Image formation device, system and method

Abstract

To provide an image formation device, a system image formation device, and the like capable of efficiently outputting contents that allow achievement of both security and convenience.SOLUTION: An image formation device comprises a storage part that stores a plurality of files with identification codes set, an operation part that receives inputted identification codes, and a control part that forces an image formation part to output an image based on the files when the inputted identification codes and the identification codes set to the files coincide with each other, and which forces an error frequency of the files to increase when the inputted identification codes and the identification codes set to the files do not coincide with each other. The control part, when there are files which coincide with the inputted identification codes among the plurality of files, initializes the error frequency for the other files.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to an image forming apparatus and the like. [Background technology]

[0002] There are systems that output documents with various contents. For example, there are systems in the government that output certificates such as resident registration cards and seal certificates as a single content.

[0003] In such a system, a system that efficiently outputs contents is being considered. For example, a technology that can reduce the burden of procedures at a government office counter for both residents and employees, shorten the time spent at the counter, and improve the overall efficiency is disclosed in Patent Document 1.

[0004] Moreover, Patent Document 2 discloses an invention in which multiple pieces of print data with passwords are processed in a single print operation. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] JP 2018-139027 A [Patent Document 2] JP 2007-166439 A Summary of the Invention [Problem to be solved by the invention]

[0006] An object of the present disclosure is to provide, for example, an image forming apparatus, a system, and the like that can achieve both security and convenience. [Means for solving the problem]

[0007] The image forming apparatus of the present disclosure comprises a memory unit that stores a plurality of files having identification codes set thereon, an operation unit that accepts input of the identification code, and a control unit that outputs an image based on the file from the image forming unit when the input identification code matches the identification code set in the file, and increases the number of errors for the file when the input identification code does not match the identification code set in the file, and when there is a file among the plurality of files that matches the input identification code, the control unit initializes the number of errors for other files.

[0008] The system disclosed herein is a system including a terminal device and an image forming device, wherein the terminal device comprises an issuing unit that issues a reception number when it receives a request for output of content from a user, a generating unit that generates print job data corresponding to the content and in which the reception number is set as an identification code for access restriction, and a transmitting unit that transmits the print job data to the image forming device, wherein the image forming device comprises a receiving unit that receives the print job data from the terminal device, a memory unit that stores a plurality of the print job data, an operation unit that accepts input of the reception number, and a control unit that, when the input reception number matches the identification code set in the print job data, outputs an image based on the print job data from the image forming unit, and when the input reception number does not match the identification code set in the print job data, increases the number of errors for the print job data, and when there is print job data among the plurality of the print job data that matches the input reception number, the control unit of the image forming device initializes the number of errors for other print job data.

[0009] The disclosed method is a method executed in an image forming device, which stores a plurality of files each having an identification code set thereon, accepts input of the identification code, and when the input identification code matches the identification code set in the file, outputs an image based on the file from an image forming unit, and when the input identification code does not match the identification code set in the file, increases the number of errors for the file, and further, when there is a file among the plurality of files that matches the input identification code, initializes the number of errors for the other files. Effect of the Invention

[0010] According to the present disclosure, for example, it is possible to provide an image forming apparatus, a system, etc. that can achieve both security and convenience. [Brief description of the drawings]

[0011] [Figure 1] FIG. 1 is a diagram for explaining an overview of a system according to a first embodiment. [Diagram 2] FIG. 1 is a diagram for explaining an overview of a system according to a first embodiment. [Diagram 3] FIG. 2 is a diagram illustrating a hardware configuration of a terminal device in the first embodiment. [Figure 4] FIG. 2 is a diagram illustrating a hardware configuration of the image forming apparatus according to the first embodiment. [Diagram 5] FIG. 2 is a diagram illustrating a hardware configuration of a server device in the first embodiment. [Figure 6] FIG. 2 is a diagram illustrating a software configuration according to the first embodiment. [Figure 7] 3A is a diagram illustrating an example of print job data, and FIG. 3B is a diagram illustrating an example of content management information in the first embodiment. [Figure 8] FIG. 2 is a sequence diagram for explaining an overview of the first embodiment. [Figure 9] FIG. 4 is a flow diagram illustrating processing (terminal device) in the first embodiment. [Figure 10] FIG. 4 is a flow diagram illustrating processing (terminal device) in the first embodiment. [Figure 11] FIG. 4 is a flow diagram illustrating processing (server device) in the first embodiment. [Figure 12] FIG. 4 is a flow diagram illustrating a process (image forming apparatus) in the first embodiment. [Figure 13] FIG. 2A is a diagram showing an example of a display screen of a terminal device in the first embodiment; FIG. 2B is a diagram showing an example of a display screen of the terminal device. [Figure 14] FIG. 2A is a diagram showing an example of a display screen of a terminal device in the first embodiment; FIG. 2B is a diagram showing an example of a display screen of the terminal device. [Figure 15] FIG. 2A is a diagram showing an example of a display screen of a terminal device in the first embodiment; FIG. 2B is a diagram showing an example of a display screen of the terminal device. [Figure 16] FIG. 2A is a diagram showing an example of a display screen of a terminal device in the first embodiment; FIG. 2B is a diagram showing an example of a display screen of the terminal device. [Figure 17] FIG. 4 is a diagram showing an example of a display screen of a terminal device in the first embodiment. [Figure 18] FIG. 4 is a diagram showing an example of a reception slip in the first embodiment. [Figure 19] 1A is a diagram showing an example of a display screen of an image forming apparatus in a first embodiment; FIG. 1B is a diagram showing an example of a display screen of an image forming apparatus; FIG. [Figure 20] FIG. 4 is a diagram for explaining the operation in the first embodiment. [Figure 21] FIG. 11 is a sequence diagram for explaining an overview of a second embodiment. [Figure 22] FIG. 11 is a flow diagram illustrating processing (terminal device) in the second embodiment. [Figure 23] FIG. 11 is a flow diagram illustrating a process (image forming apparatus) in a second embodiment. [Figure 24] FIG. 11 is a diagram for explaining the operation in the second embodiment. [Diagram 25] FIG. 13 is a diagram illustrating a process flow in the fourth embodiment. [Figure 26] FIG. 13 is a diagram for explaining an overview of a system according to a fifth embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0012] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. Note that the embodiment shown below is one embodiment of the present invention, and the contents of the present invention should not be interpreted as being limited based on the following description.

[0013] There are systems that output a variety of content (documents). As an example, the government provides a system that outputs certificates such as resident registration cards and seal certification as a single piece of content. Generally, systems in which the government issues certificates often require users to go through a counter, but self-service government service machines have been introduced in large numbers to be easier for users (citizens) to use and to allow the government to issue certificates more efficiently.

[0014] However, self-service administrative service machines need to be dedicated machines, and they need to be newly introduced. Therefore, when the number of users is below a certain level, self-service administrative service machines are not profitable and are difficult to install.

[0015] Furthermore, even if self-service administrative service machines were introduced, there was a problem in that the devices were dedicated machines and could not be used as general office machines.

[0016] To address these issues, a system has been developed that can output content simply and efficiently by combining an image forming device (multifunction printer, MFP) that can be used for general business purposes with a reception terminal device.

[0017] In such image forming apparatuses, when printing files such as content, a batch print function is used to select and print all of a plurality of files (contents) so that individual files do not need to be specified.

[0018] However, when security is required, such as in a system used for the administrative services described above, a password is set for each file (content).

[0019] In this case, when using the batch printing function of the image forming device, there is no problem with the file to be printed when the password is entered, but a password error occurs for files that are not the intended target for printing. Therefore, if printing is repeated several times, a new problem occurs in that the files that are not the intended target for printing are locked and cannot be printed.

[0020] In order to solve such new problems, in the following embodiment, a system or the like that can achieve both security and convenience will be described.

[0021] [1. First embodiment] [1.1 Overall System] 1 is a diagram for explaining an overview of a system 1. The system 1 is a diagram showing an overview of a system 1 that outputs content.

[0022] The system 1 includes a terminal device 10 capable of receiving a content output instruction from a user, an image forming device 20 that outputs (prints) the content, and a server device 30 in which the content is stored. The image forming device 20 is connected not only to the terminal device 10 but also to a PC 40, which is a general information processing device (computer).

[0023] The image forming apparatus 20 is, for example, a device called a multifunction peripheral or an MFP (Multifunction Peripheral / Printer / Product). For example, the image forming apparatus 20 can form an image on a recording medium, that is, paper, by executing a job (print job). The image forming apparatus 20 can execute multiple functions, such as a copy function, a FAX function, a scan function, and a printer function. In this embodiment, the image forming apparatus 20 functions as a printer by executing a print job input from the PC 40. Also, the image forming apparatus 20 can output (print) content by executing a print job input from the terminal device 10, as described later.

