Information processing device, control method thereof, and program

Abstract

To solve a problem that when a plurality of access tokens are updated at the time when each of the access tokens expires, an operation time in power saving mode is shortened.SOLUTION: An information processing device having a power saving function of transiting from a normal mode to a power saving mode for consuming less power when a certain condition is satisfied acquires an access token and its expiration date from an authorization server. The expiration dates of the acquired access tokens are stored in association with the access tokens. When the expiration date of at least one of the stored acquired access tokens has been reached, if the present mode is the power saving mode, the power saving mode is returned to the normal mode, and at least some of the acquired accessed tokens are updated.SELECTED DRAWING: Figure 12

Description

[Technical field]

[0001] The present invention relates to an information processing apparatus and a control method and program thereof, and more particularly to improving the power saving operation time of an image processing apparatus having functions corresponding to a plurality of authorized services. [Background technology]

[0002] In recent years, there has been an increase in the use of cloud storage servers and mail servers as destinations for images scanned by image processing devices. Access to such destinations is not based on authentication using a user name and password, but on an access token issued based on authorization of authority, such as OAuth2.0 defined in RFC (Request For Comments) 6749.

[0003] An access token has an expiration date, and a new access token can be obtained by making a request to the authorization server using a refresh token. As an authority delegation system using a refresh token, there is known an authority delegation system that has improved security by invalidating a leaked refresh token without changing the client ID or secret (Patent Document 1). [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2017-27459 A Summary of the Invention [Problem to be solved by the invention]

[0005] When multiple functions each support an authorization service, the access tokens used by each of the multiple functions must be updated before the expiration date. If the update occurs while the device is operating in power-saving mode, the device must return to normal mode before the update process can be performed. Therefore, in a device that uses multiple access tokens, if each access token is updated when it expires, the device must return to normal mode each time, shortening the operating time in power-saving mode.

[0006] The present invention has been made in consideration of the above-mentioned conventional examples, and has an object to prevent the operation period in power saving mode from being shortened due to updating of access tokens even when multiple access tokens are used. [Means for solving the problem]

[0007] In order to achieve the above object, the present invention has the following configuration. That is, one aspect of the present invention is an information processing apparatus having a power saving function that transitions from a normal mode to a power saving mode in which power consumption is reduced when a predetermined condition is satisfied, A communication means for communicating with the authorization server; and a control means, The control means Obtaining an access token and its expiration date from the authorization server; The expiration date of the obtained access token is stored in association with the access token; When the expiration date of at least one of the acquired access tokens that are stored has been reached, if the power saving mode is in effect, the power saving mode is restored to the normal mode and at least some of the acquired access tokens are updated. The present invention provides an information processing device. Effect of the Invention

[0008] According to the present invention, it is possible to suppress a reduction in the operating time in the power saving mode, and the power saving effect is not reduced. [Brief description of the drawings]

[0009] [Figure 1] System configuration diagram according to the present invention [Diagram 2] Internal configuration diagram of the MFP controller [Diagram 3] Internal configuration diagram of the controller of the authorization server / email server / storage server [Figure 4] Internal configuration diagram of the controller part of the client terminal [Diagram 5] Block diagram of the software running in the MFP controller [Figure 6] Sequence diagram of how the MFP obtains an access token from the authorization server [Figure 7] Sequence diagram of how the MFP updates the access token on the authorization server [Figure 8] An example of an authorization screen [Figure 9] FIG. 13 shows an example of a token information management table of the MFP. [Figure 10] Flowchart for MFP obtaining an access token from an authorization server [Figure 11] Flowchart for MFP to set token update timer [Figure 12] Flowchart for MFP token renewal [Figure 13] MFP state transition diagram [Figure 14] MFP Time Chart [Figure 15] MFP Time Chart [Figure 16] Figure showing an example of the MFP OAuth setting screen [Figure 17] Figure showing an example of the MFP device authorization result screen [Figure 18] MFP Time Chart [Figure 19] FIG. 13 shows an example of a token information management table of the MFP. [Figure 20] A diagram showing an example of a user code input screen [Figure 21] An example of an authentication screen [Figure 22] Flowchart for MFP obtaining an access token from an authorization server [Figure 23] Flowchart for MFP token renewal DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] [Embodiment 1] Hereinafter, the embodiments will be described in detail with reference to the attached drawings. Note that the following embodiments do not limit the invention according to the claims. Although the embodiments describe a number of features, not all of these features are essential to the invention, and the features may be combined in any manner. Furthermore, in the attached drawings, the same reference numbers are used for the same or similar configurations, and duplicated descriptions are omitted.

[0011] In the embodiment of the present invention, an example of a service in which an image processing device, a client terminal such as a personal computer (PC) or a smartphone, an authorization server, and a storage server cooperate with each other will be described.

[0012] System Configuration FIG. 1 shows an example of a system configuration of this embodiment. The system in this embodiment includes a multi-function peripheral (MFP) 100, an authorization server 110, an e-mail server 120, an authorization server 130, a storage server 140, and a client terminal 150. The MFP 100 is also called an image processing device or an image forming device, focusing on the function of handling images. It is also called an information processing device because it has information processing capabilities. The MFP 100, the authorization server 110, the e-mail server 120, the authorization server 130, the storage server 140, and the client terminal 150 are connected via a network 160. The network 160 may be either a wired connection or a wireless connection, and may be either the Internet or an intranet. For example, any form may be used as long as data can be exchanged, even if it is a wireless connection, Wi-Fi, or a data communication line. The MFP 100, the authorization server 110, the e-mail server 120, the authorization server 130, the storage server 140, and the client terminal 150 do not all need to correspond to the same network type. For example, MFP 100, authorization server 110, e-mail server 120, authorization server 130, and storage server 140 may be connected via wires over the Internet, and client terminal 150 may be connected via a data communication line.

[0013] The MFP 100 is an image processing device that reads images with a scanner and prints images with a printer. The MFP 100 has an operation unit 102 that inputs and outputs data to and from a user. The MFP 100 has a printer unit 103 that outputs electronic data to a paper medium. The MFP 100 has a scanner unit 104 that reads paper media and converts the paper medium into electronic data. The operation unit 102, the printer unit 103, and the scanner unit 104 are connected to a controller unit 101, and the MFP 100 functions as a multifunction device according to the control of the controller unit 101. The MFP 100 has an MFP user DB 105 that stores information about MFP users for authentication when using the MFP 100. The image storage 106 includes a temporary area in which temporary image data such as data used by the printer unit 103 and data converted by the scanner unit 104 is stored, and a long-term storage area in which image data that needs to be stored for a longer period of time is stored. The MFP 100 also has a power saving function that transitions to a power saving mode when a certain condition is met, such as the passage of a predetermined time without any operation from a normal operating state (normal mode).

