Information processing system and program

Abstract

To enable authentication processing by multi-factor authentication using storage information and biological information to be executed even to a user who performs maintenance work that is not registered in advance.SOLUTION: A control part 35 issues an OTP for maintenance being temporary authentication information with an expiration date set in advance in response to a request of a machine manager managing an image forming apparatus 10. An ID for CE as authentication information of storage information and a password for CE are set in the CE for performing maintenance work of the image forming apparatus 10 in advance. The control part 35 requests the CE to input the OTP for maintenance unless fingerprint information being biological information corresponding to a logged-in CE is registered in a proxy authentication server 20 when the CE logs in by using the ID for CE and the password for CE. The control part 35 registers the fingerprint information in the proxy authentication server 20 in the case that the OTP for maintenance inputted by the CE matches the OTP for maintenance issued in advance.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present disclosure relates to an information processing system and a program. [Background technology]

[0002] Patent Document 1 discloses a personal authentication system that allows a person to entrust another person with the task of target processing, which can proceed only when the result of personal authentication is valid. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2002-222168 A Summary of the Invention [Problem to be solved by the invention]

[0004] In recent years, there has been a strong demand for improved security when using a certain device or system. For this reason, a user of a certain device or system may be required to undergo multi-factor authentication, which identifies the user using multiple elements of authentication information from among the three elements of stored information, possessed information, and biometric information.

[0005] In addition, in various devices or systems, stored information or possessed information for a maintenance worker may be preset for use by a user who performs maintenance work on the device or system. However, if a user who only knows the stored information for maintenance work or possesses the possessed information for maintenance work is permitted to use the device or system, authentication processing using multi-factor authentication will not be realized.

[0006] An object of the present disclosure is to provide an information processing system and a program capable of performing authentication processing using multi-factor authentication with stored information and biometric information even for users performing maintenance work who have not been registered in advance. [Means for solving the problem]

[0007] An information processing system according to a first aspect includes a processor, the processor issuing temporary authentication information having a validity period set in response to a request from a first user who is an administrator managing an authentication target device; when a second user who performs maintenance work on the authentication target device logs in using first authentication information which is stored information or retained information preset for the second user, and second authentication information which is biometric information corresponding to the logged-in second user is not registered, a request is made to the second user to input temporary authentication information; When the temporary authentication information input by the second user matches the temporary authentication information issued in advance, the biometric information of the second user is registered as second authentication information.

[0008] In a second aspect of the information processing system, in the information processing system of the first aspect, when a second user logs in using first authentication information which is stored information or retained information pre-set for the second user, if second authentication information corresponding to the logged-in second user is registered, the processor performs an authentication process for the second user using the second authentication information, and if the authentication is successful, allows the second user to use the authentication target device.

[0009] In a third aspect of the information processing system, in the information processing system of the second aspect, when the processor permits the second user to use the authentication target device, the processor grants the second user operation authority for processes for which the first user has not been granted operation authority.

[0010] The information processing system of a fourth aspect is the information processing system of the first aspect, further comprising a memory, wherein the processor stores the issued temporary authentication information in the memory in association with information of the first user who requested the issuance of the temporary authentication information; When temporary authentication information is input by the second user, information of the first user who issued the temporary authentication information is also input, and only when the input information of the first user matches the information of the first user stored in the memory, the biometric information of the second user is registered as second authentication information.

[0011] A fifth aspect of the information processing system is the information processing system of the fourth aspect, in which, when the processor receives temporary authentication information from the second user, it displays information of multiple users including the first user, and has the second user select one user from the displayed multiple users, thereby inputting information about the first user who issued the temporary authentication information.

[0012] In a sixth aspect of the information processing system, in the information processing system of the first aspect, when the processor registers the biometric information of the second user as second authentication information, it sets an expiration date for the second authentication information to be registered, and invalidates the second authentication information after the expiration date has passed.

[0013] A program according to a seventh aspect includes a step of issuing temporary authentication information having a validity period set in response to a request from a first user who is an administrator managing an authentication target device; a step of requesting the second user to input temporary authentication information when the second user who performs maintenance work on the authentication target device logs in using first authentication information which is stored information or retained information preset for the second user and second authentication information which is biometric information corresponding to the logged-in second user is not registered; The computer executes a step of registering the biometric information of the second user as second authentication information if the temporary authentication information input by the second user matches the temporary authentication information issued in advance. Effect of the Invention

[0014] According to the information processing system of the first aspect, it is possible to perform authentication processing by multi-factor authentication using stored information and biometric information even for a user performing maintenance work who has not been registered in advance.

