicates with the authorization server 200 and the external server 300. The image processing device 100 set as the parent device 10 acquires an access token for accessing the external server 300 from the authorization server 200 based on authentication settings previously made to the authorization server 200, and accesses the external server 300 using the acquired access token.

[0015] In addition, when the parent unit 10 receives a request to execute a process to transmit data to the external server 300 or image data to be transmitted (hereinafter, the image data to be transmitted is referred to as "image data") from the image processing device 100 set as the child unit 20, the parent unit 10 obtains an access token for accessing the external server 300 from the authorization server 200 based on the authentication settings of the parent unit 10, accesses the external server 300 using the obtained access token, and attaches the image data to an e-mail and transmits it to the external server 300.

[0016] As described above, the child device 20 is an image processing device 100 that does not communicate with the authorization server 200 and the external server 300. The child device 20 communicates with the parent device 10. The image processing device 100 set as the child device 20 transmits a request to execute a process for transmitting data to the external server 300 and image data to the image processing device 100 set as the parent device 10.

[0017] The authorization server 200 is a server that issues an access token. The authorization server 200 performs authentication settings for the parent device 10 in response to a request for executing authentication settings from the parent device 10. The authorization server 200 accepts a request for issuing an access token from the parent device 10. The authorization server 200 issues an access token in accordance with the authentication settings performed in advance, and transmits it to the parent device 10.

[0018] The external server 300 is a server that provides a service. The external server 300 accepts a request to execute processing of the service from the parent device 10. The external server 300 checks whether or not the access token used by the parent device 10 is valid. If the external server 300 checks that the access token is valid, it allows the parent device 10 to access the external server 300. On the other hand, if the external server 300 checks that the access token is invalid, no further operation is performed.

[0019] <Hardware configuration of image processing device> FIG. 3 is a diagram showing an example of a hardware configuration of an image processing device 100. The image processing device 100 shown in FIG. 3 includes one or more processors 101 as a calculation means, a main storage device (main memory) 102 and an auxiliary storage device 103 as storage means, a display mechanism 104 for visually confirming display information, an input device 105 for accepting operations from a user, and a network interface 106 used for information communication. The processor 101 realizes each function of the information processing device 100 by loading a program stored in the auxiliary storage device 103 into the main storage device 102 and executing it. For example, a central processing unit (CPU), a micro processing unit (MPU), a graphics processing unit (GPU), a digital signal processor (DSP), or the like is used as the processor 101. For example, a random access memory (RAM) is used as the main storage device 102. For example, a magnetic disk device or a solid state drive (SSD) is used as the auxiliary storage device 103. For example, a display or the like is used as the display mechanism 104. Examples of the input device 105 include a keyboard, a mouse, and a touch panel. Note that the configuration of the image processing device 100 shown in Fig. 3 is merely an example, and the image processing device 100 used in this embodiment is not limited to the configuration example shown in Fig. 3. For example, the storage device may be configured to include a non-volatile memory such as a flash memory or a ROM (Read Only Memory).

[0020] <Hardware configuration of the authorization server and external server> FIG. 4 is a diagram showing an example of the hardware configuration of the authorization server 200 and the external server 300. The authorization server 200 and the external server 300 shown in FIG. 4 include one or more processors 201, 301 as a calculation means, main storage devices (main memories) 202, 302 and auxiliary storage devices 203, 303 as storage means, and network interfaces 204, 304 used for information communication. The processors 201, 301 realize the functions of the authorization server 200 and the external server 300 by loading a program stored in the auxiliary storage devices 203, 303 into the main storage devices 202, 302 and executing it. For example, a CPU, an MPU, a GPU, a DSP, or the like is used as the processors 201, 301. For example, a RAM is used as the main storage devices 202, 302. For example, a magnetic disk device, an SSD, or the like is used as the auxiliary storage devices 203, 303. Note that the server configuration shown in FIG. 4 is merely an example, and the server used in this embodiment is not limited to the configuration example of FIG. 4. For example, the storage device may be a non-volatile memory such as a flash memory or a ROM.

