Information processing system and program

Abstract

To improve the convenience of peer-to-peer connections between terminal devices compared to a configuration in which the enablement or disablement of peer-to-peer connections is uniformly controlled on the basis of authentication conditions, etc.SOLUTION: An information processing system includes one or more processors, the one or more processors determine whether approval has been obtained for the output of data from a third party with approval authority for the data to be output, and permit the output of data when approval has been obtained for the output of data using an output device connected to the device in a peer-to-peer manner, and do not permit the output of data when approval has not been obtained.SELECTED DRAWING: Figure 5

Description

[Technical field]

[0001] The present invention relates to an information processing system and a program. [Background technology]

[0002] When a terminal device instructs an image forming device to print, the terminal device and the image forming device may be connected in a peer-to-peer manner using Wi-Fi direct (registered trademark) or the like. By using such a connection method, it is possible to connect the terminal device and the image forming device and perform printing even in cases where the terminal device cannot connect to a network to which the image forming device is connected.

[0003] Incidentally, printing systems used in companies and the like may have measures to prevent confidential information leaks, such as leaving an image log of the print contents and requiring third-party approval when printing outside the organization's base. However, if a peer-to-peer connection (hereinafter referred to as "peer-to-peer connection") is possible, a terminal device and an image forming device can be directly connected, making it possible to circumvent such measures to prevent confidential information leaks, which may result in a risk of confidential information leaks. For this reason, peer-to-peer connections are restricted under certain conditions. Patent Document 1 discloses a printing device that prohibits users from using the Wi-Fi direct function when an IP filter is used. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Patent No. 6342032 Summary of the Invention [Problem to be solved by the invention]

[0005] If peer-to-peer connections are uniformly restricted based on authentication conditions such as IP filters or the presence or absence of login, in cases where a terminal device cannot connect to the network to which the image forming device is connected, the terminal device cannot instruct the image forming device to print, which is inconvenient. This problem exists in common when one terminal device instructs another terminal device to output information. The information output medium is not limited to printing by the image forming device, but also applies to audio output and display on a display device.

[0006] The present invention aims to improve the convenience of peer-to-peer connections between terminal devices, as compared to a configuration in which the enablement or disablement of peer-to-peer connections is uniformly controlled based on authentication conditions, etc. [Means for solving the problem]

[0007] The present invention of claim 1 is an information processing system comprising one or more processors, which determine whether or not approval has been obtained for the output of data to be output from a third party having approval authority for the data, and which permits the output of the data if approval has been obtained for the output of the data using an output device connected to the device in a peer-to-peer manner, and does not permit the output of the data if approval has not been obtained. The present invention of claim 2 is the information processing system described in claim 1, characterized in that, when approval has not been obtained for the data to be output, the processor notifies the third party with approval authority to request approval for the output of the data. The present invention of claim 3 is the information processing system described in claim 2, characterized in that the processor extracts identification information of the third party recorded in the data to be output, and notifies the third party identified by the extracted identification information. The present invention of claim 4 is the information processing system described in claim 1, characterized in that when the processor is unable to connect to an output device managed by a server via a network using a connection means, the processor searches for an output device that can be connected via a peer-to-peer connection via a communication line used for peer-to-peer connections, and when the output device that can be connected via peer-to-peer is detected, the processor determines whether or not the approval has been obtained for the data to be output. The present invention of claim 5 is the information processing system described in claim 4, characterized in that the processor acquires information indicating the organization to which the detected output device belongs from the detected output device, and if the organization indicated by the acquired information matches the organization to which the device itself belongs, permits the output device to output the data, regardless of whether approval has been obtained for the data to be output. The present invention of claim 6 is the information processing system described in claim 1, characterized in that the data approved by the third party with approval authority is data containing information indicating that it has been processed by the third party, and when the processor extracts information indicating that it has been processed by the third party from the data to be output, it permits the output of the data by the output device connected to the processor in a peer-to-peer manner. The present invention of claim 7 is the information processing system described in claim 6, characterized in that the processing of the data by the third party with approval authority is electronically signed with the private key of the third party, and when the processor can verify that the electronic signature by the third party has been applied to the data to be output, it allows the output device connected to the processor in a peer-to-peer manner to output the data. The present invention of claim 8 is a program that enables a computer to realize a function of determining whether or not approval has been obtained for the output of data from a third party having approval authority for the data to be output, and a function of permitting the output of the data if approval has been obtained, and not permitting the output of the data if approval has not been obtained, with respect to the output of the data using an output device connected to the computer in a peer-to-peer manner. Effect of the Invention

