Image forming apparatus and method

Abstract

To solve a problem that there is a risk that a user not intended originally becomes accessible, when authentication information for accessing external service is saved, in a Web browser of an image forming device operated by a plurality of users.SOLUTION: A communication system comprises: an image generation server which performs rendering of a Web content; and an information processing device which can execute a first application which is managed by first management information and acquires the Web content based on a result of the rendering. The communication system comprises: generation means which generates a second application which is managed by second management information different from the first management information and acquires the Web content based on the result of the rendering, other than the first application; and setting means which can set authentication information to the second application.SELECTED DRAWING: Figure 5

Description

[Technical field]

[0001] The present invention relates to a communication system and an information processing device. [Background technology]

[0002] Currently, communication terminals equipped with a web browser (hereafter referred to as a browser) and capable of browsing web pages on the browser are in widespread use. By displaying a web page of an external service through the browser, the communication terminal can link with the external service. This external service may contain private information, and user authentication may be required to protect the private information. However, browsers have a function for saving user authentication information. By using this function, it becomes possible to pass the user authentication of the external service by using the saved user authentication information and access the external service without having to perform user authentication again.

[0003] Patent Document 1 discloses a technology called function-specific authentication, which identifies users through user management and enables or restricts the use of each application by the user. In this function-specific authentication, an application selection menu is displayed when the image forming device is started up, and authentication is requested only if the application selected by the user is not available to all users. For example, a technology has been proposed in which any user is allowed to use a copy application, while only users who have successfully passed user authentication are allowed to use a scan and send application. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2004-122778 A Summary of the Invention [Problem to be solved by the invention]

[0005] However, there may be cases where multiple users operate one image forming device. If authentication information for accessing an external service is stored in the web browser of an image forming device operated by multiple users, there is a risk that an unintended user may be able to access the service.

[0006] The present invention has been made in view of the above-mentioned problems, and has an object to easily realize user authentication when accessing an external service in an image forming apparatus. [Means for solving the problem]

[0007] The present invention is a communication system having an image generation server that renders Web content, and an information processing device capable of executing a first application that is managed by first management information and obtains Web content based on the result of the rendering, characterized in that in addition to the first application, the system has a generation means that generates a second application that is managed by second management information different from the first management information and obtains Web content based on the result of the rendering, and a setting means that can set authentication information in the second application. Effect of the Invention

[0008] According to the present invention, it is possible to easily realize user authentication when accessing an external service, regardless of whether or not the image forming apparatus has a user management function. [Brief description of the drawings]

[0009] [Figure 1] FIG. 1 is a block diagram showing an example of a hardware configuration of an image forming apparatus. [Diagram 2] A block diagram showing an example of a software configuration of an image forming apparatus. [Diagram 3] FIG. 13 is a diagram showing an example of a display screen of an image forming apparatus. [Figure 4] FIG. 13 is a diagram showing an example of an application setting screen. [Diagram 5]FIG. 1 is a flowchart showing an example of a process performed by an application. [Figure 6] FIG. 13 is a flowchart showing an example of a procedure of a process performed by a shortcut. [Figure 7] A diagram showing an example of setting information held by a shortcut. [Figure 8] FIG. 13 is a diagram showing an example of a sequence illustrating a processing procedure for creating a shortcut. [Figure 9] FIG. 13 is a diagram showing an example of a sequence showing a procedure of a process for implementing a shortcut. [Figure 10] FIG. 13 is a diagram showing an example of a sequence showing a procedure of processing after an application is started. [Figure 11] A diagram showing an example of a web browsing system. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] Each embodiment of the present invention will be described in detail with reference to the attached drawings. Note that the following embodiments do not limit the invention according to the claims, and not all of the combinations of features described in each embodiment are necessarily essential to the solution of the present invention. In this embodiment, an image forming apparatus is used as an example of an information processing apparatus, but the present invention is not limited to this.

[0011] (Example) Fig. 11 is a diagram showing an example of the overall system configuration of a communication system according to the present invention. In the system shown in Fig. 11, a user is viewing the screen of an image forming device 1101, and operates the image forming device 1101 to input the URL of a Web content server 1105 that the user wishes to view. Upon receiving the input, the image forming device 1101 transmits the URL of the Web content server 1105 via a router 1104 to an image generating system 1100 serving as an information processing system installed on the cloud.

[0012] The image forming device 1101 has a function of printing an image, or a function of sending image data generated by scanning to an arbitrary destination. Although three image forming devices are connected in Fig. 11 as an example, the number of connections is arbitrary. The image forming device 1101, the image forming device 1102, and the image forming device 1103 have the same configuration, and the following description will be given of the image forming device 1101.

[0013] A browser 1108 in a virtual machine 1107 of an image generation system 1100 receives the URL of a Web content server 1105 transmitted from an image forming apparatus 1101 via a gateway 1106. The browser 1108 then accesses the Web content server 1105 corresponding to the received URL via the gateway 1106. The Web content server 1105 generates Web content for the requested URL and transmits it to the requesting browser 1108. The image generation system is constructed by an image generation server.

