Information processing system and information processing program

Abstract

To provide an information processing system and an information processing program which can prevent secondary use of a token even if instruction information is moved.SOLUTION: An image processing device creates and stores an authentication information file 58 in which a token issued by a cloud service and a user ID are associated with each other, and when an instruction book 52 where identification information is described is executed, reads out the token corresponding to the user ID described in the instruction book 52, and performs processing of receiving the cloud service and information using the read-out token.SELECTED DRAWING: Figure 8

Description

[Technical field]

[0001] The present disclosure relates to an information processing system and an information processing program. [Background technology]

[0002] Patent document 1 discloses a document management server that receives instruction information describing the processing contents of a collaborative process, acquires document data, and stores the acquired document data based on an instruction to store the document data and information on the storage location of the document data, both of which are included in the instruction information.

[0003] Patent document 2 discloses a system including an image data processing server including a user authentication unit that authenticates a user of a user device or user terminal using an access token, a token receiving unit that receives the access token from the user device or user terminal, and a determination information sending unit that, when the access token is received, sends to the user device or user terminal determination information capable of determining whether the remaining time until the access token's expiration date is less than a predetermined threshold, and a user authentication unit that, when a request for access token issuance sent by the user device or user terminal that received the determination information is received, issues a new access token with an updated expiration date. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2014-006925 A [Patent Document 2] JP 2016-143164 A Summary of the Invention [Problem to be solved by the invention]

[0005] When a cloud service is specified as a link destination described in instruction information for a link process that executes multiple processes in a linked manner, authentication information for the cloud service needs to be described in the instruction information. Here, when implementing a process that exchanges information with a cloud service using a token for authentication, it is possible to describe the token in the instruction information. However, since the instruction information can be transferred to another device, there is a risk that the token described in the instruction information may be used secondary in an unintended manner.

[0006] Therefore, an object of the present disclosure is to provide an information processing system and an information processing program that can prevent secondary use of a token even if instruction information is moved. [Means for solving the problem]

[0007] In order to achieve the above-mentioned objective, an information processing system according to a first aspect includes a processor, which associates and stores a token issued by a cloud service with identification information that identifies a user, and when executing instruction information instructing a collaborative process in which multiple processes are executed in collaboration, containing the identification information, reads out the token corresponding to the identification information described in the instruction information, and performs processing to exchange information with the cloud service using the read token.

[0008] In an information processing system according to a second aspect, in the information processing system according to the first aspect, the identification information is at least one of device user identification information that identifies a user of the device itself and cloud user identification information that identifies a user of a cloud service.

[0009] An information processing system according to a third aspect is an information processing system according to the first aspect, in which the processor associates a refresh token with the identification information and stores it, and when executing the instruction information, obtains the refresh token corresponding to the instruction information, and uses the refresh token to obtain an access token from the cloud service to exchange information with the cloud service.

[0010] An information processing system according to a fourth aspect is an information processing system according to the first aspect, in which the processor stores the instruction information in a predetermined storage location, and when information is stored in the storage location, starts the collaborative processing in accordance with the instruction information.

[0011] An information processing program according to a fifth aspect causes a computer to store a token issued by a cloud service in association with identification information for identifying a user, and when executing instruction information containing the identification information and instructing a coordinated process for executing multiple processes in coordination, the computer reads out the token corresponding to the identification information contained in the instruction information, and executes a process for exchanging information with the cloud service using the read token. Effect of the Invention

[0012] According to the first aspect, it is possible to provide an information processing system capable of preventing secondary use of a token even if instruction information is moved.

[0013] According to the second aspect, it becomes possible to identify a token issued by the cloud.

[0014] According to the third aspect, even if the access token has expired, it is possible to exchange information with the cloud service by using the refresh token.

[0015] According to the fourth aspect, by storing information in a predetermined storage location, it becomes possible to perform processing for sending and receiving information to and from a cloud service.