[0008] According to the invention of claim 1, it is possible to improve the convenience of peer-to-peer connections between terminal devices and image forming devices, compared to a configuration in which the enablement or disablement of peer-to-peer connections is uniformly controlled based on authentication conditions, etc. According to the invention of claim 2, a peer-to-peer connection can be executed by obtaining approval as necessary, thereby further improving the convenience of the peer-to-peer connection. According to the invention of claim 3, it is possible to notify different approval recipients for each data. According to the invention of claim 4, compared to a configuration in which output via a peer-to-peer connection is performed independently of output by an output device managed by a server, opportunities for output via a peer-to-peer connection can be limited, thereby improving security. According to the invention of claim 5, by eliminating the need for approval for output via a peer-to-peer connection within the organization to which the device belongs, the convenience of output via a peer-to-peer connection can be further improved. According to the invention of claim 6, it is possible to improve the convenience of the process of confirming the presence or absence of approval, as compared with a configuration in which the presence or absence of approval is managed separately from the data to be output. According to the invention of claim 7, it is possible to improve the convenience of the process of confirming the presence or absence of approval, as compared with a configuration in which the presence or absence of approval is managed separately from the data to be output. According to the invention of claim 8, in a computer having the program of the present invention installed, the convenience of peer-to-peer connections between a terminal device and an image forming device can be improved compared to a configuration in which the enablement or disablement of peer-to-peer connections is uniformly controlled based on authentication conditions, etc. [Brief description of the drawings]

[0009] [Figure 1] 1 is a diagram illustrating an example of the configuration of an information processing system to which the present embodiment is applied. [Diagram 2] 2 is a diagram illustrating an example of a hardware configuration of a user terminal and an approver terminal. [Diagram 3] FIG. 1 illustrates an example of the configuration of an image forming apparatus. [Figure 4] FIG. 2 is a diagram illustrating an example of a functional configuration of a user terminal. [Diagram 5] FIG. 11 is a flowchart showing the operation of a user terminal. [Figure 6] FIG. 13 is a flowchart illustrating a modified example. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. <Configuration of information processing system> FIG. 1 is a diagram showing a configuration example of an information processing system 1 to which the present embodiment is applied. The information processing system 1 includes a user terminal 100, an approver terminal 200, and an image forming apparatus 300. The user terminal 100 and the approver terminal 200 are connected via a network 400. On the other hand, the user terminal 100 and the image forming apparatus 300 can be connected not via the network 500 but via a peer-to-peer connection. For example, from the viewpoint of security, there are cases where it is desired to avoid connecting the user terminal 100 to the network 500. In addition, there are cases where the user terminal 100 and the image forming apparatus 300 cannot be connected via the network 500 due to communication troubles or the like. In these cases, by connecting the user terminal 100 and the image forming apparatus 300 via a peer-to-peer connection, communication can be performed without the network 500. An example of a peer-to-peer connection is Wi-Fi direct.

[0011] However, directly connecting the user terminal 100 and the image forming device 300 creates a security risk of confidential information leakage. For example, in the case where a server on the network 500 stores a log of the output process of the image forming device 300 in the case of output via a network connection, if output is performed via a peer-to-peer connection, confidential information may be output without leaving a log. In this embodiment, while a peer-to-peer connection between the user terminal 100 and the image forming device 300 is permitted, when the user terminal 100 and the image forming device 300 are connected via a peer-to-peer connection, approval by the approver terminal 200 is required for output of data to be output (hereinafter, data to be output is referred to as "output target data"), thereby managing whether or not to output each piece of data.