[0021] <Functional configuration of image processing device> 5 is a diagram showing an example of the functional configuration of the image processing device 100. The image processing device 100 includes an image forming unit 110, an image reading unit 120, an information input / output unit 130, a communication unit 140, and a control unit 150. Each function of the image processing device 100 is realized by a processor 101 reading a program stored in an auxiliary storage device 103 into a main storage device 102 and executing the program. The image processing device 100 displays various screens via a display mechanism 104, and accepts input from a user via an input device 105.

[0022] The image forming unit 110 forms an image based on image data on paper, which is an example of a recording material, using an image forming material. Examples of a method for forming an image on a recording material include an electrophotographic method in which toner attached to a photoreceptor is transferred to the recording material to form an image, and an inkjet method in which ink is ejected onto the recording material to form an image.

[0023] The image reading unit 120 is configured by a so-called scanner device, optically reads an image on a set document, and generates data of the read image. Examples of image reading methods include a CCD method in which light reflected from light irradiated from a light source onto a document is reduced by a lens and received by a CCD (Charge Coupled Devices), and a CIS method in which light reflected from light irradiated in sequence from an LED (Light Emitting Diode) light source onto a document is received by a CIS (Contact Image Sensor).

[0024] The information input / output unit 130 is a user interface that displays a preview image of an image to be processed, such as read or output, and an operation image for a user to operate, and also receives a selection of a service to be used from the user.

[0025] The communication unit 140 communicates with external devices and transmits and receives data. Specifically, communication between the image processing devices 100, and communication between the image processing device 100 and the authorization server 200 and the external server 300 is performed via the communication unit 140. In addition, transmission of image data scanned by the image processing device 100 is performed via the communication unit 140.

[0026] FIG. 6 is a diagram showing an example of a functional configuration of the control unit 150. The control unit 150 controls the operation of each functional unit of the image processing device 100. Specifically, the operation of transmitting an instruction to each functional unit and the operation of receiving a response from each functional unit are performed via the control unit 150. For example, when an instruction to scan an image is received from a user via the information input / output unit 130, the control unit 150 transmits an instruction to read the image to the image reading unit 120. In addition, in this embodiment, the control unit 150 performs different control in some functions when the image processing device 100 operates as the parent unit 10 and when it operates as the child unit 20. The control unit 150 includes a parent unit function unit 160 that functions when the image processing device 100 operates as the parent unit 10 and a child unit function unit 170 that functions when the image processing device 100 operates as the child unit 20, and causes the image processing device 100 to operate as the parent unit 10 or the child unit 20. Furthermore, when the image processing device 100 operates as the parent device 10, the control unit 150 controls communication with the child device 20, the authorization server 200, and the external server 300. On the other hand, when the image processing device 100 operates as the child device 20, the control unit 150 controls communication with the parent device 10.

[0027] The parent device function unit 160 functions when the image processing device 100 operates as the parent device 10. The parent device function unit 160 includes an authentication setting execution unit 161, an authentication token holding unit 162, a search response unit 163, and a transmission request receiving unit 164.

[0028] The authentication setting execution unit 161 performs authentication setting between the parent device 10 and the authorization server 200. For example, a user ID and a password are used as information for performing the authentication setting. The information for performing the authentication setting also includes the URL of the authorization server 200 as information for connecting to the authorization server 200. The authentication setting execution unit 161 also requests the authorization server 200 to issue an access token in response to a request from the user to execute processing of a service. The authentication token holding unit 162 acquires the access token issued by the authorization server 200 in accordance with the authentication setting, and holds it in its own device.

[0029] In response to a search for parent unit 10 by parent unit search unit 171 included in child unit function unit 170, search response unit 163 responds to child unit 20 that its own device is parent unit 10. The response may include, for example, notifying child unit 20 that parent unit 10 has been authenticated in authorization server 200. In addition, transmission request receiving unit 164 receives a transmission request for image data from data transmission request unit 172 included in child unit function unit 170.

[0030] The child unit function unit 170 includes a parent unit search unit 171 and a data transmission request unit 172. The parent unit search unit 171 searches for a parent unit 10 that has completed authentication setting with the authorization server 200 in the vicinity. Note that the vicinity refers to, for example, on the same network or on a sub-network. The IP address of the parent unit 10 may be manually set in advance in the child unit 20. The data transmission request unit 172 requests the parent unit 10 identified by the parent unit search unit 171 to transmit image data to the external server 300.