[0014] The authorization server 110 includes an authorization service 111. The authorization service 111 operates, for example, in accordance with the OAuth2.0 mechanism defined in RFC6749. The authorization server 130 includes an authorization service 131. The authorization service 131 operates, for example, in accordance with the OAuth2.0 mechanism defined in RFC6749. The authorization servers 110 and 130 are configured using known technology, and detailed descriptions thereof will be omitted.

[0015] E-mail server 120 is configured to include an e-mail service 121 and a mailbox 122. E-mail service 121 receives instructions from MFP 100 and sends e-mail in accordance with SMTP (Simple Mail Transfer Protocol) defined in RFC5321. Also, receives instructions from MFP 100 and retrieves e-mail stored in mailbox 122. The sending and retrieval of e-mail may be in accordance with POP (Post Office Protocol) defined in RFC5034 or IMAP (Internet Message Access Protocol) defined in RFC3501.

[0016] E-mail server 120 receives the access token from MFP 100, inquires of authorization server 110 as to whether the access token is valid, and if it is not valid, denies access. E-mail server 120 is configured using known technology, and therefore detailed description thereof will be omitted.

[0017] The storage server 140 includes a storage service 141 and a storage 142. Upon receiving an instruction from the MFP 100, the storage server 140 performs operations such as obtaining files stored in the storage 142, returning a directory list, and saving files in the storage 142.

[0018] The storage server 140 receives the access token from the MFP 100, inquires of the authorization server 130 as to whether the access token is valid, and if it is not valid, denies access. The storage server 140 is configured using known technology, and therefore a detailed description thereof will be omitted.

[0019] The authorization server 110 performs authorization for the email server 120 , and the authorization server 130 performs authorization for the storage server 140 .

[0020] The client terminal 150 includes a web browser 151. Although there is one client terminal 150 in FIG. 1, there may be multiple client terminals. Examples of the client terminal include a smartphone, a tablet, and a PC. Note that FIG. 1 describes only the configuration for explaining the present embodiment, and it goes without saying that other configurations may be included, and the connection between the components is not limited to this.

[0021] ●Configuration of the MFP controller FIG. 2 is a block diagram showing details of the controller unit 101 of the MFP. The CPU 201 performs main arithmetic processing within the controller unit 101. The CPU 201 is connected to a DRAM 202 via a bus. The DRAM 202 is used by the CPU 201 as a working memory for temporarily storing programs representing arithmetic instructions during the CPU 201's arithmetic process and data to be processed. The CPU 201 is connected to an I / O controller 203 via a bus. The I / O controller 203 performs input / output to various devices according to instructions from the CPU 201. A SATA (Serial Advanced Technology Attachment) I / F 205 is connected to the I / O controller 203, and a Flash ROM 210 is connected to the SATA I / F 205. The CPU 201 uses the Flash ROM 210 to permanently store programs for implementing the functions of the MFP and document files. Instead of a Flash ROM, a large-capacity storage device such as an HDD may be connected.

[0022] A network I / F 204 is connected to the I / O controller 203. A wired LAN device and a wireless LAN device are connected to the network I / F 204. The CPU 201 realizes communication on the network 150 by controlling the wired LAN device and the wireless LAN device via the network I / F 204. A panel I / F 206 is connected to the I / O controller 203, and the CPU 201 realizes input / output for the user to the operation unit 102 via the panel I / F 206. A printer I / F 207 is connected to the I / O controller 203, and the CPU 201 realizes output processing for paper media using the printer unit 103 via the printer I / F 207.

[0023] The CPU 201 is electrically connected to a timer 211 and a power supply unit 212. The power supply unit 212 has a power switch, and when the power switch is ON, it supplies power to the controller, and when the power switch is OFF, it stops supplying power to the controller. However, even when the power switch is ON, when operating in a power saving mode, it supplies power only to specific devices, reducing the amount of power consumed by the MFP 100. The timer 211 measures a set time, and notifies the CPU 201 that the time is up when the set time has elapsed.

[0024] The MFP 100 has various applications for utilizing the functions of the MFP. Examples include a copy function, a transmission function, a fax function, and a box function. For example, when performing a copy function, the CPU 201 loads program data from the Flash ROM 210 into the DRAM 202 via the SATA I / F 205. The CPU 201 detects a copy instruction from the user to the operation unit 102 via the panel I / F 206 according to the program loaded into the DRAM 202. When the CPU 201 detects a copy instruction, the CPU 201 receives an original as electronic data (image data) from the scanner unit 104 via the scanner I / F 208 and stores it in the DRAM 202. The CPU 201 performs color conversion processing suitable for output on the image data stored in the DRAM 202. The CPU 201 transfers the image data stored in the DRAM 202 to the printer unit 103 via the printer I / F 207, and performs output processing on a paper medium.

[0025] The transmission function is the same as the copy function described above in terms of the process in which the CPU 201 detects an instruction for the function from the user. The transmission instruction includes a transmission protocol, destination specification, image format, etc. from the user. The transmission protocol is SMTP, SMB, WebDAV, FTP, etc. The destination specification is, for example, an email address, Universal Naming Convention (UNC), Unified Resource Identifier (URI), etc. The image format is JPEG, PDF, etc.

[0026] When the CPU 201 detects a transmission instruction, it receives the document as electronic data from the scanner unit 104 via the scanner I / F 208 and stores it in the DRAM 202. The CPU 201 performs image format conversion and other operations specified by the user on the image data stored in the DRAM 202. The CPU 201 transfers the image data stored in the DRAM 202 to the destination via the network I / F 204 using a protocol specified by the user. If the transmission protocol is email, the email server 120 may be specified as the SMTP server and transmission may be performed using an authorization mechanism using an access token. If the transmission protocol is SMB, the storage server 140 may be specified as the destination and transmission may be performed using an authorization mechanism using an access token.

[0027] The fax function is the same as the copy function described above in terms of the process in which CPU 201 detects an instruction for the function from the user. When CPU 201 detects a fax instruction, it receives the document as electronic data from scanner unit 104 via scanner I / F 208 and stores it in DRAM 202. CPU 201 performs image format conversion for fax on the image data stored in DRAM 202. CPU 201 transfers the image data stored in DRAM 202 to a fax telephone number specified in the fax instruction via a telephone line network (not shown) to which fax I / F 209 is connected. Fax via a telephone line is one example, and it may also be an Internet fax.