[0012] The user terminal 100 is a terminal operated by a user. The user terminal 100 accepts operations by the user and performs various information processing such as an output instruction for output target data. Examples of the user terminal 100 include a smartphone, a tablet, a desktop PC, and a notebook PC.

[0013] When user terminal 100 receives an instruction to output data using a peer-to-peer connected external device (e.g., image forming device 300), it determines whether or not approval for the output of the data to be output has been obtained from a third party with approval authority (hereinafter, the third party with approval authority will be referred to as an "approver") for the data to be output. If approval for the data to be output by the approver has been obtained, user terminal 100 permits the output of the data to be output. On the other hand, if approval by the approver has not been obtained, user terminal 100 does not permit the output of the data to be output.

[0014] Furthermore, when approval by the approver has not been obtained for the output of the output target data, the user terminal 100 notifies the approver to request approval for the output of the output target data. Here, various modes of the approver are possible depending on the setting of the approval authority for each data. For example, the user's superior may be the approver, or the owner or creator of the data may be the approver. Also, a different approver may be set for each data. Depending on the data, information on the owner or creator may be recorded in metadata or the like. In such a case, the information on the owner or creator may be read from the output target data and set as the approver. The approver information may be stored in the user terminal 100 in advance, or if it is recorded in the data as described above, it may be read and obtained from the output target data.

[0015] The approver terminal 200 is a terminal operated by an approver. The approver terminal 200 is used by the approver to give approval regarding the output of output target data. Examples of the approver terminal 200 include a smartphone, a tablet, a desktop PC, and a notebook PC.

[0016] The approver terminal 200 receives from the user terminal 100 the output target data together with a notification requesting approval for the output of the output target data. When the approver operates the approver terminal 200 to give approval for the output of the output target data, the approver terminal 200 transmits to the user terminal 100 the approved output target data together with a notification indicating that the output of the output target data has been approved. The approver approves the output target data by processing the output target data to indicate that it has been approved. One example of processing to indicate that it has been approved is affixing a digital signature by the approver to the output target data.

[0017] The image forming device 300 refers to a device having a function of reading an image, a function of forming an image, etc. The image forming device 300 in this embodiment has, for example, a copy function, a print function, a scan function, a facsimile function, etc. The image forming device 300 also has a communication function and communicates with the user terminal 100. The image forming device 300 prints the data to be output in response to an output instruction of the data to be output by the user terminal 100.

[0018] <Hardware configuration of terminal device> FIG. 2 is a diagram showing an example of the hardware configuration of the user terminal 100 and the approver terminal 200. The user terminal 100 shown in FIG. 2 includes one or more processors 101, which are calculation means, and a main memory 102 and an auxiliary memory 103, which are storage means. The processor 101 realizes each function of the user terminal 100 by loading a program stored in the auxiliary memory 103 into the main memory 102 and executing it. For example, a central processing unit (CPU), a micro processing unit (MPU), a graphics processing unit (GPU), a digital signal processor (DSP), or the like is used as the processor 101. For example, a random access memory (RAM) is used as the main memory 102. For example, a magnetic disk device or a solid state drive (SSD) is used as the auxiliary memory 103.

[0019] The user terminal 100 shown in FIG. 2 includes a display device 104 for allowing the user to visually recognize the display information, and an operation device 105 for receiving operations from the user. The display device 104 may be, for example, a display. The operation device 105 may be, for example, a keyboard, a mouse, or a touch panel. The user terminal 100 also includes a communication interface 106 for connecting to an external device. Note that the configuration of the user terminal 100 shown in FIG. 2 is merely an example, and the user terminal 100 used in this embodiment is not limited to the configuration example of FIG. 2. For example, the user terminal 100 may be configured to include a non-volatile memory such as a flash memory or a ROM (Read Only Memory) as a storage device. Note that the approver terminal 200 has the same hardware configuration as the user terminal 100, so a description thereof will be omitted.