[0014] The authentication server 1110 is a server that performs authentication processing when the image forming apparatus accesses the WEB content server 1105. Specifically, the authentication server 1110 is an example of an authentication site such as OAuth.

[0015] The browser 1108 generates a rendering result of the Web content received from the Web content server 1105. The browser 1108 then transmits the generated rendering result of the Web content to the image forming apparatus 1101 via the gateway 1106. The image forming apparatus 1101 receives the rendering result of the Web content transmitted from the image generation system 1100, and presents the Web content to a user by displaying the received rendering result, etc. Note that in addition to the image forming apparatus 1101, a plurality of image forming apparatuses such as image forming apparatuses 1102 and 1103 may be connected to the cloud web browser system.

[0016] 1 is a diagram showing a hardware configuration of an image forming apparatus 1101 according to the present invention. In this embodiment, the image forming apparatus 1101 will be described as an example. The image forming apparatus 1101 includes a controller unit 100. The controller unit 100 is connected to a scanner 170 which is an image input device and a printer 195 which is an image output device, and is also connected to an operation unit 112. The controller unit 100 performs control to realize a copy function in which an original is read by the scanner 170 and the generated image data is printed on a sheet by the printer 195.

[0017] The controller unit 100 has a CPU 101. The CPU 101 starts up an operating system (OS) by a boot program stored in a ROM 103. The CPU 101 executes a program stored in a storage 104 on this OS, thereby executing various processes. A RAM 102 is used as a working area for the CPU 101. The RAM 102 provides a working area as well as an image memory area for temporarily storing image data. The storage 104 stores the programs and image data.

[0018] The CPU 101 is connected to the ROM 103, RAM 102, and operation unit I / F (operation unit interface) 106 via a system bus 107. The CPU 101 is further connected to a network I / F (network interface) 110, a USB host I / F 113, and an image bus I / F (image bus interface) 105. The operation unit I / F 106 is an interface with an operation unit 112 having a touch panel, and outputs image data to be displayed on the operation unit 112 to the operation unit 112. The operation unit I / F 106 also sends information input by a user on the operation unit 112 to the CPU 101. The network I / F 110 is an interface for connecting the image forming apparatus to a LAN.

[0019] The USB host I / F 113 is an interface unit that communicates with the USB storage 114. The USB host I / F 113 is an output unit for storing data stored in the storage 104 in the USB storage 114. The USB host I / F 113 also inputs data stored in the USB storage 114 and transmits it to the CPU 101. The USB storage 114 is an external storage device that stores data, and is detachable from the USB host I / F 113. A plurality of USB devices including the USB storage 114 can be connected to the USB host I / F 113.

[0020] The RTC 115 controls the current time. The time information controlled by the RTC 115 is used to record the time when a job is input.

[0021] The image bus I / F 105 is a bus bridge that connects the system bus 107 to an image bus 208 that transfers image data at high speed and converts the data format. On the image bus 208, a device I / F 120, a scanner image processing unit 180, and a printer image processing unit 190 are provided. A scanner 170 and a printer 195 are connected to the device I / F 120. The device I / F 120 performs synchronous / asynchronous conversion of image data. The scanner image processing unit 180 corrects, processes, and edits input image data. The printer image processing unit 190 performs correction, resolution conversion, etc. on print output image data according to the printer 195.

[0022] Fig. 2 is a diagram showing the software configuration of an image forming apparatus according to the present invention. Each unit indicated by a solid line in Fig. 2 is a software module realized by CPU 101 executing a main program loaded into RAM 102. The execution of each module of the main program, which will be described later, is managed and controlled by an OS (Operating System) 210.

[0023] The UI control unit 252 displays a screen on the operation unit 112, and accepts operations from the user via the operation unit I / F 106. The UI control unit 252 also has a function of notifying other modules, receiving drawing instructions from other modules, and controlling screen updating.

[0024] The job execution control unit 253 is a module that receives a job execution instruction from the UI control unit 252 and controls job processing such as copying, scanning, and printing. The NW control unit 254 receives a communication request from another module, controls the network I / F 110, and controls communication with an external device. Also, upon receiving a notification from an external device, it notifies the other modules of the content of the notification.

[0025] A storage control unit 255 records and manages the setting information and job information recorded in the storage 104. Each module located in the OS hierarchy accesses the storage control unit 255 to refer to and set setting values.

[0026] The external storage cooperation application 220 is a sub-module included in the OS 210, and controls applications that operate in cooperation with the external storage. The number of sub-modules included in the OS is arbitrary.

[0027] The overall control unit 221 of the external storage cooperation application 220 determines the user operation content when it receives a notification of a user operation from the UI control unit 252. If the user operation content is communication with an external storage, the external storage cooperation application 220 communicates with the outside through the NW control unit 254.

[0028] The external storage cooperative application 220 receives the communication result and instructs the UI control unit 252 to update the drawing. Information for communicating with the external storage is acquired by accepting input from the user or by referring to the setting storage unit 222. If the user operation is scanning or printing, the application instructs the job control unit 251 to perform the requested operation.

