Information processing apparatus, and control method and program of the information processing apparatus

Abstract

To prevent a system, which displays a two-dimensional barcode to guide a user to a Web page for authorization and allows the user to obtain authorization, from sleeping before completing processing using the two-dimensional barcode.SOLUTION: An information processing apparatus has a sleep function of transitioning from an operating state to a sleep state in which power consumption is smaller when a predetermined sleep time has elapsed since last operation. Moreover, the information processing apparatus has a display unit, a communication unit, and a control unit. The information processing apparatus receives, from an authorization server, access destination information indicating an access destination for authorization a transfer of authority by a user and displays the access destination information as a code image, requests, from the authorization server, an access token issued in response to authorization for the transfer of authority by the user who has accessed the access destination, and does not transition to the sleep state while the code image is being displayed.SELECTED DRAWING: Figure 6

Description

[Technical field]

[0001] The present invention relates to an information processing device and a source control method and program thereof, and relates to a device to which user authority is delegated in accordance with, for example, an OAuth2.0 authorized device flow. [Background technology]

[0002] In recent image forming devices, code images such as two-dimensional barcodes are often used to guide users to access websites or connect to access points. For example, when delegating user authority to an application running on a device according to the OAuth2.0 authorization device flow, the device displays information including a URL for user authentication in the form of a two-dimensional barcode. The user reads the information on a terminal or the like, accesses the obtained URL, and authorizes the delegation of authority to the device. However, in order to display a two-dimensional barcode on an image communication device, multiple operations on an operation unit are required, which is complicated (see Patent Document 1, etc.). Even if the operations are not complicated, it takes time for those who are not used to the operation. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent Publication No. 2021-79686 Summary of the Invention [Problem to be solved by the invention]

[0004] For this reason, in devices equipped with an automatic shutdown function that turns off the power after a certain period of inactivity, or a sleep function that partially stops the power supply, these functions may be activated before an operation using a displayed two-dimensional barcode is completed. In such a case, the device turns off the power or goes into sleep mode, and the operation that has not been completed is interrupted, forcing the operator to redo the operation, which reduces operability and reduces productivity. For example, in the case of OAuth2.0, if the automatic shutdown or sleep function is activated before a token is issued in a two-dimensional barcode state, the operator must redo the operation of delegating authority.

[0005] The present invention has been made in consideration of the above-mentioned conventional examples, and aims to prevent the power from being turned off or the device from transitioning to a sleep state before it is confirmed that the code image to be read has been read. [Means for solving the problem]

[0006] In order to achieve the above object, the present invention has the following configuration. That is, a first aspect of the present invention is an information processing device having a sleep function that transitions from an operating state to a sleep state with lower power consumption when a predetermined sleep time has elapsed since the last operation, A display means for displaying an image; A communication means for communicating with the authorization server; and a control means, The control means receiving access destination information indicating an access destination for authorizing the transfer of authority by the user from the authorization server via the communication means, and displaying the access destination information as a code image on the display means; requesting, via the communication means, from the authorization server an access token to be issued in response to authorization of authority transfer by the user who has accessed the access destination; While the code image is being displayed, the transition to the sleep state is not performed. The present invention provides an information processing device. Effect of the Invention

[0007] According to the present invention, it is possible to prevent the power supply from being turned off or the device from going into a sleep state before it is confirmed that the code image to be read has been read. [Brief description of the drawings]

[0008] [Figure 1] FIG. 2 is a diagram showing an example of a hardware block configuration diagram of the image communication device 1. [Diagram 2] FIG. 1 is a diagram showing an example of a system configuration including an image communication device 1. [Figure 3A] 4 is a flowchart illustrating an example of a process according to the first embodiment. [Figure 3B] 4 is a flowchart illustrating an example of a process according to the first embodiment. [Figure 4] FIG. 13 is a diagram showing an example of a basic screen. [Diagram 5] FIG. 13 is a diagram showing an example of a “scan and send” screen. [Figure 6] FIG. 11 is a sequence diagram illustrating an example of an access token acquisition process. [Figure 7] FIG. 13 is a diagram showing an example of a screen displaying a two-dimensional barcode. [Figure 8] 13 is a diagram illustrating an example of a Web page and processing indicated by an end-user verification URI. [Figure 9] 13 is a diagram illustrating an example of a Web page and processing indicated by an end-user verification URI. [Figure 10] 13 is a diagram illustrating an example of a Web page and processing indicated by an end-user verification URI. [Figure 11] 13 is a flowchart illustrating an example of an access token acquisition process. [Figure 12] 13 is a flowchart illustrating an example of a transmission process. [Figure 13] 13 is a flowchart illustrating an example of a setting registration process. [Figure 14] FIG. 13 is a diagram showing an example of an auto-sleep transition time setting screen. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] Hereinafter, the embodiments will be described in detail with reference to the attached drawings. Note that the following embodiments do not limit the invention according to the claims. Although the embodiments describe a number of features, not all of these features are essential to the invention, and the features may be combined in any manner. Furthermore, in the attached drawings, the same reference numbers are used for the same or similar configurations, and duplicated descriptions are omitted.