[0028] The box function is a function for saving scanned images in a storage area inside the MFP 100 or in a memory medium connected to the MFP 100. The box function also includes a function for making images saved in the MFP 100 available to an external PC (not shown) or other MFPs by making the MFP 100 a file server. The box function is the same as the copy function described above in terms of the process in which the CPU 201 detects an instruction for the function from the user. The box save instruction includes a save destination designation and an image format from the user. The save destination is a path to the internal storage of the MFP 100 or a memory medium connected to the MFP 100. The image format is JPEG, PDF, or the like. When the CPU 201 detects a box save instruction, it receives the document as electronic data from the scanner unit 104 via the scanner I / F 208 and stores it in the DRAM 202. The CPU 201 performs image format conversion and other operations designated by the user on the image data stored in the DRAM 202. The CPU 201 transfers the image data stored in the DRAM 202 via the SATA I / F 205 to a storage destination designated by the user, such as a Flash ROM 211 inside the MFP 100 or a memory medium (not shown).

[0029] In the fax function, received images may not be printed but may be converted into a format viewable on a PC or the like and stored in a box. In addition, as a box function, MFP 100 becomes a file server such as an SMB server and makes the contents of Flash ROM 211 public. In the box function, CPU 201 detects a box access instruction from the outside via network I / F 204. The box access instruction includes an image file path to be accessed, etc. CPU 201 transfers image data stored in Flash ROM 210 corresponding to the specified image file path to the source of the box access instruction via network I / F 204.

[0030] Note that the above is an example of the functions of MFP 100, and other functions may also be provided.

[0031] ●Server hardware 3 is a block diagram showing details of the authorization server 110, the e-mail server 120, the authorization server 130, and the storage server 140 according to this embodiment. In this embodiment, for simplicity of explanation, the authorization server 110, the e-mail server 120, the authorization server 130, and the storage server 140 are shown in the same block diagram, but they may have different configurations. The CPU 301 is connected to the DRAM 302 via a bus. The DRAM 302 is used by the CPU 301 as a working memory for temporarily storing program data representing calculation instructions and data to be processed during the calculation process by the CPU 301.

[0032] The CPU 301 is connected to an I / O controller 303 via a bus. A network I / F 304 is connected to the I / O controller 303. A wired LAN device and a wireless LAN device are connected to the network I / F 304. The CPU 301 realizes communication on the network 150 by controlling the wired LAN device and the wireless LAN device via the network I / F 304. The I / O controller 303 performs input and output to various devices according to instructions from the CPU 301. A Serial Advanced Technology Attachment (SATA) I / F 305 is connected to the I / O controller 303, and a HDD 306 is connected to the SATA I / F 305.

[0033] The CPU 301 uses the HDD 306 to permanently store programs and setting values ​​such as the authorization service 111 in the case of the authorization server 110, and the email service 121 and mailbox 122 in the case of the email server 120. In this manner, the hardware such as the CPU 301, the DRAM 302, and the HDD 306 constitute a so-called computer. In this embodiment, for the sake of explanation, a case is illustrated in which one CPU 301 executes each process shown in the flowcharts described later using one memory (DRAM 302), but other modes may be used. For example, each process shown in the flowcharts described later can be executed by cooperating multiple processors, RAMs, ROMs, and storages. Each process can also be executed using multiple server computers.

[0034] ● Client terminal hardware FIG. 4 is a block diagram showing details of the client terminal 150 according to this embodiment. The CPU 401 is connected to the DRAM 402 via a bus. The DRAM 402 is used by the CPU 401 as a working memory for temporarily arranging program data representing arithmetic instructions and data to be processed during the arithmetic process of the CPU 401. The CPU 401 is connected to the I / O controller 403 via a bus. The I / O controller 403 is connected to a network I / F 404. A wired LAN device, a wireless LAN device, or a data communication device is connected to the network I / F 404. The CPU 401 realizes communication on the network 150 by controlling the wired LAN device, the wireless LAN device, and the data communication device via the network I / F 404. The I / O controller 403 performs input / output to and from various devices according to instructions from the CPU 401. The 1 / 0 controller 403 is connected to a SATA I / F 405, to which a Flash ROM 410 is connected. Instead of a Flash ROM, a large-capacity storage device such as an HDD may be connected.

[0035] The CPU 401 uses the HDD 410 to permanently store setting values ​​for programs such as the indwelling scan application 131. A panel I / F 406 is connected to the I / O controller 403, and the CPU 401 realizes input and output for a user to the operation unit 102 of the connected client terminal 130 via the panel I / F 406. An example of the operation unit 102 is a touch panel. A display device such as a display for displaying and an input device such as a keyboard for inputting may be connected to the panel I / F 406.

[0036] ●MFP software 5 is a block diagram showing the configuration of software executed by the controller unit 101 of the MFP 100. All software executed by the controller unit 101 is executed after the CPU 201 reads a program stored in the Flash ROM 211 into the DRAM 202.

[0037] The operation control unit 501 displays a screen image for the user on the operation unit 102, detects a user operation, and executes processing linked to screen components such as buttons displayed on the screen. The operation control unit 501 also receives a setting screen and an access request from the client terminal 150 via a Web server unit provided in the network control unit 507. In response to the received setting screen and access request, the operation control unit 501 outputs an HTML page for setting setting values ​​for the operation of the MFP 100, and executes processing linked to the input to the HTML page.

[0038] A data storage unit 502 stores requests from other control units in the Flash ROM 211 and reads them out. A job control unit 503 controls job execution according to instructions from other control units. An image processing unit 504 processes image data into a format suitable for the purpose according to instructions from the job control unit 503. A print processing unit 505 prints and outputs an image on a paper medium via a printer I / F 207 according to instructions from the job control unit 503. A read control unit 506 reads a specified original via a scanner I / F 208 according to instructions from the job control unit 503.

[0039] A network control unit 507 inputs and outputs data from a LAN or a public line network via the network I / F 204 in accordance with instructions from each control unit. Also, the data storage unit 502 allows data stored in the Flash ROM 210 to be accessed from an external device via the network control unit 507. An example of data stored in the Flash ROM 210 is an image such as a PDF or JPEG.

[0040] The login control unit 509 compares the user information input from the operation control unit 501 or the network control unit 507 with the user information stored in the MFP user DB 105, and if there is a match, allows the user who input the user information to use the MFP 100.

[0041] The power saving control unit 510 performs control to transition to the power saving mode when a transition condition to the power saving mode is satisfied during operation in the normal mode, and to transition to the normal mode when a transition condition to the normal mode is satisfied during operation in the power saving mode. The normal mode is a mode in which the power is turned on and power is supplied to each unit of the MFP 100. The power saving mode is a mode in which the power is turned on but power is not supplied to specific units. Units to which power is not supplied include, for example, the printer I / F 207 and the printer unit 103, the scanner I / F 208 and the scanner unit 104, etc. In addition to this, power supply to the panel I / F 206, the operation unit 102, the network I / F 204, or some of them may be stopped.