[0020] <Configuration of Image Forming Apparatus> Fig. 3 is a diagram showing an example of the configuration of an image forming apparatus 300. As shown in Fig. 3, the image forming apparatus 300 includes an image forming section 310, an image reading section 320, a display device 330, an operation device 340, a communication interface 350, a storage device 360, and a control device 370.

[0021] The image forming unit 310 forms an image based on image data on paper, which is an example of a recording material, using an image forming material. Examples of a method for forming an image during recording include an electrophotographic method in which toner attached to a photoreceptor is transferred to the recording material to form an image, and an inkjet method in which ink is ejected onto the recording material to form an image.

[0022] The image reading unit 320 is configured by a so-called scanner device, optically reads an image on a set document, and generates data of the read image. As an image reading method, for example, a CCD method in which the reflected light of light irradiated from a light source onto a document is reduced by a lens and received by a CCD (Charge Coupled Devices) or a CIS method in which the reflected light of light irradiated from an LED (Light Emitting Diode) light source onto a document is received by a CIS (Contact Image Sensor) is used.

[0023] The display device 330 displays information images that present various information to the user, preview images of images to be processed such as read and output, operation images for the user to operate, etc. The display device 330 is configured, for example, with a liquid crystal display. The display device 330 may be combined with the operation device 340 to be used as a user interface means for the user to input and output information to the image forming apparatus 300.

[0024] The operation device 340 is a device for a user to perform operations such as inputting commands and data. The operation device 340 is configured, for example, by a hardware key, a touch sensor that outputs a control signal according to a position pressed or touched by a finger, etc. It may be configured as a touch panel that combines a touch sensor and a liquid crystal display that constitutes the display device 330.

[0025] The communication interface 350 is an interface for transmitting and receiving commands and data to and from an external device. An interface according to a communication method with the external device is used as the communication interface 350. The connection with the external device may be made via a network (e.g., the network 500) or by a peer-to-peer connection. The communication line may be a wired line or a wireless line. Furthermore, if the image forming apparatus 300 has a facsimile function, the communication interface 350 includes an interface for a telephone line.

[0026] The storage device 360 ​​stores various data, such as programs and data executed by the control device 370, data of images read by the image reading unit 320, log data generated by various operations, etc. The storage device 360 ​​is realized by a storage device such as a magnetic disk device or an SSD, for example.

[0027] The control device 370 includes a processor as a calculation means and a memory as a storage means, and controls the image forming device 300 by loading a program stored in the storage device 360 ​​into the memory and executing it. Examples of the control by the control device 370 include output control and communication control. Specifically, the control device 370 accepts a print instruction from a user and performs printing. The control device 370 also controls communication between the user terminal 100 and the image forming device 300, such as whether the communication is performed via the network 500 or by a peer-to-peer method. A CPU, an MPU, a GPU, a DSP, or the like is used as the processor. A DRAM (Dynamic Random Access Memory), for example, is used as the memory.

[0028] <Functional configuration of user terminal> 4 is a diagram showing an example of the functional configuration of the user terminal 100. The user terminal 100 includes a communication unit 110, an information input / output unit 120, a control unit 130, a storage unit 140, an output target data approval determination unit 150, a notification unit 160, a search unit 170, a company information determination unit 180, and a print instruction execution unit 190. The processor 101 loads a program into the main storage unit 102 and executes it, thereby performing various operations in the user terminal 100.

[0029] The communication unit 110 communicates with an external device. For example, the communication unit 110 communicates with the approver terminal 200 via the network 400. The communication unit 110 also communicates with the image forming device 300 via the network 500, and can also communicate with the image forming device 300 via a peer-to-peer connection without going through the network 500.

[0030] The information input / output unit 120 displays screens such as an operation screen and an information presentation screen, and accepts input operations by the user. Various control commands and data are input by the user performing input operations according to the operation screen, etc. displayed on the display device 104. For example, the information input / output unit 120 displays an operation screen, etc. to the user, and accepts an output instruction for output target data from the user.