[0010] [First embodiment] ●Hardware for image communication equipment Fig. 1 is a diagram showing an example of the hardware configuration of an image communication device 1 that implements the present invention. Fig. 1 shows an example for the purpose of explaining this embodiment, and it goes without saying that other configurations may be used as long as they include other components or have the same effect as this embodiment. Note that image communication device 1 is sometimes called an image forming device or a multi-function peripheral (MFP) because it has an image forming function. It is also sometimes called an information processing device because it has information processing capabilities.

[0011] The CPU 11, RAM 12, ROM 13, input control I / F 14, display control I / F 15, storage device I / F 16, and communication I / F controller 17 are connected to the system bus 18. A scanner 22 and a printer 23 are also connected to the system bus 18. The components connected to the system bus 18 are configured to be able to exchange data with each other via the system bus 18.

[0012] The central processing unit (CPU, also called processor) 11 is a device that controls each device and calculates and processes data. The random access memory (RAM) 12 is a volatile memory that is used as a temporary storage area such as the main memory and work area of ​​the CPU 11. The ROM 13 is a non-volatile memory in which image data and other data, various programs for the operation of the CPU 11, etc. are stored in respective predetermined areas. The CPU 11 controls each part of the image communication device 1 using the RAM 12 as a work memory according to the programs stored in the ROM 13, for example. Note that the programs for the operation of the CPU 11 are not limited to being stored in the ROM 13, and may be stored in the storage device 21.

[0013] The input control I / F 14 accepts user operations, generates control signals corresponding to the operations, and supplies them to the CPU 11. For example, the input control I / F 14 is connected to a character information input device such as a keyboard (not shown), a hard key for directly inputting numerical values, or a pointing device such as a touch panel 19 as an input device for accepting user operations. The touch panel 19 is an input device that outputs coordinate information corresponding to a position touched on an input unit configured in a planar manner, for example. In the following embodiment, the operation on the touch panel is described, but it goes without saying that the present invention is not limited to this. The CPU 11 controls each part of the image communication device 1 according to a program based on the control signal generated and supplied by the input control I / F 14 in response to a user operation performed on the input device. This allows the image communication device 1 to perform an operation corresponding to the user operation.

[0014] The display control I / F 15 outputs a display signal for displaying an image on the display 20. For example, the CPU 11 supplies the display control signal generated according to a program to the display control I / F 15. The display control I / F 15 generates a display signal based on the display control signal and outputs it to the display 20. For example, the display control I / F 15 displays a GUI screen constituting a graphical user interface (GUI) on the display 20 based on the display control signal generated by the CPU 11. The touch panel 19 may be integrally configured with the display 20. For example, the touch panel 19 is configured so that the light transmittance does not interfere with the display of the display 20, and is attached to the upper layer of the display surface of the display 20. Then, the input coordinates on the touch panel 19 and the display coordinates on the display 20 are associated with each other. This makes it possible to configure a GUI that makes it seem as if the user can directly operate the screen displayed on the display 20. In the following description, the touch panel 19 is described as being integrally configured with the display 20.

[0015] A storage device 21, such as a hard disk drive (HDD), a solid-state drive (SSD), or a flash memory, is connected to the storage device I / F 16. Data is read from and written to the storage device 21 under the control of the CPU 11. The storage device 21 may be used in place of the RAM 12 or the ROM 13.

[0016] The communication I / F controller 17 performs communication with various networks such as a LAN, the Internet, wired, wireless, etc., based on the control of the CPU 11. To the network 2, various devices such as a PC, other image communication device 1, and a server are connected so as to be able to communicate with the image communication device 1. In addition, connection with an external authorization server and mail server, which will be described later, is also performed via the communication I / F controller 17.

[0017] The scanner 22 reads an original document and generates image data under the control of the CPU 11. For example, the CPU 11 causes the scanner 22 to perform a scan process in response to a user instruction input via the input control I / F 14. The scanner 22 reads an original document placed on a platen or an automatic document feeder (ADF), digitizes the original document, and generates image data. The scanner 22 then stores the generated image data in the storage device 21 via the storage device I / F 16.

[0018] Printer 23 prints image data stored in storage device 16 under the control of CPU 11. For example, CPU 11 causes printer 23 to perform print processing in response to a user instruction input via input control I / F 14 or a command instruction input from an external device via communication I / F controller 17. Printer 23 reads image data from the storage device, converts it into a printable data format, and prints it on a sheet medium such as paper.

[0019] In this embodiment, unless otherwise specified, in the image communication device 1, the CPU 11 controls the RAM 12, ROM 13, input control IF 14, display control I / F 15, storage device I / F 16, communication I / F 17, scanner 22, and printer 23 via a main bus 18. Also, the storage device 21 stores settings related to a mail server used when sending and receiving e-mail via the communication I / F 17, and an address book including destinations.

