Information processing system and information processing program

Abstract

To provide an information processing system and an information processing program such that a machine administrator can take over even in the sudden absence of the machine administrator while a person in charge fails to take over in an operation style using multi-element authentication to authenticate the machine administrator.SOLUTION: If a machine administrator is changed or suddenly becomes absent, a user in an authority group instructs resetting or overwriting of multi-element information on the machine administrator, and then a multielement information control part 62 performs processing to reset or overwrite the multielement information on the machine administrator, and then initialize ID and a password for a machine administrator when the multielement information is reset or overwritten.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present disclosure relates to an information processing system and an information processing program. [Background technology]

[0002] Patent Document 1 discloses a service providing system in which a group user management system including a management module is provided separately from an application for providing a service, and the management module is provided with a user management unit that manages user information, a group management unit that manages groups to which the user belongs, and an access right list processing unit that manages functions in the application for which access rights can be set. It also discloses that an operation operator assigns users to one or more groups and sets access rights to applications for each group, thereby managing user access to applications based on the group to which the user belongs. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2006-202180 A Summary of the Invention [Problem to be solved by the invention]

[0004] In an operation mode where multi-factor authentication is used to authenticate a system operator, the multi-factor information needs to be updated when the system operator takes over as the system operator. However, if the system operator is suddenly absent without being able to take over as the system operator, no one will be able to manage the equipment as the system operator. Even if the first authentication information, one of the elements of the system operator's multi-factor authentication, is shared, there is no substitute for the second authentication information such as biometric information, so the system operator will not be recognized as the system operator.

[0005] In recent years, from the perspective of strengthening security, it has become common for maintenance and inspection personnel not to be given the authority to manage users. In order to restore the status quo, the maintenance and inspection personnel must initialize user information, and the status quo cannot be restored unless the equipment itself is initialized.

[0006] Therefore, the present disclosure aims to provide an information processing system and an information processing program that enable a takeover of the machine administrator even if the machine administrator is suddenly absent in a situation where the person in charge has not been able to take over, in an operational form in which multi-factor authentication is used to authenticate the machine administrator. [Means for solving the problem]

[0007] In order to achieve the above-mentioned object, an information processing system according to a first aspect includes a processor, which recognizes the user as a machine administrator when it receives first authentication information and second authentication information for a machine administrator, and resets or overwrites the second authentication information when an instruction to reset or overwrite the second authentication information is given by a user belonging to a predetermined authority group that allows the reset or overwrite of the second authentication information for the machine administrator, and performs processing to initialize the first authentication information for the machine administrator when the second authentication information is reset or overwritten.

[0008] An information processing system according to a second aspect is the information processing system according to the first aspect, wherein the processor notifies users of the authority group when the second authentication information is reset or overwritten.

[0009] An information processing system according to a third aspect is an information processing system according to the first aspect, wherein the processor temporarily denies the users of the authority group the authority of the authority group when the second authentication information is reset or overwritten.

[0010] An information processing system according to a fourth aspect is the information processing system according to the third aspect, wherein the processor notifies users of the authority group that the authority has been changed to prohibited.

[0011] In an information processing system according to a fifth aspect, in the information processing system according to the first aspect, the processor recognizes itself as a machine administrator when it receives initialized first authentication information and reset or overwritten second authentication information.

[0012] An information processing system according to a sixth aspect is an information processing system according to the fifth aspect, in which the processor accepts and sets first authentication information and second authentication information for a new machine administrator when recognizing the machine administrator for the first time.

[0013] In an information processing system according to a seventh aspect, in the information processing system according to the sixth aspect, when the processor accepts setting of the authority group from a new machine administrator, it notifies users of the set authority group that their authority has been changed.

[0014] An information processing program according to an eighth aspect causes a computer to recognize a user as a machine administrator when it receives first authentication information and second authentication information for a machine administrator, to reset or overwrite the second authentication information when an instruction to reset or overwrite the second authentication information is given by a user belonging to a predetermined authority group that allows the resetting or overwriting of the second authentication information for the machine administrator, and to execute a process of initializing the first authentication information for the machine administrator when the resetting or overwriting of the second authentication information is performed. Effect of the Invention

[0015] According to the first aspect, in an operational form in which multi-factor authentication is used to authenticate a machine administrator, an information processing system can be provided that enables a handover of the machine administrator even if the machine administrator is suddenly absent in a situation in which the person in charge has not been able to take over.

[0016] According to the second aspect, it is possible to prevent other users who belong to the authority group from resetting or overwriting the second authentication information.

[0017] According to the third aspect, it is possible to prevent the second authentication information from being reset or overwritten by another user who belongs to the authority group.

[0018] According to the fourth aspect, the users who belong to the authority group can know that the authority has been changed to prohibited.

[0019] According to the fifth aspect, it is possible to change the machine administrator to a user who belongs to the authority group for which the first authentication information has been reset or overwritten.