[0015] According to the information processing system of the second aspect, after the biometric information of a user who has not been registered in advance is registered, the user can use the authentication target device using the stored information and the biometric information.

[0016] According to the information processing system of the third aspect, it is possible to perform authentication processing by multi-factor authentication using stored information and biometric information even for a maintenance worker who may have broader operating authority than an administrator.

[0017] According to the information processing system of the fourth aspect, it is possible to prevent a maintenance worker who has illegally obtained temporary authentication information from using an authentication target device.

[0018] According to the information processing system of the fifth aspect, the maintenance worker can specify the administrator who has issued the temporary authentication information by simply selecting the administrator from among a plurality of users.

[0019] According to the information processing system of the sixth aspect, it is possible to limit the period during which a maintenance worker can use the authentication target device.

[0020] According to the program of the seventh aspect, it is possible to execute authentication processing by multi-factor authentication using stored information and biometric information even for a user performing maintenance work who has not been registered in advance. [Brief description of the drawings]

[0021] [Figure 1] 1 is a diagram illustrating a system configuration of an information processing system according to an embodiment of the present disclosure. [Diagram 2] 1 is a block diagram showing a hardware configuration of an image forming apparatus 10 according to an embodiment of the present disclosure. [Diagram 3]1 is a block diagram showing a functional configuration of an image forming apparatus 10 according to an embodiment of the present disclosure. [Figure 4] 10 is a diagram showing an example of authentication information including an ID and a password managed in the image forming apparatus 10. FIG. [Diagram 5] 10 is a flowchart showing how multi-factor authentication is performed when a user attempts to use the image forming apparatus 10. [Figure 6] 1 is a sequence chart showing data transmission and reception between the image forming apparatus 10 and the proxy authentication server 20 when multi-factor authentication is performed. [Figure 7] 13 is a diagram for explaining a state in which a machine manager issues a maintenance OTP at an image forming apparatus 10 and notifies a CE who is scheduled to visit of the issued maintenance OTP. FIG. [Figure 8] 11 is a flowchart for explaining a process when a CE visiting a user company logs in to an image forming apparatus 10 using an issued maintenance OTP. [Figure 9] 9 is a flowchart for explaining details of the new registration process (step S109) of fingerprint information of a CE, which is explained in the flowchart of FIG. 8. [Figure 10] 10 is a sequence chart showing data transmission and reception performed between the image forming apparatus 10 and the proxy authentication server 20 when processing for registering fingerprint information of a CE is performed. [Figure 11] 13 is a diagram showing an example of an operation screen displayed on an operation panel 41 of an image forming apparatus 10 when a CE ID and a CE password are entered. FIG. [Figure 12] 13 is a diagram showing an example of an operation screen displayed on an operation panel 41 of the image forming apparatus 10 when acquiring fingerprint information of a CE. FIG. [Figure 13] 13 is a diagram showing an example of an operation screen used when requesting a CE to input a maintenance OTP and information about the system administrator who issued the maintenance OTP. FIG. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0022] Next, embodiments of the present disclosure will be described in detail with reference to the drawings.

[0023] FIG. 1 is a diagram showing a system configuration of an information processing system according to an embodiment of the present disclosure.

[0024] 1, an information processing system according to an embodiment of the present disclosure is configured in a certain user company, in which an image forming device 10 and a proxy authentication server 20 are connected to each other via a network 30. The image forming device 10 is a device called a multifunction device having multiple functions such as a printing function, a scanning function, a copying function, and a facsimile function. The proxy authentication server 20 is an authentication device having a function of authenticating a user who wishes to use the image forming device 10.

[0025] A fingerprint reader 40 is attached to the image forming apparatus 10. The fingerprint reader 40 reads the fingerprint of a user's finger and obtains it as fingerprint information.

[0026] In recent years, there has been a strong demand for improved security when using a certain device or system. Therefore, in the information processing system of the present embodiment, multi-factor authentication is performed on the user who uses the image forming device 10 to identify the user.

[0027] This multi-factor authentication is a method of identifying a user by using multiple elements of authentication information from three elements: memorized information (also called knowledge information) such as a password; possession information, which is information on devices held by the person performing the authentication, such as an IC card or mobile phone device; and biometric information, such as a fingerprint, retinal pattern, or vein pattern.