[0020] Furthermore, application programs (also called applications or apps) can be installed in the ROM 13 or the storage device 21. An application is a program that can perform processing using the communication function, storage function, scan function, printer function, and the like of the image communication device 1. Some applications access resources that require authorization, such as a server. The user interface of the image communication device 1 is limited to the touch panel 19 and the display 20, and authentication is not required each time access is made. Therefore, in this example, the application obtains an access token according to OAuth2.0. Using the access token, the application accesses resources that require authorization. The access token is information indicating that authorization for authority transfer by the user has been received, and the access token is also sometimes called authorization information.

[0021] System Configuration FIG. 2 shows an example of a system configuration including the image communication device 1 of this embodiment. The image communication device 1, an authorization server 3, and a mail server 4 are connected via a network 2. The image communication device 1 transmits and receives mail to and from the mail server 4, which requires authorization to access. The authorization server 3 issues an access token to prove that access to the mail server 4 is permitted, i.e., that the image communication device 1 has access authorization. The image communication device 1 requests authentication from the mail server 4 using the access token issued by the authorization server 3. The electronic terminal 5 is, for example, a smartphone, and in this embodiment, has a camera, and can access the authorization server 3 via a communication network such as the Internet by wireless communication. If the network 2 is the Internet, the electronic terminal 5 can access the authorization server 3 via the Internet.

[0022] ●Universal transmission function The program for executing the process shown in the flowcharts of FIG. 3A and FIG. 3B is stored in the storage device 21. When power is supplied to the image communication device 1, the program stored in the storage device 21 is expanded on the RAM 12, and the CPU 11 executes the program to start the process of the flowcharts of FIG. 3A and FIG. 3B. This process, particularly from step S304 onwards, is a so-called universal transmission in which the original is read by the scanner 22 and the read original is transmitted. In the universal transmission process, the medium and destination of transmission are specified, and here, email can be selected as the medium and an email address can be specified as the destination. The medium and destination can be specified by a character string or the like, but the user can also specify the desired medium and destination from an address book stored in the storage device 21. The medium is not limited to email, and a storage server not shown in FIG. 2 can also be selected. Only authorized users are permitted to access both the mail server and the storage server. Note that FIG. 3A and FIG. 3B are a series of flows and may be collectively referred to as FIG. 3.

[0023] When the process starts (S301), a basic screen 400 such as the one shown in FIG. 4 is displayed on the display 20 (S302).

[0024] The basic screen 400 has a function selection area 401 that displays a group of icons for various functions that can be executed by the image communication device 1, one of which is a "scan and send" icon 402. In addition, there is a setting change button 403 for changing the settings of the image communication device 1, and a power saving button 404 for explicitly switching the image communication device 1 to a sleep state with low power consumption or for returning from the sleep state. The sleep state is the state of the image communication device 1 that has been switched to by the sleep function. The sleep function is a function that, in a normal operating state, if there has been no operation for a certain period of time since the last operation, partially stops the power supply and switches the device to a sleep state with lower power consumption.

[0025] In the sleep state, at least the display 20 is turned off and the screen is not displayed, thereby reducing power consumption. If the power-saving button is a hardware key, the power-saving button operates as a toggle, and each time it is pressed, the device alternates between going into the sleep state and returning from the sleep state. If the power-saving button is a soft key, the device returns from the sleep state upon detecting that the touch panel 19 has been touched. Although not described in this embodiment, other configurations may also be used, such as the image communication device 1 being equipped with a human sensor, which returns from sleep upon detecting a person.

[0026] Returning to FIG. 3, it is determined whether the "scan and send" icon 402 on the basic screen 400 has been pressed (S303), and if it has been pressed, a "scan and send" screen 500 such as the example shown in FIG. 5 is displayed on the display 20 (S304).

[0027] After displaying the "scan and send" screen 500 on the display 20, the operation completion time is recorded in the storage device 21 (S305). Next, it is determined whether the start key 505 has been pressed (S306), and if so, it is determined whether one or more destinations for transmission have been set (S307). If one or more destinations have been set, it is determined whether the set destinations include an e-mail destination to be sent to the mail server 4 (S308). If the destinations include an e-mail destination, it is determined whether a valid access token has been obtained from the access token in the authorization server 3 (S309).

[0028] Although sending an e-mail is exemplified here, it may be determined in S308 whether a destination that requires access authority and is not limited to e-mail is included in the set destinations. In this case, if included, it may be determined in S309 whether a valid access token for accessing the corresponding destination has been acquired.

[0029] If a valid access token has not been acquired, an access token acquisition process (S310) described later is executed, and a transmission process (S311) described later is also executed. After that, the current time is recorded in the storage device 16 as the operation completion time (S312).

[0030] If it is determined in S308 that the email destination is not included, or if it is determined in S309 that a valid access token has been acquired, the access token acquisition process (S310) is not executed, and the sending process is executed (S311).

[0031] If the start key has not been pressed in S306 or if no destination has been specified, it is determined whether the home button 504 has been pressed (S313). If the home button 504 has been pressed, the current time is recorded in the storage device 16 as the operation completion time (S319), and the process returns to S302. If the home button 504 has not been pressed, it is determined whether any of the address book button 501, one-touch button 502, or new input button 503 has been pressed to instruct destination setting (S314).