[0020] According to the sixth aspect, it becomes possible to set authentication information for a new machine administrator.

[0021] According to the seventh aspect, the user of the new authority group can know the change in authority.

[0022] According to the eighth aspect, in an operational form in which multi-factor authentication is used to authenticate a machine administrator, an information processing program can be provided that enables a takeover of the machine administrator even if the machine administrator suddenly becomes absent in a situation in which a handover of the person in charge has not been achieved. [Brief description of the drawings]

[0023] [Figure 1] 1 is a perspective view illustrating an external appearance of an image forming apparatus according to an embodiment of the present invention. [Diagram 2] 2 is a block diagram showing a configuration of a main part of an electrical system of the image forming apparatus according to the embodiment; [Diagram 3] 2 is a functional block diagram showing an example of a functional configuration of a control unit of the image forming apparatus according to the embodiment; FIG. [Figure 4] 11 is a flowchart showing an example of a flow of a process performed in a control unit of the image forming apparatus according to the present embodiment when a user belonging to an authority group resets or overwrites multi-factor information of a machine administrator. [Diagram 5] 11 is a flowchart showing an example of a flow of processes performed after access to a "machine administrator's multi-element information setting" screen is enabled in a control unit of the image forming apparatus according to the present embodiment. [Figure 6] 11 is a flowchart showing an example of a process flow for setting a new ID and password after the ID and password of a machine administrator are initialized in a control unit of the image forming apparatus according to the present embodiment. [Figure 7] 11 is a flowchart showing an example of a process flow for setting functions of a machine administrator after a new ID and password for the machine administrator are set in a control unit of the image forming apparatus according to the present embodiment. [Figure 8] 13 is a diagram showing an example of an initial state of a user's ID, password, multi-factor information, and authority group under the management of a machine administrator. FIG. [Figure 9] FIG. 13 illustrates an occurrence of a state in which the machine administrator is absent. [Figure 10] FIG. 13 is a diagram showing an example in which a general user A who belongs to an authority group overwrites the multi-factor information of the machine administrator with his or her own multi-factor information. [Figure 11] This figure explains the behavior of the control unit (resetting the machine administrator's ID and password) when general user A exercises the authority to reset or overwrite the machine administrator's multi-factor information. [Figure 12] This figure explains the behavior of the control unit when general user A exercises the authority to reset or overwrite the multi-factor information of the machine administrator (notifying the authority group of the reset or overwrite of the multi-factor information of the machine administrator). [Figure 13] 13 is a diagram to explain the behavior of the control unit (notifying the authority group of the change in authority) when general user A exercises authority to reset or overwrite the multi-factor information of the machine administrator. [Figure 14] This figure shows an example in which the ID and password of the machine administrator have been changed and general user A has logged in as a new machine administrator. [Figure 15] FIG. 13 is a diagram showing an example of locking out the account of general user A. [Figure 16] FIG. 13 is a diagram for explaining how general users B to D are given authority of an authority group and how the authority has been changed. [Figure 17] FIG. 13 is a diagram for explaining an example in which general user B takes over as the machine administrator from general user A while the machine administrator is present. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0024] An example of an embodiment of the present invention will be described in detail below with reference to the drawings. In this embodiment, an image forming apparatus will be described as an example of an information processing system. Fig. 1 is a perspective view showing the appearance of an image forming apparatus 10 according to this embodiment.

[0025] The image forming apparatus 10 according to the present embodiment has a print function of receiving various data via a communication line such as a network and performing image formation processing based on the received data. The image forming apparatus 10 according to the present embodiment also has a plurality of functions, such as a read function of reading an original to obtain image information representing the original, a copy function of copying an image recorded on the original onto paper, a facsimile function of transmitting and receiving various data via a telephone line (not shown), a transfer function of transferring document information such as image information read by the read function, and a storage function of storing document information such as read image information.

[0026] Moreover, the image forming apparatus 10 according to this embodiment includes an original reading unit 52 at the top of the apparatus, and the image forming unit 24 is disposed below the original reading unit 52. The original reading unit 52 includes an original transport unit (not shown) within the original cover 54. The original transport unit sequentially pulls in originals 56 placed on an original feeding unit 54A provided in the original cover 54, transports them onto a platen glass (not shown), and reads the image recorded on the originals 56. The original transport unit also discharges the originals 56 after the image reading has been completed onto an original discharge unit 54B provided in the original cover 54.

[0027] The document reading unit 52 is also provided with a user interface 22 that accepts various instruction operations from the user. The user interface 22 is provided with display buttons that realize the acceptance of instruction operations by a software program, a display 22A that displays various information, hardware keys 22B such as a numeric keypad, and the like. The display 22A is of a touch panel type that combines a display device such as a liquid crystal panel with a position input device such as a touch pad. The user interface 22 is used by the display buttons of the display 22A and the hardware keys 22B to set the number of copies and the magnification when using the copy function, and as dial keys of a telephone when using the facsimile function, and the like. The hardware keys 22B may be omitted.