[0031] The control unit 130 controls the operation of the user terminal 100. For example, the control unit 130 controls communication between the user terminal 100 and an external device. More specifically, the control unit 130 controls whether communication between the user terminal 100 and the image forming device 300 is performed via the network 500 or by a peer-to-peer method. The control unit 130 also transmits instructions to each functional unit and receives responses. More specifically, the control unit 130 controls, for example, whether the output of the output target data is approved by an approver. On the other hand, if approval is not obtained, the control unit 130 controls not to allow the output of the output target data.

[0032] The storage unit 140 stores various data and programs. Specifically, the storage unit 140 stores a program for controlling the operation of the user terminal 100, output target data to be output to the image forming device 300, user data, and the like. Examples of user data include attributes such as the user's name and job title, information on the organization to which the user belongs, information on the user's superior, and information on the approver. If the approver is the superior, information indicating that the superior is the approver may be used instead of the approver information. In addition, if the approver is different for each data, the information on each approver may be stored in association with the data. Furthermore, information on the organization to which the image forming device 300 connected in a peer-to-peer manner belongs may be stored.

[0033] The output target data approval determination unit 150 determines whether approval by the approver has been obtained for the output target data. Here, how the output target data approval determination unit 150 determines whether approval by the approver has been obtained for the output of the output target data will be described. When determining whether approval by the approver has been obtained, the output target data approval determination unit 150 checks the output target data. More specifically, the output target data approval determination unit 150 verifies whether the output target data is data approved by the approver. Data approved by the approver refers to data that has been processed by the approver. When verifying the output target data, the output target data approval determination unit 150 determines that the output target data has been approved by the approver if information indicating that the output target data has been processed by the approver is extracted from the output target data.

[0034] The processing of the output target data by the approver can be, for example, the digital signature of the approver. When the output target data approval determination unit 150 can verify that the digital signature of the approver has been applied to the output target data, it determines that the output target data has been approved by the approver.

[0035] When approval by the approver has not been obtained for the output target data, the notification unit 160 notifies the approver of a request for approval for the output of the output target data. When sending the notification requesting approval, the notification unit 160 also transmits the output target data. Note that, when the approver can obtain the output target data, only the request notification including the identification information of the output target data may be sent.

[0036] The search unit 170 searches for image forming apparatuses 300 capable of establishing a peer-to-peer connection with the image forming apparatus 170 via a communication line used for peer-to-peer connection. When the search unit 170 detects an image forming apparatus 300 capable of establishing a peer-to-peer connection with the image forming apparatus 170, the search unit 170 may obtain information indicating the organization to which the image forming apparatus 300 belongs from the detected image forming apparatus 300. Here, the organization to which the image forming apparatus 300 belongs refers to, for example, an organization in which the image forming apparatus 300 is installed and used. A protocol such as SNMP may be used to obtain the organization information.

[0037] The company information determination unit 180 determines whether or not the organization information acquired from the image forming device 300 connected to the own device in a peer-to-peer manner matches the organization information of the user managed in the storage unit 140 .

[0038] The print instruction execution unit 190 transmits a print instruction to the image forming apparatus 300. Specifically, when the control unit 130 permits the output of the output target data, the print instruction execution unit 190 transmits a print instruction to the image forming apparatus 300.

[0039] <Explanation of the operation overview of the information processing system> In this embodiment, an operation will be described when a peer-to-peer connection is established between the user terminal 100 and the image forming device 300 to perform output. When a need arises to establish a peer-to-peer connection due to reasons such as an inability to connect to the network 500, the user terminal 100 first searches for an image forming device 300 capable of peer-to-peer connection via a communication line used for peer-to-peer connection. When the user terminal 100 detects an image forming device 300 capable of peer-to-peer connection, it establishes a peer-to-peer connection with the detected image forming device 300.