[0024] The terminal device 10 is a processing device used by a user who uses the system 1. The terminal device 10 is provided with, for example, a display device (display) equipped with a touch panel. The user can input a desired operation to the system 1 by selecting an operation button or the like displayed on the screen.

[0025] The terminal device 10 also includes a printing device. For example, the terminal device 10 can print receipts and copies showing that the system 1 has received an instruction input from the user. The terminal device 10 may include, for example, a roll of thermal transfer paper, and the printing device may print a so-called receipt-like receipt by printing on the thermal transfer paper using a thermal transfer method. The printing device may also be implemented by, for example, a laser printer or an inkjet printer, in which case the receipt may be printed on plain paper.

[0026] The terminal device 10 may also include a card reader. The terminal device 10 may acquire information from a card (such as a credit card, a transportation card, a membership card, or a My Number card) using, for example, Near Field Communication (NFC). The terminal device 10 may also acquire information by reading an identification code such as a two-dimensional code using an optical reader.

[0027] Here, the terminal device 10 is connected to the image forming device 20 via a network NW2. The image forming device 20 is also connected to the terminal device 10 via the network NW2, and is also connected to another device (PC 40) via a network NW3.

[0028] Here, the network NW2 is a general network, and is configured, for example, by a LAN (Local Area Network) etc. The network NW2 may be either wired or wireless, and may be connected, for example, by using a mobile communication network etc. The network NW2 and the network NW3 may be the same network.

[0029] The terminal device 10 is connected to the server device 30 via a network NW1. The network NW1 is a dedicated line, which is a secure communication path (network) having closed domain characteristics. The NW1 may be any secure network, and is preferably a dedicated line, but may be a virtual communication path (dedicated line) by constructing a VPN (Virtual Private Network), for example.

[0030] The server device 30 is a device that provides content. Here, in this embodiment, a case where the system 1 is applied to administrative services will be described as an example. For example, the server device 30 is a server device 30 installed by a so-called administration (local government). For example, it is a server device that stores information managed by an existing resident registration system and information required for certificate issuance as content.

[0031] (Server device configuration) Here, the server device 30 is a device or service that provides content. The system 1 in Fig. 1 is simplified and the server device 30 is described as a single device, but it may be a service that provides content composed of multiple server devices, etc. In addition, content may be provided using a distributed model such as a blockchain.

[0032] In this embodiment, as an example of the system 1 using the server device 30, a system used when a local government issues a certificate will be described.

[0033] For example, as shown in FIG. 2, the server device 30 is a system that issues certificates based on general administrative services.

[0034] For example, each local government installs a certificate issuing server. The certificate issuing server uses a certificate issuing center to provide information that enables a certificate to be issued to the terminal device 10.

[0035] The certificate issuing center, for example, has a wide area issuing server that relays communication between the terminal device 10 and the certificate issuing server. It may also include a relay encryption server to prevent forgery and tampering of data used in the certificate.

[0036] The certificate issuing center may also manage statistical information such as the number of certificates issued and the issuing locations.

[0037] Here, the network between the certificate issuing center and the terminal device 10 uses a dedicated line that ensures closedness in order to prevent access from third parties. Also, the network between the certificate issuing center and the local government may use a LGWAN (Local Government Wide Area Network), which is a closed network within the administrative agency.

[0038] A public personal authentication service center may also be used to authenticate users. For example, in the case of the JPKI authentication method, the certificate issuing center system queries the OCSP server (OCSP responder) of the public personal authentication service center (JPKI center) to check the revocation of the electronic certificate for user authentication stored in the My Number card. The OCSP server (OCSP responder) returns the revocation check result to the certificate issuing center system.

[0039] In this manner, in this embodiment, the server device 30 is described, but the certificate issuing service may include a plurality of server devices and services. As an overview of the service, for example, the mechanism disclosed by the Local Government Information Systems Agency (https: / / www.j-lis.go.jp / rdd / card / convinikoufu / cms_93097920214.html, https: / / www.j-lis.go.jp / rdd / card / convinikoufu / cms_93099520.html) can be used.

[0040] [1.2 Hardware configuration] The hardware configuration of each device will be described below with reference to the drawings: Fig. 3 is a diagram showing an example of the hardware configuration of the terminal device 10, Fig. 4 is a diagram showing an example of the hardware configuration of the image forming device 20, and Fig. 5 is a diagram showing an example of the hardware configuration of the server device 30.

[0041] [1.2.1 Terminal Equipment] As shown in FIG. 3, the terminal device 10 has a control unit 100, a storage 110 as a storage device, a ROM 120 and a RAM 130, a display unit 140, an operation unit 150, an image forming unit 160, a card reading unit 165, and a communication unit 170.

[0042] The control unit 100 is a functional unit for controlling the entire terminal device 10. The control unit 100 realizes various functions by reading and executing various programs stored in the storage 110 and the ROM 120, and may be realized by one or more control devices / arithmetic units (CPU (Central Processing Unit), SoC (System on a Chip)).

[0043] Storage 110 is a non-volatile storage device capable of storing programs and data. For example, storage 110 may be configured as a storage device such as a hard disk drive (HDD) or a solid state drive (SSD). Storage 110 may also be configured as an externally connectable USB memory, CD-ROM drive, or BD-drive. Storage 110 may also be a storage area on a cloud, for example.

[0044] The ROM 120 is a non-volatile memory that can retain programs and data even when the power is turned off.

[0045] The RAM 130 is a main memory that is mainly used when the control unit 100 executes processes. The RAM 130 is a rewritable memory that temporarily stores programs read from the storage 110 or the ROM 120, and data including execution results.

[0046] The display unit 140 is a display device capable of displaying various information and an execution screen. The display unit 140 may be, for example, a display device such as a liquid crystal display (LCD), an organic electroluminescence (EL) display, or an electrophoretic display. The display unit 140 also includes an interface to which a display device can be connected. For example, the display unit 140 may be configured with an external display device connected via an HDMI (registered trademark) (High-Definition Multimedia Interface), a DVI (Digital Visual Interface), or a Display Port.

[0047] The operation unit 150 is an operation device that allows a user to input operations. For example, it may be an operation device such as a touch panel integrated with the display unit 140 or an operation button. The operation unit 150 may also be an operation device such as a keyboard or a mouse. The operation unit 150 may also include an interface (for example, a Universal Serial Bus (USB)) to which an operation device can be connected. For example, the terminal device 10 may be connected to a different operation device (an operation device having a touch panel).

[0048] The image forming unit 160 forms an image, for example, on recording paper. The image forming unit 160 is, for example, a thermal printer (thermal transfer printer) that forms an image on thermal paper, and may be configured as an image forming device such as a printer. The image forming unit 160 may also form an image electronically as an image file.

[0049] The card reading unit 165 is a device that reads, for example, information for identifying personal information from various cards. For example, it is possible to read an electronic certificate for user authentication stored in a My Number card. The card reading unit 165 may be a reader that reads an IC card (NFC, etc.), or a reader that reads magnetic data. It may also be a device that optically reads a two-dimensional code (a barcode reader, etc.).

[0050] The communication unit 170 is a communication interface for communicating with other devices. For example, it may be a network interface capable of providing a wired connection or a wireless connection. In this embodiment, communication with other devices is possible via a network NW.

[0051] In this embodiment, the image forming apparatus 20 includes a first communication unit 172 that communicates with the image forming apparatus 20, and a second communication unit 174 that communicates with the server apparatus 30. Here, the second communication unit 174 is preferably configured with, for example, a dedicated line.

[0052] In this embodiment, the first communication unit 172, through which a communication path for communicating with the image forming apparatus 20 is established, and the second communication unit 174, through which a communication path for communicating with the server device 30 is established, are physically different from each other, but they may be separated in terms of software. For example, the second communication unit 174 may have secure communication with the server device 30 established via a VPN line.

[0053] That is, the first communication unit 172 is a communication unit that communicates with another device (in this embodiment, the image forming device 20), and the second communication unit 174 is a communication unit for establishing secure communication with the server device 30.

[0054] [1.2.2 Image forming device] As shown in FIG. 4, the image forming apparatus 20 has a control unit 200, a storage 210, a ROM 220 and a RAM 230 as memory devices, a display unit 240, an operation unit 250, an image forming unit 260, an image reading unit 265, a card reading unit 267, and a communication unit 270.