[0028] On the other hand, the image forming unit 24 includes a paper feed storage unit 58 that stores paper sheets that serve as recording media for image formation. The image forming unit 24 takes out the paper sheets stored in the paper feed storage unit 58 one by one, and forms an image on the paper sheets based on image data, for example, by an electrophotographic process. The image forming unit 24 also sequentially discharges the paper sheets on which the image has been formed onto a paper discharge unit (not shown).

[0029] FIG. 2 is a block diagram showing the main configuration of an electrical system of the image forming apparatus 10 according to this embodiment.

[0030] 2, the image forming apparatus 10 according to this embodiment includes a control unit 20 including a central processing unit (CPU) 20A, a read only memory (ROM) 20B, and a random access memory (RAM) 20C. The CPU 20A controls the overall operation of the image forming apparatus 10. The RAM 20C is used as a work area when the CPU 20A executes various programs. The ROM 20B stores various control programs, various parameters, and the like in advance. In the image forming apparatus 10, each part of the control unit 20 is electrically connected to each other via a system bus 42.

[0031] On the other hand, the image forming apparatus 10 according to the present embodiment includes a storage unit 26 that stores various data, application programs, and the like. The image forming apparatus 10 is also provided with a display control unit 28 that is connected to the user interface 22 and controls the display of various operation screens, etc. on the display 22A of the user interface 22. The image forming apparatus 10 is also provided with an operation input detection unit 30 that is connected to the user interface 22 and detects operation instructions input via the user interface 22. In the image forming apparatus 10, the storage unit 26, the display control unit 28, and the operation input detection unit 30 are electrically connected to a system bus 42. For example, the storage unit 26 may be a hard disk drive (HDD), or a non-volatile storage unit such as a flash memory.

[0032] The image forming apparatus 10 according to the present embodiment includes a reading control unit 32 that controls the optical image reading operation by the document optical reading unit 46 and the document feeding operation by the document transport unit, and an image forming control unit 34 that controls the image forming process by the image forming unit 24 and the transport of paper to the image forming unit 24 by the transport unit 25. The image forming apparatus 10 also includes a communication line interface (communication line I / F) unit 36 ​​that is connected to a communication line (not shown) and transmits and receives communication data to and from other external devices such as a server connected to the communication line, and an image processing unit 44 that performs various image processing. The image forming apparatus 10 also includes a facsimile interface (facsimile I / F) unit 38 that is connected to a telephone line (not shown) and transmits and receives facsimile data to and from a facsimile device connected to the telephone line. The image forming apparatus 10 also includes a transmission / reception control unit 40 that controls the transmission and reception of facsimile data via the facsimile interface unit 38. The image forming apparatus 10 also includes a multi-element information reading device 50 that reads multi-element information such as biometric information including fingerprints, faces, veins, irises, veins, voiceprints, and signatures, and a USB device communication unit 48 that communicates with USB (Universal Serial Bus) devices such as externally connected devices 51 including media readers. In the image forming apparatus 10, the transmission / reception control unit 40, the reading control unit 32, the image formation control unit 34, the communication line interface unit 36, the facsimile interface unit 38, the image processing unit 44, and the USB device communication unit 48 are electrically connected to a system bus 42.

[0033] With the above configuration, the image forming apparatus 10 according to the present embodiment executes access to the RAM 20C, the ROM 20B, and the storage unit 26 by the CPU 20A. The image forming apparatus 10 also executes control of display of information such as an operation screen and various messages on the display 22A of the user interface 22 via the display control unit 28 by the CPU 20A. The image forming apparatus 10 also executes control of operation of the original optical reading unit 46 and the original transport unit via the reading control unit 32 by the CPU 20A. The image forming apparatus 10 also executes control of operation of the image forming unit 24 and the transport unit 25 via the image formation control unit 34, and control of transmission and reception of communication data via the communication line interface unit 36 ​​by the CPU 20A. The image forming apparatus 10 also executes control of transmission and reception of facsimile data via the facsimile interface unit 38 by the transmission and reception control unit 40 by the CPU 20A. Furthermore, the image forming apparatus 10 has the CPU 20A grasp the operation contents in the user interface 22 based on the operation information detected by the operation input detection unit 30, and executes various controls based on the operation contents. Also, based on the multi-element information read by the multi-element information reading device 50 and the information obtained from the externally connected device 51, the image forming apparatus 10 controls the authority to use the image forming apparatus 10, etc.

[0034] Moreover, in the image forming apparatus 10 according to the present embodiment, an operation form is applied in which multi-factor authentication is used to authenticate the machine administrator. Multi-factor authentication is a method of performing authentication by combining three different authentication factors, namely, possession information, knowledge information, and biometric information. In the present embodiment, as an example, an example of performing authentication using knowledge information as an example of first authentication information and biometric information as an example of second authentication information will be described. As for the knowledge information, an ID and a password stored in an IC card or the like are read by an externally connected device 51. As for the biometric information, the biometric information is read by a multi-factor information reading device 50. Note that hereinafter, biometric information may be referred to as multi-factor information.