[0028] Specifically, when a user logs in to the image forming device 10, authentication is performed using an ID and password, and the user's fingerprint information is read by the fingerprint reader 40 and authentication is performed by the proxy authentication server 20. In other words, a user who wishes to use the image forming device 10 is identified through both authentication using stored information based on a password in the image forming device 10 and authentication using fingerprint information by the proxy authentication server 20.

[0029] Within a user company, there are two types of users: general users who simply use the image forming apparatus 10, and machine administrators who manage the image forming apparatus 10. The machine administrators are granted broader authority than general users and can perform various operations such as changing settings that general users are not granted authority to.

[0030] However, since the machine administrator is merely selected to manage the image forming device 10 within the user company, more advanced and specialized settings, investigation of the cause of any abnormalities that occur, part replacement, etc. are left to maintenance workers with specialized knowledge called customer engineers (hereinafter abbreviated as CE).

[0031] Here, the term "maintenance worker" refers not only to a person who performs the maintenance and management of the device or system, but also to a person who is expected to repair, maintain, install, inspect, etc. the device or system.

[0032] Generally, this CE is dispatched by a manufacturer or a maintenance work outsourcing company that is outsourced by a user company to visit the user company and perform maintenance of the image forming apparatus 10 .

[0033] To enable such operations by a CE, a CE ID, which is an ID for a CE who performs maintenance work, and a CE PW, a password for the CE, are preset in the image forming device 10. A CE who visits a user company can log in to the image forming device 10 as a CE by using this CE ID and CE PW. However, from a security standpoint, it would be problematic if a person who only knows the CE ID and CE PW could use the image forming device 10. For this reason, when a CE logs in, the image forming device 10 switches to CE mode by inputting a maintenance password that has been set in advance in the image forming device 10 by a machine administrator, and various maintenance operations can be performed.

[0034] However, since it is not known in advance what kind of person will be dispatched from the manufacturer or the maintenance work contracting company, and the fingerprint information of the CE is not registered in the proxy authentication server 20, the image forming device 10, which performs multi-factor authentication using stored information and fingerprint information, cannot realize multi-factor authentication of the CE. Also, when the CE logs in in the CE mode, if the machine administrator is always required to input a maintenance password, it may be inconvenient for the machine administrator to be near the CE at all times.

[0035] Therefore, in the information processing system of this embodiment, by performing the control described below, it is possible to perform authentication processing using multi-factor authentication using stored information and biometric information even for a CE, who is a user performing maintenance work who has not been registered in advance.

[0036] Next, the hardware configuration of the image forming apparatus 10 in the image forming system of this embodiment is shown in FIG.

[0037] 2, the image forming apparatus 10 has a CPU 11, a memory 12, a storage device 13 such as a hard disk drive, a communication interface (abbreviated as IF) 14 for transmitting and receiving data to and from external devices via a network 30, a user interface (abbreviated as UI) device 15 including a touch panel or a liquid crystal display and a keyboard, a scan unit 16, an image forming unit 17, and a fingerprint reader 40. These components are connected to each other via a control bus 18.

[0038] The image forming unit 17 prints an image on a recording medium such as printing paper through processes such as charging, exposure, development, transfer, and fixing.

[0039] The CPU 11 is a processor that executes a predetermined process based on a control program stored in the memory 12 or the storage device 13 to control the operation of the image forming apparatus 10. In the present embodiment, the CPU 11 is described as reading and executing the control program stored in the memory 12 or the storage device 13, but is not limited to this. The control program may be provided in a form recorded on a computer-readable recording medium. For example, the program may be provided in a form recorded on an optical disc such as a CD (Compact Disc)-ROM or a DVD (Digital Versatile Disc)-ROM, or in a form recorded on a semiconductor memory such as a USB (Universal Serial Bus) memory or a memory card. The control program may also be obtained from an external device via a communication line connected to the communication interface 14.

[0040] FIG. 3 is a block diagram showing the functional configuration of the image forming apparatus 10 realized by executing the above control program.

[0041] As shown in FIG. 3, the image forming apparatus 10 of this embodiment includes a fingerprint information reading unit 31, an operation input unit 32, a display unit 33, a data transmission / reception unit 34, a control unit 35, an image reading unit 36, a data memory unit 37, and an image output unit 38.