[0042] The token processing unit 511 accesses the authorization server 110 and the authorization server 130 to obtain an access token and a refresh token, and controls updating of the access token using the refresh token.

[0043] A timer control unit 512 controls the timer 211 to execute a designated process at a designated time.

[0044] ● Procedure for obtaining an access token Fig. 6 is a sequence diagram when client terminal 150 accesses the OAuth setting screen of MFP 100 and MFP 100 acquires an access token from authorization server 110. The sequence of Fig. 6 shows an example of acquiring an access token for accessing email server 120, for example. An access token is also acquired for storage server 140 in a similar procedure to that of Fig. 6. Furthermore, when multiple applications installed on MFP 100 access one server, each application becomes a client. In such a case, each application may acquire an access token in the manner of Fig. 6.

[0045] In step 601, the MFP 100 is accessed by the web browser of the client terminal 150, an OAuth authorization setting screen is displayed, and OAuth authorization is set in the MFP 100. An example of the OAuth authorization setting screen is shown in Fig. 16. Note that the operation in step 601 may be performed not by the client terminal 150 but by an operation transmitted through the operation unit 102 of the MFP 100.

[0046] 16, a selection unit 1601 is a selection unit for selecting a service to be used. As a choice, one can be selected from the authorized services supported by the MFP 100. Here, it is assumed that AAA Company's e-mail is selected.

[0047] The device authorization endpoint 1602 allows the input of the URL of the device authorization endpoint of the selected service. The URL of the device authorization endpoint may be uniquely determined by the selection unit 1601 for the service to be used, but may also differ for the same service due to differences in the service provision area or tenant. For this reason, an editable text input field is provided. Here, it is assumed that "https: / / AAA.com / device" is input. It is also assumed that the address of the authorization server 1 is "AAA.com".

[0048] A close button 1603 is a button for closing the screen, and pressing this button closes the screen. Pressing an OK button 1604 instructs execution of authorization processing based on the information input to the service selection unit 1601 and the device authorization endpoint 1602.

[0049] In step 602 , the MFP 100 transmits a device authorization request to the device authorization endpoint of the authorization server 110 specified by the device authorization endpoint 1602 .

[0050] In step 603, the authorization server 110 transmits a device authorization response to the MFP 100. Here, the URL of an end point for performing user code authorization and the user code are transmitted.

[0051] In step 604, the MFP 100 creates a device authorization result screen based on the device authorization response received in step 603, and transmits it to the client terminal 150 as a response to 601. An example of the device authorization result screen is shown in FIG. 17. The approval page jump button 1701 is linked to the URL of the endpoint for user code authorization received in step 603, and pressing this button causes a jump to the linked URL. The user code display unit 1702 displays the user code received in step 603. Here, as an example, it is assumed that "1234567" is displayed. Pressing the close button 1703 closes the screen in FIG. 17. In step 607, in response to the user pressing the button 1701, a user code input screen request is transmitted from the client terminal 150 to the authorization server 110.

[0052] In step 608, the authorization server 110 transmits a user code input screen to the client terminal 150 in response to the user code input screen request. An example of the user code input screen is shown in FIG. 20. The user code input section 2001 is an input field for inputting the user code displayed in the user code display section 1702. Pressing the Next button 2002 proceeds to the next step. When a user code character string is input in the user code input field 2001 and the Next button 2002 is pressed, in step 609 the client terminal 150 transmits the input user code to the authorization server 110.

[0053] If the received user code matches the user code displayed in the user code display section 1702, in step 610, the authorization server 110 transmits an authentication screen to the client terminal 150. FIG. 21 shows an example of the authentication screen. In FIG. 21, the account of the service to be authorized is input in the user name input section 2101. Here, an example in which user_a@AAA.com is input is shown. When the next button 2102 is pressed, a screen is displayed requesting the input of user information, for example, a password, which is the next step. Although an example of the screen is not shown here, it is sufficient that the screen allows the user to input the password and proceed to the next process. Alternatively, the user information and the password may be input on one screen. In step 611, the user information, for example, the input account character string and password character string, is transmitted from the client terminal 150 to the authorization server 110.

[0054] In step 612, the authorization server 110 transmits an authorization screen to the client terminal 150. An example of the authorization screen is shown in Fig. 8. A check box 2201 is a check box that indicates whether or not to permit access to the item for which authorization is requested. Checking this box indicates that access is permitted. An example in which the box is checked is shown here.

[0055] A request list display section 2202 is a display section of a list of items for which authorization has been requested. Here, it shows that the rights related to "access to read and write emails," "access to send emails from your mailbox," "access management to data to which access has been granted," and "read profile" are being requested.

[0056] Pressing the reject button 2203 indicates that the request is not permitted. Pressing this button causes the client terminal 150 to transmit a reject response to the authorization server 110. The transmission of the reject response is not shown.

[0057] Pressing the allow button 2204 indicates that the request is permitted. In other words, the user authorizes the transfer of user authority to the client MFP 1000 (or its application) by pressing the allow button 2204. When the allow button 2204 is pressed, in step 613, a permission response is transmitted from the client terminal 150 to the authorization server 110.

[0058] On the other hand, after transmitting the device authorization result screen to the client terminal 150 in step 604, the MFP 100 polls the token endpoint of the authorization server 110 to obtain a token.

[0059] If the corresponding token has not been issued, in step 606, the authorization server 110 transmits a token response (pending) to the MFP 100. The token response (pending) is a response when the requested token does not exist. The authorization server 110 transmits a token response (pending) in response to the token request until it receives the permission response in step 613.

[0060] If the requested token has already been issued, in step 614, the authorization server 110 transmits a token response (success) to the MFP 100. When the authorization server 110 receives a token request after receiving the permission response in step 613, it transmits a token response (success). The token response (success) includes the access token, the expiration date of the access token, the refresh token, and the expiration date of the refresh token.

[0061] The MFP 100 (or an application installed therein) that has acquired the access token can use the access token to access a destination that requires authentication. In the example of Fig. 6, the MFP 100 can access the e-mail server 120 and send and receive e-mails.

[0062] - Token acquisition process by MFP Fig. 10 is a flowchart for explaining the token acquisition process executed by MFP 100 in the sequence of Fig. 6. All the processes in this flowchart are realized by CPU 201 executing the program of token processing unit 511 of MFP 100. This flowchart starts when MFP 100 receives an OAuth authorization setting request from client terminal 150 to MFP 100.

