Image forming device and method for controlling the same

Abstract

To provide an image forming device or the like that can suppress a decrease in user convenience regarding the output of a setting screen related to authentication processing even for an authentication method that requires prior authorization.SOLUTION: An image forming device includes a communication unit which communicates with an external terminal device via a network, and a control unit. The control unit receives, via the communication unit, settings of an authentication method related to the use of resources on an external service that are accepted via a web page screen displayed on a display unit of the external terminal device.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present disclosure relates to an image forming apparatus and the like. [Background technology]

[0002] For example, when an image forming device such as a multifunction peripheral executes a job related to sending and receiving emails, authentication by the email server is required. Until now, an authentication method that authenticates the image forming device with a user name (ID) and password has been generally used.

[0003] Incidentally, recently, in place of conventional authentication methods, there has been a demand for more secure authentication methods, such as OAuth2.0 authentication, which requires prior authorization to use resources (see, for example, Patent Document 1). [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Patent Publication No. 2021-152835 Summary of the Invention [Problem to be solved by the invention]

[0005] The present disclosure aims to provide an image forming apparatus etc. that can suppress a decrease in user convenience in outputting a setting screen related to authentication processing, even in an authentication method that requires prior authorization. [Means for solving the problem]

[0006] In order to solve the above problem, the image forming apparatus of the present disclosure is capable of setting an authentication method, and is equipped with an output unit that outputs screen information of a setting screen corresponding to the authentication method that requires prior authorization by the authorization service when an authentication method that requires prior authorization by the authorization service is selected, and a control unit that controls the output of the screen information by the output unit, and is characterized in that the control unit determines the display content of the setting screen depending on the output destination of the screen information, and controls the output of the screen information including the display content.

[0007] In addition, the output method according to the present disclosure is an output method for outputting screen information of a setting screen corresponding to an authentication method that requires prior authorization by an authorization service, and is characterized in that it determines the display content of the setting screen depending on the output destination of the screen information, and outputs the screen information including the display content. Effect of the Invention

[0008] According to the present disclosure, it is possible to provide an image forming apparatus etc. that can suppress a decrease in user convenience in outputting a setting screen related to authentication processing, even in the case of an authentication method that requires prior authorization. [Brief description of the drawings]

[0009] [Figure 1] FIG. 2 is a schematic configuration diagram illustrating an example of a connection configuration of the multifunction peripheral according to the first embodiment. [Diagram 2] FIG. 2 is a diagram illustrating the functional configuration of the multifunction peripheral according to the first embodiment. [Diagram 3] FIG. 2 is a diagram illustrating a functional configuration of an external terminal device according to the first embodiment. [Figure 4] 4 is a flowchart illustrating a process flow according to the first embodiment. [Diagram 5] 4 is a flowchart illustrating a process flow according to the first embodiment. [Figure 6] FIG. 13 is a diagram illustrating an output destination management table. [Figure 7] FIG. 4 is a diagram illustrating an operation example according to the first embodiment. [Figure 8] FIG. 4 is a diagram illustrating an operation example according to the first embodiment. [Figure 9] FIG. 4 is a diagram illustrating an operation example according to the first embodiment. [Figure 10] FIG. 4 is a diagram illustrating an operation example according to the first embodiment. [Figure 11] FIG. 11 is a diagram illustrating the functional configuration of a multifunction peripheral according to a second embodiment. [Figure 12] 10 is a flowchart illustrating a process flow according to the second embodiment. [Figure 13] FIG. 11 is a diagram illustrating an operation example according to the second embodiment. [Figure 14] FIG. 11 is a diagram illustrating an operation example according to the second embodiment. [Figure 15] FIG. 11 is a diagram illustrating an operation example according to the second embodiment. [Figure 16] 13 is a flowchart illustrating a process flow according to the third embodiment. [Figure 17] FIG. 13 is a diagram illustrating an operation example according to the third embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. Note that the following embodiments are merely examples for explaining the present disclosure, and the technical content of the description described in the claims is not limited to the following description.

[0011] When using a conventional authentication method that uses a user name (ID) and password for authentication, the information required for authentication can be registered in the same manner whether it is a setting screen that accepts input of authentication information on the image forming device or a Web page screen that reproduces the setting screen. Therefore, there was no problem in displaying the same content on the setting screen of the image forming device and the Web page screen.

[0012] However, in an authentication method that requires prior authorization, it may not be possible to perform authentication processing via a Web screen due to the processing flow. If the display content of the Web page screen is the same as that of the setting screen of the image forming apparatus even though the authentication processing cannot be performed, this may confuse the user and reduce convenience.

[0013] For example, Patent Document 1 discloses that when an information processing device receives OAuth 2.0 authentication for an external service, the external service executes an authorization process in response to a request from the information processing device, and an access token is obtained using an authorization code redirected from the external service to the information processing device.

[0014] However, the conventional technology does not anticipate a case where an authentication process is requested from a Web page screen (Web-UI) to an external service.

[0015] In the present disclosure, the following embodiment realizes an image forming apparatus capable of suppressing a decrease in user convenience in outputting a setting screen related to authentication processing, even in an authentication method that requires prior authorization.

[0016] [1 First embodiment] The first embodiment is a form of an image forming apparatus that is capable of setting an authentication method and includes an output unit that outputs screen information of a setting screen corresponding to the authentication method that requires prior authorization by the authorization service when the authentication method that requires prior authorization by the authorization service is selected, and a control unit that controls the output of the screen information by the output unit, and the control unit determines the display content of the setting screen according to the output destination of the screen information and controls to output the screen information including the display content. In the first embodiment, a multifunction peripheral that can realize jobs related to each operation mode such as print, copy, fax, and image transmission in a single housing will be described as one form of an image forming apparatus.