[0055] The control unit 200 is a functional unit for controlling the entire image forming apparatus 20. The control unit 200 realizes various functions by reading and executing various programs stored in the storage 210 and the ROM 220, and may be realized by one or more control devices / arithmetic units (CPU (Central Processing Unit), SoC (System on a Chip)).

[0056] The storage 210 is a non-volatile storage device capable of storing programs and data. For example, the storage 210 may be configured as a storage device such as a hard disk drive (HDD) or a solid state drive (SSD). The storage 210 may also be configured as a USB memory that can be connected to the outside. The storage 210 may also be a storage area on a cloud, for example.

[0057] The ROM 220 is a non-volatile memory that can retain programs and data even when the power is turned off.

[0058] The RAM 230 is a main memory that is mainly used by the control unit 200 when executing processes. The RAM 230 is a rewritable memory that temporarily stores programs read from the storage 210 or the ROM 220, and data including results of execution.

[0059] The display unit 240 is a display device capable of displaying various information and an execution screen. The display unit 240 may be, for example, a display device such as a liquid crystal display (LCD), an organic electroluminescence (EL) display, or an electrophoretic display. The display unit 240 also includes an interface to which a display device can be connected. For example, the display unit 240 may be configured with an external display device connected via an HDMI (registered trademark) (High-Definition Multimedia Interface), a DVI (Digital Visual Interface), or a Display Port.

[0060] The operation unit 250 is an operation device that allows a user to input operations. For example, it may be an operation device such as a touch panel integrated with the display unit 240 or an operation button. The operation unit 250 may also be an operation device such as a keyboard or a mouse. The operation unit 250 may also include an interface (for example, a Universal Serial Bus (USB)) to which an operation device can be connected. For example, the image forming apparatus 20 may be connected to a different operation device (an operation device having a touch panel).

[0061] The image forming unit 260 forms an image, for example, on a recording sheet. The image forming unit 260 includes, for example, an image carrier, forms a toner image on the image carrier, and transfers the image on the image carrier onto a recording sheet to form an image. The image forming unit 260 may be configured as an image forming device such as a printer. The image forming unit 260 may also form an image electronically as an image file.

[0062] The image reading unit 265 reads an original (image) and outputs it as image data. The image reading unit 265 is, for example, a scanner, and may be a reading device using a CCD (Charge Coupled Device) or a CIS (Contact Image Sensor).

[0063] The card reading unit 267 is a device that reads, for example, information for identifying personal information from various cards. For example, it is possible to read personal identification information stored in an identification card. The card reading unit 267 may be a reader that reads an IC card (NFC, etc.), or a reader that reads magnetic data. It may also be a device that optically reads a two-dimensional code (a barcode reader, etc.).

[0064] The communication unit 270 is a communication interface for communicating with other devices. For example, it may be a network interface capable of providing a wired connection or a wireless connection. In this embodiment, communication with other devices is possible via a network NW.

[0065] [1.2.3 Server device] As shown in FIG. 5, the server device 30 includes a control unit 300, a storage 310 as a storage device, a ROM 320 and a RAM 330, and a communication unit 370.

[0066] As described above, in this embodiment, a single server device is described, but functions and data may be arranged in the required server device, respectively, as necessary.

[0067] The control unit 300 is a functional unit for controlling the entire server device 30. The control unit 300 realizes various functions by reading and executing various programs stored in the storage 310 and the ROM 320, and may be realized by one or more control devices / arithmetic units (CPU (Central Processing Unit), SoC (System on a Chip)).

[0068] Storage 310 is a non-volatile storage device capable of storing programs and data. For example, it may be configured as a storage device such as a hard disk drive (HDD) or a solid state drive (SSD). Storage 310 may also be configured as an externally connectable USB memory, CD-ROM drive, or BD-drive. Storage 310 may also be a storage area on a cloud, for example.

[0069] The ROM 320 is a non-volatile memory that can retain programs and data even when the power is turned off.

[0070] The RAM 330 is a main memory that is mainly used when the control unit 300 executes processes. The RAM 330 is a rewritable memory that temporarily stores programs read from the storage 310 or the ROM 320, and data including execution results.

[0071] The communication unit 370 is a communication interface for communicating with other devices. For example, it may be a network interface capable of providing a wired connection or a wireless connection. In this embodiment, it is connectable to the terminal device 10 via a dedicated line.

[0072] 5, the server device 30 may further include components such as a display unit and an operation unit. The server device 30 may achieve the same functions as the components such as the display unit and the operation unit by connecting a display device and an operation device. The server device 30 may provide a user interface for operation and management of other devices, as described later.

[0073] [1.3 Software configuration] The software configuration will be described with reference to Fig. 6. Fig. 6 is a diagram for explaining the main software configuration of the terminal device 10, the image forming device 20, and the server device 30.

[0074] (Terminal Device) The control unit 100 of the terminal device 10 executes a program (application) stored in the storage 110 or the ROM 120, thereby functioning as each of the following components.

[0075] The content acquisition unit 102 acquires content from the server device 30. The content acquisition unit 102 stores the acquired content in the content storage area 112. Here, the content stored in the content storage area 112 may be deleted after a predetermined process is executed. For example, when print job data based on the content is generated, the control unit 100 deletes the content included in the print job data from the content storage area 112. The control unit 100 may also delete the content after a predetermined time has elapsed.

[0076] The content acquired by the content acquisition unit 102 is, for example, related to a certificate issued by a local government, which is the administration in this embodiment. If the server device 30 is installed by a local government, the certificate may be, for example, a resident's card (copy), a certificate of registered matters in the resident's card, a seal certificate, a family register certificate, a tax certificate, etc. Furthermore, the certificate may be, for example, a certificate issued by another administration other than the local government (a certified copy of a corporate registry (certificate of all historical matters / certificate of registered matters), a vehicle inspection certificate, a fixed asset appraisal report, etc.).

[0077] The personal authentication unit 104 authenticates the authenticity of the user. For example, the personal authentication unit 104 acquires an electronic certificate stored in a My Number card via the card reading unit 165. Then, the personal authentication unit 104 uses the electronic certificate and a password input by the user to inquire of a national certification authority (for example, J-LIS) to verify the identity of the user. When the authenticity of the user can be authenticated, for example, a certificate relating to the user can be issued as content. When the authenticity of the user cannot be authenticated, the content cannot be acquired. That is, the user cannot be issued a certificate as content, for example.

[0078] Here, the legitimacy of the user indicates whether the user performing the procedure is the person himself / herself. For example, when personal authentication is performed using a My Number card and the legitimacy of the user is confirmed, it can be confirmed that the user performing the procedure is the person listed on the My Number card. Furthermore, the method of authenticating the user by the personal authentication unit 104 includes a method of confirming whether or not the electronic certificate is valid. If the electronic certificate is not valid, the personal authentication unit 104 cannot authenticate the user's legitimacy in the first place. Furthermore, the personal authentication unit 104 can authenticate the legitimacy by using the electronic certificate and a password. If the password corresponding to the electronic certificate matches, the personal authentication unit 104 determines that it has authenticated the user's legitimacy.

[0079] The personal authentication unit 104 may use other mechanisms for authenticating a person, such as authentication using user information from a mobile phone company, authentication via another site, authentication using a card that can identify a person, biometric authentication, etc.

[0080] The print job generating unit 106 generates print job data to be transmitted to the image forming apparatus 20. The print job data includes data indicating the content (e.g., image data) and setting information including print settings and other information. The print job generating unit 106 stores the print job data related to the generated print job in the print job data storage area 114.

[0081] The print job generating unit 106 adds a PJL (Printer Job Language) header to the content (multi-TIFF file as an image file) acquired from the server device 30 (J-LIS service), for example.

[0082] The print job data generated by the print job generating unit 106 includes, for example, the information shown in Fig. 7(a). For example, the print job data shown in Fig. 7(a) stores setting information in association with content data (for example, "ji-001.tiff").

[0083] The setting information stores the user name who can output the content (e.g., "gyosei"), the reception number (e.g., "05092010"), the job name (e.g., "JOB947729377293"), the hold designation (e.g., "Hold Only"), the number of copies (e.g., "1"), single-sided / double-sided output setting (e.g., "Double-sided (long edge binding)"), the output tray (e.g., "top tray"), job result notification (e.g., "ON"), and the number of errors (e.g., "0").

[0084] The reception number is a kind of password that is added to the content. For example, a person who outputs the content can use the reception number to identify the content and output it.