[0063] In S1001, a device authorization request is sent to the authorization server 110. This step is similar to step 602 in Fig. 6, so a detailed description will be omitted. In S1002, a device authorization response is received from the authorization server 110. This step is similar to step 603 in Fig. 6, so a detailed description will be omitted. In S1003, a device authorization result screen is sent to the client terminal 150. This step is similar to step 604 in Fig. 6, so a detailed description will be omitted.

[0064] In S1004, a token request is transmitted to the authorization server 110. This step is similar to step 605 in Fig. 6, so a detailed description will be omitted. In S1005, a token response is received from the authorization server 110.

[0065] In S1006, it is determined whether the result of the received token response is successful or not, and if successful, proceed to S1007, otherwise proceed to S1008. The result of the token response is successful when a "token response (successful)" is received in step 614.

[0066] In S1007, a token storage process is performed. Here, the access token, the expiration date of the access token, the refresh token, the expiration date of the refresh token, and the like acquired from the authorization server 110 are stored as one record of token management information in the Flash ROM 210. The token management information 900 is information having a structure as explained in Fig. 9. One line in the figure is information for one record.

[0067] In FIG. 9, each record includes an access token 901 , an access token expiration date 902 , a refresh token 903 , a refresh token expiration date 904 , a client ID 905 , and a service used 906 .

[0068] The client ID 905 is an identifier or identification information issued by the service provider to a client, for example, an application of the MFP 100. If the expiration date 902 is received together with the access token, it may be stored. If the expiration date is received together with the access token, the date and time when the validity date and time have elapsed from the current date and time may be stored as the expiration date.

[0069] The service to be used 906 is the service to be used selected in the service to be used 1601 in Fig. 16. Here, an example is shown in which the service to be used 906 holds a record of an email service from AAA Inc. and a record of a storage service from BBB Inc. When registering a token, if there is an identical token for the service to be used, it is overwritten, and if there is no identical token, a new token is saved.

[0070] In S1008, a token update timer setting process is performed, which will be described with reference to FIG.

[0071] If the token acquisition is unsuccessful, in S1009, it is determined whether the token response result is pending, and if it is pending, the process proceeds to S1004, and if not, the process proceeds to S1010.

[0072] In S1010, a screen is created to inform the client terminal 150 that authorization has failed due to an error, and is sent to the client terminal 150.

[0073] The procedure in FIG. 10 illustrates an example in which the MFP 100 acquires an access token from the authorization server 110 based on the device code flow, but the access token may be acquired based on another authorization flow.

[0074] In addition, although an example in which the authorization server is authorization server 110 has been described, if BBB Company's storage service is selected in the service selection section 1601 of the OAuth setting screen, similar processing is performed with authorization server 120, which is responsible for authorization related to storage server 140.

[0075] - Token update timer setting process by MFP 11 is a flowchart for explaining the token update timer setting process in S1008. All the processes in this flowchart are realized by the CPU 201 executing the program of the token processing unit 511 of the MFP 100.

[0076] In S1101, a search is performed for the access token with the shortest expiration date among the records held in the token management information 900. In the example of Fig. 9, the earliest expiration date is "2022 / 12 / 15 13:20:00" for access token 1111aaaa. Since the earliest expiration date means the shortest remaining validity period, the one with the shortest expiration date may be referred to as the shortest here.

[0077] In S1102, a timer setting for starting the token update process is performed. The timer control unit 512 is set to execute the token update process at the earliest expiration date, for example, "2022 / 12 / 15 13:20:00", among the records stored in the token management information 900. In addition, the time from the current time to the start time of the next token update process is stored in the Flash ROM 210 as an execution timer interval. For example, if the current time is "2022 / 12 / 15 13:00:00", the execution timer interval will be 20 minutes.

[0078] As described above, the token update timer is reset every time a token is acquired. As a result, the earliest token update time and the time until that time are set in the timer among the update times of the acquired valid tokens. Note that it is possible to set only one of the timers.

[0079] ● Token renewal FIG. 7 is a sequence diagram illustrating a sequence of a token update between the MFP 100 and the authorization server 110. As shown in FIG.

[0080] In step 701, the MFP 100 transmits a token update request to the token endpoint of the authorization server 110. The token update request includes at least the refresh token 903 and the client ID 905 associated with the access token to be updated.

[0081] In step 702, MFP 100 receives a token update response from authorization server 110. The token update response includes an access token, an expiration date of the access token, a refresh token, and an expiration date of the refresh token.

[0082] Fig. 12 is a flowchart explaining the token update process executed by the MFP 100. All the processes in this flowchart are realized by the CPU 201 executing the program of the token processing unit 511 of the MFP 100. The process in Fig. 12 starts when the token update timer times out (expires). In S1201, a record index for extracting a record from the token management information 900 is initialized. The initial value may be, for example, 0.

[0083] In S1202, one record indicated by the index is extracted from the token management information 900.

[0084] In S1203, a token update request is sent to the authorization server. The destination authorization server here is the authorization server 110 if the service being used 906 is the AAA company's email service, and is the authorization server 130 if the service being used is the BBB company's storage service. This process corresponds to step 701 in Fig. 7. The token update request includes a refresh token and a client ID for the access token to be updated.

[0085] In S1204, a token update response is received from the authorization server. This corresponds to the processing in step 702 in Fig. 7. In S1205, it is determined whether the result of the token reception response is successful or not, and if successful, the process proceeds to S1206, and if not, the process proceeds to S1210.

[0086] In S1206, the access token, the expiration date of the access token, the refresh token, and the expiration date of the refresh token included in the response received in S1204 are saved in the token management information 900. Here, the record extracted in S1202 is overwritten with this received information and saved.

[0087] In S1207, the index for retrieving records from the token management information 900 is updated so that the next record can be retrieved. The index only needs to focus on all stored records once, so it may be updated, for example, by adding 1. In S1208, it is determined whether the processed record is the last record, and if it is the last record, the process proceeds to S1209, and if not, the process proceeds to S1202.

[0088] S1209 is the token update timer setting process, which is the process explained in the flowchart of Fig. 11. When the process ends, this flowchart ends.

[0089] On the other hand, if it is determined in S1205 that the process was not successful, in S1210, the occurrence of an error is stored as a processing record in the Flash ROM 210. Based on this record, an output may be issued to inform the operator of the error.

[0090] As described above, when the token update timer expires, all access tokens that are valid at that time are updated. In other words, when the expiration date of at least one of the acquired valid access tokens is reached, all acquired valid access tokens are updated. This allows tokens to be updated collectively (all at once) at one time. This makes it possible to update access tokens without causing them to expire, while suppressing (or preventing) the occurrence of a cascade of update processes. This reduces the opportunities for operation in power-saving mode to stop due to token updates, and prevents shortening of the operating time in power-saving mode.