[0017] FIG. 1 is a diagram for explaining an example of a connection form between an external terminal device 30 (30a, 30b) and an external service 50 with respect to a multifunction device 10. Here, the multifunction device 10 is one form of an image forming device according to the present disclosure. The multifunction device 10 according to the present disclosure also functions as a server device capable of providing a setting screen related to job execution and device setting to the external terminal device 30 via a Web application (Web-UI) using a communication protocol such as HTTP (Hypertext transfer protocol) or a native application such as a linked application. In FIG. 1, an output destination that outputs screen information related to the setting screen via a Web application is described as the external terminal device 30a, and an output destination that outputs screen information related to the setting screen via a linked application is described as the external terminal device 30b. Note that the functional configurations of the external terminal devices 30a and 30b can be substantially the same, so when there is no need to distinguish between them, they may be simply described as the external terminal device 30.

[0018] The external service 50 can be configured as a cloud server that performs authorization for the use of resources provided by the external service 50 by implementing an authorization code flow based on OAuth2.0 authentication. The external service 50 is not limited in its configuration as long as it generates an authorization code and an access token depending on whether authorization is successful or not, and for example, a device that processes the authorization code flow and a device that provides resources may be configured separately. Note that the external service 50 is an example of an authorization service.

[0019] 1, the multifunction device 10 is connected to an external terminal device 30a via a network NW1, and is further connected to an external service 50 via a network NW2. The networks NW1 and NW2 represent network lines such as a local area network (LAN), a wide area network (WAN), the Internet, etc. The external service 50 may be connected to the network NW1, and there is no restriction on the connection form.

[0020] In addition, the multifunction device 10 is configured to be able to communicate with an external terminal device 30b via (short-range) wireless communication technologies such as Bluetooth (registered trademark), NFC (Near field communication), Wi-Fi (registered trademark), ZigBee (registered trademark), Irda, and wireless USB (Universal serial bus).

[0021] [1.1 Functional configuration] [1.1.1 About the Multifunction Printer 10] The functional configuration of the multifunction device 10 according to the first embodiment will be described. Fig. 2 is a functional configuration diagram of the multifunction device 10. The multifunction device 10 includes a control unit 11, a display unit 13, an operation input unit 15, an image forming unit 17, an image input unit 19, a communication unit 21, and a storage unit 23.

[0022] The control unit 11 controls the entire multifunction device 10. The control unit 11 is configured, for example, with one or more arithmetic units (CPUs (Central Processing Units) and the like). The control unit 11 realizes its functions by reading and executing various programs stored in the storage unit 23.

[0023] The display unit 13 is a display device that displays various information to a user, etc. The display unit 13 can be configured, for example, with an LCD (Liquid Crystal Display) or an organic EL (Electro-luminescence) display, etc. The display unit 13 functions as an output unit that displays a viewing screen generated by a browser program 237 (described later) based on the control of the control unit 11.

[0024] The operation input unit 15 accepts information input by a user or the like. The operation input unit 15 can be configured with input devices such as hard keys (e.g., a numeric keypad) and buttons. The operation input unit 15 can be configured as a touch panel that allows input via the display unit 13. In this case, the input method of the touch panel can be a general method such as a resistive film method, an infrared method, an electromagnetic induction method, or a capacitance method.

[0025] The image forming unit 17 forms an image based on image data on a recording medium such as paper. The image forming unit 17 feeds paper from a paper feed tray (not shown), forms an image on the paper based on image data, and then discharges the paper to a paper discharge unit (not shown). The image forming unit 17 can be configured, for example, by a laser printer that uses an electrophotographic method. In this case, the image forming unit 17 forms an image using toner supplied from a toner cartridge (not shown) that corresponds to a toner color (for example, cyan, magenta, yellow, black).

[0026] The image input unit 19 generates image data by scanning an original. The image input unit 19 can be configured as a scanner device having an image sensor such as a CCD (Charge Coupled Device) or a CIS (Contact Image Sensor) and an automatic document feeder (ADF) or a flatbed for placing and reading an original. There is no particular limitation on the configuration of the image input unit 19 as long as it is capable of generating image data by reading a reflected light image from an original image with an image sensor. The image input unit 19 can also be configured as an interface capable of acquiring image data stored in a portable storage medium such as a USB memory or image data transmitted from an external terminal device.

[0027] The communication unit 21 includes a wired / wireless interface or both for communicating with other devices (e.g., the external terminal device 30 and the external service 50) via a network (NW) such as a LAN, a WAN, the Internet, a telephone line, or a fax line. The communication unit 21 functions as an output unit that outputs screen information related to the setting screen to the external terminal device 30 under the control of the control unit 11.

[0028] The storage unit 23 stores various programs and various data necessary for the operation of the multifunction device 10. The storage unit 23 can be configured with a storage device such as a random access memory (RAM), a hard disk drive (HDD), a solid state drive (SSD), or a read only memory (ROM).

[0029] In the first embodiment, the storage unit 23 stores an authentication (authorization) program 231, a screen information output control program 233, an application program 235, and a browser program 237, and reserves an authentication (authorization) information storage area 239 and a screen information storage area 241.