[0035] Next, a functional configuration realized by the CPU 20A of the control unit 20 expanding a program stored in the ROM 20B into the RAM 20C and executing it in the image forming apparatus 10 according to this embodiment will be described. Fig. 3 is a functional block diagram showing an example of the functional configuration of the control unit 20 of the image forming apparatus 10 according to this embodiment.

[0036] The control unit 20 has the functions of a multi-factor information management unit 60 , a multi-factor information control unit 62 , a user management unit 64 , and a group authority management unit 66 .

[0037] The multi-factor information management unit 60 manages multi-factor information as an example of second authentication information that links biometric information such as a fingerprint, face, iris, vein, voiceprint, and signature with a user.

[0038] The multifactor information control unit 62 compares the multifactor information, such as biometric information, read by the multifactor information reading device 50 with the multifactor information managed by the multifactor information management unit 60 to control authentication of the user.

[0039] The user management unit 64 manages an ID and a password for identifying a user as an example of the first authentication information. For example, the ID and the password may be managed by authenticating the user by reading an IC card or the like using the external connection device 51 such as a media reader and comparing the ID and the password with a preregistered ID and password.

[0040] The group authority management unit 66 manages predetermined authority groups that are permitted to reset or overwrite multi-factor information. The authority groups are set by the machine administrator.

[0041] In an operation mode in which multi-factor authentication is used to authenticate the period manager, as in this embodiment, it is necessary to update the multi-factor information when the machine manager takes over as the person in charge. If the machine manager is suddenly absent without being able to take over as the person in charge, no one will be able to manage the equipment as the machine manager. Even if the first authentication information, which is one of the elements of the machine manager's multi-factor authentication, is shared, there is no substitute for the second authentication information, such as biometric information, and therefore the person will not be recognized as the machine manager.

[0042] In recent years, from the perspective of strengthening security, it is common for maintenance personnel not to be given the authority to manage users, and in order to restore the current state, the maintenance personnel must initialize the user information, which cannot be restored unless the equipment itself is initialized. When the machine itself is initialized, the stored information is also initialized.

[0043] Therefore, in this embodiment, when a user of an authority group changes the machine administrator or the machine administrator is suddenly absent, the user belonging to the authority group instructs the multi-factor information control unit 62 to reset or overwrite the multi-factor information of the machine administrator, and when the multi-factor information is reset or overwritten, a process is performed to initialize the ID and password for the machine administrator. As a result, login as the machine administrator is permitted using the reset or overwritten multi-factor information and the initialized ID and password.

[0044] In addition, when multi-element information is reset or overwritten, the multi-element information control unit 62 performs processes of notifying users of the authority group, temporarily prohibiting the users of the authority group from having authority as the authority group, and notifying users of the authority group that their authority has been changed.

[0045] Furthermore, when the multi-factor information control unit 62 receives an synchronized ID and password, and reset or overwritten multi-factor information, it performs processing to recognize the person as a machine administrator.

[0046] Furthermore, when recognizing a system administrator for the first time, the multi-factor information control unit 62 performs a process of receiving and setting a new system administrator's ID, password, and multi-factor information.

[0047] Furthermore, when the multi-element information control unit 62 receives a new authority group setting from a new machine administrator, it performs processing to notify users of the set authority group that their authority has been changed.

[0048] Next, a specific process performed by the control unit 20 of the image forming apparatus 10 according to this embodiment configured as described above will be described.

[0049] First, a process performed when a user belonging to an authority group resets or overwrites the multi-factor information of a machine administrator will be described with reference to Fig. 4. Fig. 4 is a flow chart showing an example of a process flow performed in the control unit 20 of the image forming device 10 according to this embodiment when a user belonging to an authority group resets or overwrites the multi-factor information of a machine administrator. Note that the process in Fig. 4 starts, for example, when authentication information such as an ID and a password is obtained by reading an IC card or the like using the external connection device 51, and the multi-factor information is read by the multi-factor information reading device 50 and authentication is permitted.

[0050] In step 100, the CPU 20A detects that a user n has logged in and proceeds to step .

[0051] In step 102, the CPU 20A judges whether or not to access the function setting screen. For example, the judgement is made by judging whether or not an instruction to access the function setting screen has been issued by operating the user interface 22 of the image forming apparatus 10. If the judgement is affirmative, the process proceeds to step 104, and if another operation has been performed, the judgement is negative, and the series of processes is terminated.

[0052] In step 104, the CPU 20A reads the authority information of the authority group to which the user n belongs, and the process proceeds to step .

[0053] In step 106, the CPU 20A determines whether the "machine administrator's multi-factor information overwrite" authority of the user n is "allowed." If the determination is affirmative, the process proceeds to step 108, and if not, the process ends.