[0085] The reception number may also be a password set for the print job data. For example, when the print job data is encrypted, the reception number is set as a password. Then, when the reception number inputted in the image forming device 20 matches the reception number set as the password, the print job data can be decrypted.

[0086] The reception number and password are one type of identification code. The identification code (identification number) may be called a PIN code, an access code, etc. instead of a password. The identification code may be called an acceptance number, an issue number, a management number, etc., in addition to the reception number. In this system, information for restricting access to a file (print job data), that is, an identification code for access restriction, is set. In other words, by using these identification codes, access to the print job data is restricted for the image forming device 20.

[0087] The job name is a name by which the image forming device 20 identifies a print job. The job name may be any name, or a number corresponding to the content may be added. For example, the job name may be a number using a number (e.g., an inquiry number) added by the server device 30 to the content, or may be the number added by the server device 30 itself.

[0088] The hold specification specifies whether the print job is to be executed immediately or temporarily stored and executed by the output person in the image forming apparatus 20. For example, when the hold specification is specified, the image forming apparatus 20 does not execute the print job immediately, but executes the print job after the output person operates it.

[0089] In Fig. 7(a), "Hold Only" is selected, and the print job is always temporarily saved. In this embodiment, it is preferable that the print job based on the content obtained from the server device 30 is always designated as being on hold.

[0090] The number of copies, single-sided / double-sided setting, paper output tray, etc., are information indicating printing conditions when printing content in the image forming device 20. In addition to these, the print job generating unit 106 may set other printing conditions, such as the presence or absence of stapling, color / black and white type, paper size, paper feed tray, etc.

[0091] The number of errors is stored when the image forming apparatus 20 was unable to process the print job data, that is, when an error occurred. The image forming apparatus 20 processes the print job data as an error in the following cases.

[0092] (1) When the reception number included in the print job data does not match the reception number input in the image forming apparatus 20. (2) When the print job data is encrypted with the reception number set as the password, the image forming apparatus 20 is unable to decrypt the print job data.

[0093] In the following embodiment, the above method (2) is used. That is, the print job data in this embodiment is encrypted using the reception number as a password, but the contents of the embodiment can be applied in the same way even if the data is not encrypted, as in (1).

[0094] Furthermore, when the print job data is encrypted, the number of errors may be stored as an attribute separate from the setting items. For example, the number of errors may be included as an attribute of the file of the print job data, or a separate table may be provided for storing the number of errors. Furthermore, the file name of the print job data may include characters including the number of errors. For example, the control unit 200 may change the file name of the print job data, for example, "0202prt_0.dat", to "0202prt_1.dat" when the number of errors is increased by 1.

[0095] It is preferable that the printing conditions when printing the content in this embodiment are set by the print job generating unit 106 and cannot be changed in the image forming apparatus 20. For example, the number of copies set by the print job generating unit 106 cannot be changed in the image forming apparatus 20. In other words, it is preferable that the output person cannot arbitrarily change the number of copies set by the user in the terminal device 10 in the image forming apparatus 20.

[0096] The job result notification is information indicating whether the image forming apparatus 20 notifies the terminal apparatus 10 of the execution result of the print job. As the job result, for example, the image forming apparatus 20 can notify that the print job has been saved, that the print job has been executed, that the print job has been deleted, that the print job has been canceled, that the print job has resulted in an error, etc.

[0097] The receipt output unit 108 outputs (prints) a receipt from the image forming unit 160. Details of the receipt will be described later, but for example, a receipt with a receipt number printed on it is output to the user. The user then shows the receipt to the person who will be outputting the content. The person outputs the content based on the receipt number printed on the receipt.

[0098] (Image forming device) The control unit 200 of the image forming apparatus 20 executes a program (application) stored in the storage 210 or the ROM 220, thereby functioning as each of the following components.

[0099] The output person authentication unit 202 authenticates the output person and checks whether or not the output person has the authority to output the content. For example, the output person authentication unit 202 uses a card held by the output person and performs card authentication to check whether or not the output person has the authority.

[0100] Printing unit 204 forms an image from image forming unit 260 based on the print job data. Here, printing unit 204 may start printing immediately when a print job is input. Also, when a print job is input, printing unit 204 may temporarily store (hold) the print job data of the print job and perform printing based on an instruction. When printing unit 204 stores the print job data, it stores it in print job data storage area 212. In other words, print job data storage area 212 functions as a storage unit that stores the print job data.

[0101] Furthermore, when printing unit 204 prints content (image data) included in the print job data, it refers to the print settings. The print settings may be set in image forming device 20 or may be included in the print job data. Print unit 204 extracts the print settings included in the print job data and prints the content (image data) according to the extracted print settings.

[0102] (Server device) The control unit 300 of the server device 30 executes a program (application) stored in the storage 310 or the ROM 320, thereby functioning as each of the following components.

[0103] The content management unit 302 realizes a function of managing content, and for example transmits content to the terminal device 10 in response to a request from the terminal device 10. The content management unit 302 extracts necessary content (certificates) from the content database 312 based on application information transmitted from the terminal device 10. Then, the content management unit 302 transmits the extracted content (image data) to the terminal device 10.

[0104] The content management unit 302 may also manage whether the content has actually been output to the user. For example, when the content has actually been printed by the image forming apparatus 20, the content management unit 302 updates the content management information stored in the content management information storage area 314 based on a print completion notification transmitted from the image forming apparatus 20.

[0105] 7(b) is a diagram showing an example of content management information. The content management information stores, for example, a serial number (inquiry number) when a certificate is issued as the content, the date and time when the content is transmitted to the image forming device 20, the fee for the issuance, and the printing status of the content. In addition, the content management information may also include information such as the region and place where the content was printed.

[0106] The print status of the content is “outputted” when the content is actually printed by the image forming apparatus 20. Note that the print job data based on the content may be “outputted” when the image forming apparatus 20 saves the data.

[0107] It should be noted that, for example, in the case of a certificate relating to an administrative service, the content may be managed by, for example, a certificate issuing center.

[0108] The personal authentication unit 304 performs authentication of a user. The personal authentication unit 304 is almost the same as the personal authentication unit 104 of the terminal device 10, and the function may be provided in either one of them. The personal authentication unit 304 may perform personal authentication as necessary.

[0109] [1.4 Processing flow] Next, a process flow of this embodiment will be described. The following process is preferably executed by each component explained in FIG. 6 as necessary, but for the sake of convenience, it will be explained as being executed by the control unit.

[0110] [1.4.1 Overall flow] First, an overview of the overall flow of the system 1 will be described with reference to Fig. 8. In this embodiment, it is possible to select whether or not to save print job data (certificate) in the image forming apparatus 20. For example, this can be set when the image forming apparatus 20 is started up, or when an administrator logs in and is in administrator mode. These settings may also be made from the terminal device 10 or the server device 30. A case in which the print job data in the image forming apparatus 20 is not saved will be described in the second embodiment described later.

[0111] For example, a citizen (user) desiring to obtain a certificate performs an issuance operation on the terminal device 10 (S1002). The terminal device 10 requests the server device 30 for content corresponding to the certificate based on the details entered in the issuance operation (S1004). If the server device 30 can properly authenticate the user (if the user's legitimacy can be authenticated), it transmits the content corresponding to the certificate desired by the user to the terminal device as a content response (S1006).

[0112] The terminal device 10 generates print job data including the setting information based on the acquired content, and transmits it to the image forming device 20 (S1008). At this time, the reception number issued by the terminal device 10 is set as a password for the print job data. The image forming device 20 then saves the print job data, and notifies the terminal device 10 that the data has been saved (S1010). When the terminal device 10 confirms that the print job data has been saved in the image forming device 20, it prints a reception ticket for the user (S1012).

[0113] Here, the timing for the terminal device 10 to print the receipt is preferably after the image forming device 20 has notified it that the print job data has been saved. In this case, the fact that the receipt has been printed means that the content is ready to be printed by the image forming device 20. Therefore, when the user subsequently presents the receipt to an output person (e.g., a staff member who outputs the content) (S1014), the output person can output the content promptly. It is also possible to reduce the waiting time for the user to output the content. Furthermore, since the fact that the receipt has been printed means that the print job data has been saved in the image forming device 20, it is possible to avoid an error occurring midway and the print job data not being saved.

[0114] The terminal device 10 may also output the receipt before receiving notification that the print job data has been saved. Although the user may need to wait for the print job data to be saved, this allows the user to receive the receipt promptly.

[0115] When the employee who issues the certificate (the person who outputs the content) receives the receipt from the user, the employee may, for example, confirm whether the user is the person in question. For example, the employee may confirm whether the user is the person in question (a person with legitimate authority) by visually checking a document that can identify the user, such as a My Number card or a driver's license.