[0042] The fingerprint information reading unit 31 reads fingerprint information from a user's finger placed on a fingerprint reader 40.

[0043] The display unit 33 is controlled by the control unit 35 and displays various information to the user. The operation input unit 32 inputs various operation information performed by the user. The data transmission / reception unit 34 transmits and receives data to and from external devices such as the proxy authentication server 20.

[0044] The image output unit 38 outputs an image onto a recording medium such as printing paper under the control of the control unit 35. The image reading unit 36 ​​reads an original image from a set original under the control of the control unit 35.

[0045] The control unit 35 controls the image output unit 38 to execute a printing process, and the image reading unit 36 ​​to read an original image. The data storage unit 37 stores various data such as the print data generated by the control unit 35. The data storage unit 37 also stores a pair of a preset ID and a password for each user.

[0046] An example of authentication information consisting of an ID and a password thus managed in the image forming apparatus 10 is shown in Fig. 4. Referring to Fig. 4, it can be seen that information consisting of an ID and a password, which are identification information, a user name, and authority is managed for each user. Here, the following description will be given assuming that a character string "ceuser" is set as the ID for the CE, and a character string "ceuserpw" is set as the password for the CE.

[0047] Each user is assigned an authority to use the image forming apparatus 10, and is assigned one of the following: general user, machine administrator, or CE (maintenance operator). When each user logs in to the image forming apparatus 10 using an ID and password, the user is identified and is allowed to perform operations within a range according to the authority of the identified user.

[0048] Next, the operation of the image forming apparatus 10 in the information processing system of this embodiment will be described in detail with reference to the drawings.

[0049] First, the flow chart of FIG. 5 shows how multi-factor authentication is performed when a user attempts to use the image forming apparatus 10.

[0050] When the operation input unit 32 accepts input of an ID / password from the user in step S101, the control unit 35 performs authentication of the user in step S102 by confirming that the input ID and password match those registered in advance.

[0051] Then, in step S103, if the input ID and password match those registered in advance, the control unit 35 determines that the authentication has been successful, and if they do not match, it determines that the authentication has failed.

[0052] If it is determined in step S103 that the authentication has been successful, the control unit 35 acquires the fingerprint information of the user by the fingerprint information reading unit 31 in step S104.

[0053] Then, in step S105, the control unit 35 transmits the acquired fingerprint information to the proxy authentication server 20, and receives the authentication result returned from the proxy authentication server 20.

[0054] Next, in step S106, the control unit 35 determines, based on the authentication result received from the proxy authentication server 20, whether the authentication using the fingerprint information has been successful or unsuccessful.

[0055] If it is determined in step S106 that the authentication has been successful, the control unit 35 permits the user to log in and executes the login process in step S107.

[0056] If it is determined in either step S103 or step S106 that the authentication has failed, the control unit 35 returns to the process of step S101.

[0057] Next, a sequence chart of FIG. 6 shows data transmission and reception between the image forming apparatus 10 and the proxy authentication server 20 when the above-mentioned multi-factor authentication is performed.

[0058] First, in step S201, the user inputs an ID and password via the operation panel of the image forming apparatus 10.

[0059] Then, in step S202, the image forming apparatus 10 executes authentication processing by determining whether the input ID / password matches those registered in advance.

[0060] Next, in step S203, the image forming apparatus 10 acquires the user's fingerprint information by the fingerprint reader 40. Then, in step S204, the acquired fingerprint information is transmitted to the proxy authentication server 20 together with the specified user's ID information and the like.

[0061] Then, in step S205, the proxy authentication server 20 performs authentication processing by checking whether the fingerprint information transmitted from the image forming device 10 matches the preregistered fingerprint information of the user. Then, in step S206, the authentication result of the authentication processing is transmitted to the image forming device 10.

[0062] Finally, in step S207, the image forming apparatus 10 confirms that the authentication result transmitted from the proxy authentication server 20 indicates successful authentication, and executes the login process.

[0063] By performing the processes shown in Figures 5 and 6 above, multi-factor authentication is realized, which includes authentication using stored information based on the ID / password information entered by the user attempting to use the image forming device 10, and authentication using biometric information, i.e., the user's fingerprint information.

[0064] Here, in order to perform authentication using fingerprint information, the fingerprint information of the user to be authenticated must be stored in advance in the proxy authentication server 20. However, the fingerprint information of the CE, who is a maintenance worker dispatched by the manufacturer or the maintenance work contract company, is not registered in advance in the proxy authentication server 20.