[0040] FIG. 5 is a flowchart showing the operation of the user terminal 100. A user operates the user terminal 100, and the information input / output unit 120 of the user terminal 100 receives an output instruction for data to be output (S101). The output target data approval determination unit 150 of the user terminal 100 determines whether approval for the output of the data to be output has been obtained from an approver. If approval for the output has been obtained (YES in S102), the control unit 130 of the user terminal 100 permits the image forming device 300 connected to the user terminal 100 in a peer-to-peer manner to output the data to be output (S103). The user terminal 100 instructs the image forming device 300 to output the data to be output (S104). Processing in S104 In the process, when the user terminal 100 issues an output instruction to the image forming apparatus 300 to output data to be output, the image forming apparatus 300 prints the data to be output.

[0041] On the other hand, if approval for output has not been obtained (NO in S102), the user terminal 100 notifies the approver terminal 200 to request approval for output of the output target data (S105). When the approver gives approval for the output of the output target data, the approver terminal 200 transmits the output target data approved by the approver. The user terminal 100 receives the output target data approved by the approver from the approver terminal 200 (S106). When the user terminal 100 receives the output target data approved by the approver, it advances the process to S102. Since the received output target data has been approved by the approver, the control unit 130 of the user terminal 100 permits the output of the output target data (YES in S102, S103). The user terminal 100 instructs the image forming apparatus 300 to output the output target data (S104), and the image forming apparatus 300 prints the output target data.

[0042] <Modification> In the above example, approval by an approver is required as a condition for permitting the output of output target data by the image forming device 300 connected in a peer-to-peer manner. On the other hand, the condition for permitting the output of output target data may be set to be that the output is within the organization to which the user belongs. This is because if the output is within the organization to which the user belongs, the security risk of confidential information leakage is reduced and the convenience of the user is improved. A modified example will be described below. In this modified example, the user terminal 100 and the image forming device 300 are connected in a peer-to-peer manner without going through the network 500. In addition, when the user terminal 100 detects an image forming device 300 that can be connected in a peer-to-peer manner with the user terminal 100, the user terminal 100 acquires information on the organization set in the detected image forming device 300.

[0043] In this modified example, the organization to which the data to be output belongs is determined before determining whether the data to be output has been approved. The user terminal 100 compares whether the organization acquired from the detected image forming device 300 matches the organization to which the device itself belongs. If it is determined that the organizations match, the output is within the organization to which the user belongs. In this case, the user terminal 100 does not determine whether the data to be output has been approved. On the other hand, if it is determined that the organizations do not match, the output is not within the organization to which the user belongs. In this case, the user terminal 100 then determines whether the data to be output has been approved.

[0044] FIG. 6 is a diagram showing a flowchart representing a modified example. The information input / output unit 120 of the user terminal 100 receives an output instruction for output data from a user (S201). The company information determination unit 180 of the user terminal 100 acquires information on the affiliated organization set in the peer-to-peer connected image forming device 300 and information on the affiliated organization of the user terminal 100 (S202). If the search unit 170 of the user terminal 100 has acquired information on the affiliated organization when detecting the image forming device 300 and stored the information in the storage unit 140, the information on the affiliated organization may be read from the storage unit 140. The company information determination unit 180 of the user terminal 100 may newly acquire information on the affiliated organization from the image forming device 300. The company information determination unit 180 of the user terminal 100 judges whether or not the affiliated organization indicated by the information acquired from the image forming device 300 matches the affiliated organization of the user terminal 100. If the company information determination unit 180 of the user terminal 100 determines that they match (YES in S203), it determines that the output is within the organization to which the user belongs, and allows the image forming device 300 connected to the user terminal 100 in a peer-to-peer manner to output the data to be output, regardless of whether approval has been obtained from an approver for the data to be output (S103). The user terminal 100 instructs the image forming device 300 to output the data to be output (S104), and the image forming device 300 prints the data to be output.

[0045] On the other hand, if the company information determination unit 180 of the user terminal 100 determines that there is no match (NO in S203), it determines that the output is not within the organization to which the user belongs. Next, similar to the process in Fig. 5, the output target data approval determination unit 150 determines whether or not approval has been obtained from an approver for the output of the output target data.