[0016] According to the fifth aspect, it is possible to provide an information processing program capable of preventing secondary use of a token even if instruction information is moved. [Brief description of the drawings]

[0017] [Figure 1] 1 is a diagram showing a schematic configuration of an information processing system according to an embodiment of the present invention; [Diagram 2]2 is a block diagram showing a configuration of a main part of an electrical system of an image processing device in the information processing system according to the present embodiment. FIG. [Diagram 3] 2 is a block diagram showing the configuration of the main electrical systems of a cloud server, a client computer, and a mobile terminal in the information processing system according to the embodiment. FIG. [Figure 4] FIG. 1 is a diagram illustrating an example of a cloud service. [Diagram 5] FIG. 11 illustrates an example of a linking process. [Figure 6] FIG. 1 is a diagram for explaining an OAuth device flow. [Figure 7] 11 is a diagram for explaining a process for authenticating a cloud service in the information processing system according to the present embodiment. FIG. [Figure 8] 11 is a diagram for explaining a flow from creating an instruction sheet to transferring a fax reception result to a cloud service in the information processing system according to the present embodiment. FIG. [Figure 9] 10 is a flowchart showing an example of the flow of processing performed by the image processing apparatus during authentication of a cloud service in the information processing system according to the present embodiment. [Figure 10] 10 is a flowchart showing an example of the flow of processing performed by the image processing apparatus when an instruction sheet and a fax reception result are stored in a box in the information processing system according to the present embodiment. [Figure 11] 11 is a sequence diagram showing an example of a flow of processes performed in the information processing system when a fax reception result is stored in a box in which an instruction sheet is stored. FIG. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0018] An example of the present embodiment will be described in detail below with reference to the drawings. In the present embodiment, an information processing system in which a cloud server 11, an image processing device, a client computer, a mobile terminal, and the like are connected to each other via communication lines such as various networks will be described as an example. Fig. 1 is a diagram showing a schematic configuration of an information processing system 10 according to the present embodiment.

[0019] 1, an information processing system 10 according to this embodiment includes a cloud server 11, an image processing device 12, a client computer 14, and a mobile terminal 16. The cloud server 11, the image processing device 12, and the client computer 14 are connected to each other via a communication line 18 such as a LAN (Local Area Network), a WAN (Wide Area Network), the Internet, an intranet, etc. The cloud server 11, the image processing device 12, the client computer 14, and the mobile terminal 16 are each capable of transmitting and receiving various data to and from each other via the communication line 18.

[0020] 1 shows one each of the cloud server 11, image processing device 12, client computer 14, and mobile terminal 16, but there may be more than one of each. In the information processing system 10 according to the present embodiment, in addition to a print instruction via a communication line 18, the mobile terminal 16 can also issue a print instruction via short-range wireless communication such as Wi-Fi (registered trademark) or Bluetooth (registered trademark). Examples of the mobile terminal 16 include a mobile phone such as a smartphone, a PDA (Personal Digital Assistant), and a notebook personal computer.

[0021] The image processing device 12 according to this embodiment has multiple functions such as an image forming function for performing image forming processing, a reading function for reading an original to obtain image information representing the original, a copying function for copying an image recorded on the original onto paper, a facsimile function for transmitting and receiving various data via a telephone line (not shown), a transfer function for transferring original information such as image information read by the reading function, etc., and a storage function for storing original information such as read image information, etc. The multiple functions may include all of these functions, or may include two or more of these functions.

[0022] In the following description, the facsimile function may be referred to as "fax," the reading function as "scan," the image forming function as "print," and the copying function as "copy."

[0023] FIG. 2 is a block diagram showing the configuration of a main part of an electrical system of the image processing device 12 in the information processing system 10 according to this embodiment.