[0030] The authentication (authorization) program 231 is a program that the control unit 11 reads out when performing authentication (authorization) processing with the external service 50. The control unit 11 that reads out the authentication (authorization) program 231 can cooperate with the external service 50, present an authorization code or an access token issued by the external service 50, and request resources from the external service 50. Note that the control unit 11 that reads out the authentication (authorization) program 231 can also perform authentication (processing) using a conventional authentication method that authenticates with a user name (ID) and a password, in addition to an authentication method that requires prior authorization such as OAuth2.0 authentication.

[0031] The screen information output control program 233 is a program that the control unit 11 reads out when controlling the output of screen information for display on the display unit 13 or transmission by the communication unit 21. The control unit 11 that reads out the screen information output control program 233 functions as a control unit that controls the output of screen information, and determines the display contents of the setting screen according to the output destination of the screen information. Specifically, when the control unit 11 determines that the output destination of the screen information is the display device (display unit 13) equipped in the multifunction device 10, it determines the screen information to be output as first screen information with display contents that accept the implementation of authentication processing. On the other hand, when the control unit 11 determines that the output destination of the screen information is the external terminal device 30, it determines the screen information to be output as second screen information with display contents that restrict the implementation of authentication processing.

[0032] The screen information output control program 233 may include a server program 2331 and a cooperative application program 2333 for controlling the output of screen information whose display contents have been determined. The server program 2331 is a program read by the control unit 11 when providing screen information in response to a request from a browser. The control unit 11 that reads the server program 2331 may realize a server function of outputting screen information in response to a request from, for example, a browser of the external terminal device 30a or a browser of the control unit 11's own device. The cooperative application program 2333 is a program read by the control unit 11 when operating in cooperation with the external terminal device 30b. The control unit 11 that reads the cooperative application program 2333 may output screen information in response to a request for screen information from the external terminal device 30b in a series of cooperative operations with the external terminal device 30b that is the cooperative destination.

[0033] The application program 235 is an application that functions by utilizing resources provided by the external service 50. The application program 235 may be an integrated management application that manages settings and management of the multifunction device 10, or may be an individual application (e.g., an image transmission application) that uses the integrated management application as a platform.

[0034] The browser program 237 is a program that is read by the control unit 11 when rendering screen information and displaying a screen for browsing on the display unit 13.

[0035] The authentication (authorization) information storage area 239 is a storage area for storing authentication (authorization) information related to authentication (authorization) processing. The authentication (authorization) information storage area 239 stores authentication information such as the name of an external service 50 (provider name) associated with an authentication method and an account name for the external service 50.

[0036] The screen information storage area 241 is a storage area for storing screen information relating to a setting screen to be displayed on the display unit 13 and a setting screen to be displayed on the external terminal device 30. A screen configuration for viewing based on the screen information stored in the screen information storage area 241 will be described later.

[0037] [1.1.2 Regarding the external terminal device 30] Next, the functional configuration of the external terminal device 30 will be described. Fig. 3 is a functional configuration diagram of the external terminal device 30 (30a, 30b). The external terminal device 30a and the external terminal device 30b can have the same configuration, except that the external terminal device 30b is equipped with a cooperative application program 395. Therefore, the external terminal device 30a and the external terminal device 30b will be described simply as the external terminal device 30 without being particularly distinguished from each other.

[0038] The external terminal device 30 includes a control unit 31 , a display unit 33 , an operation input unit 35 , a communication unit 37 , and a storage unit 39 .

[0039] The control unit 31 controls the entire external terminal device 30. The control unit 31 is configured with, for example, one or more arithmetic units (CPUs, etc.). The control unit 31 realizes its functions by executing various programs stored in the storage unit 39.

[0040] The display unit 33 is a display device that displays various information to a user, etc. The display unit 33 can be configured, for example, with an LCD, an organic EL display, etc. The display unit 33 displays a screen for viewing that is generated from screen information acquired from the multifunction device 10 based on the control of the control unit 31.

[0041] The operation input unit 35 accepts information input by a user or the like. The operation input unit 35 can be configured with input devices such as a keyboard, a mouse, a numeric keypad, etc. The operation input unit 35 can also be configured as a touch panel that allows input via the display unit 33. In this case, the input method of the touch panel can be a general method such as a resistive film method, an infrared method, an electromagnetic induction method, a capacitance method, etc.

[0042] The communication unit 37 includes a wired / wireless interface or both for communicating with other devices (e.g., the multifunction device 10) via a network (NW) such as a LAN, a WAN, the Internet, a telephone line, or a fax line.

[0043] The storage unit 39 stores various programs and various data necessary for the operation of the external terminal device 30. The storage unit 39 can be configured with a storage device such as a RAM, an HDD, an SSD, or a ROM.

[0044] In the first embodiment, the storage unit 39 stores an authentication program 391, a browser program 393, and a cooperative application program 395, and reserves an authentication information storage area 397.

[0045] The authentication program 391 is a program that the control unit 31 reads out when performing authentication processing with the external service 50. The control unit 31 that reads out the authentication program 391 can perform authentication (processing) using a conventional authentication method that uses a user name (ID) and a password.

[0046] The browser program 393 is a program that is read by the control unit 31 when rendering screen information for screen display and displaying a screen for viewing on the display unit 33. The control unit 31 that reads the browser program 393 can generate a screen for viewing by rendering screen information acquired via a server function provided by the multifunction device 10, and can display the screen on the display unit 33 as a Web-UI.

[0047] The cooperative application program 395 is a program that is read by the control unit 31 when operating in cooperation with the multifunction device 10. The control unit 31 that reads the cooperative application program 395 transmits and receives commands including screen information and the like transmitted from the multifunction device 10. Here, cooperation means that at least two or more devices work together while sharing information to obtain a single result. The external terminal device 30 can cooperate with the multifunction device 10 by displaying a screen based on the screen information acquired from the multifunction device 10 on the display unit 33.