[0032] When a destination is specified, a destination setting process (S315) is performed, and after the destination setting process is completed, the operation completion time is recorded in the storage device 16 (S316). The destination setting process sets the input or selected destination as the destination of the scanned image data. The destination setting process is a known technique, so a description thereof will be omitted.

[0033] If it is determined in S314 that a destination has not been specified, or after the operation completion time is recorded in S316, the current time is acquired (S317), and it is determined whether a predetermined time has passed since the operation completion time stored in the storage device 16 (S318). If the predetermined time has passed, the image communication device 1 is put into a sleep state (S325). If the predetermined time has not passed, the process returns to S306. The predetermined time can be set in the setting and registration process described later. After the process goes into the sleep state, it is determined whether a return condition from the sleep state, such as the power saving button 404 being pressed or the touch panel 19 being touched, is met (S326). If the condition is met, the device returns from the sleep state to a normal operating state (S327), and the process proceeds to S319. If the condition is not met, the process returns to S326, and the sleep state continues.

[0034] If the "scan and send" icon 402 was not pressed in S303, it is determined whether the setting registration button 403 was pressed (S320). If it was pressed, a setting registration process (S321) described below is performed, and after the process, the operation completion time is recorded in the storage device 16 (S322). Thereafter, the current time is obtained (S323), and it is determined whether a predetermined time has passed (S324). If it has passed, the process proceeds to S325 and goes to sleep, and if it has not passed, the process returns to S302.

[0035] If the setting registration button 403 has not been pressed in S320, it is determined whether any icon displayed in the function selection area 401, i.e., other functions, have been selected (S328). If selected, other function processing of the image communication device 1 linked to the pressed icon is executed (S329), and the process proceeds to S322. If not selected, the process proceeds directly to S323. Explanation of other function processing of the image communication device 1 will be omitted.

[0036] Access token acquisition process sequence Next, the sequence of the access token acquisition process (S310 in FIG. 5) will be described with reference to FIG. 6. In this embodiment, an access token is acquired using a device flow defined in RFC (Request For Comments) 8628 for devices that do not have a web browser. In the device flow, the authorization operation is performed using a web browser installed on an electronic terminal (not shown), such as a smartphone, owned by the user who performs the authorization operation.

[0037] When the access token acquisition process is started, the image communication device 1 requests the authorization server 3 to generate an end user verification URI via the network 2 (S601). This request is also called a device authorization request. The device authorization request includes a client ID unique to the request source. The authorization server 3 generates an end user verification URI (S602) and returns a response including the URI to the image communication device 1 (603). This response is also called a device authorization response. The device authorization response may further include a verification code and a device code generated by the authorization server 3. The image communication device 1 encodes the received end user verification URI into a two-dimensional barcode (S604) and displays it on the display 20 of the image communication device 1 (S605). In this way, the two-dimensional barcode of the end user verification URI is presented to the user of the image communication device 1. The URI is information indicating the access destination by HTTP, and can also be called access destination information.

[0038] FIG. 7 shows an example of a screen displaying a two-dimensional barcode on the "Scan and Send" screen 500. The two-dimensional barcode is displayed in a two-dimensional barcode display area 701. Generally, an expiration date is set for an end user verification URI. If an expiration date is set, the expiration date of the end user verification URI is displayed in an expiration date display area 702. This expiration date is determined when the end user verification URI is generated, and is managed by the authorization server 3. In addition, since a verification code that needs to be entered in the authorization process described below is notified by the authorization server 3 together with the end user verification URI, the verification code is also displayed in a code display area 703. The display of this two-dimensional barcode can be closed by pressing a close button 704.

[0039] Following the device flow procedure, the image communication device 1 displays the two-dimensional barcode (S605) and then requests an access token from the authorization server 3 (S606). In the device flow procedure, the authorization server 3 cannot issue an access token in response to the request until the user's authorization operation is completed, so it responds to continue polling (S607).

[0040] Meanwhile, the user starts an application installed in the user's electronic terminal 5 for reading the two-dimensional barcode displayed on the display 20 of the image communication device 1 (S608), and reads it with the application (S609) (S610). Reading is performed, for example, by the camera of the electronic terminal 5. The electronic terminal decodes the read two-dimensional barcode and obtains the end-user verification URI (S613). Even while the user is performing this operation, the image communication device 1 periodically polls the authorization server 3 to request an access token (S611), and receives a response from the authorization server 3 in response to the request to continue polling (S612).

[0041] The electronic terminal 5, which has acquired the end user verification URI in S613, requests a web page on the authorization server indicated by the end user verification URI (S614) and acquires the contents of the web page (S615). This web page is provided by a user verification end point provided by the authorization server 3. The acquired web page contents are displayed on a user authentication screen in the web browser of the electronic terminal 5 (S616), and the user inputs authentication information on the web page (S617). The input authentication information includes a verification code and user information, and may further include a password depending on the settings.