[0024] As shown in Fig. 2, the image processing device 12 according to this embodiment includes a control unit 20 including a CPU (Central Processing Unit) 20A, a ROM (Read Only Memory) 20B, and a RAM (Random Access Memory) 20C. The CPU 20A controls the overall operation of the image processing device 12. The RAM 20C is used as a work area when the CPU 20A executes various programs. The ROM 20B stores various information processing programs such as application programs and various parameters in advance. In the image processing device 12, each component of the control unit 20 is electrically connected to each other via a system bus 42.

[0025] On the other hand, the image processing device 12 according to the present embodiment includes a HDD (hard disk drive) 26 that stores various data, application programs, and the like. The image processing device 12 is also provided with a display control unit 28 that is connected to the user interface 22 and controls the display of various operation screens, etc., on the display of the user interface 22. The image processing device 12 is also provided with an operation input detection unit 30 that is connected to the user interface 22 and detects operation instructions input via the user interface 22. In the image processing device 12, the HDD 26, the display control unit 28, and the operation input detection unit 30 are electrically connected to a system bus 42. In the image processing device 12 according to the present embodiment, the HDD 26 is used as the storage unit, but this is not limited thereto, and a non-volatile storage unit such as a flash memory may be used. In the present embodiment, the user interface 22 is a touch panel capable of display and operation input, but this is not limited thereto, and a user interface having a display and an operation unit separate from each other may be used.

[0026] The image processing device 12 according to the present embodiment also includes a reading control unit 32 that controls the optical image reading operation by the document reading unit 44 and the document feeding operation by the document transport unit, and an image forming control unit 34 that controls the image forming process by the image forming unit 24 and the transport unit 25 to transport paper to the image forming unit 24. The image processing device 12 also includes a communication line I / F (interface) unit 36 ​​that is connected to the communication line 18 and transmits and receives communication data to and from other external devices such as the client computer 14 connected to the communication line 18. The image processing device 12 also includes a facsimile I / F (interface) unit 38 that is connected to a telephone line (not shown) and transmits and receives facsimile data to and from a facsimile device connected to the telephone line. The image processing device 12 also includes a transmission / reception control unit 40 that controls the transmission and reception of facsimile data via the facsimile I / F unit 38. The image processing device 12 also includes a human sensor 46 that detects people around the device. In the image processing device 12, the transmission / reception control unit 40, the reading control unit 32, the image formation control unit 34, the communication line I / F unit 36, the facsimile I / F unit 38, and the human presence sensor 46 are electrically connected to the system bus 42.

[0027] With the above configuration, the image processing device 12 according to this embodiment executes access to the RAM 20C, the ROM 20B, and the HDD 26 by the CPU 20A. The image processing device 12 also executes control of display of information such as an operation screen and various messages on the display of the user interface 22 via the display control unit 28 by the CPU 20A. The image processing device 12 also executes control of operation of the document reading unit 44 and the document transport unit via the reading control unit 32 by the CPU 20A. The image processing device 12 also executes control of operation of the image forming unit 24 and the transport unit 25 via the image formation control unit 34, and control of transmission and reception of communication data via the communication line I / F unit 36 ​​by the CPU 20A. The image processing device 12 also executes control of transmission and reception of facsimile data via the facsimile I / F unit 38 by the transmission and reception control unit 40 by the CPU 20A. Furthermore, in the image processing device 12, the CPU 20A grasps the operation content in the user interface 22 based on the operation information detected by the operation input detection unit 30, and executes various controls based on the operation content.

[0028] In this embodiment, examples of applications stored in the ROM 20B or the HDD 26 include applications that execute functions such as faxing, scanning, printing, and copying.

[0029] Next, the main configuration of the electrical systems of the cloud server 11, the client computer 14, and the mobile terminal 16 according to this embodiment will be described. Fig. 3 is a block diagram showing the main configuration of the electrical systems of the cloud server 11, the client computer 14, and the mobile terminal 16 in the information processing system 10 according to this embodiment. Note that since the cloud server 11, the client computer 14, and the mobile terminal 16 have general computer configurations, the cloud server 11 will be described below as a representative.