[0048] The authentication information memory area 397 is a memory area that stores authentication information related to the authentication process, and stores, for example, authentication information such as the name of the external service 50 (provider name) associated with the authentication method, and the account name (user name (ID)) and password for the external service 50.

[0049] [1.1.3 About External Services 50] The external service 50 may use any known configuration as long as it employs OAuth 2.0 authentication as an authentication method and is capable of providing services such as email delivery and data sharing (storage). Therefore, a description of the functional configuration of the external service 50 will be omitted.

[0050] [1.2 Processing flow] Next, a process flow according to the first embodiment will be described. FIG. 4 is a flowchart for explaining a process of determining the display contents of a setting screen according to the output destination of screen information in a state where an authentication method that requires prior authorization by an authorization service is applied, and outputting the screen information. The control unit 11 executes the process described below by mainly reading out programs such as an authentication (authorization) program 231, a screen information output control program 233, an application program 235, and a browser program 237. Note that in the explanation of FIG. 4, the display unit 13 of the multifunction device 10 and an external terminal device 30a capable of displaying the setting screen of the multifunction device 10 via a Web-UI will be explained as examples of the output destination of the screen information, but the present disclosure is also applicable to an external terminal device 30b that acquires screen information related to the setting screen of the multifunction device 10 via a cooperative application.

[0051] First, the control unit 11 judges whether or not an instruction to select an authentication method has been received from the user (step S100). If an instruction to select an authentication method has been received, the control unit 11 determines which authentication method has been selected (step S100; Yes -> step S110). On the other hand, if it is determined that an instruction to select an authentication method has not been received, the control unit 11 waits until an instruction to select an authentication method is received (step S100; No).

[0052] The control unit 11 determines whether the determined authentication method is an authentication method that requires prior authorization (step S120). If the determined authentication method is an authentication method that requires prior authorization, the control unit 11 specifies the output destination of the screen information (step S120; Yes→step S130).

[0053] In the present disclosure, when the determined authentication method is an authentication method that requires prior authorization, such as OAuth2.0 authentication, the processing branches depending on whether the output destination of the screen information is the multifunction device 10, which can receive prior authorization to use resources and can obtain a redirect from the external service 50, or the external terminal device 30a, which cannot receive prior authorization to use resources and cannot obtain a redirect from the external service 50.

[0054] The control unit 11 judges whether the output destination of the identified screen information is the display unit 13 of the multifunction device 10 (step S140). If it is judged that the output destination of the identified screen information is the display unit 13 of the multifunction device 10, the control unit 11 determines the screen information as the display content of a screen on which the authentication process can be performed (authentication executable screen) (step S140; Yes->step S150). Then, the control unit 11 outputs the screen information to the display unit 13 via the browser program 237, and ends the process (step S160).

[0055] On the other hand, if it is determined that the output destination of the identified screen information is not the display unit 13 of the multifunction device 10, that is, if it is determined that the output destination of the screen information is the external terminal device 30a via the Web-UI, the control unit 11 determines the screen information to be displayed as a screen on which the authentication process cannot be performed (authentication execution impossible screen) (step S140; No -> step S170).Then, the control unit 11 outputs the screen information to the external terminal device 30a via the communication unit 21, and ends the process (step S160).

[0056] Meanwhile, in step S120, if the determined authentication method is not an authentication method that requires prior authorization, the control unit 11 determines the screen information to have the same display content regardless of the output destination (step S120; No → step S180). Then, the control unit 11 outputs the screen information to either the display unit 13 or the external terminal device 30a, and ends the process (step S160).

[0057] Next, the process of specifying the output destination of the screen information in step S130 in FIG. 4 will be described with reference to the flowchart in FIG.

[0058] When the process of specifying the output destination of the screen information is started, the control unit 11 acquires identification information (for example, IP address) of the output destination (device) of the screen information on the network as information for specifying the output destination of the screen information (step S1310).

[0059] Next, the control unit 11 determines whether the output destination of the acquired screen information is the display unit 13 (local) of the multifunction device 10 (step S1320). At this time, the control unit 11 can specify whether the output destination of the screen information is the display unit 13 of the multifunction device 10 by referring to the output destination management table 250.

[0060] Here, we will explain the output destination management table 250. Fig. 6 is a diagram illustrating an example of a data configuration example of the output destination management table 250. The output destination management table 250 includes "output destination", "identification information (IP address)", and "output screen information" as management items.

[0061] The upper row of output destination management table 250 is an example for managing items related to "local" as "output destination", "192.168.1.aa" as "identification information (IP address)", and "authentication implementation possible screen (corresponding to the first screen information)" as "output screen information". The lower row of output destination management table 250 is an example for managing items related to "external terminal device" as "output destination", "IP address other than 192.168.1.aa" as "identification information (IP address)", and "authentication implementation impossible screen (corresponding to the second screen information)" as "output screen information".

[0062] When the control unit 11 identifies the output destination of the screen information in step S1320 of FIG. 5, it can identify the output destination of the screen information and the screen information (output screen information) to be output to the output destination by comparing whether the IP address acquired in step S1310 matches the IP address of the "identification information (IP address)" of the "output destination" "local" managed in the output destination management table 250 of FIG. 6.