[0031] <Explanation of the operation of the communication system> An overview of the operation of the communication system 1 will be described. Note that, in this embodiment, an example of service processing will be described in which image data is attached to an e-mail and sent to a destination. An SMTP server is used as an example of the external server 300 that provides the service of sending e-mail.

[0032] FIG. 7 is a flowchart showing the operation of the parent device 10 when the parent device 10 accepts a request to execute a process of a service. The authentication setting execution unit 161 is assumed to have performed authentication setting with the authorization server 200 in advance. As a result, when a request to execute a process of a service is accepted from a user, an access token can be acquired from the authorization server 200. When a scan instruction is accepted from a user, the image reading unit 120 scans an image (S101). Furthermore, when an instruction is accepted from the user to attach the scanned image data to an e-mail and send it to a destination, the authentication setting execution unit 161 requests the authorization server 200 to issue an access token (S102). When the authorization server 200 issues an access token, the authentication token holding unit 162 acquires the access token from the authorization server 200 (S103). The communication unit 140 uses the acquired access token to access the SMTP server (S104). Through this series of operations, the image data scanned by the parent device 10 is attached to an e-mail and sent to the SMTP server.

[0033] FIG. 8 is a diagram showing a flowchart showing an operation of the child device 20 making a request to execute a service process via the parent device 10 when the child device 20 accepts a request to execute a service process. It is assumed that the authentication setting execution unit 161 in the parent device 10 has previously performed authentication setting with the authorization server 200. When the child device 20 accepts a scan instruction from a user, the image reading unit 120 scans an image (S201). Furthermore, when the child device 20 accepts an instruction from the user to attach the scanned image data to an e-mail and send it to a destination, the parent device search unit 171 searches for a nearby parent device 10 (S202). When a response is received from the parent device 10, the parent device search unit 171 identifies the parent device 10 from which the response was received (S203). A case where a response is not received from the parent device 10 will be described later. The child device 20 transmits the scanned image data to the identified parent device 10 via the communication unit 140, and requests that the image data be attached to an e-mail and sent to a destination (S204).

[0034] The parent unit 10 receives the image data together with a request to send the image data from the child unit 20. Subsequent operations are the same as those from S102 to S104 in Fig. 7. Through this series of operations, the image data scanned by the child unit 20 is attached to an e-mail and sent to the SMTP server via the parent unit 10.

[0035] In the above example, when a response is received from the parent unit 10, the child unit 20 makes a request to the external server 300 via the parent unit 10 to execute processing of the service. However, when no response is received from the parent unit 10, the child unit 20 cannot make a request to the external server 300 via the parent unit 10 to execute processing of the service. Possible causes of not receiving a response from the parent unit 10 include, for example, when the image processing device 100 set as the parent unit 10 is not operating due to being turned off, or when it is not functioning as the parent unit 10 due to a malfunction. Therefore, a mode in which the child unit 20 takes the place of the parent unit 10 is also conceivable.

[0036] <Modification> In this modification, a condition (hereinafter, "setting execution condition") is determined in advance for the child device 20 to perform authentication setting with the authorization server 200. When the setting execution condition is satisfied, the child device 20 becomes a new parent device 10, performs authentication setting with the authorization server 200, obtains an access token for accessing the external server 300 from the authorization server 200, and accesses the external server 300 using the obtained access token. Note that an example of the setting execution condition is that the child device 20 has determined that the image processing device 100 set as the parent device 10 is not functioning as the parent device 10.

[0037] FIG. 9 is a diagram showing a flowchart showing an operation of the child device 20 making a request to the external server 300 to execute processing of a service when the setting execution condition is satisfied. It is assumed that the authentication setting execution unit 161 in the parent device 10 has performed authentication setting with the authorization server 200 in advance. The child device 20 acquires information for performing authentication setting for the authorization server 200 from the parent device 10 and stores it. It is noted that the child device 20 acquires information for performing authentication setting for the authorization server 200 from the parent device 10 based on a predetermined acquisition condition when the parent device 10 is operating. An example of the predetermined acquisition condition is that the power of the child device 20 is turned ON. In addition, the timing of acquisition may be determined to be once a week, once a month, etc., and the acquisition timing may be set as the acquisition condition. Furthermore, when the power of the parent device 10 is scheduled to be turned OFF, it may be set so that the parent device 10 notifies the child device 20 at a specific time before the power is turned OFF, and the acquisition condition may be that the child device 20 receives the notification from the parent device 10.