[0029] When the shortcut creation application 230 receives a start request from the UI control unit 252, it displays a shortcut creation screen 370 as shown in FIG. 3(B) on the operation unit 112, which will be described later. When the shortcut creation unit 231 receives a notification of a user's operation from the UI control unit 252, it performs a process of creating a shortcut button (hereinafter, button) 354 of an external storage linked application. When the shortcut creation unit 231 selects to use an authentication code for user authentication when creating the button 354, it requests the authentication code generation unit 232 to create a unique authentication code associated with the shortcut. In FIG. 3(B), a PIN code is shown as an example of the authentication code, but the authentication code is not limited to this. For example, fingerprint authentication or ID card authentication may be used.

[0030] The authentication code generation unit 232 generates a unique authentication code, and stores the authentication code in the storage control unit 233. Similarly, information such as the button name input when creating the button 354 is stored in the storage control unit 233. The setting information input in FIG. 3(B) is stored in the storage control unit 233.

[0031] 2 is an application having the same functions as the external storage cooperation application, and is created by the shortcut creation application 230. Note that although the term "shortcut" is used here, it is intended to create an application having different management information (see FIG. 7 described later) for the external storage cooperation application.

[0032] The application shortcut 240 is not simply a copy of the external storage cooperation application 220, but has an external storage cooperation destination and stored user information as shown in Fig. 7 described later. When there are multiple application shortcuts 240, the external storage contacts and stored user information can be different for each application shortcut. The number of shortcuts that can be created is arbitrary.

[0033] When the overall control unit 221 of the application shortcut 240 receives a notification of a user operation from the UI control unit 252, it refers to the setting storage unit 242. Specifically, it checks whether a PIN code is set and whether a startup URL, which is address information of the access destination at startup, is set. If a PIN code is set, it displays a PIN code input screen 390 as shown in FIG. 3(D) and waits for user input.

[0034] Each of the application shortcut 240 and the external storage cooperative application 220 has identification information. Therefore, information such as the operation history and settings of the browser 1108 when the external storage cooperative application 220 is executed is stored in the image generating system 1100 in association with the identification information of the external storage cooperative application 220. Similarly, information such as the operation history and settings of the browser 1108 when the application shortcut 240 is executed is stored in the image generating system 1100 in association with the identification information of the application shortcut 240. As a result, for example, when the application shortcut 240 is executed, the image generating system 1100 renders a Web page in accordance with the identification information of the application shortcut 240 and startup URL information described later. Then, the image forming apparatus 1101 obtains Web content based on the rendering result.

[0035] When the overall control unit 221 receives a notification of a user's operation from the UI control unit 252, it requests the authentication code comparison unit 242 to compare the input PIN code with the set PIN code. The authentication code comparison unit 242 refers to the setting storage unit 242 to acquire the PIN code associated with the shortcut. The authentication code comparison unit 242 returns the result of comparing the acquired PIN code with the user input to the overall control unit 241. If the comparison result is true, the overall control unit 241 provides the user with a function equivalent to an external storage linked application. For example, if a start-up URL (address information accessed at start-up) is set in the area 451, the overall control unit 241 communicates with the specified URL through the NW control unit 254. Specifically, the overall control unit 241 accesses the Web content server 1105 via the image generation system 1100. The overall control unit 241 receives the communication result and requests the UI control unit 252 to update the screen display. If the result is false, the overall control unit 241 requests the UI control unit 252 to display a message indicating that the input PIN code is not appropriate.

[0036] Each of the screens in FIGS. 3(A), (B), (C), and (D) is generated by CPU 101 executing a program constituting UI control unit 252 shown in FIG.

[0037] Fig. 3(A) is a diagram showing an example of a home screen displayed on the image forming apparatus 1101. Fig. 3(A) shows an example in which five icons are displayed on the home screen 300, but the number of buttons is arbitrary. Note that in this embodiment, the buttons represent icons.

[0038] Button 310 is an example of a button related to a copy function. Button 330 is an example of a button related to a scan function. Button 320 is an example of an external storage linking application button. Button 320 is displayed on the home screen when "Use external storage linking" is checked in 410 in Fig. 4. When a button is selected, the function associated with the button is executed.

[0039] 3B is a diagram showing an example of shortcut creation screen 370 displayed on operation unit 112 when button 346 is selected. Shortcut name 341 accepts input of a title to be displayed on shortcut 354 to be created on the home screen. If enter button 345 is selected without any input, shortcut creation unit 231 sets an arbitrary button name.

[0040] Radio button 342 displays the option of whether or not to provide a user authentication function when creating a shortcut to an external storage linked application. If "Yes" is selected, PIN code input section 343 is displayed, and the unique PIN code generated by shortcut creation section 231 is displayed. If the selection is changed from "Yes" to "No", the PIN code displayed in PIN code input section 343 is discarded. If the user selects "Yes" again, a unique PIN code is generated by authentication code generation section 232 and displayed in PIN code input section 343. Note that the generated PIN code may differ from the PIN code initially displayed, but both are unique PIN codes linked to the shortcut.