[0063] 5, if the IP address acquired in step S1310 matches the IP address in the "identification information (IP address)" of the "output destination" "local" managed in the output destination management table 250, the control unit 11 determines the output destination of the screen information to be the display unit 13 of the multifunction device 10, and ends the process (step S1320; Yes->step S1330). On the other hand, if the IP address acquired in step S1310 does not match the IP address in the "identification information (IP address)" of the "output destination" "local", the control unit 11 determines the output destination of the screen information to be the external terminal device 30, and ends the process (step S1320; No->step S1340).

[0064] [1.3 Example of operation] Next, a description will be given of an operation example according to the first embodiment. Fig. 7 is a diagram for explaining an example of the configuration of an SMTP (Simple mail transfer protocol) setting screen W10 before receiving an instruction to select an authentication method from a user.

[0065] The SMTP setting screen W10 includes an SMTP setting area R10 and an authentication setting area R20. The SMTP setting area R10 includes various input boxes such as a "primary server" input box, a "secondary server" input box, a "port number" input box, a "timeout" input box, a "sender name" input box, a "sender address" input box, and an "enable SSL / TLS" check box, and is an area for accepting input of mail settings when the external service 50 is a mail server.

[0066] The authentication setting area R20 includes an authentication method selection pull-down P10 for selecting an authentication method, an authentication destination selection pull-down P12 for selecting an external service name (provider name) for the authentication destination, and an account name input box Bx10 for inputting an account name for the authentication destination, and is an area for receiving input of authentication information required for the external service 50 to perform authentication processing. When the user selects OAuth2.0 authentication as the authentication method and the output destination of the SMTP setting screen W10 is the display unit 13 of the multifunction device 10, the authentication processing for the external service 50 can be performed.

[0067] Fig. 8 is a diagram for explaining the operation of selecting an authentication method in the authentication method selection pull-down P10 in the authentication setting area R20 in Fig. 7. For example, when the user selects an arrow portion or the like in the authentication method selection pull-down P10, the display area of ​​the authentication method selection pull-down P10 is expanded downward, and a list of selectable authentication methods is displayed. In this state, the user can select a desired authentication method.

[0068] When the user selects OAuth2.0 authentication as the authentication method, the control unit 11 executes the process from step S100 in Fig. 4, triggered by the selection of the authentication method. Then, when the control unit 11 determines that the output destination of the SMTP setting screen W10 is the display unit 13 of the multifunction device 10, the control unit 11 displays the SMTP setting screen W20 on the display unit 13 of the multifunction device 10 as an authentication executable screen exemplified in Fig. 9.

[0069] The SMTP setting screen W20 includes a connect button B10 that accepts an instruction to perform authentication processing in the external service 50. When the user selects the connect button B10, the control unit 11 transmits an authorization request to the authorization endpoint of the external service 50 and starts the authentication processing.

[0070] 10 is a diagram for explaining an example of the configuration of an SMTP setting screen W30 as an authentication impossibility screen. The SMTP setting screen W30 is an authentication impossibility screen that is displayed on the display unit 33 of the external terminal device 30 when the control unit 11 determines that the output destination of the SMTP setting screen W10 is not the display unit 13 of the multifunction device 10 (step S140 in FIG. 4; No).

[0071] 9, the SMTP setting screen W30 displays a message screen M10 in the authentication setting area R20, instead of the connect button B10, to prompt the user to perform authentication processing via the SMTP setting screen W20 as an authentication execution possible screen. By checking the display contents of the message screen M10, the user can understand that authentication processing cannot be performed via the SMTP setting screen W30. In this case, the user needs to input an instruction to perform authentication processing via the SMTP setting screen W20 as an authentication execution possible screen displayed on the display unit 13 of the multifunction device 10.

[0072] The control unit 11 does not accept input of an instruction to perform authentication processing via the SMTP setting screen W30 as an authentication impossible screen. However, the control unit 11 can accept operation instructions such as registering / changing / deleting authentication information via the authentication setting area R20 and deleting an acquired access token (not shown), and can store the accepted authentication information in the authentication (authorization) information storage area 239.

[0073] The authentication information stored in the authentication (authorization) information storage area 239 can be reflected and displayed on the SMTP setting screen W20, which is an authentication implementation screen. With this configuration, the user can input an instruction to implement the authentication process via the display unit 13 (SMTP setting screen W20) of the multifunction device 10 while checking the input contents on the external terminal device 30.

[0074] As described above, according to the first embodiment, the selection of an authentication method that requires prior authorization is used as a trigger, and screen information can be output, the display contents of which are either a screen on which authentication processing can be performed (authentication possible screen) or a screen on which authentication processing cannot be performed (authentication not possible screen) depending on the output destination of the screen information. In addition, since it is possible to display a message on the authentication not possible screen that prompts the user to perform authentication processing via the authentication possible screen, it is possible to suppress a decrease in user convenience even in an environment where, for example, authorization for the use of resources cannot be obtained in advance and the multifunction device is operated via a Web page screen (Web-UI) or the like.

[0075] [2 Second embodiment] In the second embodiment, when an operation via a display unit of an external terminal device is interrupted and the user who interrupted the operation logs in to the multifunction device, a message is displayed on the display unit of the multifunction device asking whether or not to continue the operation.

[0076] [2.1 Functional configuration] 11 is a functional configuration diagram illustrating the functional configuration of a multifunction device 70 according to the second embodiment. The functional configuration of the multifunction device 70 can be substantially the same as that of the multifunction device 10 according to the first embodiment. Therefore, the same reference symbols are used for parts having the same configuration, and the description thereof may be omitted.

[0077] The multifunction device 70 includes a control unit 11, a display unit 13, an operation input unit 15, an image forming unit 17, an image input unit 19, a communication unit 21, and a storage unit 75 in place of the storage unit 23.