[0038] When the slave unit 20 receives a scan instruction from the user, the image reading unit 120 scans the image (S301). Furthermore, when the slave unit 20 receives an instruction from the user to attach the scanned image data to an e-mail and send it to a destination, the master unit search unit 171 searches for a nearby master unit 10 (S302). The master unit search unit 171 checks whether or not a response has been received from the master unit 10 (S303). If a response has been received from the master unit 10, the process proceeds to S203 in FIG. 8, and the same operations as those from S203 to S204 are performed thereafter.

[0039] If no response is received from the parent unit 10, the control unit 150 in the child unit 20 determines that the image processing device 100 set as the parent unit 10 is not functioning as the parent unit 10 (S304). Next, the control unit 150 determines that the setting execution condition is satisfied, and enables communication with the authorization server 200 and the external server 300 via the communication unit 140 (S305). The control unit 150 in the child unit 20 operates its own device as a new parent unit 10 (S306). Hereinafter, the image processing device 100 not functioning as the parent unit 10 is referred to as the "parent unit 10A", and the image processing device 100 functioning as the new parent unit 10 is referred to as the "parent unit 10B". The authentication setting execution unit 161 in the parent unit 10B performs authentication setting for the authorization server 200 using information for performing authentication setting for the authorization server 200, which has been acquired in advance (S307). The authentication setting execution unit 161 in the parent device 10B requests the authorization server 200 to issue an access token (S308). When the authorization server 200 issues the access token, the authentication token holding unit 162 in the parent device 10B acquires the access token from the authorization server 200 (S309). The communication unit 140 in the parent device 10B uses the acquired access token to access the SMTP server (S310). With this series of operations, even if image data cannot be transmitted via the parent device 10, the image data scanned by the child device 20 is attached to an e-mail and transmitted to the SMTP server.

[0040] In the above example, the case where the child device 20 determines that the image processing device 100 set as the parent device 10 is not functioning as the parent device 10 is given as an example of the setting execution condition. However, the setting execution condition is not limited to the above example. For example, a setting execution condition may be defined as a case where the child device 20 cannot connect to the image processing device 100 set as the parent device 10 for some reason, such as a communication problem. When any of the predetermined setting execution conditions is satisfied, the child device 20 performs authentication setting with the authorization server 200.

[0041] Furthermore, the parent unit 10B, which has performed authentication settings for the authorization server 200 and is now able to obtain an access token from the authorization server 200, can notify the other child units 20 that it has become the parent unit 10B. The parent unit 10B accepts service processing execution requests and image data from the image processing device 100 set as the other child unit 20. Subsequent operations are the same as those from S102 to S104 in Fig. 7. Through this series of operations, the image data scanned by the other child unit 20 is attached to an e-mail and transmitted to the SMTP server via the parent unit 10B.

[0042] Next, the connection relationship of the communication system 1 when the non-functioning parent unit 10 is restored will be described. When the parent unit 10 that is not functioning due to some reason is restored, there will be a plurality of image processing devices 100 that can operate as the parent unit 10. In such a case, only one of the plurality of image processing devices 100 that can operate as the parent unit 10 may be set to operate as the parent unit 10, and the other image processing devices 100 may be set to operate as the child unit 20. Using the above example, as the non-functioning parent unit 10A is restored, the image processing devices 100 that can operate as the parent unit 10 are the parent unit 10A and the parent unit 10B. In such a case, for example, by setting the parent unit 10A to operate as the parent unit 10 and the parent unit 10B to operate as the child unit 20, only one of the plurality of operable image processing devices 100 operates as the parent unit 10.

[0043] On the other hand, when a non-functioning parent unit 10 is restored, resulting in the existence of a plurality of image processing devices 100 capable of operating as parent units 10, the plurality of image processing devices 100 may be set to coexist as parent units 10. Using the above-mentioned example, when a non-functioning parent unit 10A is restored, the image processing devices 100 capable of operating as parent units 10 become parent units 10A and parent units 10B. In such a case, for example, by setting parent units 10A and parent units 10B to operate as parent units 10, image processing devices 100 capable of operating as parent units 10 coexist.