[0054] In step 108, CPU 20A makes the “setting of multi-factor information of machine administrator” screen accessible from the function setting screen, and proceeds to step 110.

[0055] In step 110, CPU 20A displays a message that the "Setting multi-factor information of the machine administrator" screen is now accessible, and ends the series of processes. Note that step 110 may be omitted.

[0056] Next, the process performed after the "Setting multi-factor information for machine administrator" screen is made accessible will be described with reference to Fig. 5. Fig. 5 is a flow chart showing an example of the flow of the process performed after the "Setting multi-factor information for machine administrator" screen is made accessible in the control unit 20 of the image forming apparatus 10 according to this embodiment. Note that the process of Fig. 5 starts when an instruction to display the setting screen for multi-factor information for machine administrator is given after the process of Fig. 4.

[0057] In step 200, the CPU 20A displays a setting screen for the multi-factor information of the machine administrator, and then proceeds to step 202.

[0058] In step 202, the CPU 20A judges whether or not the multi-factor information of the user n has been input. For example, the judgement is made by judging whether or not the multi-factor information of the user n has been read by the multi-factor information reading device 50. If the judgement is affirmative, the process proceeds to step 204, and if the judgement is negative, the series of processes is terminated.

[0059] In step 204 , the CPU 20 A overwrites the multi-factor information of the system administrator with the multi-factor information of the user n, and then the process proceeds to step 206 .

[0060] In step 206, the CPU 20A initializes the ID and password of the system administrator, and then proceeds to step 208.

[0061] In step 208, CPU 20A notifies all users belonging to the authority group that the multi-factor information of the machine administrator has been changed, and proceeds to step 210. For example, the notification to all users is made by sending an e-mail.

[0062] In step 210, CPU 20A temporarily changes the authority of all users belonging to the authority group except for the system administrator to "prohibited" and proceeds to step 212. In other words, by temporarily prohibiting the authority, it is possible to prevent the multi-factor information of the system administrator from being reset or overwritten by other users in the authority group.

[0063] In step 212, CPU 20A notifies all users belonging to the authority group that their authority has been changed, and then the process proceeds to step 214.

[0064] In step 214, CPU 20A displays a screen prompting the user to set an ID and password for the system administrator, and ends the series of processes.

[0065] Next, the process of setting a new ID and password after the ID and password of the machine administrator are initialized will be described with reference to Fig. 6. Fig. 6 is a flow chart showing an example of the process flow when setting a new ID and password after the ID and password of the machine administrator are initialized in the control unit 20 of the image forming apparatus 10 according to this embodiment. Note that the process of Fig. 6 starts, for example, when an instruction to display a machine administrator login screen is given after the process of Fig. 5.

[0066] In step 300, the CPU 20A displays a login screen for the system administrator, and then proceeds to step 302.

[0067] In step 302, the CPU 20A judges whether the ID, password, and multi-factor information of the machine administrator have been input. This judges whether the initialized ID and password, and the multi-factor information have been input. The CPU 20A waits until the judgement is affirmative, and proceeds to step 304.

[0068] In step 304, CPU 20A collates the input information and proceeds to step 306. That is, the ID, password, and multi-factor information of the user who reset or overwrote the multi-factor information of the system administrator are collated with the input information entered in step 302.

[0069] In step 306, CPU 20A determines whether or not it has been confirmed that the user is a system administrator. This determination is made by determining whether or not the ID, password, and multi-factor information of the user who reset or overwrote the system administrator's multi-factor information match the information entered in step 302. If the determination is affirmative, the process proceeds to step 308, and if not, the process proceeds to step 316.

[0070] In step 308, the CPU 20A determines whether or not this is the first time the system administrator has logged in. If the determination is negative, the process proceeds to step 310, and if the determination is positive, the process proceeds to step 312.

[0071] In step 310, the CPU 20A performs processing for determining that the login of the system administrator has been successful, terminating the series of processing in the system administrator's logged-in state, and accepting an operation by the system administrator.

[0072] On the other hand, in step 312, the CPU 20A determines whether or not a command to change the ID and password of the machine administrator has been issued. If the command is denied, the process proceeds to step 314, and if the command is affirmative, the process proceeds to step 318.

[0073] In step 314, CPU 20A guides the user to the effect that it is essential to change the initial ID and password of the system administrator, and then proceeds to step 316.

[0074] In step 316, CPU 20A ends the series of processes, determining that the administrator's login has failed.

[0075] On the other hand, in step 318, CPU 20A determines whether or not a new ID and password for the system administrator have been input, and waits until the determination is affirmative, and then proceeds to step 320.

[0076] In step 320, the CPU 20A changes the ID and password of the system administrator, and then proceeds to step 322.

[0077] In step 322, CPU 20A determines that the login of the system administrator has been successful, and proceeds to step 324 in the system administrator's logged-in state.

[0078] In step 324, CPU 20A displays a message prompting the user to access the function setting screen for the system administrator, and ends the series of processes. Note that the process in step 324 may be omitted.