[0091] Note that when a token is updated, the token update timer is reset each time. As a result, the earliest token update time and the time until that time are set in the timer among the update times of the valid tokens that have already been obtained.

[0092] ●Power saving control Here, the power saving control will be described. Fig. 13 is a state transition diagram explaining the operating state of the MFP 100. The MFP 100 has a power OFF state (power off state) 1301, a normal mode 1302, and a power saving mode 1303, and takes one of these states. When the power is not on, it is in the power OFF state 1301. The normal mode 1302 is a state in which power is supplied to devices provided in the MFP 100. In the power saving mode 1303, power supply to the printer unit 103 and the scanner unit 104 is stopped, and power is supplied only to the operation unit 102 and part of the controller unit 101. In the power saving mode, power is supplied only to limited parts in the MFP 100, so that the amount of power consumption can be significantly reduced compared to the normal mode.

[0093] When the power switch (SW) provided in the power supply unit 212 is turned ON in the power OFF state 1301, the mode transitions to the normal mode 1302 (1304).

[0094] In the normal mode 1302, when the power switch provided in the power supply unit 212 is turned off, a transition is made to the power OFF state 1301 (1305).

[0095] In the normal mode 1302, when a power saving mode transition condition is satisfied, a transition to the power saving mode 1303 occurs (1307). Here, the power saving mode transition condition may be a certain amount of time having elapsed since the last operation of the operation unit 102, or a certain period of time having elapsed since printing was completed by the printer unit 103, or the like. Other examples include a certain amount of time having elapsed since scanning was completed by the scanner unit 104, a certain amount of time having elapsed since a token update process was completed, or a certain amount of time having elapsed since communication via the network I / F 204 was completed. It may also be that a transition to the power saving mode is instructed by the operation unit 102.

[0096] In the power saving mode 1303, when the power switch provided in the power supply unit 212 is turned off, a transition is made (1306) to the power OFF state 1301. In the power saving mode 1303, when the normal mode transition condition is met, a transition is made to the normal mode (1308).

[0097] Here, the conditions for transitioning to the normal mode include operating the operation unit 102, and accessing a function made public by the MFP 100 via the network, such as a print request, from the client terminal 150 via the network I / F 204. Further conditions include reaching the execution time of a process set in the timer control unit 512. The process that starts at the time set in the timer control unit 512 includes the token update process of FIG.

[0098] Also, the registration of the process to be executed when the power saving mode is changed to the normal mode is accepted. If the process is registered, the registered process is executed when the power saving mode 1303 is changed to the normal mode 1302 (1308). The outline of the power saving control has been described above.

[0099] Effects Next, the power consumption reduction effect of the present embodiment will be described. Fig. 14 is a time chart for explaining a simulation of 60 minutes for a conventional case in which a token update process is performed when each access token expires.

[0100] Here, the conditions for transitioning to power saving mode are 1 minute after the completion of the token update process, the validity period of the access token for AAA Company's email service is 20 minutes, and the validity period of the access token for BBB Company's storage service is 30 minutes. In the figure, the open rectangular area represents the period during which the device is operating in normal mode, and the shaded rectangular area represents the period during which the device is operating in power saving mode.

[0101] First, assume that the access tokens for the AAA company email service and the BBB company email service are updated at the beginning of the normal mode period 1401. The access token update process is completed in a short time, so it can be ignored when performing a simulation on the order of minutes. Therefore, after updating the two access tokens, the device operates in normal mode for one minute. After that, when the power save mode transition condition is satisfied, the device switches to power save mode and operates in power save mode (also called sleep mode) for 19 minutes, which is the power save mode period 1402.

[0102] Next, 20 minutes after the previous update, which is the expiration date for the AAA company's email service, the device transitions to normal mode, updates the access token for the AAA company's email service, and operates in normal mode for one minute during normal mode period 1403. After that, the device transitions to power-save mode, and operates in power-save mode for nine minutes during power-save mode period 1404.

[0103] Next, 30 minutes after the previous update, which is the expiration date for the BBB Company service, the device transitions to normal mode, updates the access token for the AAA Company email service, and operates in normal mode for one minute during normal mode period 1405. After that, the device transitions to power-save mode, and operates in power-save mode for nine minutes during power-save mode period 1406.

[0104] Next, 20 minutes after the previous update, which is the expiration date for the AAA Company's email service, the device transitions to normal mode, updates the access token for the AAA Company's email service, and operates in normal mode for one minute during normal mode period 1407. After that, the device transitions to power-save mode, and operates in power-save mode for 19 minutes during power-save mode period 1408. This completes 60 minutes from the start.

[0105] In this simulation, the system will operate in normal mode for 4 minutes out of every 60 minutes.

[0106] FIG. 15 is a time chart illustrating a simulation for 60 minutes in which all token update processes are performed at the shortest validity period of the access tokens according to the present embodiment of the invention.

[0107] Here, as in Fig. 14, the conditions for transitioning to power saving mode are one minute after the completion of the token update process, the validity period of the access token for AAA Company's email service is 20 minutes, and the validity period of the access token for BBB Company's storage service is 30 minutes. In the figure, the open rectangular area represents the period during which the device is operating in normal mode, and the shaded rectangular area represents the period during which the device is operating in power saving mode.

[0108] First, assume that the access tokens for the AAA company email service and the BBB company email service are updated at the beginning of the normal mode period 1501. After that, the device operates in the normal mode for about one minute. After that, when the power-save mode transition condition is satisfied, the device transitions to the power-save mode and operates in the power-save mode for 19 minutes, which is the power-save mode period 1502.

[0109] Next, 20 minutes after the last update, which is the expiration date for the AAA company's email service, the device transitions to normal mode, and updates the access token for the AAA company's email service and the access token for the BBB company's storage service. After that, the device operates in normal mode for one minute during normal mode period 1503. After that, the device transitions to power-save mode, and operates in power-save mode for 19 minutes during power-save mode period 1504.

[0110] Next, 20 minutes after the last update, which is the expiration date for the AAA Company's email service, the device transitions to normal mode, and updates the access token for the AAA Company's email service and the access token for the BBB Company's storage service. After that, the device operates in normal mode for one minute during normal mode period 1505. After that, the device transitions to power-save mode, and operates in power-save mode for 19 minutes during power-save mode period 1506. This completes 60 minutes from the start.

[0111] In this simulation, the device operates in normal mode for 3 minutes out of 60 minutes. Compared to the simulation in FIG. 14 in which the token is updated at the conventional timing, the simulation of the invention according to this embodiment shortens the operating time in normal mode by 1 minute. According to this simulation, the effect is 1 minute out of 60 minutes, but the effect is greater when the transition time to the power saving mode is long or when many access tokens are held. Therefore, according to this embodiment, the operating time in the power saving mode can be extended by updating all access tokens at the interval of the one with the shortest validity among multiple access tokens.