[0065] Therefore, in the image forming apparatus 10 of this embodiment, multi-factor authentication for CE is realized by the following process.

[0066] (1) First, as shown in FIG. 7, the machine administrator operates the image forming apparatus 10 to obtain a maintenance one-time password (hereinafter, abbreviated as maintenance OTP). Specifically, the control unit 35 issues a maintenance OTP in response to a request from the machine administrator who is an administrator who manages the image forming apparatus 10, which is an authentication target apparatus. This maintenance OTP is temporary authentication information that is set with a preset expiration date and becomes invalid after the expiration date. For example, if the validity period of the maintenance OTP is set to two days, the maintenance OTP becomes invalid on the third day after it is issued. In the following description, the maintenance OTP is assumed to be a character string "348567". Then, in the image forming apparatus 10, information on the issued maintenance OTP is stored together with information such as the ID number of the machine administrator who instructed the issuance.

[0067] (2) Next, the system administrator notifies the CE who is scheduled to visit of the issued maintenance OTP. For example, the system administrator notifies the CE of the maintenance OTP by email, phone, etc. on the day before the CE is scheduled to visit.

[0068] (3) Then, on the scheduled visit date, the CE visits the user company and performs maintenance on the image forming apparatus 10.

[0069] The system administrator may notify the CE of the maintenance OTP before the visit, or may directly or verbally notify the visiting CE on the day of the visit.

[0070] Then, the image forming apparatus 10 performs the following authentication process for a CE who visits the user company where the image forming apparatus 10 is installed.

[0071] In this embodiment, a CE ID and a CE password are set in advance as authentication information of stored information for a CE who performs maintenance work on the image forming apparatus 10. When a CE logs in using the CE ID and the CE password, if fingerprint information, which is biometric information corresponding to the logged-in CE, is not registered in the proxy authentication server 20, the control unit 35 requests the CE to input a maintenance OTP. If the maintenance OTP input by the CE matches the maintenance OTP issued in advance, the control unit 35 registers the CE's fingerprint information in the proxy authentication server 20.

[0072] In addition, when a CE logs in using a CE ID and a CE password, if the fingerprint information of the logged-in CE is registered, the control unit 35 performs an authentication process on the CE using the fingerprint information, and if the authentication is successful, allows the CE to use the image forming device 10.

[0073] In this embodiment, a case will be described in which a CE ID and password information for the CE are set in advance as authentication information for the CE, but an IC card for the CE, or a USB memory stick on which an authentication code is stored, etc. may also be set in advance as retained information.

[0074] Then, when the control unit 35 permits the CE to use the image forming device 10, the control unit 35 permits the CE to perform operations for which the machine administrator has not been granted operation authority. In other words, the CE may be set to be able to perform operations for which the machine administrator has not been granted operation authority.

[0075] Furthermore, the control unit 35 associates the issued maintenance OTP with information such as the ID number and name of the system administrator who requested the issuance of the maintenance OTP and stores them in the data storage unit 37. Then, when the CE inputs the maintenance OTP, the control unit 35 causes the CE to input information about the system administrator who issued the maintenance OTP, and registers the CE's fingerprint information as the authentication information of the CE only when the input information about the system administrator matches the information about the system administrator stored in the data storage unit 37.

[0076] Furthermore, when the control unit 35 inputs a maintenance OTP from the CE, it may cause the display unit 33 to display information such as the names of multiple users including the machine administrator, and have the CE select one user from the multiple displayed users, thereby inputting information about the machine administrator who issued the maintenance OTP.

[0077] When registering the fingerprint information of a CE as authentication information in proxy authentication server 20, control unit 35 may set an expiration date for the fingerprint information to be registered and invalidate the fingerprint information after the expiration date has passed. The reason for setting an expiration date for the fingerprint information of a CE to be registered in this manner is that if the fingerprint information of a registered CE is not set to an expiration date and becomes valid forever, there is a possibility that the CE will be able to use image forming device 10 if he or she maliciously attempts to use image forming device 10 at a later date.

[0078] In this embodiment, a case where fingerprint information is used as biometric information for multi-factor authentication is described, but information such as vein patterns, iris patterns, etc. can also be used as biometric information. Also, although a case where the stored information is authentication information consisting of ID and password information is described, the present invention can be similarly applied to a case where a single authentication code is used as the stored information.