[0078] In the second embodiment, the memory unit 75 stores an authentication (authorization) program 231, a screen information output control program 233, an application program 235, a browser program 237, and a login authentication program 751, and reserves an authentication (authorization) information memory area 239, a screen information memory area 241, and an operation log memory area 753.

[0079] The login authentication program 751 is a program that the control unit 11 reads out when authenticating a user who attempts to log in to the multifunction device 70. When the user authentication function is enabled, the control unit 11 that reads out the login authentication program 751 displays a login screen on the display unit 13 and accepts input of authentication information related to the user authentication. For example, when the authentication condition is a combination of a login user name and a login password, the control unit 11 can perform user authentication by previously storing the login user name and the login password related to the user authentication in association with each other, and comparing the login user name and the login password input via the login screen. Note that the user authentication can be performed by, in addition to knowledge authentication that combines the login user name and the login password, for example, possession authentication using a token, a key, an IC (Integrated circuit) card, a smartphone, or biometric authentication such as face authentication or fingerprint authentication. Note that the control unit 11 can accept a setting of enable / disable of the user authentication function via a system setting screen (not shown) or the like.

[0080] The operation log storage area 753 is a storage area for storing operations such as registration / change / deletion of authentication information performed on the authentication possible screen or the authentication impossible screen, and deletion of an acquired access token (not shown) as an operation log.

[0081] In the second embodiment, the functional configurations of the external terminal device 30 (30a, 30b) and the external service 50 can be substantially the same as those in the first embodiment, and therefore a description thereof will be omitted here.

[0082] [2.2 Processing flow] Next, a process flow according to the second embodiment will be described with reference to the flowchart in Fig. 12. The control unit 11 executes the process described below by mainly reading out programs such as the authentication (authorization) program 231, the screen information output control program 233, the application program 235, the browser program 237, and the login authentication program 751. First, the control unit 11 determines whether or not the user has performed an operation via the authentication impossible screen (step S200).

[0083] When it is determined that an operation is being performed via the authentication impossible screen, the control unit 11 monitors the operation status by the user and determines whether the operation is interrupted or not (step S200; Yes->step S210). Meanwhile, when it is determined that an operation is not being performed via the authentication impossible screen, the control unit 11 waits until an operation is performed (step S200; No).

[0084] When it is determined that the operation via the authentication execution impossible screen has been interrupted, the control unit 11 stores the operation at the time of interruption as an operation log (step S210; Yes→step S220). On the other hand, when it is determined that the operation via the authentication execution impossible screen has not been interrupted, the control unit 11 waits until the operation is interrupted (step S210; No). It is also possible to omit the processing described in and after step S220 if the operation by the user is not interrupted in step S210. In this case, the control unit 11 can store the authentication information received via the authentication execution impossible screen in the authentication (authorization) information storage area 239, and display the authentication execution possible screen reflecting the authentication information when the target user logs in to the multifunction device 10. In addition, a separate time measuring means such as a timer may be provided, and when it is determined that a predetermined time has elapsed since the operation by the user was interrupted, the processing in and after step S220 may be executed.

[0085] Then, the control unit 11 judges whether or not the user who interrupted the operation (target user) has logged in to the multifunction device 70 (step S230). If the login name (ID) of the user who logs in to the multifunction device 70 is the same as the login name (ID) of the target user to the external terminal device 30, the login name (ID) of the target user is stored together with the operation log stored in step S220, and by referring to the operation log during the login process, it is possible to judge whether or not the target user has logged in to the multifunction device 70. Note that if the login name (ID) of the user who logs in to the multifunction device 70 is not the same as the login name (ID) of the target user to the external terminal device 30, a table or the like that associates the login name (ID) of the target user with the login name (ID) of the multifunction device 70 may be separately prepared to judge whether or not the target user has logged in to the multifunction device 70.

[0086] If it is determined that the target user has logged in to the multifunction device 70, the control unit 11 displays an operation continuation message on the display unit 13 inquiring whether or not to continue the interrupted operation (step S230; Yes->step S240). If it is determined that the target user has not logged in to the multifunction device 70, the control unit 11 waits until the target user logs in to the multifunction device 70 (step S230; No).

[0087] When the control unit 11 receives the display of the operation continuation message and receives an instruction to continue the operation from the user, the control unit 11 displays an authentication executable screen on the display unit 13 and ends the process (step S250; Yes->step S260). On the other hand, when the control unit 11 does not receive an instruction to continue the operation from the user, the control unit 11 ends the process (step S250; No).

[0088] [2.3 Example of operation] Next, an operation example according to the second embodiment will be described. Fig. 13 is a diagram for explaining an example of the configuration of a user authentication screen W40 displayed on the display unit 13 by the control unit 11. The user authentication screen W40 can be configured as a login screen that is displayed on the display unit 13 by the control unit 11 that has read out the login authentication program 751 when the user authentication function is enabled.

[0089] The user authentication screen W40 includes a login user name input box Bx12, a login password input box Bx14, an authentication destination designation button B12, an "OK" button B14, and a "Cancel" button B16.

[0090] The login user name input box Bx12 accepts input of the login user name of a user attempting to log in to the multifunction device 70. The login user name may be input directly using an input device such as a keyboard, or it may be input by selecting from a user name list displayed by pressing a select button from a separately provided list.

[0091] The login password input box Bx14 is an input box that accepts input of a login password corresponding to a login user name. A user attempting to log in to the multifunction device 70 inputs the login password in addition to the login user name.