[0030] As shown in FIG. 3, the cloud server 11 according to the present embodiment includes a CPU 11A as an example of a processor, a ROM 11B, a RAM 11C, a storage 11D, an operation unit 11E, a display unit 11F, and a communication line I / F (interface) unit 11G. The CPU 11A controls the overall operation of the cloud server 11. The ROM 11B stores various control programs and various parameters in advance. The RAM 11C is used as a work area when the CPU 11A executes various programs. The storage 11D stores various data and application programs. The operation unit 11E is used to input various information. The display unit 11F is used to display various information. The communication line I / F unit 11G is connected to a communication line 18 and transmits and receives various data to and from other devices connected to the communication line 18. The communication line I / F unit 11G may also be configured to be capable of directly communicating with each device using various well-known wireless communications. The above-mentioned components of cloud server 11 are electrically connected to each other via system bus 111. In cloud server 11 according to the present embodiment, storage 11D is used as a storage unit, and examples of storage include non-volatile storage units such as HDD (Hard Disk Drive) and flash memory.

[0031] With the above configuration, cloud server 11 according to this embodiment executes, by CPU 11A, access to ROM 11B, RAM 11C, and storage 11D, acquisition of various data via operation unit 11E, and display of various information on display unit 11F. Cloud server 11 also executes, by CPU 11A, control of transmission and reception of communication data via communication line I / F unit 11G.

[0032] Note that mobile terminal 16 includes components not present in cloud server 11, such as position detection unit 16H that detects the position of mobile terminal 16 using a global positioning system (GPS) or the like, and an imaging unit such as a camera (not shown).

[0033] In the information processing system 10 configured in this manner, the cloud server 11 provides a cloud service that stores various information such as faxes received by the image processing device 12, scanned images, and documents created by the client computer 14. Fig. 4 is a diagram for explaining an example of the cloud service.

[0034] 4, the cloud service uploads and stores faxes or scanned images received by an image processing device 12 to a cloud server 11, and the images are used by a client computer 14, a mobile terminal 16, etc. Also, the images are downloaded from the cloud service to the image processing device 12 for printing, etc.

[0035] Moreover, the information processing system 10 according to the present embodiment performs a cooperative process in which a plurality of preset processes are executed in cooperation with each other. Fig. 5 is a diagram showing an example of the cooperative process.

[0036] The linking process, for example, as shown in Fig. 5, performs a process of transferring information stored in box 50 to a predetermined forwarding destination when a fax reception or a scanned image is stored in box 50, such as a confidential box, preset in image processing device 12. By assigning instruction sheet 52, which describes the information of the forwarding destination and the processing content of the linking process, to box 50, when information is stored in box 50, the linking process is performed according to the content described in instruction sheet 52. For example, in the example of Fig. 5, instruction sheet 52 describes the processing content of linking a fax or scan function with a forwarding function, and forwarding a fax reception or a scanned image stored in box 50 to the forwarding destination. For example, instruction sheet 52 is data in which the processing content is described in XML format.

[0037] Here, when transferring information to a cloud service in cooperation with the cloud service, authentication of the cloud service must be performed. One example of the authentication method is authentication using the OAuth device flow, which issues a token based on user authentication, and authentication is performed, for example, according to the following procedure. Figure 6 is a diagram for explaining the OAuth device flow.