[0044] Here, when multiple image processing devices 100 are set to coexist as parent devices 10, the image processing device 100 set as the child device 20 may transmit a service processing execution request and image data to the multiple parent devices 10. In such a case, the child device 20 may be set to select one of the multiple image processing devices 100 that can operate as the parent device 10 and transmit the service processing execution request and image data. Using the above example, the child device 20 requests the parent device 10 to execute the service processing. The parent device search unit 171 of the child device 20 confirms the existence of the parent device 10A and the parent device 10B. The user operates the child device 20 to select which parent device 10 to use. For example, when the parent device 10A is selected by the child device 20, the parent device 10A selected by the child device 20 communicates with the child device 20 used by the user. However, the method of linking one parent device 10 with the corresponding child device 20 is not limited to this. For example, a system administrator may set up a relationship between one parent device 10 and a corresponding child device 20 by previously linking the parent device 10 and the corresponding child device 20 using an IP address or the like.

[0045] In addition, when there are multiple operational image processing devices 100, the system administrator can decide whether the multiple image processing devices 100 should coexist as parent units 10 or whether only a single image processing device 100 should operate as the parent unit 10.

[0046] In this embodiment, when the slave unit 20 receives a service processing execution request from a user, the slave unit 20 makes the service processing execution request via the master unit 10. Therefore, there may be a case where the external server 300 cannot determine which slave unit 20 has made the service processing execution request. In such a case, the external server 300 cannot return the execution result of the process to the slave unit 20 that is the sender of the process execution request. Therefore, in this embodiment, the master unit 10 can add information that can identify the slave unit 20 so that it is possible to identify which slave unit 20 has made the service processing execution request. For example, it is possible to add the identification information of the slave unit 20 to the mail header, the mail subject, etc. More specifically, for example, an identifier such as "MFP-27F No. 123" may be added to the mail subject. Also, a notation such as "MFP27F123@example.com" may be added to the From or Sender field of the mail header. Also, a description such as "MFP Floor #123" may be written in the Comments field of the mail header. In this way, the parent device 10 adds the identification information of the child device 20, so that the external server 300 can determine which child device 20 the message was sent from.

[0047] Although the embodiment of the present invention has been described above, the technical scope of the present invention is not limited to the above embodiment. In the above example, when the child device 20 determines that the parent device 10 is not functioning, the child device 20 performs authentication setting in the authorization server 200 using information for performing authentication setting previously obtained from the parent device 10. On the other hand, the child device 20 can also have an aspect in which it previously obtains an access token from the parent device 10. This allows the child device 20 to immediately access the external server 300 without performing authentication setting in the authorization server 200.

[0048] Although the user ID and password have been given as an example of information for performing authentication setting, a device ID may be set for each image processing device 100 and used as information for performing authentication setting. In this case, authentication is performed using the device ID of the parent device 10 to obtain an access token. In this way, an access token can be obtained and the external server 300 can be accessed only via a specific image processing device 100 that is the parent device 10.

[0049] Furthermore, in this embodiment, the slave unit 20 searches for the neighboring master unit 10 to identify the master unit 10. On the other hand, a slave unit 20 corresponding to a specific master unit 10 may be set in advance. A master unit 10 corresponding to a specific slave unit 20 may also be set. This allows the slave unit 20 to immediately communicate with the master unit 10 without searching for the master unit 10. Various other modifications and alternative configurations that do not depart from the scope of the technical idea of ​​the present invention are included in the present invention.