[0042] The contents of the web page and the authorization process differ depending on the authorization server 3, but some examples are shown in Figures 8, 9, and 10. The first screen to be displayed is shown in Figure 8. A web page 800 corresponding to the end user verification URI acquired in S613 is displayed on the web browser of the electronic terminal. The connected end user verification URI is displayed in the URL display area 803 of the web browser. The user enters the verification code displayed in the code display area 703 into the code input field 801, and presses the "Next" button 802.

[0043] When the "Next" button 802 is pressed, the screen transitions to the screen in FIG. 9. In FIG. 9, the account name registered in the mail server 4 is entered in the account name input field 901, and the "Next" button 902 is pressed (S617). If a password is set for the account entered in the account name input field 901, the password must also be entered. The account name (and the password, if there is one) is referred to as user information. Note that the screens in FIG. 8 and FIG. 9 may be combined into a single screen, with the verification code and user information being entered on the single screen.

[0044] When the "Next" button 902 is pressed, the web browser of the electronic terminal 5 transmits authentication information including the verification code and user information input in the user interfaces of Figures 8 and 9 to the authorization server 3 to request user authentication (S620). The authorization server 3 performs user authentication based on the user information, and if the authentication is successful, transmits authorization screen information to the electronic terminal 5 as a response (S621). The authorization server 3 can associate the user with the device based on the received user information and verification code.

[0045] When the electronic terminal 5 receives the authorization screen information, it displays the authorization screen of FIG. 10 (S622). The screen of FIG. 10 displays a "No" button 1001, a "Yes" button 1002, and a message display field 1003. The message display field 1003 displays a message explaining to the user the scope of the requested authorization and the meaning of granting authorization. After reading this message, the user presses the "Yes" button if he or she decides to grant authorization, or the "No" button if he or she decides not to grant authorization (S623). In this embodiment, the process proceeds to the process of FIG. 10, and the user presses the "Yes" button to complete the authorization operation by the user. Upon receiving the completion of the authorization operation by the user performed in S623, the Web browser installed in the electronic terminal 5 transmits an authorization request, which is the result of the authorization operation, to the authorization server 3 (S624). The authorization server 3, which receives the authorization information transmitted in S624, issues an access token (S625). In response to a request for an access token made thereafter by the image communication apparatus 1 (S626), the authorization server 3 responds with the access token issued in S625 (S627).

[0046] Meanwhile, even while the authorization operation is being performed on the information terminal 5, the image communication device 1 continues polling for an access token (S618, S619). This polling may continue, for example, until an access token or a response to end polling is received from the authorization server 3. The response to end polling is returned in response to a request for an access token when, for example, the end user verification URI has expired or authorization is denied by the user.

[0047] The image communication device 1 obtains the access token issued by the above procedure, and can exercise the transferred user authority using the access token.

[0048] Access token acquisition process by image communication device 1 Next, the access token acquisition process (S310 in Fig. 5) of image communication device 1 will be described with reference to the flowchart in Fig. 11. The process in Fig. 11 is a processing procedure in the sequence of Fig. 6 that focuses on image communication device 1. Note that in the description of Fig. 11, some of the information transmitted and received by image communication device 1 may be omitted. The process in Fig. 11 is executed by image communication device 1, and in particular by its CPU 11.

[0049] When the access token process is started (S1101), the image communication device 1 requests the authorization server 3 for an end user verification URI (S1102). The end user verification URI in response to the request is received (S1103), and is encoded into a two-dimensional barcode (S1104). The encoded two-dimensional barcode is displayed on the display 20 (S1105), and then an access token request is made to the authorization server 3 (S1106). It is determined whether an access token has been responded to from the authorization server 3 (S1107), and if so, the responded access token is recorded in the storage device 21 together with the access token expiration date (S1108). Thereafter, the current time is recorded as the operation completion time (S1109), and the process is terminated (S1110). When the operation completion time is recorded, it is determined whether a predetermined time until sleep (sleep time) has elapsed based on the time when the last operation was performed, so the recorded operation completion time can also be called the start time or reference time for measuring the sleep time.

[0050] If no access token is returned in S1107, it is determined whether the expiration date of the end-user verification URI has expired (S1111). The expiration date is the same as that displayed in the expiration date display area 702. If the expiration date has expired, the process proceeds to S1109.

[0051] If the expiration date has not passed, it is determined whether the response from the authorization server 3 was to end polling (S1112). If the "No" button 1001 is pressed during the user's authorization operation, it may be determined that the access token cannot be acquired without waiting for the end-user verification URI to expire. In that case, the authorization server 3 explicitly notifies the end of polling. In such a case, the process proceeds to S1109.

[0052] If the response from the authorization server 3 does not indicate the end of polling, it is determined whether the two-dimensional barcode is already in a state where it is not displayed (S1113). A state where the two-dimensional barcode is not displayed is, for example, when the close button 704 is touched and the display frame of the two-dimensional barcode is closed.

[0053] If the two-dimensional barcode is not displayed, the current time is obtained (S1114), and it is determined whether or not a predetermined time (sleep time) for switching to a sleep state has elapsed (S1115). If the time has elapsed, the device switches to a sleep state (S1116), and the process proceeds to S1119. If the sleep time has not elapsed, the process proceeds to S1117.