[0038] 1. By operating the user interface 22 of the image processing device 12, the user inputs a device user ID and a password as device user identification information in order to log in to the image processing device 12. When the user is authenticated with the device user ID, the user is permitted to log in to the image processing device 12 and becomes able to perform various operations. The user starts up the cloud linking application 54 that has been installed in advance. The cloud linking application 54 is an application that performs linking processing with the cloud service provided by the cloud server 11. 2. The cloud cooperation application 54 acquires the two-dimensional code 56 including information for accessing the login screen of the cloud server 11 from the cloud server 11 and displays the two-dimensional code 56 on the user interface 22 . 3. The user reads the two-dimensional code 56 with the mobile terminal 16 or the like, and the mobile terminal 16 accesses the cloud server 11 based on the information contained in the two-dimensional code 56 and obtains a login screen from the cloud server 11. 4. The user logs in to the cloud service by inputting a cloud user ID (identification) and password as cloud user identification information on the login screen. If the login is permitted, the cloud server 11 issues a token corresponding to the cloud user ID and password. In OAuth, the tokens issued are an access token with a predetermined expiration date, a refresh token with a longer expiration date than the access token, and an ID token including information on the cloud user ID. 5. The cloud-linked application 54 polls the cloud server 11 to obtain the authentication result for the two-dimensional code 56 issued to its own device. 6. If the authentication is permitted, the cloud-linked application 54 obtains a token, which allows the use of cloud services using the token.

[0039] Incidentally, when performing the above-mentioned linking process with a cloud service, authentication information such as a cloud user ID and password, or a token, needs to be written in the instruction book 52. However, since the instruction book 52 can be transferred to another device, there is a risk that the token written in the instruction information may be used secondary in an unintended manner.

[0040] Therefore, in the information processing system 10 according to the present embodiment, the image processing device 12 stores a token issued by the cloud service in association with identification information for identifying a user, and when executing an instruction 52 as an example of instruction information instructing a coordinated process for executing a plurality of processes in coordination and in which the identification information is described, the image processing device 12 reads out the token corresponding to the identification information described in the instruction 52 and performs a process of exchanging information with the cloud service using the read token. This makes it possible to exchange information with the cloud service without describing a token in the instruction 52. At this time, the identification information for identifying the user is at least one piece of information, namely, a device user ID with which the user authenticates with the image processing device 12 and is authorized to use the service, and a cloud user ID with which the user authenticates with the cloud service and is authorized to use the service.

[0041] Specifically, authentication of the cloud service is performed in the following procedure as shown in Fig. 7. Fig. 7 is a diagram for explaining a process for authenticating the cloud service in the information processing system 10 according to this embodiment.

[0042] 1. By operating the user interface 22 of the image processing device 12, the user inputs a device user ID and a password to log in to the image processing device. When the user is authenticated with the device user ID, the user is permitted to log in to the image processing device 12 and becomes able to perform various operations. The user starts the cloud cooperation application 54 that has been installed in advance. 2. The cloud cooperation application 54 acquires the two-dimensional code 56 including information for accessing the login screen of the cloud server 11 from the cloud server 11 and displays the two-dimensional code 56 on the user interface 22 . 3. The user reads the two-dimensional code 56 with the mobile terminal 16 or the like, and the mobile terminal 16 accesses the cloud server 11 based on the information contained in the two-dimensional code 56 and obtains a login screen from the cloud server 11. 4. The user logs in to the cloud service by entering a cloud user ID and password on the login screen. If the login is permitted, the cloud server 11 issues a token corresponding to the cloud user ID and password. In OAuth, the tokens issued are an access token, a refresh token, and an ID token. 5. The cloud-linked application 54 polls the cloud server 11 to obtain the authentication result for the two-dimensional code 56 issued to its own device. 6. If the authentication is permitted, the cloud-linked application 54 obtains a token, which allows the use of cloud services using the token. 7. The cloud cooperation application 54 creates an authentication information file 58 by associating the token acquired in step 6, the device user ID entered when logging in to the image processing device 12, the cloud user ID included in the ID token among the acquired tokens, and the device ID of the image processing device 12, and saves the file in the HDD 26, etc. By saving the authentication information file 58 in this manner, it becomes possible to identify the token using the user ID as a key.