[0050] <Additional Notes> (((1))) A communication system including a plurality of image processing devices configured as parent devices and child devices, wherein the image processing device configured as a child device has a function of sending a request to execute a process of transmitting data to an external server and image data to be transmitted to the image processing device configured as the parent device, and the image processing device configured as the parent device has a function of acquiring an access token for accessing the external server from an authorization server based on authentication settings previously made to the authorization server, and accessing the external server using the access token, and a function of, when receiving the execution request and the image data from the image processing device configured as a child device, acquiring an access token for accessing the external server from the authorization server based on the authentication settings of the image processing device, accessing the external server using the access token, and attaching the image data to an e-mail and transmitting it to the external server. (((2))) The image processing device set as the child device acquires and retains information for performing the authentication setting on the authorization server from the image processing device set as the parent device, and when predetermined setting execution conditions are satisfied, performs the authentication setting on the authorization server using the retained information, acquires the access token from the authorization server, accesses the external server, and attaches the image data to an e-mail and sends it to the external server. (((3))) The communication system described in (((1))) or (((2))), characterized in that when the image processing device set as the parent device is operating, the image processing device set as the child device acquires information for performing the authentication setting based on predetermined acquisition conditions from the image processing device set as the parent device. (((4))) The communication system described in (((2))) or (((3))), characterized in that the setting execution conditions include at least one of the image processing device set as the parent device not functioning as a parent device and the image processing device set as the parent device being unable to be connected to. (((5))) The communication system described in any one of (((1))) to (((4))), characterized in that when the image processing device set as the child device cannot transmit the image data based on the execution request via the image processing device set as the parent device, the image processing device sets up an authentication setting for the authorization server to obtain the access token from the authorization server, obtains the access token, accesses the external server, and attaches the image data to an e-mail and transmits it to the external server. (((6))) The communication system described in any one of ((1))) to (((5))), characterized in that the image processing device, which is able to obtain the access token from the authorization server, accepts the execution request and the image data from other image processing devices set as child devices and operates as a parent device. (((7))) A communication system as described in any one of (((1))) to (((6))), characterized in that when the parent function of the image processing device set as the parent device is restored, resulting in multiple image processing devices being capable of operating as parent devices, only one of the multiple image processing devices capable of operating as parent devices operates as the parent device, and the other image processing devices are set to operate as child devices. (((8))) A communication system as described in any one of ((1))) to (((7))), characterized in that when the parent function of the image processing device set as the parent device is restored, resulting in multiple image processing devices being able to operate as parent devices, the image processing device set as the child device selects one of the multiple image processing devices that can operate as parent devices and sends the execution request and the image data. (((9))) A communication control system for controlling data communication in an image processing device capable of obtaining an access token for accessing an external server from an authorization server, the communication control system comprising one or more processors, the processor receiving from another image processing device a request to execute a process for transmitting data to the external server and image data to be transmitted, and in response to the request, obtaining an access token to be used for accessing the external server from the authorization server based on the authentication settings of the image processing device itself, accessing the external server in accordance with the request using the obtained access token, and attaching the image data to an e-mail and transmitting it to the external server. (((10))) A program for controlling a computer provided in an image processing device capable of obtaining an access token for accessing an external server from an authorization server, the program causing the computer to realize the following functions: a function for receiving, from another image processing device, a request to execute a process for transmitting data to the external server and image data to be transmitted; a function for obtaining, from the authorization server, an access token to be used for accessing the external server based on the authentication settings of the image processing device in response to the request; and a function for using the obtained access token to access the external server in accordance with the request, and attaching the image data to an e-mail and transmitting it to the external server.

[0051] According to the invention (((1))), the effort required for authentication setting can be reduced compared to a configuration in which each image processing device performs authentication setting and acquires an access token. According to the invention of (((2))), the robustness of the system is increased compared to a configuration in which only the parent device can obtain an access token. According to the invention of (((3))), the time required for authentication setup can be shortened, compared to a configuration in which information for authentication setup is obtained after the parent unit stops functioning. According to the invention (((4))), it is possible to prevent the management of devices that can obtain an access token from becoming complicated, compared to a configuration in which a child device can obtain an access token when a parent device is operating normally. According to the invention (((5))), the robustness of the system can be improved compared to a configuration in which the settings of the parent device and the child device are fixed. According to the invention (((6))), the functionality of the communication system can be restored more quickly than in a configuration in which each slave device obtains an access token by itself. According to the invention (((7))), compared to a configuration in which multiple image processing devices operate as parent devices, it is possible to prevent the management of parent devices that obtain access tokens using the same account from becoming complicated. According to the invention (((8))), the convenience and robustness of the system are increased compared to a configuration in which only one image processing device operates as a parent device. According to the invention (((9))), an access token can be obtained and data can be transmitted in response to a request from another image processing device that is unable to obtain an access token based on authentication settings. According to the invention (((10))), a computer having the program of the present invention installed can obtain an access token and transmit data in response to a request from another image processing device that is unable to obtain an access token based on authentication settings. [Explanation of symbols]