[0112] [Variations] 6, the MFP 100 that receives the device authorization response in step 603 may display a screen including, for example, a two-dimensional barcode encoding the URL of an end-user verification endpoint that performs user code authorization, and the user code, on the operation unit 102. In that case, instead of transmitting the device authorization result screen to the client terminal 150 in step 604, the client terminal 150 may read the two-dimensional barcode displayed on the MFP 100. Then, the two-dimensional barcode may be decoded to obtain the URL of the end-user verification endpoint, and the URL may be accessed in step 607.

[0113] 6, the user code and user authentication are performed in separate steps and on separate screens, but the authorization server 110 may send input screens for both the user code and authentication information to the client terminal 150 in step 608. In that case, both may be entered on a single screen at the client terminal and sent to the authorization server 110 for user authentication.

[0114] For example, authorization server 110 issues a device code for identifying MFP 100 in association with the user code, and transmits the device code to client terminal 150 via MFP 1100. Then, in step 609, client terminal 150 transmits the device code together with the input user code to authorization server 110, thereby further improving the reliability of the user.

[0115] [Embodiment 2] In the first embodiment, an example has been shown in which the token update process in Fig. 12 is started when the token update timer times out. An example will be described in which the token update process is executed not only at the token update time but also when the mode transitions from the power saving mode to the normal mode.

[0116] In this embodiment, instead of the flowchart of Fig. 10 in the first embodiment, the processing described in the flowchart of Fig. 22 is executed. All the processing in this flowchart is realized by the CPU 201 executing the program of the token processing unit 511 of the MFP 100. The processing from S1001 to S1009 is the same as that in Fig. 10.

[0117] S2201 is executed after S1008 and after S1010. In S2201, the token update process (FIG. 12) is registered in the power saving control unit 510 as the process to be executed when the power saving mode is transitioned to the normal mode (1308).

[0118] As a result, when the power saving control unit 510 transitions from the power saving mode to the normal mode (1308), the token update process (FIG. 12) is executed.

[0119] The power saving effect of this embodiment will be described.

[0120] 18 is a time chart for explaining a simulation of a case where all token update processes are performed at the timing of the shortest period of validity of the access token and at the time of transition from the power saving mode to the normal mode (1308) according to this embodiment. The simulation time is 60 minutes.

[0121] Here, as in Fig. 14, the conditions for transitioning to power saving mode are one minute after the completion of the token update process, the validity period of the access token for AAA Company's email service is 20 minutes, and the validity period of the access token for BBB Company's storage service is 30 minutes. In the figure, the open rectangular area represents the period during which the device is operating in normal mode, and the shaded rectangular area represents the period during which the device is operating in power saving mode.

[0122] First, assume that the access tokens for the AAA company's e-mail service and the BBB company's e-mail service are updated at the beginning of the normal mode period 1801. After that, the device operates in the normal mode for about one minute. After that, the device switches to the power-save mode, and operates in the power-save mode for five minutes during the power-save mode period 1802.

[0123] Assume now that the user operates the operation unit 102 of the MFP 100 to execute the copy function, and the process is completed in about two minutes. At this time, the user operates to transition from the power-save mode to the normal mode, so the token update process is executed to update the access token for the AAA company's email service and the access token for the BBB company's storage service. Since the mode transitions to the power-save mode one minute after the process is completed, the mode operates in the normal mode for three minutes during the normal mode period 1803. Thereafter, the mode transitions to the power-save mode, and the mode operates in the power-save mode for 19 minutes during the power-save mode period 1804.

[0124] Next, 20 minutes after the last update, which is the expiration date for the AAA company's email service, the device transitions to normal mode, and updates the access token for the AAA company's email service and the access token for the BBB company's storage service. At this time, the device operates in normal mode for one minute during normal mode period 1805. After that, the device transitions to power-save mode, and operates in power-save mode for 19 minutes during power-save mode period 1806.

[0125] Next, 20 minutes after the last update, which is the expiration date for the AAA Company's email service, the device transitions to normal mode, and updates the access token for the AAA Company's email service and the access token for the BBB Company's storage service. During this normal mode period 1807, the device operates in normal mode for one minute. After that, the device transitions to power-save mode, and operates in power-save mode for 14 minutes during power-save mode period 1808. This makes 60 minutes from the start.

[0126] In this simulation, the device operates in normal mode for 6 minutes out of 60 minutes. However, the period during which the user used the copy function (normal mode period 1803) was 3 minutes, and the actual period during which the device operated in normal mode just to update the access token was 3 minutes. The operating time in normal mode has been shortened by 1 minute compared to the simulation in Fig. 14. According to this simulation, although this is an effect of 1 minute out of 60 minutes, the effect is greater when the transition time to power saving mode is long or when many access tokens are held.

[0127] According to this embodiment, all access tokens are updated at the time interval of the access token with the shortest validity among the multiple access tokens and when the power saving mode is switched to the normal mode, thereby making it possible to extend the operation time in the power saving mode.

[0128] [Embodiment 3] In the first and second embodiments, an example is shown in which all access tokens are unconditionally updated in the token update process (FIG. 12). In the present embodiment, an example is shown in which only access tokens that will expire by the time the next update process is executed are updated.

[0129] In this embodiment, the process described in the flowchart of Fig. 23 is executed instead of the flowchart of Fig. 12 in the first embodiment. All the processes in this flowchart are realized by the CPU 201 executing the program of the token processing unit 511 of the MFP 100.

[0130] The processes from S1201 to S1210 are the same as those in FIG.

[0131] In S2401, it is determined whether the expiration date of the access token of the record currently being processed is after the next token update processing time. The next token update processing time is the current time plus the execution timer interval saved in the Flash ROM 210 in S1102. If the expiration date of the target token is after the next token update processing time, the token update processing is skipped and the process proceeds to S1207, otherwise the process proceeds to S1203.

[0132] For example, a case will be described in which the token management information is in the state of the token management information 1900 illustrated in Fig. 19, and the token update process is executed for the access token 1111aaaa at 2022 / 12 / 15 13:20:00. Here, since the execution timer interval is 20 minutes, the next token update process time will be 2022 / 12 / 15 13:40:00.

[0133] Because the expiration date of access token 1111aaaa for AAA Company's email service is 2022 / 12 / 15 13:20:00, in S2301 it is determined that it is not after the next token update processing time. Also, because the expiration date of access token 3333aaaa for BBB Company's storage service is 2022 / 12 / 15 13:50:00, in S2301 it is determined that it is after the next token update processing time. Therefore, in the token update at 2022 / 12 / 15 13:20:00, access token 1111aaaa is updated, and access token 3333aaaa is not updated.