[0041] When the cancel button 344 is selected, the display returns to the home screen 300 shown in FIG. 3(A). When the cancel button 344 is selected, the information input before the cancel button 344 was selected is discarded. When the confirm button 345 is selected, the shortcut creation unit 231 creates a shortcut (e.g., shortcut 354) based on the input information. When the creation is complete, the display transitions to the home screen 380 shown in FIG. 3(C). If the creation fails, an error message such as "Shortcut creation failed" is displayed. When a certain amount of time has passed since the creation of the shortcut 354 began, the display returns to the home screen 300 shown in FIG. 3(A).

[0042] FIG. 3C is a diagram showing an example of a home screen 360 displayed on the image forming apparatus 1101. In the home screen 380, a button 354 is added compared to the home screen 300 in FIG. 3A. The button 354 is a shortcut to an external storage linked application added by the user. When the button 354 is selected, if the shortcut of the button 354 is provided with a user authentication function, an authentication screen 390 in FIG. 3D opens when the external storage linked application is started, and the user is prompted to input user authentication information (PIN code). Note that if the shortcut of the button 354 is not provided with a user authentication function, the screen in FIG. 3D does not open.

[0043] Fig. 3(D) is a diagram showing an example of authentication screen 390 that prompts the user to enter user authentication information and is displayed if the user authentication function is provided when button 354 is selected. When authentication screen 390 in Fig. 3(D) is displayed, the user selects PIN code input section 343 and enters the PIN code that was displayed when the shortcut was created. When confirm button 353 is selected after the entry, authentication code comparison section 242 compares the entered PIN code with the PIN code linked to the selected button 354.

[0044] If the verification result is true, the user is able to use the function linked to button 354. If the verification result is false, a message such as "PIN code is incorrect" is displayed for a certain period of time, and authentication screen 390 in Fig. 3(D) is displayed. Also, when cancel button 352 is selected, the display returns to home screen 380 shown in Fig. 3(C). In this case, any information entered before cancel button 352 was selected is discarded.

[0045] 4 is a diagram showing an example of a setting screen for an external storage cooperation application. If the image forming apparatus 1101 has a server function, this setting screen can also be displayed by accessing a specific URL via a web browser on a user terminal such as a PC or smartphone connected via a network line.

[0046] The user operates the setting screen to set the external storage linking application function. When using the external storage linking function, the user checks a check box 410. Checking the check box 410 causes a button 320 to be displayed. Furthermore, the check boxes following the check box 420 become editable.

[0047] The user can use the shortcut creation app by checking check box 420. When check box 420 is checked, operation unit 112 displays button 346 on the home screen. Furthermore, check boxes after check box 430 can be edited. In other words, when check box 420 is checked, shortcut creation is permitted.

[0048] By checking checkbox 430, the user can create a shortcut to the external storage linked application. Also, checkbox 440 and subsequent boxes can be edited. Here, the display shows that one shortcut is to be created, but the display may show that multiple shortcuts can be created. Area 431 accepts input of a title to be displayed on the home screen together with the created shortcut. If the enter button 470 is selected without any input, the shortcut creation unit 231 sets an arbitrary button name.

[0049] By checking check box 440, the user can provide a user authentication function to the shortcut to be created. When check box 440 is checked, a unique PIN code linked to the shortcut is automatically generated by authentication code generation unit 232 and displayed in area 441. When the check box is unchecked, area 441 is updated to blank and the displayed PIN code is discarded. When the user checks check box 440 again, a unique PIN code is generated by authentication code generation unit 232 and the display is updated. The generated PIN code may differ from the PIN code initially displayed, but both are unique PIN codes linked to the shortcut. Note that, although an example in which a PIN code is generated is shown here, it may be set by the user.

[0050] The user can specify the URL to be displayed first when the shortcut is executed by checking the checkbox 450 and specifying the URL. Any URL can be input in the area 451. If the decision button 470 is selected without any input, the shortcut creation unit 231 sets the start-up URL.

[0051] Some image forming devices are capable of acquiring information about the location where they are installed. In the case of image forming devices that have the capability to acquire such location information, a check box 460 is displayed. If the device does not have this capability, the check box 460 is not displayed. The user can enable or disable the location-based authentication function by checking the check box 460. An area 461 accepts input of any location information. If the decision button 470 is selected without any input, the function of the check box 460 is set to be disabled.

[0052] The information set in the check boxes 410 to 460 is notified to the image forming apparatus via the network I / F 1-10 and recorded in the image forming apparatus.

[0053] 5 is a flowchart showing the procedure of processing performed by an application for creating a shortcut to access an external storage. The external storage linking application 220, the shortcut creation application 230, and the application shortcut 240 are executed by the CPU 101 executing a program stored in the storage 104 on the OS.

[0054] In step S510, the operation unit I / F 306 detects that the button 346 has been selected, and the CPU 101 loads the shortcut creation application 230 linked to the button 346 into the RAM 102 and executes it.

[0055] In step S520, the shortcut creation unit 231 requests the UI control unit 252 to display a shortcut creation form screen as shown in Fig. 3(B). When the display is completed, the process proceeds to step S530.