[0079] Next, the process of setting the functions of the machine administrator after a new ID and password for the machine administrator are set will be described with reference to Fig. 7. Fig. 7 is a flow chart showing an example of the process flow when setting the functions of the machine administrator after a new ID and password for the machine administrator are set in the control unit 20 of the image forming device 10 according to this embodiment. The process of Fig. 7 starts when an instruction to display a function setting screen for the machine administrator is given after the process of Fig. 6.

[0080] In step 400, the CPU 20A displays a function setting screen for the machine administrator, and then proceeds to step 402.

[0081] In step 402, the CPU 20A judges whether or not an access to the authority group management screen has been instructed. If the judgment is affirmative, the process proceeds to step 404, and if not, the series of processes is terminated and the setting of another machine administrator is performed.

[0082] In step 404, CPU 20A displays an authority group management screen, and then proceeds to step 406.

[0083] In step 406, CPU 20A determines whether or not an authority group has been set. This is done by determining whether or not a user who is to be a part of the authority group has been designated. The process waits until the determination is affirmative, and proceeds to step 408.

[0084] In step 408, CPU 20A sets the authority for “overwriting multi-factor information of system administrator” of the user who is the authority group to “allowed”, and proceeds to step 410.

[0085] In step 410, CPU 20A notifies the users of the authority group that their authority has been changed, and ends the series of processes. For example, the notification to the users of the authority group is made by sending an e-mail.

[0086] Next, the above-mentioned process performed by the control unit 20 of the image forming apparatus 10 according to the present embodiment will be described with a specific example.

[0087] For example, a case will be described in which general users A to D belong to an authority group under the management of a machine administrator as shown in Fig. 8. Fig. 8 is a diagram showing an example of the initial state of the ID, password, multi-factor information, and authority group of users under the management of a machine administrator.

[0088] In the example of the initial state in FIG. 8, the machine administrator has an ID of 11111, a password of aaa, and multi-factor information of [001:20230209-1558-aaaaa]. General user A has an ID of 22222, a password of bbb, and multi-factor information of [002:20230210-1602-bbbbb]. General user B has an ID of 33333, a password of ccc, and multi-factor information of [003:20230211-1608-ccccc]. General user C has an ID of 44444, a password of ddd, and multi-factor information of [004:20230212-1621-ddddd]. General user D has an ID of 55555, a password of eee, and multi-factor information of [005:20230213-1624-eeeee]. In Fig. 8, the machine administrator and general users A to D are set as an authority group. The presence status of the machine administrator and general users A to D is set as being all present. The users, IDs, passwords, multi-factor information, and authority groups in Fig. 8 are pre-stored in the control unit 20, and the presence status and messages are written to explain the processing performed by the control unit.

[0089] If the system administrator is absent from the initial state without being able to take over as shown in Fig. 9, the system administrator will be unable to manage the devices. Fig. 9 is a diagram showing the occurrence of an absence of the system administrator.

[0090] Therefore, a user belonging to an authority group resets or overwrites the multi-factor information of the machine administrator. For example, as shown in Fig. 10, general user A who belongs to an authority group resets the multi-factor information of the machine administrator or overwrites it with his / her own multi-factor information. Fig. 10 is a diagram showing an example in which general user A who belongs to an authority group overwrites the multi-factor information of the machine administrator with his / her own multi-factor information.

[0091] When general user A exercises the authority to reset or overwrite the multi-factor information of the machine administrator, the control unit 20 resets the ID and password of the machine administrator and changes them to the initial ID and password, as shown in Fig. 11. Fig. 11 shows an example in which the initial ID value is changed to "defuserid" and the initial password value is changed to "defpass". Fig. 11 is a diagram for explaining the behavior of the control unit 20 (resetting the ID and password of the machine administrator) when general user A exercises the authority to reset or overwrite the multi-factor information of the machine administrator.

[0092] When the ID and password of the machine administrator are reset, a message such as "Person A has overwritten the multi-factor information of the machine administrator" is sent to all users in the authority group, as shown in Fig. 12. Fig. 12 is a diagram for explaining the behavior of the control unit 20 accompanying execution of the authority of general user A to reset or overwrite the multi-factor information of the machine administrator (notifying the authority group of the reset or overwrite of the multi-factor information of the machine administrator).

[0093] Also, as shown in Fig. 13, the fact that the authority has been changed to "prohibited" is notified to all users belonging to the authority group except the machine administrator, such as "overwrite authority has been set to prohibited." Fig. 13 is a diagram for explaining the behavior of the control unit 20 (notifying the authority group of the change in authority) when general user A exercises the authority to reset or overwrite the machine administrator's multi-factor information.