[0054] If the two-dimensional barcode has not already been hidden in S1113, or if the predetermined time has not elapsed in S1115, it is determined whether the close button 704 has been pressed and processing to close the two-dimensional barcode display has been performed (S1117). If it has been pressed, the operation completion time is recorded in the storage device 16 (S1118), and the process proceeds to S1119. In other words, if the two-dimensional barcode is being displayed, the sleep function is suppressed and the device is not caused to transition to the sleep state until it is closed.

[0055] After transitioning to the sleep state in S1116, it is determined whether a predetermined time (polling interval) has passed after recording the operation completion time in the storage device 16 in S1118, or after the previous access token was requested in S1107 (S1119). The predetermined time in this process is generally a value notified by the authorization server side, and operation is performed according to specifications from the server side. If the polling interval has passed, return to S1106 and request an access token again (S1106). If it has not passed, return to S1113.

[0056] Through the above procedure, the image communication device 1 can obtain an access token. In addition, while the two-dimensional barcode indicating the end user verification URI is displayed, the device does not transition to a sleep state, and the measurement of the sleep time starts after the display frame of the two-dimensional barcode is closed. In addition, even if the two-dimensional barcode is displayed, if the expiration date of the end user verification URI has expired, the measurement of the sleep time starts from that time.

[0057] Furthermore, even if the two-dimensional barcode displayed before the image communication device 1 obtains the access token is closed by the user, it is not considered an error at that point. In this case, the image communication device 1 waits until the expiration date (expires_in) of the authorization procedure to see if the access token can be obtained, and if it can be obtained, starts transmission, and if it cannot be obtained, it is considered an error. Here, the expiration date of the authorization procedure may be the expiration date 702 received and displayed together with the end-user verification URI.

[0058] Also, in S1109, the time when the operation is completed may be recorded and the display frame of the two-dimensional barcode may be closed.

[0059] ● Transmission process Next, the transmission process (S511 in FIG. 5) will be described with reference to FIG 12. The process in FIG 12 is also executed by the image communication device 1, particularly the CPU 11 thereof.

[0060] When the process starts (S1201), first, the document is read using the scanner 22 (S1202), and converted into an electronic file such as portable document format (PDF) or JPEG (S1203). Next, it is determined whether there are any unprocessed destinations among those set in the destination setting process (S315) (S1204). If there are any unprocessed destinations, one of the unprocessed destinations is selected and the destination of interest is extracted (S1205), and if there are no unprocessed destinations, the process ends in S1211.

[0061] It is determined whether the destination of interest extracted in S1205 is a destination for sending to the mail server 4, i.e., an email address (S1206). If it is a destination for sending to the mail server 4, it is determined whether a valid access token exists (has already been acquired) in the mail server 4 (S1207). If it exists, the image communication device 1 is authenticated by sending the access token to the mail server 4 (S1208), and the email data is sent after authentication (S1209). If a valid access token does not exist, the email is not sent, and the next destination among unprocessed destinations is treated as the destination of interest, and processing for that destination (S1204) is started.

[0062] If it is determined in S1206 that the destination of interest is not a destination for transmission to the mail server 4, transmission is performed using a communication protocol associated with the destination (S1210). Note that if the destination requires authentication, the process from S1207 onwards may be performed in the same manner as the mail server.

[0063] ● Setting registration process Next, the setting registration process (S321 in FIG. 5) will be described with reference to FIG. 13. When the process starts, first, a setting registration screen (not shown) is displayed on the display 20. Various settings are possible for the image communication device 1, and if the setting is other than the setting related to the sleep time, other setting processing is performed (S1308). The other setting registration processing is a known technique, so description thereof will be omitted.

[0064] If the content to be set is a sleep time, an auto-sleep transition time setting screen 1400 is displayed as shown in Fig. 14 as an example (S1304). The auto-sleep transition time setting screen 1400 has a cancel button 1401 for returning without confirming the setting, an OK button 1402 for confirming the setting, and a setting area 1403 for setting the time. If the OK button 1402 is pressed, the value input in the setting area 1403 is saved in the storage device 16 (S1305), and the process ends (S1306). If the OK button 1402 is not pressed, it is determined whether the cancel button 1401 has been pressed (S1307), and if it has been pressed, the process ends (S1306), and if it has not been pressed, the process returns to S1303.

[0065] As described above, according to this embodiment, interruption due to transition to a sleep state can be prevented in the procedure for delegating user authority to a device by device flow (RFC8628 OAuth2.0 Device Authorization Grant). In particular, when the device displays an end user verification URI as a code image such as a two-dimensional barcode and accesses the code image to confirm authorization for authority transfer, the device will not transition to a sleep state while the code image is displayed. Therefore, even if it takes time to prepare the electronic terminal to read the code image, it is possible to prevent the device from transitioning to a sleep state due to this.