[0056] In step S530, the shortcut creation unit 231 determines whether or not to use an authentication code. The shortcut creation unit 231 sequentially acquires user input information from the UI control unit 252. Among the input information, the information input using the radio button 342 is determined, and if "Yes" is selected, it is determined that an authentication code is to be used, and the process transitions to step S531. If "No" is selected, it is determined that an authentication code is not to be used, and the process transitions to step S540.

[0057] In step S531, the shortcut creation unit 231 requests the generation of an authentication code from the authentication code generation unit 232. The authentication code generation unit 232 generates a unique PIN code associated with the shortcut, and returns it to the shortcut creation unit 231. After that, the process proceeds to step S532.

[0058] In step S532, the shortcut creation section 231 requests the UI control section 252 to display the generated PIN code in the PIN code input section 343 of Fig. 3B. Then, the process proceeds to step S540.

[0059] In step S540, shortcut creation unit 231 determines whether or not decision button 345 has been selected by UI control unit 252. If decision button 345 has been selected, the process proceeds to step S550. If not, the process waits for user input.

[0060] In step S550, the shortcut creation unit 231 processes and saves the user input information. FIG. 7 described later is an example of when the processing result is saved in the storage control unit 253. If the shortcut name 341 is specified in the user input information, the input is saved in the storage control unit 253 as the shortcut name 710. If no shortcut name is specified, an arbitrary shortcut name such as "User 1" is generated and saved in the storage control unit 253. If a PIN code was generated in step S531, "user authentication completed" and the generated unique PIN code associated with it are saved in the storage control unit. Then, the process proceeds to step S560.

[0061] In step S560, a shortcut is created based on the information saved in storage control unit 253 in step S550. The created shortcut is, for example, button 354 in FIG. 3C. If the shortcut creation is successful, the flow ends. If it fails, the flow transitions to step S561. In step S561, shortcut creation unit 231 displays a message such as "Shortcut creation failed" in UI control unit 252 for a certain period of time. This concludes the process performed by the application that creates a shortcut to access external storage.

[0062] FIG. 6A is a flowchart showing the procedure of user authentication processing performed by a shortcut that accesses an external storage when the user management function is enabled in the image forming apparatus.

[0063] In step S610, the OS of the image forming device executes the user management function of the image forming device. The OS of the image forming device displays a login request set by the user management function on the operation unit I / F 306. This login request varies depending on the settings of the image forming device, and may be, for example, authentication using an ID card or input of an ID set for each user. Any means is acceptable as long as the user management function can be realized. The OS of the image forming device acquires user input information from the operation unit I / F 306. It is determined whether the user input information matches a user in user management. If the users match, the process transitions to step S620. If the users do not match, i.e., if the users are not managed, the process transitions to step S611.

[0064] In step S611, the OS of the image forming apparatus displays an error message such as "The input information is incorrect" on the operation unit I / F 306. In step S620, the OS of the image forming apparatus displays the home screen 300 as shown in FIG. 3A on the operation unit I / F 306. The OS accepts the user's operation and processes the user's request. If the user selects the shortcut creation button 346, the process proceeds to step S630.

[0065] In step S630, the operation unit I / F 306 detects that the button 356 has been selected, and the CPU 101 loads the application shortcut 240 linked to the button 356 into the RAM 102 and executes it. The overall control unit 241 refers to the storage control unit 253 and checks whether or not user authentication 720 has been set. If user authentication has been set, the process proceeds to 631. If it has not been set, the process proceeds to step S640.

[0066] In step S631, the application shortcut 240 requests the UI control unit 252 to display a screen requesting user authentication, as shown in Fig. 3(D) as an example. The application shortcut 240 judges whether the decision button 353 has been selected by the UI control unit 252. If it has been pressed, the process proceeds to step S633. If it has not been pressed, the process returns to step S630.

[0067] In step S633, overall control section 241 acquires user input information from UI control section 252. Next, overall control section 241 requests authentication code matching section 242 to match the input authentication code.

[0068] The authentication code collating unit acquires a unique authentication code linked to the button 354 from the storage control unit 253. It collates the acquired authentication code with the authentication code entered by the user, and returns the collation result to the overall control unit 241. The overall control unit 241 judges the collation result, and if they match, the process transitions to step S640. If they do not match, the process transitions to step S632.

[0069] In step S632, the overall control unit 241 makes a request to the UI control unit 252 to display a message such as "The authentication code is incorrect," and then transitions to step S631 if a certain time has elapsed or if there is a new user input.

[0070] In step S640, use of the application shortcut 240 is started. The overall control unit 241 accesses the Web page designated as the start-up URL.

[0071] This is the end of the procedure for the user authentication process implemented by the shortcut that accesses the external storage when the image forming apparatus has a user management function.

[0072] Fig. 6B is a flowchart showing the procedure of user authentication processing performed by a shortcut that accesses external storage when the image forming apparatus does not have a user management function. In step S600, the OS of the image forming apparatus displays the home screen 300 as shown in Fig. 3A on the operation unit I / F 306. The OS accepts a user operation and processes the user request. If the user selects an external storage cooperation application, the process proceeds to step S630.