[0092] The authentication destination designation button B12 is a button for accepting designation of a user authentication destination. The user authentication destination may be a device alone, or, for example, a login authentication server separately provided on the network NW can be designated. When a device alone is designated as the user authentication destination, the control unit 11 performs user authentication by comparing the input login user name and login password with user authentication information (for example, a combination of a user name and a password) prepared in advance. On the other hand, when a login authentication server provided on the network NW is designated as the user authentication destination, the control unit 11 performs user authentication by transmitting the input login user name and login password to the login authentication server and receiving the authentication result from the authentication server.

[0093] The "OK" button B14 is a button that accepts an instruction from the user to confirm an input operation. The user selects the "OK" button B14 when confirming the input into the login user name input box Bx12 and the login password input box Bx14, and the designation of the user authentication destination via the authentication destination designation button B12. The "Cancel" button B16 is a button that accepts an instruction from the user to cancel an input operation.

[0094] Fig. 14 is a diagram for explaining an example of the configuration of a message screen M12 that the control unit 11 displays on the user authentication screen W40A when a target user has successfully logged in to the multifunction device 70. Fig. 14 shows an example in which a message screen M12 that displays an operation continuation message inquiring whether or not to continue the interrupted operation is superimposed on the user authentication screen W40A that displays the login name (e.g., User01) of the target user who has successfully logged in in the login user name display area R30.

[0095] The message screen M12 includes a message display area R40, a "Yes" button B18, and a "Cancel" button B20. The message display area R40 is a display area that displays the content of the interrupted operation (for example, "There are items for which the setting has not been completed. Do you want to continue the operation?") that asks the target user whether or not to resume and continue the interrupted operation, and the content of the interrupted operation ("Authentication setting"). The "Yes" button B18 is a button that accepts a selection instruction by the user to continue the operation. The "Cancel" button B20 is a button that accepts a selection instruction by the user to not continue the operation. After checking the message content displayed in the message display area R40, the user can resume and continue the operation that was interrupted on the external terminal device 30 on the multifunction device 70 by selecting the "Yes" button B18.

[0096] FIG. 15 is a diagram for explaining an example of a configuration example of the SMTP setting screen W50 as an authentication executable screen displayed in response to the selection of the "Yes" button B18 of the message screen M12 by the user. FIG. 15 is an example of a case where the account name input box Bx10 of the authentication setting area R20 is blank or the operation is interrupted midway through input. In this case, for example, as shown in the example of FIG. 15, by adding an appropriate obscured character such as an asterisk "*" to the account name input box Bx10, it is possible to express that the operation has been interrupted and to prompt the user to continue inputting authentication information. Note that the fact that the operation has been interrupted is not limited to adding obscured characters, and it is also possible to express that the operation has been interrupted by, for example, making the display font, display color, display size, etc. of the characters and input box related to the interruption point different from other parts, making the display pattern of the interruption point (for example, blinking display in a specific pattern) different from other parts, or by adding a symbol (character, code, mark), etc. that attracts the user's attention, such as an exclamation mark, to the interruption point.

[0097] As described above, according to the second embodiment, in addition to the effects of the first embodiment, even if an operation via an external terminal device such as a Web-UI is interrupted, if the user who interrupted the operation logs in to the multifunction device, the interrupted operation can be resumed and continued, thereby further improving user convenience.

[0098] [3 Third embodiment] The third embodiment is a form in which, in the configuration of the second embodiment, after the input of authentication information is completed via an authentication impossible screen, the operation is interrupted (ended) without the authentication process being performed in the external service.

[0099] [3.1 Functional configuration] The functional configurations of the multifunction device 70, the external terminal device 30, and the external service 50 according to the third embodiment can be substantially the same as those in the second embodiment, and therefore a description thereof will be omitted here.

[0100] [3.2 Processing flow] The process according to the third embodiment can be realized by replacing the flowchart according to Fig. 12 of the second embodiment with the flowchart shown in Fig. 16. Note that the same step numbers are used for the steps that can be the same as those described in Fig. 12, and the description thereof will be omitted.

[0101] 16, when the control unit 11 determines that the operation via the authentication impossible screen has not been interrupted, it determines whether the operation has been completed (step S210; No→step S300). When it determines that the operation has been completed, the control unit 11 stores the input authentication information in the authentication (authorization) information storage area 239 (step S300; Yes→step S310). When it determines that the operation has not been completed, the control unit 11 waits until the operation is completed (step S300; No).

[0102] Then, the control unit 11 determines whether or not the user who inputted the authentication information (target user) has logged in to the multifunction device 70 (step S320).

[0103] If it is determined that the target user has logged in to the multifunction device 70, the control unit 11 displays an authentication execution message on the display unit 13 inquiring whether or not to execute authentication processing (step S320; Yes->step S330). If it is determined that the target user has not logged in to the multifunction device 70, the control unit 11 waits until the target user logs in to the multifunction device 70 (step S320; No).

[0104] When the control unit 11 receives the display of the authentication execution message and receives an instruction to execute authentication from the user, the control unit 11 outputs the instruction to execute authentication to the external service 50 and ends the process (step S340; Yes->step S350). On the other hand, when it is determined that an instruction to execute authentication from the user has not been received, the control unit 11 ends the process (step S340; No).

[0105] [3.3 Example of operation] Fig. 17 is a diagram for explaining an example of the configuration of a message screen M14 that the control unit 11 displays on the user authentication screen W40B when a target user has successfully logged in to the multifunction device 70. Fig. 17 shows an example in which a message screen M14 that displays an authentication execution message inquiring whether or not to execute authentication processing is superimposed on the user authentication screen W40B that displays the login name (e.g., User01) of the target user who has successfully logged in in the login user name display area R30.