[0043] Next, a flow from creating an instruction sheet 52 to transferring the fax reception result to a cloud service when transferring the fax reception result to a cloud service will be described. Fig. 8 is a diagram for explaining a flow from creating an instruction sheet to transferring the fax reception result to a cloud service when transferring the fax reception result to a cloud service in the information processing system 10 according to this embodiment.

[0044] 1. After creating the authentication information file 58 as described above, create the instruction sheet 52. The instruction sheet 52 describes, for example, a device user ID as a user having authority to execute the process to be transferred in the image processing device 12, a cloud user ID and device ID indicating a user permitted to access the cloud at the transfer destination, as well as transfer destination information such as a file path of the transfer destination. 2. The created instruction 52 is assigned to the box 50 that stores the fax reception result. As a result, when the fax reception result is stored, the linking process is performed according to the instruction 52. 3. When the fax is received, the linking process is started according to the instruction manual 52 stored in the box 50. 4. In order to perform the cooperative process described in the instruction manual 52, the cloud cooperative application 54 is started, and the cloud cooperative application 54 reads out the device user ID, cloud user ID, and device ID, which are identification information for identifying the user described in the instruction manual 52. If the read device ID is not information indicating the device itself, the process may be stopped. 5. The cloud cooperation application 54 searches the authentication information file 58 for a token that corresponds to the read user identification information, that is, the device user ID and cloud user ID. 6. If there is authentication information corresponding to the device user ID or cloud user ID, which is user identification information, the cloud cooperation application 54 acquires a corresponding token. 7. Cloud linking application 54 transfers the fax reception result to cloud server 11 using the acquired token. For example, the cloud linking application 54 accesses cloud server 11 using an access token from the acquired tokens to transfer information. Furthermore, when a refresh token is acquired, the refresh token is used to reissue the token, and the access token is used to transfer information to the cloud service. When a refresh token is acquired in this way, it becomes possible to exchange information with the cloud service using the refresh token even if the access token has expired.

[0045] Next, specific processing performed in the information processing system 10 according to this embodiment configured as described above will be described.

[0046] First, a specific process performed by the image processing device 12 when authenticating a cloud service will be described. Fig. 9 is a flowchart showing an example of the flow of processes performed by the image processing device 12 when authenticating a cloud service in the information processing system 10 according to this embodiment. Note that the process in Fig. 9 starts when, for example, the user interface 22 of the image processing device 12 is operated to instruct the start of the cloud-linked application 54.

[0047] In step 100, when the CPU 20A accepts and authenticates a login from a user using a device user ID, it starts up the cloud cooperation application 54 based on an instruction from the user and proceeds to step .

[0048] In step 102 , CPU 20 A acquires two-dimensional code 56 from cloud server 11 and proceeds to step 104 .

[0049] In step 104, the CPU 20A displays the two-dimensional code 56 on the user interface 22, and then the process proceeds to step .

[0050] In step 106, CPU 20A polls cloud server 11 for the authentication result corresponding to two-dimensional code 56, and then proceeds to step .

[0051] In step 108, CPU 20A judges whether or not authentication has been successful. This judges whether or not authentication has been successful and cloud server 11 has issued a token. If the judgement is negative, the series of processes ends, and if the judgement is positive, the process proceeds to step 110.

[0052] In step 110 , CPU 20 A acquires a token from cloud server 11 and proceeds to step 112 .

[0053] In step 112, the CPU 20A generates the authentication information file 58 and stores it in the HDD 26 or the like, and ends the series of processes. That is, the authentication information file 58 is created by associating the acquired token, the device ID entered when logging in to the image processing device 12, the user ID included in the ID token among the acquired tokens, and the device ID of the image processing device 12, and is stored in the HDD 26 or the like.

[0054] After creating the authentication information file in this manner, an instruction sheet 52 is created that lists the user identification information, such as the device user ID and cloud user ID, and stored in the box 50, thereby enabling collaboration with cloud services.