[0073] In step S630, the operation unit I / F 306 detects that the button 354 has been selected, and the CPU 101 loads the application shortcut 240 linked to the button 354 into the RAM 102 and executes it. The overall control unit 241 refers to the storage control unit 253 and checks whether or not the user authentication 720 has been set. If the user authentication has been set, the process proceeds to step S631. If the user authentication has not been set, the process proceeds to step S640.

[0074] In step S631, the application shortcut 240 requests the UI control unit 252 to display a screen 390 requesting user authentication, as shown in Fig. 3(D) as an example, and waits for input of authentication information. The application shortcut 240 determines whether the decision button 353 has been selected by the UI control unit 252. If it has been pressed, the process proceeds to step S633. If it has not been pressed, the process waits for user input.

[0075] In step S633, the overall control unit 241 acquires user input information from the UI control unit 252. Next, the overall control unit 241 requests the authentication code matching unit 242 to match the input authentication code. The authentication code matching unit acquires a unique authentication code linked to the application shortcut 240 from the storage control unit 253. It matches the acquired authentication code with the authentication code entered by the user, and returns the matching result to the overall control unit 241. The overall control unit 241 judges the matching result. If the judgment result shows a match, the process transitions to step S640. If the judgment result shows a mismatch, the process transitions to step S632.

[0076] In step S632, the overall control unit 241 makes a request to the UI control unit 252 to display a message such as "The authentication code is incorrect," and then transitions to step S631 if a certain time has elapsed or if there is a new user input.

[0077] In step S640, use of the application shortcut 240 having the same function as the external storage cooperative application is started. The overall control unit 241 accesses the Web page designated as the start-up URL.

[0078] This is the end of the procedure for the user authentication process performed by the shortcut that accesses the external storage when the image forming apparatus does not have a user management function.

[0079] Fig. 7(A) is a diagram showing an example of management information for shortcuts for accessing external storage stored in the storage control unit 253. Fig. 7 shows setting information for three shortcuts, but the number of shortcuts is arbitrary.

[0080] Name 710 is setting information for the display name when displayed alongside the icon on the home screen as shown in Figures 3(A) and (C). As shown in shortcut name 341 in Figure 3(B) or check box 430 in Figure 4, the user can set any character string, and if no string is specified by the user, a default character string is specified.

[0081] User authentication 720 is setting information for whether or not to add a user authentication function to a shortcut. When creating a shortcut, the user can select whether or not to add a user authentication function, as indicated by radio button 342 or check box 440. If the user selects to add an authentication function, for example, "Yes" is written in user authentication 720. If the user selects not to add an authentication function, for example, "No" is written in user authentication 720.

[0082] Identification information 750 is identification information for each shortcut. The identification information 750 is used to communicate with the image generating system 1100 when a shortcut is executed, and to obtain history information and setting information managed for each shortcut when obtaining information from the browser 1108.

[0083] The authentication code 730 is information on a unique authentication code associated with the shortcut. The user authentication 720 indicates whether or not user authentication is set, and information is set when user authentication is set. The authentication code 730 is a four-digit number as an example of the authentication code, but the number of digits is arbitrary. The authentication code 730 may be a unique authentication code associated with the shortcut, even if it is a character string or other alternative means instead of a number. The authentication code 730 may expire after a certain period of time, and the user may be prompted to reset the authentication code. For example, the resetting may be performed by displaying a pop-up message "Please reset the authentication code" on the operation unit I / F 306 while the application shortcut 240 is in use, and a new authentication code is displayed in the PIN code input area 343 in FIG. 3B. Alternatively, the new authentication code may be displayed in the area 441 on the setting web page as shown in FIG. 4.

[0084] The startup URL 740 is setting information that specifies the URL of the web page that is displayed first when the shortcut of the external storage linked application is started. As shown in the check box 450 in Fig. 4, the user can specify any URL, and if the user does not specify anything, a default URL is specified.

[0085] 7B is an example of management information of the external storage cooperative application 220. The external storage cooperative application 220 has a default start-up URL and name, does not have a user authentication status, and does not have an authentication code.

[0086] As described above, the setting information of the shortcut shown in Fig. 7 can be edited even after the shortcut is created on the setting web page as shown in Fig. 4. The authentication code 730 cannot be edited by the user. However, if user authentication 720 is changed from "no" to "yes," the unique authentication code generated by authentication code generation unit 232 is saved. Also, if a reset is performed, a new authentication code linked to the shortcut is saved.

[0087] FIG. 8 is a sequence showing a processing procedure for a series of operations for creating a shortcut to access an external storage.

[0088] In step S801, the user accesses a setting Web page as shown in Fig. 4 and sets each item. If the image forming apparatus 1101 has a server function, this setting screen is displayed by accessing a specific URL via a Web browser on a user terminal such as a PC or smartphone connected via a network line. When the user selects the decision button 470, the process proceeds to step S802.