[0094] Next, general user A who has the multi-factor information of the system administrator logs in as the system administrator and changes the system administrator's initial ID and password at the system administrator's first login. As shown in Fig. 14, by changing the ID and password, the system administrator is officially logged in as the system administrator and the system administrator is placed in a presence state. Until the ID and password are changed, the system administrator login is not completed and operations as the system administrator are not possible. Fig. 14 is a diagram showing an example in which the system administrator's ID and password have been changed and general user A has logged in as the new system administrator. The example in Fig. 14 shows an example in which the system administrator's ID has been changed to 22222_KO and the password to bbb_KO.

[0095] Here, if the account of general user A is not needed, the account may be invalidated and locked out as shown in Fig. 15. Fig. 15 is a diagram showing an example in which the account of general user A is locked out.

[0096] Next, the new system administrator, general user A, grants the authority of the authority group to the new users who are the targets of system administrator handover. For example, as shown in FIG. 16, the authority of the authority group is granted to general users B to D.

[0097] Then, the user to whom the authority of the authority group has been newly granted is notified that the authority has been changed. For example, as shown in Fig. 16, a message such as "Overwrite authority has been granted" is notified to the user by e-mail or the like. Fig. 16 is a diagram for explaining the notification that the authority of the authority group has been granted to general users B to D and that the authority has been changed.

[0098] By setting an authority group in this way, even if the system administrator is suddenly absent, a user of the authority group can change the system administrator and manage the devices as the system administrator.

[0099] In the above embodiment, a case where the machine administrator becomes absent before taking over has been described, but the same procedure is also used for taking over the machine administrator role when the machine administrator is present. For example, a case where general user B takes over the machine administrator role from person A shown in FIG. 17 from the initial state in FIG. 8 will be described. FIG. 17 is a diagram for explaining an example where general user B takes over the machine administrator role from person A when the machine administrator is present.

[0100] First, general user B, who belongs to an authority group, resets the system administrator’s multi-factor information or overwrites it with his or her own multi-factor information.

[0101] When the multi-factor information of the system administrator is reset or overwritten, the ID and password of the system administrator are initialized to initial values ​​by the control unit 20. For example, the ID is initialized to "defuserid" and the password is initialized to "defpass" as the initial values.

[0102] In addition, the fact that general user B has exercised authority is notified to all users belonging to the authority group by the control unit 20. For example, a message such as "B has overwritten the multi-factor information of the machine administrator" is sent to all users in the authority group.

[0103] Furthermore, the control unit 20 changes the authority of all users belonging to the authority group except for the machine administrator to prohibited, and notifies all users belonging to the authority group except for the machine administrator that the authority has been changed. For example, a message such as "Overwrite authority has been set to prohibited" is sent to all users in the authority group.

[0104] Next, general user B, who has the multi-factor information of the system administrator, logs in to the system administrator and changes the system administrator's initial ID and password when logging in for the first time. By changing the ID and password, the system administrator is officially logged in and the system administrator is present. Note that until the ID and password are changed, the system administrator login is not completed and operations as the system administrator are not possible.

[0105] Here, if the account of general user B who has become the system administrator is no longer necessary, the account may be locked out and disabled as shown in FIG.

[0106] General user B grants the authority of the authority group to general users A, C, and D who are new targets of machine administrator handover. As a result, the control unit 20 notifies the target users that the authority has been changed. For example, a message such as "Overwrite authority has been set to permitted" is sent to the target users.

[0107] In this way, when the system administrator takes over from the present state, the system administrator takes over in the same procedure as in the above embodiment.

[0108] In the above embodiment, the image forming apparatus 10 has been described as an example of an information processing system, but the present invention is not limited thereto. For example, other apparatuses such as an image processing apparatus may be applied instead of the image forming apparatus 10. Alternatively, a network system including an image forming apparatus and a server may be applied as the information processing system. In this case, a part or all of the processing performed by the control unit 20 may be performed by the server.

[0109] In addition, in the above embodiment, an example of multi-factor authentication has been described in which authentication is performed by combining biometric information and knowledge information. However, authentication may be performed by other combinations of possession information, knowledge information, and biometric information.

[0110] In addition, in the above embodiments, the term "processor" refers to a processor in a broad sense, and includes general-purpose processors (e.g., CPUs, etc.) and dedicated processors (e.g., GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic devices, etc.).

[0111] In addition, the operations of the processor in the above embodiments may be performed not only by one processor, but also by multiple processors located at physically separate locations working together. The order of the operations of the processor is not limited to the order described in the above embodiments, and may be changed as appropriate.

[0112] In addition, although the "system" in this embodiment has been described as being composed of multiple devices as an example, it may also be composed of a single device having some of the functions of the multiple devices.

[0113] The processing performed by the control unit 20 of the image forming apparatus 10 according to the above embodiment may be processing performed by software, processing performed by hardware, or a combination of both. The processing performed by the control unit 20 of the image forming apparatus 10 may be stored as a program in a storage medium and distributed.

[0114] Furthermore, the present disclosure is not limited to the above, and it goes without saying that various modifications can be made without departing from the spirit and scope of the present disclosure.