[0046] If approval for output has been obtained (YES in S102), output of the data to be output is permitted, and an instruction to output the data to be output is sent to the image forming apparatus 300 (S103, S104). The image forming apparatus 300 prints the data to be output.

[0047] If approval for output has not been obtained (NO in S102), a notification is sent to the approver terminal 200 requesting approval for output of the data to be output (S105). When the user terminal 100 receives the data to be output for which approval has been obtained from the approver terminal 200, it permits output of the data to be output (S106, YES in S102, S103). The user terminal 100 instructs the image forming device 300 to output the data to be output (S104), and the image forming device 300 prints the data to be output.

[0048] Here, in the above flow, if approval from the approver cannot be obtained for some reason, a situation may occur in which the user cannot output the data to be output. One example of such a reason is that the approver is not present and therefore cannot give approval. In such a case, it is possible to obtain approval for outputting the data expected to be output from the approver in advance. This allows the user to print the data to be output.

[0049] Although the embodiment of the present invention has been described above, the technical scope of the present invention is not limited to the above embodiment. For example, in the present embodiment, the case where data is printed using the image forming device 300 as the output of the output target data has been described, but the present invention is not limited to this. For example, when the output target data is displayed on a display device, when audio data as the output target data is output by an audio output device, etc., a configuration may be adopted in which it is determined whether or not the output is permitted depending on the presence or absence of approval by the approver and company information. In addition, in the present embodiment, an electronic signature by the approver on the output target data is given as an example of processing indicating that the output target data has been approved, but the present invention is not limited to this. For example, an electronic watermark may be used as processing indicating that the output target data has been approved. In addition, data may be encrypted using a password that is specified to be used for approved data. In addition, various modifications and alternative configurations that do not deviate from the scope of the technical idea of ​​the present invention are included in the present invention.

[0050] <Additional Notes> (((1))) An information processing system comprising one or more processors, the processor determining whether or not approval has been obtained for the output of data to be output from a third party having approval authority for the data, and permitting the output of the data if approval has been obtained for the output of the data using an output device connected to the information processing system in a peer-to-peer manner, and not permitting the output of the data if approval has not been obtained. (((2))) The information processing system described in (((1))) is characterized in that, if the approval has not been obtained for the data to be output, the processor notifies the third party with approval authority to request approval for the output of the data. (((3))) The information processing system described in ((1))) or (((2))) is characterized in that the processor extracts identification information of the third party recorded in the data to be output, and notifies the third party identified by the extracted identification information. (((4))) The information processing system according to any one of (((1))) to (((3))), characterized in that, when the processor is unable to connect to an output device managed by a server via a network using a connection means for connecting to the output device, the processor searches for an output device that can be connected via a peer-to-peer connection via a communication line used for peer-to-peer connections, and when the output device that can be connected via peer-to-peer is detected, the processor determines whether or not the approval has been obtained for the data to be output. (((5))) The processor acquires information indicating an organization to which the detected output device belongs from the detected output device, and if the organization indicated by the acquired information matches the organization to which the device belongs, allows the output device to output the data, regardless of whether approval has been obtained for the data to be output. (((6))) The information processing system according to any one of ((1))) to (((5))), characterized in that the data approved by the third party having approval authority is data containing information indicating that the data has been processed by the third party, and when the processor extracts information indicating that the data has been processed by the third party from the data to be output, the processor permits the output of the data by the output device connected to the processor in a peer-to-peer manner. (((7))) The information processing system described in (((6))), characterized in that the processing of the data by the third party with approval authority is electronically signed with the private key of the third party, and when the processor can verify that the electronic signature by the third party has been applied to the data to be output, it allows the output device connected to the processor in a peer-to-peer manner to output the data. (((8))) A program that causes a computer to realize a function of determining whether or not approval has been obtained for the output of data from a third party having approval authority for the data to be output, and a function of permitting the output of the data if approval has been obtained, and not permitting the output of the data if approval has not been obtained, with respect to the output of the data using an output device connected to the computer in a peer-to-peer manner.