[0066] Furthermore, once the expiration date of the end-user verification URI has passed, the user can no longer authorize using the URI indicated by the displayed two-dimensional barcode. In that case, the sleep function is resumed, and if the period of inactivity exceeds the sleep time, the device may enter a sleep state.

[0067] Furthermore, instead of or in addition to the sleep function, an automatic shutdown function that turns off the power of the device when a predetermined time has passed since the last operation may be treated in the same manner as the sleep function. In other words, the automatic shutdown function is disabled while the two-dimensional barcode is displayed.

[0068] In this embodiment, the image communication device 1 has been described as a client, but the client may be a program such as an application executed on the device. Therefore, the authority transfer may be performed on an application basis that is installed and executed on the device. In addition, the authority transfer may be performed for each resource that requires authority, but it is of course also possible to apply this embodiment to a procedure in which authority for multiple resources is transferred collectively.

[0069] [Second embodiment] In the first embodiment, the description has been given with a focus on sleep, but the image communication device 1 also has a function of automatically switching the screen or turning off the display by performing reset or logout. These may also be performed if no operation is performed for a certain period of time depending on the settings. Therefore, an embodiment is conceivable in which the sleep function of the first embodiment is replaced with an automatic screen transition function or an automatic display turning off function, or is added to the sleep function and handled in parallel. For example, while the two-dimensional barcode of the end user verification URI is displayed, even if a predetermined operation such as reset or logout is performed, the transition from the currently displayed screen to another screen or turning off the display is delayed until the two-dimensional barcode screen is closed. Alternatively, until the authorization confirmation of the authority transfer is completed, even if a reset or logout is performed, the transition to another screen or turning off the display is delayed until the two-dimensional barcode screen is closed. Note that the above-mentioned predetermined operation does not include the operation of the close button 704. In other words, the operation of the close button is excluded from the predetermined operation. If the close button 704 is pressed, the two-dimensional barcode screen is closed accordingly. Moreover, turning off the display may refer to turning off the display by, for example, cutting off the power supply to the display 20, and may be a process in which the original display is restored when the display is resumed.

[0070] Specifically, when a reset or logout is performed, it is determined whether the display is turned off or a transition to another screen is performed. If it is determined that the display is turned off or a transition to another screen is performed, it is determined whether the two-dimensional barcode of the end user verification URI is currently displayed. If it is determined that the display is displayed, for example, a flag indicating that the display turning off or the transition to another screen has been delayed is set to true, and the display is maintained in the current state. Then, when the two-dimensional barcode of the end user verification URI is closed, the flag indicating that the display turning off or the transition to another screen has been delayed is tested, and if it is true, the display is transitioned to the delayed state. At the same time, the flag is set to false. As described above, by not transitioning to another screen while the two-dimensional barcode of the end user verification URI is displayed, interruption of the authorization procedure can be prevented.

[0071] In this way, in addition to the sleep function, other functions that may cause the authorization confirmation to be interrupted can also be prevented from interrupting the authorization confirmation due to the other functions.

[0072] [Other Examples] The present invention can also be realized by a process in which a program for implementing one or more of the functions of the above-described embodiments is supplied to a system or device via a network or a storage medium, and one or more processors in a computer of the system or device read and execute the program. The present invention can also be realized by a circuit (e.g., ASIC) that implements one or more of the functions.

[0073] Summary of embodiments The above embodiments can be summarized as follows: (Item 1) An information processing device having a sleep function that transitions from an operating state to a sleep state in which power consumption is lower when a predetermined sleep time has elapsed since a last operation, A display means for displaying an image; A communication means for communicating with the authorization server; and a control means, The control means receiving access destination information indicating an access destination for authorizing the transfer of authority by the user from the authorization server via the communication means, and displaying the access destination information as a code image on the display means; requesting, via the communication means, from the authorization server an access token to be issued in response to authorization of authority transfer by the user who has accessed the access destination; While the code image is being displayed, the transition to the sleep state is not performed. 23. An information processing apparatus comprising: (Item 2) Item 1. The information processing device according to item 1, The control means receives the access destination information together with an expiration date of the access destination information, and if the access token cannot be obtained from the authorization server by the expiration date, transitions to the sleep state when the predetermined sleep time has elapsed since the last operation. 23. An information processing apparatus comprising: (Item 3) 3. The information processing device according to item 1 or 2, When the control means acquires the access token from the authorization server, the control means transitions to the sleep state when the predetermined sleep time has elapsed since the last operation. 23. An information processing apparatus comprising: (Item 4) 4. The information processing device according to any one of items 1 to 3, When the control means receives a response indicating an end of the access token request from the authorization server, the control means transitions to the sleep state when the predetermined sleep time has elapsed since the last operation. 23. An information processing apparatus comprising: (Item 5) An information processing device according to any one of items 1 to 4, The device further includes an input unit for receiving an input from a user, The control means further closes the display of the code image in response to a close operation for closing the code image by the input means, When an operation for transitioning the currently displayed screen to another screen, other than the closing operation, is performed, while the code image is being displayed, the transition of the screen is delayed until the display of the code image is closed. 23. An information processing apparatus comprising: (Item 6) 6. The information processing device according to any one of items 1 to 5, The device further includes an input unit for receiving an input from a user, The control means further closes the display of the code image in response to a close operation for closing the code image by the input means, When an operation for erasing the currently displayed screen, other than the closing operation, is performed, while the code image is being displayed, the erasing of the screen is delayed until the display of the code image is closed. 23. An information processing apparatus comprising: (Item 7) 7. The information processing device according to any one of items 1 to 6, When the control means acquires the access token from the authorization server, the control means transmits the access token to an access destination that requires the user's authority for access, thereby accessing the access destination. 23. An information processing apparatus comprising: (Item 8) Item 7. The information processing device according to item 7, The access destination includes a mail server, The control means obtains an access token for accessing the mail server from the authorization server in response to an instruction to send the mail, and sends the mail via the mail server. 23. An information processing apparatus comprising: (Item 9) Item 7 or 8, the information processing device comprising: The access destination includes a storage server, The control means obtains an access token for accessing the storage server from the authorization server in response to an instruction to transmit a file, and transmits the file to the storage server. The present invention is not limited to the above-described embodiments, and various modifications and variations are possible without departing from the spirit and scope of the invention. Therefore, the following claims are appended to apprise the public of the scope of the invention. [Explanation of symbols]