[0079] Next, a process in which a CE visiting a user company logs into the image forming apparatus 10 using the issued maintenance OTP will be described with reference to the flowchart of FIG.

[0080] 8 is obtained by adding steps S108 to S110 to the flowchart shown in FIG. 5, so in the following description, only the added steps S108 to S110 will be described in detail.

[0081] If it is determined in step S103 that the authentication is successful, the control unit 35 determines in step S108 whether or not the fingerprint information of the CE has been registered in the proxy authentication server 20. Here, as a method for determining whether or not the fingerprint information of the CE has been registered in the proxy authentication server 20, the control unit 35 may inquire of the proxy authentication server 20 as to whether or not the fingerprint information corresponding to the ID for the CE has been registered. Alternatively, information indicating whether or not the fingerprint information corresponding to the ID for the CE has been registered may be stored in the data storage unit 37, and the control unit 35 may refer to the information to determine whether or not the fingerprint information of the CE has been registered in the proxy authentication server 20.

[0082] Then, if it is determined in step S108 that the fingerprint information of the CE has already been registered, in step S104, the control unit 35 acquires the fingerprint information of the CE by the fingerprint information reading unit 31. After that, the authentication process is performed using the acquired fingerprint information of the CE, which is the same process as for other users, and therefore a description thereof will be omitted.

[0083] If it is determined in step S108 that the fingerprint information of the CE has not been registered, the control unit 35 executes new registration processing of the fingerprint information of the CE in step S109. The processing of step S109 will be described later in detail.

[0084] Then, in step S110, the control unit 35 determines whether the new registration process of the CE's fingerprint information has been successful.

[0085] If it is determined in step S110 that the new registration process of the CE's fingerprint information has been successful, the control unit 35 returns to the process of step S108 and continues the authentication process using the registered fingerprint information. If it is determined in step S110 that the new registration process of the CE's fingerprint information has failed, the control unit 35 returns to the process of step S101.

[0086] Next, details of the new registration process (step S109) of fingerprint information of a CE explained in the flowchart of FIG. 8 will be explained with reference to the flowchart of FIG.

[0087] First, in step S301, the control unit 35 instructs the CE to hold his / her finger over the fingerprint reader 40, and acquires fingerprint information for new registration from the CE.

[0088] Then, in step S302, the control unit 35 instructs the CE to input a maintenance OTP, thereby accepting input of the maintenance OTP from the CE.

[0089] Then, in step S303, the control unit 35 accepts input of information about the system administrator who issued the input maintenance OTP, such as the system administrator's name, ID, and the like.

[0090] Next, in step S304, the control unit 35 checks whether the stored information of the system administrator who issued the maintenance OTP matches the input information of the system administrator. Then, in step S305, the control unit 35 determines whether the stored information of the system administrator who issued the maintenance OTP matches the input information of the system administrator.

[0091] If it is determined in step S305 that the information of the machine administrator who issued the stored maintenance OTP matches the input information of the machine administrator, the control unit 35 registers the acquired fingerprint information as the fingerprint information of the CE in the proxy authentication server 20 in step S306.

[0092] Furthermore, if it is determined in step S305 that the stored information of the system administrator who issued the maintenance OTP does not match the input information of the system administrator, the control unit 35 ends the process.

[0093] Next, a sequence chart of FIG. 10 shows data transmission and reception performed between the image forming apparatus 10 and the proxy authentication server 20 when performing the process of registering the fingerprint information of the CE described above.

[0094] First, in step S401, the image forming device 10 issues a maintenance OTP based on the operation of the machine administrator. For example, in this description, the maintenance OTP is assumed to be a character string "348567." Then, in the image forming device 10, information on the issued maintenance OTP is stored together with information such as the ID number and name of the machine administrator who instructed the issuance. Then, this maintenance OTP is notified in advance by the machine administrator to the CE who is scheduled to visit.

[0095] Then, in step S402, the CE who has been notified of the maintenance OTP visits the user company and inputs the CE ID and CE password that are set in advance in the image forming device 10. An example of the operation screen displayed on the operation panel 41 of the image forming device 10 at this time is shown in FIG.