[0106] The message screen M14 includes a message display area R50, a "connect" button B22, and a "cancel" button B24. The message display area R50 is a display area that displays a message asking the target user whether or not to execute the authentication process that was interrupted (ended) without being executed (for example, "The authentication setting is completed, but the authentication process for the A service has not been executed. Do you want to execute the authentication process?"). The "connect" button B22 is a button that accepts an instruction from the user to execute the authentication process. The "cancel" button B24 is a button that accepts a selection instruction from the user not to execute the authentication process. After checking the message content displayed in the message display area R50, the user can output an instruction to execute the authentication process to the external service 50 by selecting the "connect" button B22. In addition, in response to the selection of the "connect" button B22, the control unit 11 may display an authentication execution possible screen.

[0107] As described above, according to the third embodiment, in addition to the effects of the first and second embodiments, when input of authentication information via the authentication execution impossible screen is completed, it is possible to output an instruction to execute authentication for an external service based on the completed input contents, thereby eliminating the trouble of inputting authentication information into a multifunction device and further improving user convenience.

[0108] The present disclosure is not limited to the above-described embodiments, and various modifications are possible. In other words, the technical scope of the present disclosure also includes embodiments obtained by combining technical means that are appropriately modified within the scope of the gist of the present disclosure.

[0109] Although the above-described embodiments are described separately for convenience of explanation, they may be combined and executed within a technically feasible range.

[0110] In addition, the programs that run on each device in the embodiments are programs that control the CPU and the like (programs that make a computer function) so as to realize the functions of the above-mentioned embodiments. Information handled by these devices is temporarily stored in a temporary storage device (e.g., RAM) during processing, and is then stored in various storage devices such as ROMs (Read Only Memories) and HDDs, and is read, modified, and written by the CPU as necessary.

[0111] Here, the recording medium for storing the program may be any of semiconductor media (e.g., ROM, non-volatile memory cards, etc.), optical recording media, magneto-optical recording media (e.g., DVD (Digital Versatile Disc), MO (Magneto Optical Disc), MD (Mini Disc), CD (Compact Disc), BD (Blu-ray (registered trademark) Disc, etc.)), magnetic recording media (e.g., magnetic tape, flexible disk, etc.), etc. Furthermore, not only are the functions of the above-mentioned embodiments realized by executing the loaded program, but the functions of the present disclosure may also be realized by processing in cooperation with an operating system or other application programs, etc., based on instructions from the program.

[0112] In addition, when distributing the program on the market, the program can be stored in a portable recording medium and distributed, or transferred to a server computer connected via a network such as the Internet. In this case, the storage device of the server computer is of course included in the present disclosure.

[0113] Also, each functional block or feature of the device used in the above-mentioned embodiment can be implemented and executed by an electric circuit, for example, an integrated circuit or a plurality of integrated circuits. The electric circuit designed to realize the functions described herein may include a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA), or other programmable logic device, discrete gate or trongistor logic, discrete hardware components, or a combination thereof. The general-purpose processor may be a microprocessor, or a conventional processor, controller, microcontroller, or state machine. The electric circuit described above may be composed of a digital circuit or an analog circuit. Also, when an integrated circuit technology that replaces the current integrated circuit appears due to the progress of semiconductor technology, one or more aspects of the present disclosure can use a new integrated circuit according to the technology. [Explanation of symbols]

[0114] 10, 70 multifunction device 11 Control section 13 Display section 15 Operation input section 17 Image forming section 19 Image input section 21 Communications Department 23, 75 Storage section 231 Accreditation Program 233 Screen information output control program 235 Application Programs 237 Browser Program 751 Login Authentication Program 239 Authentication (authorization) information storage area 241 Screen information storage area 753 Operation log storage area 30 External terminal device 31 Control Unit 33 Display section 35 Operation input section 37 Communications Department 39 Memory section 391 Certification Program 393 Browser Programs 395 Collaborative Application Programs 397 Authentication information storage area 50 External Services

Claims

1. a communication unit that communicates with an external terminal device via a network; A control unit, The control unit is An image forming apparatus characterized in that it receives, via the communication unit, setting information for an authentication method related to the use of resources on an external service accepted via a web page screen displayed on a display unit of the external terminal device.

2. The control unit is 2. The image forming apparatus according to claim 1, wherein selection information relating to the external service selected via the Web page screen is received via the communication unit.

3. The control unit is 2. The image forming apparatus according to claim 1, wherein setting information relating to encrypted communication accepted via the Web page screen is received via the communication unit.

4. The control unit is 2. The image forming apparatus according to claim 1, further comprising: a token acquisition unit that acquires a token from the external service based on setting information of the authentication method received via the web page screen.

5. The control unit is The image forming apparatus according to claim 4 , wherein the acquired information relating to the token is displayed on a display unit of the image forming apparatus.

6. The authentication method is 2. The image forming apparatus according to claim 1, wherein authentication is performed according to OAuth 2.

0.

7. The control unit is 2. The image forming apparatus according to claim 1, wherein after an authentication process for the external service is performed, the image forming apparatus executes a job related to sending an e-mail by utilizing the resource.

8. A method for controlling an image forming apparatus including a communication unit that communicates with an external terminal device via a network and a control unit, comprising: A control method for an image forming apparatus, characterized by controlling the control unit to receive, via the communication unit, setting information for an authentication method related to the use of resources on an external service accepted via a web page screen displayed on a display unit of the external terminal device.

Images