[0116] The staff member (output person) issues a print instruction to the image forming apparatus 20 (S1016). The image forming apparatus 20 executes the print job and prints the content based on the print job data (S1018).

[0117] When the printing is completed, the image forming apparatus 20 transmits a print completion notification to the terminal apparatus 10 (S1020). The terminal apparatus 10 transmits a print completion notification to the server apparatus 30 (S1022).

[0118] For example, the user pays a fee to the outputter (S1024), and the outputter delivers the printed certificate to the user (S1026). This allows the user to receive the certificate of the authenticated person.

[0119] Furthermore, the image forming device 20 can receive print jobs from devices other than the terminal device 10. That is, the image forming device 20 can print general documents and the like in addition to issuing certificates. This allows the image forming device 20 to print certificates, which would normally require a dedicated line, via the terminal device 10 in addition to its normal functions.

[0120] [1.4.2 Terminal device processing] 9 and 10 are diagrams showing the processing of the terminal device 10. The control unit 100 selects the content to be output in response to an operational input from the user (step S102).

[0121] Next, the control unit 100 executes an authentication process (step S104). The authentication process is a process executed by the personal authentication unit 104. The control unit 100 performs a personal authentication check with the server device 30 based on an electronic certificate acquired from, for example, a My Number card by the authentication process.

[0122] Furthermore, the control unit 100 may identify the server device 30 from which the certificate is to be obtained by authentication processing. For example, the control unit 100 identifies a city, ward, town, or village from which the user can obtain a certificate, based on the electronic certificate stored in the My Number card. The control unit 100 then identifies the server device 30 from the city, ward, town, or village. Note that the server device 30 may identify the city, ward, town, or village by receiving the electronic certificate. Furthermore, the control unit 100 may allow the user to select a location from which the certificate is to be obtained.

[0123] When the authentication fails, the control unit 100 displays an error screen (step S108; No -> step S111). For example, when the server device 30 fails to match the personal authentication, the control unit 100 executes a process of displaying a failure result notification screen for a certain period of time.

[0124] Here, if the user performs a cancel operation (step S113; Yes), the control unit 100 executes another process. If the user does not perform a cancel operation, the control unit 100 repeats the process from step S104 (step S113; No→step S104).

[0125] When authentication is performed correctly (for example, when personal authentication is not unsuccessfully verified by the server device 30), the control unit 100 sets the output conditions of the content (step S110). For example, when the number of copies of the certificate to be output as the content is set by the user, the control unit 100 sets the number of copies as the output conditions (print settings).

[0126] The control unit 100 generates a receipt number (step S112). The receipt number is a type of PIN number, and is used to identify the content (or print job) to be output. The control unit 100 transmits application information to the server device 30 (step S114). The application information may include, for example, one or more pieces of information indicating the content (certificate type), the set output conditions (print settings), the generated receipt number, etc.

[0127] When the terminal device 10 receives the content from the server device 30 (step S116; Yes), it generates print job data (step S118). When the control unit 100 simply receives the content (e.g., image data of a certificate) from the server device 30, it generates the print job data based on the application information. At this time, the control unit 100 does not need to transmit unnecessary information among the multiple pieces of information such as the print settings and the reception number to the server device 30.

[0128] At this time, the terminal device 10 sets the reception number as a password for the print job data. At this time, it is preferable that the print job data is encrypted, but the password may simply be set.

[0129] The control unit 100 transmits the print job data to the image forming apparatus 20 (step S120). When the control unit 100 receives a notification from the image forming apparatus 20 that the print job data has been saved (step S122; Yes), the control unit 100 outputs a receipt (step S124).

[0130] In step S122, control unit 100 waits until it receives a print job data storage completion notification from image forming apparatus 20, but if the notification is not received within a predetermined time and a predetermined number of times, it may time out and stop the process.

[0131] The control unit 100 may also output a receipt based on the identification information included in the print completion notification. For example, the control unit 100 may output a receipt based on the receipt number included in the print completion notification.

[0132] Next, when the control unit 100 receives a print completion notification from the image forming apparatus 20 (step S140; Yes), it transmits a print completion notification to the server apparatus 30 (step S142). When the printing by the image forming apparatus 20 is not completed (step S144; Yes), the control unit 100 transmits an unprinted print notification to the server apparatus 30 (step S146).

[0133] Here, the control unit 100 may determine that printing of the content (certificate) by the image forming apparatus 20 is not complete based on a notification from the image forming apparatus 20 that printing was not possible. Also, the control unit 100 may determine that printing was not performed when a print completion notification is not received from the image forming apparatus 20 even after a predetermined time has elapsed. For example, when printing is not performed even after a predetermined time, such as 1 hour, 3 hours, or 24 hours, has elapsed since the print job was submitted, or when printing is not performed even after business hours have elapsed, the control unit 100 determines that printing is not complete.

[0134] [1.4.3 Server device processing] 11 is a diagram showing the process of the server device 30. The control unit 300 receives the authentication information (step S202), and executes the authentication process (step S204). That is, the personal authentication unit 304 performs the authentication.

[0135] When the control unit 300 has successfully authenticated the terminal device 10, it transmits a message indicating that the authentication has been successful to the terminal device 10 (step S206; Yes→step S208). When the control unit 300 has not successfully authenticated the terminal device 10, it transmits a message indicating that the authentication has not been successful to the terminal device 10 (step S206; No→step S210).

[0136] For example, the control unit 300 may check the personal authentication and perform authentication based on whether or not the match is successful. The control unit 300 may transmit to the terminal device 10 a match result indicating a successful match or a mismatch result indicating an unsuccessful match.

[0137] When the control unit 300 receives application information from the terminal device 10 (step S212; Yes), it transmits content (certificate) based on the application information to the terminal device 10 (step S214). For example, the control unit 300 generates image data of the content based on the certificate selected by the user. Here, the control unit 300 may transmit not only the content data but also data based on the application information to the terminal device 10. For example, the reception number included in the application information may be transmitted together.

[0138] When the control unit 300 receives a print notification from the terminal device 10 (step S216; Yes), it stores the print result (step S218). This enables the control unit 300 to provide statistical information such as whether or not the content (certificate) was actually issued.

[0139] [1.4.4 Processing of image forming devices] 12 is a diagram showing the process of the image forming apparatus 20. The control unit 200 checks whether or not the print job data is set to be saved in the main body of the image forming apparatus 20 (step S302). If the print job data is not set to be saved in the main body of the image forming apparatus 20, the process will be described in the second embodiment (step S302; No).

[0140] When the print job data is set to be stored in the main body of the image forming apparatus 20, the control unit 200 receives the print job data from the terminal device 10 and stores the print job data (step S302; Yes→step S304).

[0141] The control unit 200 executes an output authentication process (step S306). If the output person does not have the output authority, this process ends as an error (step S308; No). As an error process, the control unit 200 may display on the display unit that the output is not possible, or may prompt the user to perform authentication again.

[0142] If the output user has the output authority (step S308; Yes), the control unit 200 receives the input of the reception number (step S310). The control unit 200 determines whether the input reception number is correct (step S312).

[0143] Here, the reception number being correct means that among the print job data stored in the image forming apparatus 20, there is print job data that matches the input reception number.

[0144] The following description will be given with reference to Fig. 20. For example, the print job data is protected by using the reception number as a password. For example, the print job data corresponding to reception slips A to Y are stored in the print job data storage area 212 of the image forming device 20.

[0145] The control unit 200 attempts to access the print job data (print job data A to Y) stored in the print job data storage area 212, using the input reception number as a password. If the password for the print job data and the reception number are different, the number of errors for that print job data is incremented by one.

[0146] For example, in FIG. 20, when the reception number "58432615" is entered, the print job data A is judged as "◯: normal". Therefore, the control unit 200 can correctly decrypt the print job data when it is encrypted. However, the print job data B to Y are each judged as "×: error 1", that is, the passwords do not match. Then, it becomes "error 1", and the number of errors in the print job data is incremented. For example, the control unit 200 increments the "number of errors" setting item of the print job data by 1.

[0147] Then, when the print job data with the reception number as the password is stored in the image forming apparatus 20 (print job data storage area 212), the control unit 200 determines that the reception number is correct. On the other hand, when there is no print job data with the reception number as the password stored in the image forming apparatus 20 (print job data storage area 212), the control unit 200 determines that the reception number is incorrect.