[0055] Next, a specific process performed by the image processing device 12 when the instruction sheet 52 and the fax reception result are stored in the box 50 will be described. Fig. 10 is a flowchart showing an example of the flow of the process performed by the image processing device 12 when the instruction sheet 52 and the fax reception result are stored in the box 50 in the information processing system 10 according to this embodiment. Fig. 11 is a sequence diagram showing an example of the flow of the process performed by the information processing system 10 when the fax reception result is stored in the box 50 in which the instruction sheet 52 is stored. The process in Fig. 10 starts, for example, when the fax reception result is stored in the box 50.

[0056] In step 200 , the CPU 20 A starts the cloud cooperation application 54 and proceeds to step 202 .

[0057] In step 202 , the CPU 20 A acquires the device ID and the cloud user ID, which are the user identification information written in the instruction book 52 , and proceeds to step 204 .

[0058] In step 204 , the CPU 20 A searches the authentication information file 58 for a token corresponding to the device user ID or cloud user ID, which is the user identification information, and proceeds to step 206 .

[0059] In step 206, the CPU 20A judges whether or not there is a corresponding token. If the judgment is affirmative, the process proceeds to step 208, and if not, the process proceeds to step 210.

[0060] In step 208, the CPU 20A performs error processing and ends the series of processes. The error processing may, for example, be a process of displaying on the user interface 22 a message indicating that the authentication has failed.

[0061] On the other hand, in step 210, the CPU 20A obtains a token corresponding to the device user ID or cloud user ID, which is the user identification information, from the authentication information file 58, and proceeds to step 112. For example, as shown in Fig. 11, a refresh token corresponding to the device user ID or cloud user ID, which is the user identification information, is obtained from the authentication information file 58.

[0062] In step 212, a transfer process using the token is performed, and the series of processes is terminated. In the transfer process using the token, for example, as shown in Fig. 11, the acquired refresh token is used to request cloud server 11 to reissue the token, thereby updating the token and acquiring a new token, and updating the token in authentication information file 58. Then, the updated access token is used to call an API (Application Programming Interface) of cloud server 11, and the fax reception result is transferred from image processing device 12 to cloud server 11.

[0063] In this manner, in this embodiment, since the processing linked to the cloud service is performed without recording the token in the instruction book 52, secondary use of the token can be prevented even if the instruction information is moved.

[0064] In the above embodiment, a token including a refresh token and an access token has been described as an example, but the present invention is not limited to this and any token may be used for authentication.

[0065] In the above embodiment, the case where the fax reception result is transferred to the cloud service is described as an example of the linkage process, but the linkage process is not limited to this. For example, other processes may be included, such as performing OCR (Optical Character Recognition / Reader) processing on the fax reception result or the scanned image and then transferring it to the cloud service. Alternatively, linkage processes that link other functions such as scanning, printing, and copying with the cloud service may be applied, or other linkage processes may be applied, such as transferring a document created by the client computer 14 or the like to the cloud service when the document is stored in the box 50 or the like. Alternatively, for linkage processes including a process of acquiring information stored in the cloud service, if an authentication information file 58 is created and saved when authenticating the cloud service, and at least one of identification information of the user ID and the device ID is entered in the instruction book 52, the process can be performed in the same manner as described above.

[0066] In addition, in the above embodiment, the authentication information file 58 was created and stored by associating the device user ID and cloud user ID, which are user identification information, with a token; however, the authentication information may be stored in an authentication information file created by associating the device user ID and cloud user ID, which are user identification information, with a token.

[0067] In addition, in the above embodiments, the term "processor" refers to a processor in a broad sense, and includes general-purpose processors (e.g., CPUs, etc.) and dedicated processors (e.g., GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic devices, etc.).

[0068] In addition, the operations of the processor in the above embodiments may be performed not only by one processor, but also by multiple processors located at physically separate locations working together. The order of the operations of the processor is not limited to the order described in the above embodiments, and may be changed as appropriate.