[0115] The following supplementary notes are further disclosed regarding the above embodiment. (((1))) a processor, the processor comprising: When the first and second authentication information for the system administrator is received, the system administrator recognizes the user as the system administrator. resetting or overwriting the second authentication information when a user who belongs to a predetermined authority group that is permitted to reset or overwrite the second authentication information for a machine administrator instructs the resetting or overwriting of the second authentication information; an information processing system that performs processing to initialize the first authentication information for a machine administrator when the second authentication information is reset or overwritten;

[0116] (((2))) The information processing system according to (((1))), wherein the processor notifies a user of the authority group when the second authentication information is reset or overwritten.

[0117] (((3))) The information processing system described in (((1))) or (((2))), wherein the processor temporarily denies the user of the authority group the authority of the authority group when the second authentication information is reset or overwritten.

[0118] (((4))) The information processing system according to (((3))), wherein the processor notifies users of the authority group that the authority has been changed to prohibited.

[0119] (((5))) The information processing system described in any one of (((1))) to (((4))), wherein the processor recognizes the user as a machine administrator when it receives the first authentication information that has been initialized and the second authentication information that has been reset or overwritten.

[0120] (((6))) The information processing system according to (((5))), wherein the processor accepts and sets first authentication information and second authentication information for a new system administrator when recognizing the system administrator for the first time.

[0121] (((7))) When the processor accepts the setting of the authority group from a new machine administrator, it notifies users of the set authority group that their authority has been changed (((6))).

[0122] (((8))) On the computer, When the first and second authentication information for the system administrator is received, the system administrator recognizes the user as the system administrator. resetting or overwriting the second authentication information when a user who belongs to a predetermined authority group that is permitted to reset or overwrite the second authentication information for a machine administrator instructs the resetting or overwriting of the second authentication information; an information processing program for executing a process of initializing the first authentication information for a machine administrator when the second authentication information is reset or overwritten;

[0123] According to (((1))), in an operation mode in which multi-factor authentication is used to authenticate a machine administrator, it is possible to provide an information processing system that enables a handover of the machine administrator even if the machine administrator is suddenly absent in a situation in which the person in charge has not been able to take over.

[0124] According to (((2))), it is possible to prevent other users who belong to the authority group from resetting or overwriting the second authentication information.

[0125] According to (((3))), it is possible to prevent the second authentication information from being reset or overwritten by other users who belong to the authority group.

[0126] According to (((4))), users who belong to an authority group can know that their authority has been changed to prohibited.

[0127] According to (((5))), it is possible to change the machine administrator to a user who belongs to the authority group for which the first authentication information has been reset or overwritten.

[0128] According to (((6))), it is possible to set authentication information for a new system administrator.

[0129] According to (((7))), users of the new authority group can be made aware of the change in authority.

[0130] According to (((8))), in an operation mode in which multi-factor authentication is used to authenticate a machine administrator, an information processing program can be provided that enables a takeover of the machine administrator even if the machine administrator is suddenly absent in a situation in which the person in charge has not been able to take over. [Explanation of symbols]

[0131] 10 Image forming device 20 Control section 20A CPU 60 Multi-factor information management department 62 Multi-element information control section 64 User Management Department 66 Group Authority Management Department

Claims

1. a processor, the processor comprising: When the first authentication information and the second authentication information for the system administrator are received, the system administrator is recognized as the system administrator, resetting or overwriting the second authentication information when a user who belongs to a predetermined authority group that is permitted to reset or overwrite the second authentication information for a machine administrator instructs the resetting or overwriting of the second authentication information; An information processing system that performs processing to initialize the first authentication information for a machine administrator when the second authentication information is reset or overwritten.

2. The information processing system according to claim 1 , wherein the processor notifies a user of the authority group when the second authentication information is reset or overwritten.

3. The information processing system according to claim 1 , wherein the processor temporarily denies the user of the authority group the authority of the authority group when the second authentication information is reset or overwritten.

4. The information processing system according to claim 3 , wherein the processor notifies users of the authority group that the authority has been changed to prohibited.

5. The information processing system according to claim 1 , wherein the processor recognizes the user as a machine administrator when the processor receives the first authentication information that has been initialized and the second authentication information that has been reset or overwritten.

6. The information processing system according to claim 5 , wherein the processor receives and sets the first authentication information and the second authentication information for a new system administrator when recognizing the system administrator for the first time.

7. 7. The information processing system according to claim 6, wherein when the processor accepts the setting of the authority group from a new machine administrator, the processor notifies users of the authority group that their authority has been changed.

8. On the computer, When the first authentication information and the second authentication information for the system administrator are received, the system administrator is recognized as the system administrator, resetting or overwriting the second authentication information when a user who belongs to a predetermined authority group that is permitted to reset or overwrite the second authentication information for a machine administrator instructs the resetting or overwriting of the second authentication information; an information processing program for executing a process of initializing the first authentication information for a machine administrator when the second authentication information is reset or overwritten;

Images