[0148] That is, the reception number set in the print job data (the reception number on the reception slip) is compared with the reception number input by the output person, and it is determined whether matching print job data exists.

[0149] When the control unit 200 determines that the reception number is correct (step S312; Yes), it clears the number of errors for the print job data (step S314). That is, since the print job data corresponding to the reception number has been saved, it initializes (clears) the number of errors for print job data other than the print job data corresponding to the reception number. For example, it initializes the error counts for print job data B to print job data Y shown in FIG. 20.

[0150] The control unit 200 may also determine whether a predetermined time has passed since the print job data with a matching reception number and password was saved in the image forming device 20 (step S316). For the purpose of ensuring security, the control unit 200 may perform a process of not executing a print job for which a predetermined time has passed. Therefore, when a predetermined time has passed since the print job data was saved, the control unit 200 executes a deleted display process and does not output the content (step S316; No -> step S324). Note that the control unit 200 may automatically delete print job data for which a predetermined time has passed since the print job data was saved. Although the print job data is not deleted at this timing, the control unit 200 may prevent the print job data from being executed.

[0151] If it is within a predetermined time after the print job data is saved (step S316; Yes), the control unit 200 executes the print job and prints the content (step S320). When the printing of the content is completed, the control unit 200 transmits a print notification indicating the completion of printing to the terminal device 10 (step S322).

[0152] Furthermore, if the reception number is incorrect in step S312, the control unit 200 increments the number of errors for all print job data by 1 (step S330). If the reception number can be re-entered, the process returns to step S310 and the reception number is re-entered.

[0153] In step S330, the error count for all print job data is incremented by 1 because the control unit 200 performs batch printing of multiple files, which does not require specifying individual files (print job data), and therefore performs batch processing on all stored print job data.

[0154] The control unit 200 attempts to correctly process (e.g., decrypt) each of the multiple stored print job data using the input reception number. At this time, the number of errors for print job data for which the reception number and password do not match is incremented by 1. Therefore, if the reception number is incorrect, this means that the passwords for all of the print job data are different from the input reception number, and so the number of errors for all of the print job data is incremented by 1.

[0155] In step S330, the number of errors is incremented by 1. If the number of errors in the print job data exceeds a predetermined value (for example, "3"), the print job data will be restricted and will not be able to be output.

[0156] The restriction of the print job data may mean that the control unit 200 cannot access the print job data thereafter. For example, even if the control unit 200 attempts to decrypt the print job data using the input reception number as a password, the print job data is not decrypted as an error regardless of whether the print job data can be decrypted with the password. In addition, a security function of the image forming apparatus 20 may prohibit access to the print job data.

[0157] Also, in step S314, the control unit 200 may clear the number of errors in the print job data only once, rather than clearing all of them. That is, the control unit 200 may decrement the number of errors added to the print job data other than the correct print job data because the print job data included a print job data with a correct reception number. Also, instead of clearing the number of errors in the print job data, the control unit 200 may perform processing that does not increment the number of errors in the print job data in the first place.

[0158] In the above embodiment, the print job data is generated by the terminal device 10, but the print job data may be generated by the server device 30 and transmitted to the terminal device 10. At this time, the terminal device 10 transmits a reception number to the server device 30. The server device 30 may set the reception number as a password for the print job data.

[0159] [1.5 Example of operation] An operation example will be described using an example of a display screen. The example of the display screen shown in Fig. 13 to Fig. 17 is an example of a display screen displayed on the display unit 140 of the terminal device 10.

[0160] For example, as shown in Fig. 13(a), a function selection screen is displayed on the display screen. "Certificate issue" is displayed in area R100 of the display screen. When the user selects "Certificate issue", the service of issuing a certificate is started. At this time, for example, as shown in Fig. 13(b), information to be conveyed to the user, such as consent items and cautions, may be displayed on the display screen.

[0161] Next, the terminal device 10 displays a guidance screen on the display screen to prompt the user to insert the My Number card (for example, FIG. 14(a)). On the display screen of FIG. 14(a), a message "Please insert your My Number card" is displayed in area R120.

[0162] When the user sets the My Number card in the card reader, the terminal device 10 prompts the user to select a certificate.

[0163] For example, as shown in area R130 of the display screen in Fig. 14(b), the user can select, as content, the type of certificate, the details to be included in the certificate, etc. The user can also select the number of required certificates to be issued.

[0164] For the document selected by the user, the terminal device 10 displays a confirmation of the contents on the display screen. For example, the type of certificate, the items to be written on the certificate, and the number of copies are displayed in an area R140 on the display screen in FIG.

[0165] The user also inputs a PIN at some point. An area R150 of the display screen in Fig. 15(b) can accept input of a PIN. For example, Fig. 15(b) is a display screen that accepts input of a PIN for a user-authentication electronic certificate.

[0166] The terminal device 10 transmits application information to the server device 30 and receives the content (certificate). While the terminal device 10 is executing the process, it may display a display screen showing the progress of the process, for example, as shown in Fig. 16(a). Region R160 of the display screen in Fig. 16(a) uses a progress bar to show the user how far the process has progressed.

[0167] The terminal device 10 then displays a final application screen to the user. The display screen in Fig. 16(b) displays the type and number of copies of the certificate to be output in area R170. Also, area R170 of the display screen displays the amount of the certificate issuance fee.

[0168] When the user selects "Apply" in Fig. 16(b), the terminal device 10 submits a print job based on the content to the image forming device 20. That is, the terminal device 10 transmits print job data including the content (image data of the certificate) to the image forming device 20. The image forming device 20 stores the print job data, and notifies the terminal device 10 when the storage is complete. When the terminal device 10 receives a notification from the image forming device 20 that the print job data has been stored, it outputs a receipt.

[0169] At this time, the terminal device 10 may display on the display screen that the receipt is being printed. For example, the display screen of Fig. 17 displays in area R180 a message indicating that the receipt is being printed.

[0170] 18 is a diagram showing an example of a receipt output by the terminal device 10. For example, the receipt shows a receipt number and necessary items. For example, the receipt may also include the fee amount, the number of copies issued, the date of issuance, and the serial number (inquiry number) of the certificate issued.

[0171] Furthermore, the terminal device 10 may also print, for example, a reception number represented by an identification code such as a barcode on the reception slip.

[0172] The user receives the receipt printed out from the terminal device 10, and submits the receipt to the person who printed it out (eg, a staff member) at the certificate issuing counter.

[0173] The output person logs in as a certificate issuing user on the image forming device 20. For example, the output person uses a card on which the certificate issuing user information is recorded, and logs in to the image forming device 20 by card authentication. Then, the output person switches the image forming device 20 to a mode for issuing a certificate.

[0174] For example, Fig. 19(a) is an example of a screen that is displayed after logging in as a user who can provide administrative services (certificate issuing user). For example, on the display screen of Fig. 19(a), a "Batch Print" button is displayed in area R210 as a function for issuing certificates.

[0175] When batch printing is selected, the image forming apparatus 20 switches to the display screen shown in Fig. 19(b). An input field for inputting a reception number is provided in area R220 in Fig. 19(b). The output person can print the certificate by inputting the reception number in area R220.

[0176] Note that area R222 is an area where the number of copies can be set. In Fig. 19(b), this is displayed as grayed out and the outputter cannot change it. This makes it possible to prevent the outputter from outputting more certificates than the number set by the user, against the user's intention.

[0177] It is preferable for the output person to confirm that the user desiring to receive the certificate is the person who issued the certificate by checking the My Number card of the user, etc. It is also preferable for the output person to check that the certificate has no printing defects.

[0178] It is also preferable for the outputter to receive the fee for the certificate from the user. At this time, the fee to be collected by the outputter is the fee printed on the receipt. The outputter hands over the certificate to the user in exchange for receiving the fee. The outputter may also create a receipt.

[0179] Furthermore, when the output user inputs the correct receipt number and a print job is executed, and the error counts of print jobs other than the output print job are initialized, the image forming device 20 may display a message to that effect. For example, as shown in Fig. 19(c), the image forming device 20 may display a message on the display screen saying "Printed correctly. The number of print job data will be reset once."

[0180] [1.6 Application Examples] The system of this embodiment has been described as being applied to administrative services. That is, the user uses a My Number card as a method of personal authentication, and a certificate issued by a local government is used as the content, but the above-mentioned system can also be used in other systems.

[0181] For example, the server device may be a seat reservation system managed by an airline or a railway operator. In this case, a user inputs necessary seat information (e.g., flight to be used, type of seat, position, etc.) using the terminal device 10. The terminal device 10 transmits the seat information to the server device 30 that provides a seat reservation management service.