[0074] 1 Image communication device, 2 Network, 3 Authorization server, 4 Mail server, 5 Electronic terminal

Claims

1. An information processing device having a sleep function that transitions from an operating state to a sleep state in which power consumption is lower when a predetermined sleep time has elapsed since a last operation, A display means for displaying an image; A communication means for communicating with the authorization server; and a control means, The control means receiving access destination information indicating an access destination for authorizing the transfer of authority by the user from the authorization server via the communication means, and displaying the access destination information as a code image on the display means; requesting, via the communication means, from the authorization server an access token to be issued in response to authorization of authority transfer by the user who has accessed the access destination; While the code image is being displayed, the transition to the sleep state is not performed.

23. An information processing apparatus comprising:

2. 2. The information processing device according to claim 1, The control means receives the access destination information together with an expiration date of the access destination information, and if the access token cannot be obtained from the authorization server by the expiration date, transitions to the sleep state when the predetermined sleep time has elapsed since the last operation.

23. An information processing apparatus comprising:

3. 2. The information processing device according to claim 1, When the control means acquires the access token from the authorization server, the control means transitions to the sleep state when the predetermined sleep time has elapsed since the last operation.

23. An information processing apparatus comprising:

4. 2. The information processing device according to claim 1, When the control means receives a response indicating an end of the access token request from the authorization server, the control means transitions to the sleep state when the predetermined sleep time has elapsed since the last operation.

23. An information processing apparatus comprising:

5. 2. The information processing device according to claim 1, The device further includes an input unit for receiving an input from a user, The control means further closes the display of the code image in response to a close operation for closing the code image by the input means, When an operation for transitioning the currently displayed screen to another screen, other than the closing operation, is performed, while the code image is being displayed, the transition of the screen is delayed until the display of the code image is closed.

23. An information processing apparatus comprising:

6. 2. The information processing device according to claim 1, The device further includes an input unit for receiving an input from a user, The control means further closes the display of the code image in response to a close operation for closing the code image by the input means, When an operation for erasing the currently displayed screen, other than the closing operation, is performed, while the code image is being displayed, the erasing of the screen is delayed until the display of the code image is closed.

23. An information processing apparatus comprising:

7. 2. The information processing device according to claim 1, When the control means obtains the access token from the authorization server, the control means transmits the access token to an access destination that requires the user's authority for access, thereby accessing the access destination.

23. An information processing apparatus comprising:

8. The information processing device according to claim 7, The access destination includes a mail server, The control means obtains an access token for accessing the mail server from the authorization server in response to an instruction to send the mail, and sends the mail via the mail server.

23. An information processing apparatus comprising:

9. The information processing device according to claim 7, The access destination includes a storage server, The control means obtains an access token for accessing the storage server from the authorization server in response to an instruction to transmit a file, and transmits the file to the storage server.

23. An information processing apparatus comprising:

10. 10. The information processing device according to claim 1 , the information processing device further has an automatic shutdown function for turning off the power from an operating state when a predetermined time has elapsed since the last operation; The automatic shutdown function will not turn off the power while the code image is being displayed.

23. An information processing apparatus comprising:

11. A program for causing a computer to function as the information processing device according to any one of claims 1 to 9.

12. a sleep function that transitions from an operating state to a sleep state with lower power consumption when a predetermined sleep time has elapsed since the last operation; A display means for displaying an image; A communication means for communicating with the authorization server; A method for controlling an information processing device having a control unit, The control means receives access destination information indicating an access destination for authorizing the transfer of authority by the user from the authorization server via the communication means, and displays the access destination information as a code image on the display means; The control means requests, via the communication means, an access token to be issued in response to authorization of authority transfer by the user who has accessed the access destination, from the authorization server; The control means does not transition to the sleep state while the code image is being displayed.

23. A method for controlling an information processing apparatus comprising:

Images