[0051] According to the invention (((1))), it is possible to improve the convenience of peer-to-peer connections between terminal devices and image forming devices, compared to a configuration in which the enablement or disablement of peer-to-peer connections is uniformly controlled based on authentication conditions, etc. According to the invention (((2))), a peer-to-peer connection can be executed by obtaining approval as necessary, thereby further improving the convenience of the peer-to-peer connection. According to the invention of (((3))), notification can be sent to different approval recipients for each data item. According to the invention (((4))), it is possible to limit opportunities for output via peer-to-peer connections and improve security, compared to a configuration in which output via peer-to-peer connections is performed independently of output by an output device managed by a server. According to the invention of (((5))), by eliminating the need for approval for output via a peer-to-peer connection within the organization to which the device belongs, the convenience of output via a peer-to-peer connection can be further improved. According to the invention (((6))), it is possible to improve the convenience of the process of confirming approval, compared to a configuration in which approval is managed separately from the data to be output. According to the invention (((7))), it is possible to improve the convenience of the process of confirming the presence or absence of approval, compared to a configuration in which the presence or absence of approval is managed separately from the data to be output. According to the invention (((8))), in a computer having the program of the present invention installed, it is possible to improve the convenience of peer-to-peer connections between a terminal device and an image forming device, compared to a configuration in which the enablement or disablement of a peer-to-peer connection is uniformly controlled based on authentication conditions, etc. [Explanation of symbols]

[0052] 100...user terminal, 200...approver terminal, 300...image forming apparatus, communication unit...110, information input / output unit...120, control unit...130, storage unit...140, output target data approval determination unit...150, notification unit...160, search unit...170, company information determination unit 180, print instruction execution unit

Claims

1. One or more processors; The processor, determining whether or not approval for output of the data has been obtained from a third party having approval authority for the data to be output; permitting a peer-to-peer connection with an output device used to output the approved data as one of connection means for the output device; Not permitting a peer-to-peer connection with an output device as a connection means for outputting the data for which the approval has not been obtained An information processing system comprising:

2. The processor, If the approval has not been obtained for the data to be output, notify the third party with approval authority to request approval for the output of the data.

2. The information processing system according to claim 1 .

3. The processor, Extracting the identification information of the third party recorded in the data to be output, and notifying the third party identified by the extracted identification information 3. The information processing system according to claim 2 .

4. The processor, searching for an output device that can be connected to by peer-to-peer via a communication line used for peer-to-peer connection when the output device cannot be connected to by using a connection means for connecting to the output device managed by the server via a network; When the output device capable of peer-to-peer connection is detected, determining whether the approval has been obtained for the data to be output.

2. The information processing system according to claim 1 .

5. The processor, acquiring information indicating an organization to which the detected output device belongs from the output device; If the organization indicated by the acquired information matches the organization to which the device belongs, a peer-to-peer connection with the output device is permitted regardless of whether the approval has been obtained for the data to be output.

5. The information processing system according to claim 4.

6. The data approved by the third party having approval authority is data that includes information indicating that it has been processed by the third party, The processor, When information indicating that the data to be output has been processed by the third party is extracted from the data to be output, a peer-to-peer connection with the output device is permitted for output of the data.

2. The information processing system according to claim 1 .

7. The processing of the data by the third party having approval authority is electronically signed with the third party's private key, The processor, When it is verified that the data to be output has been digitally signed by the third party, a peer-to-peer connection with the output device is permitted for output of the data.

7. The information processing system according to claim 6.

8. On the computer, A function for determining whether or not the output of the data has been approved by a third party having approval authority for the data to be output; a function of permitting a peer-to-peer connection with an output device used to output the approved data as one of the connection means, and not permitting a peer-to-peer connection with the output device as a connection means for an output device used to output the unapproved data; A program for realizing the above.

Images