[0182] When a seat reservation is confirmed, the server device 30 transmits image data of the ticket or airline ticket as content to the terminal device 10. The terminal device 10 generates print job data based on the image data of the ticket or airline ticket, and transmits it to the image forming device 20. The image forming device 20 prints the ticket or airline ticket according to the operation of the output person.

[0183] In this way, the system of the present embodiment can also be applied to a seat reservation system, etc. Note that the system can also be applied to other systems besides seat reservation systems, such as a movie theater reservation system and a hotel reservation system.

[0184] The system may simply provide content in response to a user's operation. For example, the system may provide newspapers, pictures, photographs, and the like as content.

[0185] [1.7 Effects] As described above, according to this embodiment, it is possible to efficiently acquire and output content by combining the terminal device 10 and the image forming device 20. Content can be acquired efficiently because, by performing operation input for acquiring content on the terminal device 10, even when a plurality of terminal devices 10 are used, it is possible to acquire content in parallel from each of the terminal devices 10.

[0186] Furthermore, when the image forming device 20 prints multiple files (e.g., print job data), if there is a file that matches the correct receipt number, it becomes possible to clear (cancel, invalidate) the error counts of the other files. This makes it possible to prevent the file (print job data) from being locked.

[0187] Furthermore, according to the above-described embodiment, it is possible to prevent files from being inadvertently locked, thereby making it possible to provide an image forming device and system that is highly convenient for users and printers while ensuring security.

[0188] [2. Second embodiment] Next, a second embodiment will be described. In the second embodiment, print job data is not stored in advance in the image forming apparatus 20, but is acquired from the terminal device 10 as needed.

[0189] In this embodiment, only the differences from the first embodiment will be described, and a description of the similarities in functional configuration and processing will be omitted.

[0190] The overall processing flow of this embodiment will be described with reference to the sequence diagram of Fig. 21. Fig. 21 is a diagram replacing Fig. 8 of the first embodiment. The same processes as those in Fig. 8 are denoted by the same reference numerals.

[0191] In FIG. 21, unlike FIG. 8, when the terminal device 10 receives the content from the server device in a content response (S1006), the terminal device 10 prints out a reception ticket (S1012).

[0192] Then, when a print instruction is given by a staff member (output person) (S1016), the image forming apparatus 20 transmits a print job data request including the input reception number to the terminal apparatus 10 (S1030). Then, when the terminal apparatus 10 finds print job data matching the reception number, it transmits the print job data to the image forming apparatus 20 (S1032).

[0193] This is because there is no password lock restriction on the print job data on the terminal device 10 side, so the terminal device 10 can transmit the necessary print job data from the stored data to the image forming device 20.

[0194] Furthermore, the terminal device 10 may delete the print job data when a predetermined time has elapsed since the print job data was saved. This allows the terminal device 10 to manage whether or not to print print job data that has not been printed for a long period of time.

[0195] Next, a description will be given of the processing of the terminal device 10 and the image forming device 20. The processing of the terminal device 10 is obtained by replacing FIG. 9 of the first embodiment with FIG.

[0196] 22, after generating the print job data (step S118), the control unit 100 outputs the reception ticket directly (step S124). That is, the generated print job data is stored in the terminal device 10 each time.

[0197] Here, the control unit 100 receives the reception number from the image forming apparatus 20 (step S162; Yes). Note that, in the process of step S162, if the control unit 100 does not receive the reception number, the process returns to step S102, but other processes may be performed.

[0198] That is, for convenience of explanation, step S162 is described after step S124 in Fig. 22. However, the terminal device 10 may execute the processes from step S162 at any timing during the normal processes (steps S102 to S124).

[0199] Then, when the control unit 100 receives the reception number from the image forming apparatus 20, it judges whether the print job data has the reception number as a password (step S164). If there is one print job data whose password (reception number) matches the received reception number among the stored print job data, it transmits the print job data to the image forming apparatus 20 (step S164; Yes→step S166). If there is no print job data whose password matches the password of the reception number, the control unit 100 transmits an error to the image forming apparatus 20 (step S164; No→step S168).

[0200] Next, the process of the image forming apparatus 20 will be described with reference to Fig. 23. The process of Fig. 23 is executed when step S302 in Fig. 12 of the first embodiment is No.

[0201] The control unit 200 executes an authentication process for output (step S350). If the output user does not have the right to output, this process ends as an error (step S352; No). As an error process, the control unit 200 may display on the display unit that output is not possible, or may prompt the user to perform authentication again.

[0202] If the output user has the output authority (step S352; Yes), the control unit 200 receives the input of the reception number (step S354). Then, the control unit 200 transmits a print job data request including the reception number to the terminal device 10, thereby making an inquiry to the terminal device (step S356).

[0203] Here, the control unit 200 receives a response from the terminal device 10 (step S358). If the terminal device 10 has print job data that matches the reception number, the control unit 200 sends a response including the print job data. Then, when the control unit 200 acquires the print job data (step S360; Yes->step S362), the control unit 200 executes the print job and prints the content (S364). The control unit 200 also sends a print notification indicating completion of printing to the terminal device 10.

[0204] Furthermore, when the control unit 200 receives an error signal (e.g., there is no print job data matching the reception number, the print job data matching the reception number has already been deleted, etc.) from the terminal device 10 in step S358, the control unit 200 cannot acquire the print job data (step S360; No). In this case, the control unit 200 may accept the input of the reception number again (step S368; Yes -> step S354).

[0205] Furthermore, the control unit 200 may end the process as an error when the content cannot be acquired even after a predetermined number of inputs, or when a predetermined time has elapsed (step S368; No).

[0206] Fig. 24 is a diagram for explaining an example of the operation of this embodiment. Hereinafter, the operation of this embodiment will be explained with reference to Fig. 24.

[0207] (1) When a request to print content is input from a user, the terminal device 10 accepts the request, and when the acceptance is completed, a receipt is issued. For example, in Fig. 24, the user requests the issuance of a certificate as an example of content.

[0208] (2) The terminal device 10 acquires the certificate data from the server device 30. Then, the terminal device 10 stores the certificate file (for example, print job data) in the storage device of the terminal device 10.

[0209] (3) The person who outputs the receipt receives the receipt from the user and inputs the receipt number written on the receipt into the image forming device 20. (4) The image forming apparatus 20 transmits the reception number to the terminal apparatus 10.

[0210] (5) Upon receiving the reception number, the terminal device 10 searches among the stored certificate files (print job data) for a file whose password in the print job data matches the received reception number. The terminal device 10 determines that the file that was correctly decrypted is the file that corresponds to the reception number. In other words, since there was a file with a matching password among the multiple stored files, the reception number at this time was determined to be the correct reception number. The terminal device 10 then transmits the file (print job data) whose password matches the reception number to the image forming device 20.

[0211] (6) Having received the print job data, the image forming apparatus 20 executes the print job based on this print job data, whereby certificate B is printed and the output person can hand certificate B over to the user.

[0212] In this manner, according to the present embodiment, since the terminal device 10 manages files (print job data), it is possible to avoid security settings (for example, password lock) of the image forming device 20.

[0213] [3. Third embodiment] Next, a third embodiment will be described. The third embodiment is an embodiment in which a process for sorting print job data to be stored is executed in the image forming device 20. Note that in this embodiment, only the differences from the first embodiment will be described, and a description of the similarities in functional configuration and process will be omitted.

[0214] For example, in step S304 in FIG. 12, the print job data is stored. At this time, the print job data may be sorted and stored in the order in which they were received by the terminal device 10.

[0215] For example, in the case of receipt slips A to Y shown in FIG. 20, print job data is saved and file names are numbered consecutively so that the data is saved in the order in which the receipt slips were issued.

[0216] As a result, in step S312 of FIG. 12, when checking whether the reception number set in each print job data matches the input reception number, the check is performed starting from the print job data that was received the oldest.

[0217] Normally, users come to the counter in the order that their receipts are issued. Therefore, checking that the password in the print job data matches the receipt number entered in the order that they are received can reduce the number of password errors.

[0218] [4. Fourth embodiment] A fourth embodiment will be described. In this embodiment, print job data is deleted after a predetermined time. Note that in this embodiment, only the differences from the first embodiment will be described, and the description of the similarities in functional configuration and processing will be omitted.

[0219] 25 is a diagram showing a process of deleting print job data by the image forming apparatus 20. The process in FIG. 25 is a process that is periodically executed by the control unit 200, for example.