[0052] 10... parent unit, 20... child unit, 100... image processing device, 200... authorization server, 300... external server, 110... image forming unit, 120... image reading unit, 130... information input / output unit, 140... communication unit, 150... control unit, 160... parent unit function unit, 161... authentication setting execution unit, 162... authentication token holding unit, 163... search response unit, 164... transmission request reception unit, child unit function unit... 170, parent unit search unit... 171, data transmission request unit 172

Claims

1. A communication system including a plurality of image processing devices each configured as a parent device and a child device, The image processing device set as a child device is a function of requesting execution of a process for transmitting data to an external server and transmitting image data to be transmitted to an image processing device set as a parent device; The image processing device set as the parent device is A function of acquiring an access token for accessing an external server from an authorization server based on an authentication setting previously made to the authorization server, and accessing the external server using the access token; a function of acquiring an access token for accessing the external server based on the authentication setting of the image processing device itself when the execution request and the image data are received from the image processing device set as the child device from the authorization server, accessing the external server using the access token, and attaching the image data to an e-mail and transmitting the image data to the external server; A communication system comprising:

2. The image processing device set as the child device is acquiring information for performing the authentication setting for the authorization server from the image processing device set as the parent device and storing the information; When a predetermined setting execution condition is satisfied, the authentication setting is performed for the authorization server using the stored information, the access token is obtained from the authorization server, the external server is accessed, and the image data is attached to an e-mail and transmitted to the external server.

2. The communication system according to claim 1,

3. The image processing device set as the child device is When the image processing device set as the parent device is in operation, information for performing the authentication setting is acquired from the image processing device set as the parent device based on a predetermined acquisition condition.

3. The communication system according to claim 2 .

4. The setting execution condition includes at least one of the following: the image processing device set as the parent device is not functioning as a parent device; and the image processing device set as the parent device cannot be connected to.

3. The communication system according to claim 2 .

5. The image processing device set as the child device is When the transmission of the image data based on the execution request cannot be executed via the image processing device set as the parent device, Performing authentication settings for obtaining the access token from the authorization server, obtaining the access token, accessing the external server, and attaching the image data to an e-mail and transmitting the image data to the external server.

2. The communication system according to claim 1,

6. The image processing device that has become able to obtain the access token from the authorization server accepts the execution request and the image data from another image processing device set as a child device and operates as a parent device.

6. The communication system according to claim 5,

7. When the function of the image processing device set as the parent device is restored, there are multiple image processing devices that can operate as parent devices, Only one of the plurality of image processing devices capable of operating as a parent device is set to operate as a parent device, and the other image processing devices are set to operate as child devices.

6. The communication system according to claim 5,

8. When the function of the image processing device set as the parent device is restored, there are multiple image processing devices that can operate as parent devices. The image processing device set as the child device selects one of the plurality of image processing devices operable as a parent device and transmits the execution request and the image data to the selected one.

6. The communication system according to claim 5,

9. A communication control system for controlling data communication in an image processing device capable of acquiring an access token for accessing an external server from an authorization server, comprising: One or more processors; The processor, receiving, from another image processing apparatus, a request for executing a process of transmitting data to the external server and image data to be transmitted; In response to the execution request, an access token used to access the external server is obtained from an authorization server based on an authentication setting of the device itself; a communication control system that uses the acquired access token to access the external server in accordance with the execution request, and attaches the image data to an e-mail and transmits the image data to the external server.

10. A program for controlling a computer provided in an image processing device capable of acquiring an access token for accessing an external server from an authorization server, the program comprising: The computer includes: a function of receiving a request for executing a process of transmitting data to the external server and image data to be transmitted from another image processing device; a function of acquiring an access token used for accessing the external server from an authorization server based on an authentication setting of the device in response to the execution request; a function of accessing the external server in accordance with the execution request by using the obtained access token, and attaching the image data to an e-mail and transmitting the image data to the external server; A program for realizing the above.

Images