[0089] In step S802, the setting information entered on the setting screen in step S801 is notified to the OS 210 of the image forming apparatus via the network I / F 110. In step S803, the OS 210 of the image forming apparatus receives the notification and writes the setting information to the storage 104. In step S804, the user selects button 346 on the home screen in FIG. 3(A). The operation unit I / F 306 detects that button 346 has been selected, and the CPU 101 loads the shortcut creation application 230 linked to button 346 into RAM 102 and executes it.

[0090] In step S805, the shortcut creation unit 231 requests the UI control unit 252 to display a shortcut creation form screen 370 as shown in FIG. 3(B). In step S806, the user inputs shortcut creation information. The shortcut creation unit 231 sequentially acquires user input information from the UI control unit 252. If the information entered using the radio button 342 among the input information selects "Yes", the process transitions to step S807. If "No" is selected, the process continues to sequentially acquire user input information. If the user selects the decision button 345, the process transitions to step S808.

[0091] In step S807, the shortcut creation unit 231 requests the authentication code generation unit 232 to generate an authentication code. The authentication code generation unit 232 generates a unique authentication code associated with the shortcut and returns it to the shortcut creation unit 231. The shortcut creation unit 231 requests the UI control unit 252 to display the generated authentication code. User input information is then sequentially acquired. If the user selects the decision button 345, the process proceeds to step S808.

[0092] In step S808, the shortcut creation unit 231 obtains user input information from the UI control unit, and automatically generates any missing information. For example, if there is no input in shortcut name 341, a name such as User 1 is generated and set. In step S809, the shortcut creation unit 231 saves the created shortcut information as shown in FIG. 7 in storage 104. In step S810, the shortcut creation unit 231 creates a shortcut based on the shortcut creation information. If the shortcut creation is successful, the sequence ends. If the shortcut creation fails, the process proceeds to step S811. In step S811, a request is made to the UI control unit 252 to display an error message such as "Shortcut creation failed."

[0093] This completes the sequence showing the processing steps of a series of operations for creating a shortcut to access the external storage.

[0094] Fig. 9 is a sequence showing the procedure of a process for implementing a shortcut to access external storage. In step S901, the user selects button 354 in Fig. 3C. The operation unit I / F 306 detects that button 354 has been selected, and the CPU 101 loads the application shortcut 240 linked to button 354 into RAM 102 and executes it. The overall control unit 241 refers to the storage control unit 253 and determines whether or not user authentication 720 has been set. If user authentication has been set, the process proceeds to step S902. If it has not been set, the process proceeds to step S906.

[0095] In step S902, the overall control unit 241 requests the UI control unit 252 to display a PIN code input screen 390 as shown in FIG. 3D. Then, the process proceeds to step S903. In step S903, the user inputs a PIN code according to the screen display in FIG. 3D. When the input is completed, the decision button 353 is selected. The operation unit I / F 306 detects that the button 353 has been selected, notifies the overall control unit 241 through the UI control unit 252, and the process proceeds to step S904. In step S904, the overall control unit 241 requests the authentication code matching unit 242 to match the input PIN code. The authentication code matching unit 242 refers to the storage control unit 253 and acquires a unique PIN code associated with the shortcut. It matches the acquired authentication code with the input authentication code and returns the matching result. The overall control unit 241 judges the returned result, and if the input matches, the process proceeds to step S906. If the input does not match, the process proceeds to step S905.

[0096] In step S905, since the authentication code entered by the user is incorrect, a request is made to the UI control unit 252 to display a message such as "The authentication code is incorrect." After the message is displayed and a certain period of time has elapsed, the process returns to step S902. In step S906, the external storage linking application is started. If a startup URL 740 associated with the shortcut has been set, the web page specified in the startup URL is displayed.

[0097] This completes the process of implementing a shortcut to access the external storage.

[0098] Fig. 10 is a sequence showing the procedure of processing after the external storage linked application is started. If the user authentication of the shortcut is successful, the use of the external storage linked application is started as shown in steps S640 and S906. Fig. 10 shows the details of the contents shown in steps S640 and S906. First, the configuration of Fig. 10 will be described.

[0099] As described above, the application shortcut 240 is an application executed by the CPU 101 of the image forming apparatus. As described above, the authentication server 1110 is an example of an authentication site such as OAuth. Normally, a Web content server uses a third-party authentication site to perform user authentication.

[0100] The browser 1108 is a browser that is arranged in the cloud and communicates with the image forming apparatus. If the browser cannot be arranged in the image forming apparatus, a configuration in which it is separated into the cloud and is arranged may be considered. In this configuration, the image forming apparatus is responsible for the user interface and notifies the cloud browser of user input information using a specific API (identification information 750). The cloud browser interprets the user input information and operates the browser. If rendering is performed as a result of the browser operation, the rendering result is notified to the image forming apparatus. The image forming apparatus receives the notification of the rendering result and displays it on the operation unit 112. In this way, a configuration is proposed in which the same operation can be achieved by using the cloud browser even when the browser is not arranged in the image forming apparatus. Note that personal information such as cookies when using the browser may be stored in a storage on the cloud. Therefore, if the user enables the setting to accept cookies when using the browser, SSO (Single Sign On) can be used. In the browser 1108, personal information such as cookies is identified by linking it to a user ID notified from the image forming apparatus.