[0220] The control unit 200 deletes the print job data when a specified time arrives (steps S402 to S406) or when a predetermined time has elapsed since the print job data was saved (steps S408, S410).

[0221] The control unit 200 first determines whether the specified time has arrived (step S402). Here, the specified time is a time set by the person who outputs the data or the administrator. For example, if the business hours of the counter are from 9:00 to 17:00, the time when the business ends, such as 17:00 or 17:30, is set as the specified time.

[0222] When the specified time arrives, if there is print job data that has not been output (step S404; Yes), the control unit 200 deletes the saved print job data (step S406).

[0223] This makes it clear to the user that the certificate issuance is only valid on the day the application for the certificate issuance is made. In other words, since the print job data is deleted without being carried over to the next day, the system 1 can ensure security.

[0224] Furthermore, the control unit 200 deletes the print job data if a predetermined time has elapsed since the print job data was saved (step S408; Yes -> step S410). For example, when the predetermined time is set to "3 hours", the print job data that has not been output even after 3 hours is deleted.

[0225] In providing this embodiment, it is preferable to write the policy to be deleted on the reception ticket. For example, it is preferable to write messages such as "Certificate issuance is only valid on the day" and "Please come to the counter within three hours to receive your certificate. If you exceed three hours, please apply again."

[0226] [5. Fifth Embodiment] A fifth embodiment will be described. In this embodiment, a mobile terminal device 12 is used instead of the terminal device 10. Note that in this embodiment, only the differences from the first embodiment will be described, and the same functional configurations and processes will not be described.

[0227] Fig. 26 is a diagram replacing Fig. 1 of the first embodiment. That is, an application having functions equivalent to those provided in the terminal device 10 is installed in a device such as a user's smartphone or tablet. By using his / her own mobile terminal device 12, the user can realize functions equivalent to those of the above-mentioned embodiment.

[0228] In this case, the reception ticket may be displayed on the display screen of the portable terminal device 12.

[0229] It is also preferable that a secure communication path can be established between the mobile terminal device 12 and the server device 30. In this case, the secure communication path may be established, for example, by an application capable of providing a VPN function. Also, an access point having a relay function may be provided between the server device 30 and the mobile terminal device 12. In this case, the server device 30 and the access point may be connected by a secure communication path (for example, a dedicated line).

[0230] [6. Modifications] The present disclosure is not limited to the above-described embodiments, and various modifications are possible. In other words, embodiments obtained by combining technical means that are appropriately modified within the scope that does not deviate from the gist of the present disclosure are also included in the technical scope.

[0231] In addition, although the above-mentioned embodiments are described separately for convenience of explanation, they can be combined to the extent possible. In addition, the present invention intends to obtain rights to any of the technologies described in the specification through amendments or divisional applications, etc.

[0232] In the above-described embodiment, the password is an identification code required when accessing a file. The file may be a content file or a simple data file other than a print job data file. The security of the file may be such that the output of the file or access to the file is restricted depending on whether the password matches or does not match. Therefore, as described in the embodiment, the output of the file or access to the file may be restricted by determining whether the password matches or does not match the reception number stored as a setting item or attribute of the file.

[0233] In addition, the programs that run on each device in each embodiment are programs that control the CPU and the like (programs that make a computer function) so as to realize the functions of the above-mentioned embodiments. Information handled by these devices is temporarily stored in a temporary storage device (e.g., RAM) during processing, and is then stored in various ROMs and HDDs, and is read, modified, and written by the CPU as necessary.

[0234] Here, the recording medium for storing the program may be any of semiconductor media (e.g., ROM, non-volatile memory cards, etc.), optical recording media, magneto-optical recording media (e.g., DVD (Digital Versatile Disc), CD (Compact Disc), BD (Blu-ray (registered trademark) Disc), etc.), magnetic recording media (e.g., magnetic tape, flexible disk, etc.), etc.

[0235] In addition, when distributing the program on the market, the program can be stored in a portable recording medium and distributed, or transferred to a server computer connected via a network such as the Internet. In this case, the storage device of the server device is of course included in the present invention.

[0236] Furthermore, the above-mentioned data may not be stored in the device, but may be stored in an external device and called up as appropriate. For example, the data may be stored in a NAS (Network Attached Storage) or on the cloud.

[0237] The scope of the present disclosure is not limited to the configurations explicitly described in the specification, but includes combinations of the technologies disclosed in the present specification. The configurations of the present disclosure that are to be patented are described in the attached claims, but it is not intended to exclude them from the technical scope because they are not described in the claims.

[0238] In addition, in the above-mentioned specification, the statements "in the case of" and "when" are merely examples, and are not intended to limit the configuration to the described contents. Configurations other than these cases and times are also disclosed to the extent that would be obvious to a person skilled in the art, and the company intends to obtain rights to them.

[0239] In addition, the processes and data flows described in the specification are not limited to the order in which they are described. For example, the present application discloses configurations in which some parts of the processes are deleted or the order is changed, and the applicant intends to obtain the rights to such configurations.

[0240] Furthermore, although the functions described in the embodiments are executed by each device, they may be realized by one device, or an external server may be used.

[0241] In addition, each functional block or feature of the device used in the above-mentioned embodiment may be implemented or performed by an electric circuit, for example, an integrated circuit or a plurality of integrated circuits. The electric circuit designed to perform the functions described herein may include a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA), or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or a combination thereof. The general-purpose processor may be a microprocessor, or a conventional processor, controller, microcontroller, or state machine. The electric circuit described above may be composed of a digital circuit or an analog circuit. In addition, when a technology for integrated circuitization that replaces current integrated circuits appears due to the progress of semiconductor technology, one or more aspects of the present disclosure may use a new integrated circuit according to that technology. [Explanation of symbols]

[0242] 1 System 10 Terminal Equipment 100 Control section 110 Storage 120 ROM 130 RAM 140 Display section 150 Operation section 160 Image forming section 165 Card reader 170 Communications Department 172 First Communications Department 174 2nd Communications Department 20 Image forming device 200 Control section 210 Storage 220 ROM 230 RAM 240 Display section 250 Operation section 260 Image forming section 265 Image reading unit 267 Card reader 270 Communications Department 30 Server device 300 Control section 310 Storage 320 ROM 330 RAM 370 Communications Department

Claims

1. A storage unit that stores a plurality of files each having an identification code set thereto; an operation unit for receiving an input of an identification code; a control unit which outputs an image based on the file from an image forming unit when the input identification code matches an identification code set in the file, and which increases the number of errors for the file when the input identification code does not match an identification code set in the file; Equipped with The control unit is If there is a file that matches the input identification code among the plurality of files, the number of errors for the other files is initialized. Image forming device.

2. The control unit is When the number of errors of the file is equal to or exceeds a predetermined number, the output from the image forming unit is restricted. The image forming apparatus according to claim 1 .

3. The identification code includes a password; The file is encrypted based on an identification code generated by another device, When the input identification code matches an identification code generated by the other device and the file can be decoded, the control unit outputs an image based on the file from the image forming unit, and when the file cannot be decoded by the input identification code, the control unit increases the number of errors for the file. The image forming apparatus according to claim 1 .

4. The file is job data, The control unit executes the job data when the input identification code matches an identification code set in the file. The image forming apparatus according to claim 1 .

5. The control unit determines whether the input identification code matches an identification code set for the file, for the plurality of stored files, beginning with the oldest file that was stored. The image forming apparatus according to claim 1 .

6. A system including a terminal device and an image forming device, The terminal device an issuing unit that issues a reception number when a request for output of content is received from a user; a generating unit that generates print job data corresponding to the content and having the reception number set as an identification code for access restriction; a transmission unit that transmits the print job data to the image forming apparatus; Equipped with The image forming apparatus includes: a receiving unit that receives the print job data from the terminal device; A storage unit that stores a plurality of pieces of print job data; an operation unit that accepts input of the reception number; a control unit which outputs an image based on the print job data from an image forming unit when the input reception number matches an identification code set in the print job data, and which increases the number of errors in the print job data when the input reception number does not match an identification code set in the print job data; Equipped with The control unit of the image forming apparatus When there is print job data that matches the input reception number among the plurality of print job data, the error counts for the other print job data are initialized. system.

7. 1. A method performed in an image forming apparatus, comprising: The image forming apparatus includes: It stores multiple files with identification codes, Accept the input of the identification code, When the input identification code matches an identification code set in the file, an image based on the file is output from an image forming unit; When the input identification code does not match the identification code set in the file, the number of errors for the file is increased; Furthermore, when there is a file among the plurality of files that matches the input identification code, the error counts for the other files are initialized. method.

Images