[0069] In addition, although the "system" in this embodiment has been described as being composed of multiple devices as an example, it may also be composed of a single device having some of the functions of the multiple devices.

[0070] The processing performed by the image processing device 12 according to the above embodiment may be processing performed by software, processing performed by hardware, or a combination of both. The processing performed by the image processing device 12 may be stored as a program in a storage medium and distributed.

[0071] Furthermore, the present disclosure is not limited to the above, and it goes without saying that various modifications can be made without departing from the spirit and scope of the present disclosure.

[0072] The following supplementary notes are further disclosed regarding the above embodiment. (((1))) a processor, the processor comprising: The token issued by the cloud service is associated with identification information that identifies the user and stored. When executing instruction information instructing a cooperative process in which a plurality of processes are executed in cooperation, in which the identification information is described, the token corresponding to the identification information described in the instruction information is read out; An information processing system that performs processing to send and receive information to and from the cloud service using the read token.

[0073] (((2))) The information processing system according to (((1))), wherein the identification information is at least one of user identification information for identifying a user and device identification information for identifying the device itself.

[0074] (((3))) The processor associates a refresh token with the identification information and stores it, and when executing the instruction information, obtains the refresh token corresponding to the instruction information, and uses the refresh token to obtain an access token from the cloud service to exchange information with the cloud service.

[0075] (((4))) The processor stores the instruction information in a predetermined storage location, and when information is stored in the storage location, starts the collaborative processing in accordance with the instruction information.

[0076] (((5))) On the computer, The token issued by the cloud service is associated with identification information that identifies the user and stored. When executing instruction information instructing a cooperative process in which a plurality of processes are executed in cooperation, in which the identification information is described, the token corresponding to the identification information described in the instruction information is read out; An information processing program for executing a process of transmitting and receiving information to and from the cloud service using the read token.

[0077] According to (((1))), it is possible to provide an information processing system capable of preventing secondary use of a token even if instruction information is moved.

[0078] According to (((2))), it is possible to identify tokens issued by the cloud.

[0079] According to ((3)), even if the access token has expired, it is possible to exchange information with a cloud service by using a refresh token.

[0080] According to (((4))), by storing information in a predetermined storage location, it becomes possible to perform processing for sending and receiving information to and from a cloud service.

[0081] According to (((5))), it is possible to provide an information processing program capable of preventing secondary use of a token even if instruction information is moved. [Explanation of symbols]

[0082] 10. Information Processing Systems 12 Image processing device 20 Control Unit 20A CPU 50 Box 52 Instructions 54 Cloud-linked applications 56 2D Code 58 Credentials File

Claims

1. a processor, the processor comprising: The token issued by the cloud service is associated with identification information that identifies the user and stored. When executing instruction information instructing a cooperative process in which a plurality of processes are executed in cooperation, in which the identification information is described, the token corresponding to the identification information described in the instruction information is read out; An information processing system that performs processing to send and receive information to and from the cloud service using the read token.

2. The information processing system according to claim 1 , wherein the identification information is at least one of device user identification information for identifying a user of the device itself and cloud user identification information for identifying a user of a cloud service.

3. The information processing system of claim 1, wherein the processor stores a refresh token in association with the identification information, and when executing the instruction information, obtains the refresh token corresponding to the instruction information, and uses the refresh token to obtain an access token from the cloud service to exchange information with the cloud service.

4. The information processing system according to claim 1 , wherein the processor stores the instruction information in a predetermined storage location, and when information is stored in the storage location, starts the cooperative process in accordance with the instruction information.

5. On the computer, The token issued by the cloud service is associated with identification information that identifies the user and stored. When executing instruction information instructing a cooperative process in which a plurality of processes are executed in cooperation, in which the identification information is described, the token corresponding to the identification information described in the instruction information is read out; An information processing program for executing a process of transmitting and receiving information to and from the cloud service using the read token.

Images