[0101] A web content server is a service that allows you to store, for example, photos and documents in cloud storage.

[0102] Next, each step in Fig. 10 will be described. In step S1005, if the user authentication shown in Fig. 9 is successful, the application shortcut 240 acquires information associated with the shortcut as shown in Fig. 7 from the storage control unit 253. In addition to the start-up URL, this information includes the browser language setting, Cookie Accept Policy, and the user ID associated with the shortcut.

[0103] In step S1006, the application shortcut 240 notifies the browser 1108 of the information acquired in step S1005 together with a startup request. This information includes the startup URL acquired in step S1005, the browser's language setting, the Cookie Accept Policy, and the user ID linked to the shortcut. In step S1007, the browser 1108 accepts the startup request from the image forming apparatus and starts the browser, and performs initial settings based on the information notified from the application shortcut 240. Specifically, the browser 1108 performs language settings and Cookie Accept settings. Also, the browser 1108 refers to the cloud storage, and if Cookie information linked to the user ID is saved, it is set in the Cookie header.

[0104] If the user has passed the authentication of the Web content server 1105 in advance, the cookie information contains a token authenticated at the authentication site. The authentication site performs personal authentication for the external storage service based on this token, so being able to access the application shortcut 240 is synonymous with being able to log in to the Web content server. For this reason, when privacy is a consideration, it is necessary to more reliably identify the user who accesses the application shortcut 240.

[0105] In step S1008, browser 1108 accesses the startup URL to make a web page acquisition request to web content server 1105. At this time, it is assumed that cookie information has already been set in the header in step S1007. In step S1009, web content server 1105 performs user authentication in response to the acquisition request. A redirect is made to authentication server 1110 together with the cookie information.

[0106] In step S1010, the authentication server 1110 performs user authentication based on the Coolie information. In step S1011, the authentication server 1110 returns the authentication result of step S1010 to the Web content server 1105.

[0107] In step S1012, if the authentication result is true, Web content server 1105 returns regular Web page information to browser 1108. If the authentication result is false, information indicating that authentication has failed is returned.

[0108] In step S1013, the browser 1108 performs rendering based on the Web page information returned in step S1012. In step S1014, the browser 1108 returns the rendering result to the application shortcut 240. In step S1015, the application shortcut 240 displays the rendering result received in step S1014 on the operation unit 112.

[0109] This completes the procedure for processing after the external storage cooperation application is started.

[0110] (Other embodiments) Although various examples and embodiments of the present invention have been shown and described, the spirit and scope of the present invention is not limited to the specific descriptions within this specification.

[0111] The present invention can also be realized by a process in which a program for implementing one or more of the functions of the above-described embodiments is supplied to a system or device via a network or a storage medium, and one or more processors in a computer of the system or device read and execute the program. The present invention can also be realized by a circuit (e.g., ASIC) that implements one or more of the functions. [Explanation of symbols]

[0112] 101 CPU 1101 Image Generation System 1101 Image forming device

Claims

1. An image forming apparatus comprising an operating unit and a server function, The server function provides a means for providing a settings screen to the web browser of a user terminal for specifying the parameters necessary to use the cloud storage service from the image forming apparatus, The parameters specified via the settings screen include a display name on the image forming apparatus and a means for storing code data necessary for the image forming apparatus to use the cloud storage service, After receiving a login operation from a user, the operation unit has means for displaying an object corresponding to the display name, Based on user operations on the object, the operation unit is provided with means for displaying an input screen for receiving user input, When the user input received via the input screen matches the code data, means for accessing the cloud storage service, An image forming apparatus characterized by having the following features.

2. In addition to the code data, URL (Uniform Resource Locator) information is also stored as the parameter specified via the settings screen, The image forming apparatus according to claim 1, characterized in that when the user input received via the input screen matches the code data, access to the cloud storage service is performed using the URL information.

3. The operation unit includes means for displaying another object for displaying another settings screen for specifying parameters necessary to use the cloud storage service from the image forming apparatus, Based on user operations on the aforementioned other object, the operation unit is provided with means for displaying the aforementioned other settings screen, The image forming apparatus according to claim 1, further comprising means for storing, as parameters specified via the aforementioned separate settings screen, a display name on the image forming apparatus and code data necessary for the image forming apparatus to use the cloud storage service.

4. The image forming apparatus according to claim 1, further comprising a scanner.

5. A method in an image forming apparatus comprising an operating unit and a server function, The steps include providing the user terminal's web browser with a settings screen via the server function for specifying the parameters necessary to use the cloud storage service from the image forming apparatus, The steps include storing the display name on the image forming apparatus and the code data necessary for the image forming apparatus to use the cloud storage service as parameters specified via the settings screen, After receiving a login operation from the user, the operation unit displays an object corresponding to the display name, Based on user operations on the object, the operation unit displays an input screen for receiving user input. The steps include: accessing the cloud storage service when the user input received via the input screen matches the code data; A method characterized by having the following:

Images