[0134] As described above, in this embodiment, by not updating the token at the token update timing when it is sufficient to update it at the next or later timing, it is possible to reduce the power consumption at the time of token update. Also, the effect of the first embodiment is not impaired in this embodiment.

[0135] Furthermore, in the second embodiment, the token update process executed when returning from the power saving mode to the normal mode may be changed from the process in Fig. 12 to the process in Fig. 23 of this embodiment. By doing so, it is possible to reduce the amount of power consumption during token update without impairing the effect of the second embodiment.

[0136] [Other Examples] The present invention can also be realized by a process in which a program for implementing one or more of the functions of the above-described embodiments is supplied to a system or device via a network or a storage medium, and one or more processors in a computer of the system or device read and execute the program. The present invention can also be realized by a circuit (e.g., ASIC) that implements one or more of the functions.

[0137] Summary of embodiments The above embodiments can be summarized as follows: (Item 1) An information processing apparatus having a power saving function that transitions from a normal mode to a power saving mode in which power consumption is reduced when a predetermined condition is satisfied, A communication means for communicating with the authorization server; and a control means, The control means Obtaining an access token and its expiration date from the authorization server; The expiration date of the obtained access token is stored in association with the access token; When the expiration date of at least one of the acquired access tokens that are stored has been reached, if the power saving mode is in effect, the power saving mode is restored to the normal mode and at least some of the acquired access tokens are updated. 23. An information processing apparatus comprising: (Item 2) Item 1. The information processing device according to item 1, The control means updates all of the acquired access tokens when the expiration date of at least one of the stored access tokens is reached. 23. An information processing apparatus comprising: (Item 3) 3. The information processing device according to item 1 or 2, The device further includes a measuring means for measuring a set time, The control means When the access token is acquired or updated, a time corresponding to the earliest expiration date among the expiration dates of the acquired and stored access tokens is set in the measurement means; When the time measured by the measuring means reaches the set time, at least a part of the acquired access token is updated. 23. An information processing apparatus comprising: (Item 4) An information processing device according to any one of items 1 to 3, The control means further executes an update process for updating all of the acquired access tokens when the power saving mode is switched to the normal mode. 23. An information processing apparatus comprising: (Item 5) Item 4. An information processing device according to the present invention, the information processing device has a function of setting a process to be executed when the information processing device transitions from the power saving mode to the normal mode, By setting the update process as a process to be executed when the power saving mode is switched to the normal mode, all of the acquired access tokens are updated when the power saving mode is switched to the normal mode. 23. An information processing apparatus comprising: (Item 6) Item 3. The information processing device according to item 3, When the expiration date of at least one of the acquired and stored access tokens has arrived, the control means updates an access token among the acquired access tokens whose expiration date is earlier than the next update date. 23. An information processing apparatus comprising: (Item 7) Item 6. The information processing device according to item 6, The next renewal time is the time when the time set in the measuring means has elapsed from the expiration date. 23. An information processing apparatus comprising: (Item 8) An information processing device according to any one of items 1 to 7, The access token is updated by sending the refresh token acquired together with the access token to the authorization server. 23. An information processing apparatus comprising: (Item 9) An information processing device according to any one of items 1 to 8, The access token is issued by the authorization server when the user is authorized to transfer user authority. 23. An information processing apparatus comprising:

[0138] The present invention is not limited to the above-described embodiments, and various modifications and variations are possible without departing from the spirit and scope of the invention. Therefore, the following claims are appended to apprise the public of the scope of the invention. [Explanation of symbols]

[0139] 100 MFP, 110,130 authorization servers, 120 e-mail servers, 140 storage servers, 150 client terminals

Claims

1. An information processing apparatus having a power saving function that transitions from a normal mode to a power saving mode in which power consumption is reduced when a predetermined condition is satisfied, A communication means for communicating with the authorization server; and a control means, The control means Obtaining an access token and its expiration date from the authorization server; The expiration date of the obtained access token is stored in association with the access token; When the expiration date of at least one of the acquired access tokens that are stored has been reached, if the power saving mode is in effect, the power saving mode is restored to the normal mode and at least a part of the acquired access tokens is updated.

23. An information processing apparatus comprising:

2. 2. The information processing device according to claim 1, The control means updates all of the acquired access tokens when the expiration date of at least one of the stored access tokens has been reached.

23. An information processing apparatus comprising:

3. 2. The information processing device according to claim 1, The device further includes a measuring means for measuring a set time, The control means When the access token is acquired or updated, a time corresponding to the earliest expiration date among the expiration dates of the acquired and stored access tokens is set in the measurement means; When the time measured by the measuring means reaches the set time, at least a part of the acquired access token is updated.

23. An information processing apparatus comprising:

4. 2. The information processing device according to claim 1, The control means further executes an update process for updating all of the acquired access tokens when the power saving mode is switched to the normal mode.

23. An information processing apparatus comprising:

5. 5. The information processing device according to claim 4, the information processing device has a function of setting a process to be executed when the information processing device transitions from the power saving mode to the normal mode, By setting the update process as a process to be executed when the power saving mode is switched to the normal mode, all of the acquired access tokens are updated when the power saving mode is switched to the normal mode.

23. An information processing apparatus comprising:

6. 4. The information processing device according to claim 3, When the expiration date of at least one of the acquired and stored access tokens has arrived, the control means updates an access token among the acquired access tokens whose expiration date is earlier than the next update date.

23. An information processing apparatus comprising:

7. 7. The information processing device according to claim 6, The next renewal time is the time when the time set in the measuring means has elapsed from the expiration date.

23. An information processing apparatus comprising:

8. 2. The information processing device according to claim 1, The access token is updated by sending the refresh token acquired together with the access token to the authorization server.

23. An information processing apparatus comprising:

9. 2. The information processing device according to claim 1, The access token is issued by the authorization server when the user is authorized to transfer user authority.

23. An information processing apparatus comprising:

10. A program for causing a computer to function as the information processing device according to any one of claims 1 to 9.

11. A method for controlling an information processing device having a power saving function for transitioning from a normal mode to a power saving mode with lower power consumption when a predetermined condition is satisfied, comprising: The information processing device includes a communication means for communicating with an authorization server; and a control means, The control method includes: The control means acquires an access token and its expiration date from the authorization server, The control means stores the expiration date of the acquired access token in association with the access token, and when the expiration date of at least one of the acquired access tokens stored by the control means has arrived, the control means returns to the normal mode if in the power saving mode, and updates at least a part of the acquired access tokens.

23. A method for controlling an information processing apparatus comprising:

Images