[0096] Then, when image forming apparatus 10 confirms that the input ID for the CE and password for the CE match the preset information, it checks whether or not the CE's fingerprint information has been registered in proxy authentication server 20. Here, since the CE's fingerprint information has not yet been registered in proxy authentication server 20, image forming apparatus 10 acquires the CE's fingerprint information in step 403. An example of an operation screen displayed on operation panel 41 of image forming apparatus 10 when acquiring the CE's fingerprint information in this manner is shown in FIG.

[0097] Referring to FIG. 12, the words “Please place the finger whose fingerprint information you wish to register on the fingerprint reader” are displayed on the operation panel 41, and an image of the CE placing the index finger of his right hand on the fingerprint reader 40 is shown.

[0098] Then, in step S404, the image forming apparatus 10 requests the CE to input the maintenance OTP. Furthermore, in step S405, the image forming apparatus 10 requests the CE to input information about the machine administrator who issued the maintenance OTP.

[0099] FIG. 13 shows an example of an operation screen when requesting the CE to input the maintenance OTP and the information of the system administrator who issued the maintenance OTP in this way.

[0100] Fig. 13 shows an example of an operation screen in which input of a maintenance OTP and input of information of the system administrator who issued the maintenance OTP are performed simultaneously on one operation screen. The operation screen example shown in Fig. 13 shows how a CE inputs a character string "348567" as the maintenance OTP and the name of the system administrator who issued the maintenance OTP. Note that here, the system administrator who issued the maintenance OTP specifically means the system administrator who notified the CE of the maintenance OTP.

[0101] In addition, Figure 13 shows a case where the system administrator who issued the maintenance OTP is identified by entering the system administrator's name, but it is also possible to use a method such as entering the system administrator's ID information or selecting the system administrator's name from multiple name information.

[0102] Thereafter, in step S406, the image forming apparatus 10 checks whether the inputted information of the system administrator matches the information of the system administrator stored in association with the maintenance OTP.

[0103] Then, when a match is confirmed in step S406, the image forming device 10 executes a process of registering the acquired fingerprint information of the CE in the proxy authentication server 20 in step S407. Specifically, the fingerprint information is transmitted from the image forming device 10 to the proxy authentication server 20 in step S408, and the transmitted fingerprint information is stored in the proxy authentication server 20 in step S409.

[0104] By carrying out such processing, the image forming apparatus 10 can perform authentication processing by multi-factor authentication using stored information and biometric information even for a CE who is a user performing maintenance work and has not been registered in advance. Also, while the registered fingerprint information is valid, the CE can log in to the image forming apparatus 10 in CE mode and perform maintenance work without the need for the presence of a machine administrator, thereby improving work efficiency. Furthermore, by performing identity verification of the CE using biometric information such as fingerprint information, it is possible to prevent the occurrence of a situation in which a CE logs in as another person in the middle of maintenance work.

[0105] In each of the above embodiments, the term "processor" refers to a processor in a broad sense, including general-purpose processors (e.g., CPU: Central Processing Unit, etc.) and dedicated processors (e.g., GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic device, etc.).

[0106] In addition, the operations of the processor in each of the above embodiments may be performed not only by one processor, but also by multiple processors located at physically separate locations working together. Furthermore, the order of the operations of the processor is not limited to the order described in each of the above embodiments, and may be changed as appropriate.

[0107] In this embodiment, the term "system" includes both a system made up of multiple devices and a system made up of a single device.

[0108] [Variations] In the above embodiment, the case where the authentication target device is an image forming device is described, but the present disclosure is not limited to this, and the present disclosure can be similarly applied to cases where the authentication target device is any of various information processing devices that perform authentication when used by a user.

[0109] [Note] Preferred embodiments of the present disclosure will be described below.

[0110] (((1))) A processor is provided. The processor, issuing temporary authentication information with a validity period set in response to a request from a first user who is an administrator managing the authentication target device; when a second user who performs maintenance work on the authentication target device logs in using first authentication information which is stored information or retained information preset for the second user, and second authentication information which is biometric information corresponding to the logged-in second user is not registered, a request is made to the second user to input temporary authentication information; If the temporary authentication information input by the second user matches the temporary authentication information issued in advance, registering the biometric information of the second user as second authentication information. Information processing system.

[0111] (((2))) When the second user logs in using first authentication information which is stored information or retained information preset for the second user, if second authentication information corresponding to the logged-in second user is registered, the processor executes an authentication process for the second user using the second authentication information, and if the authentication is successful, permits the second user to use the authentication target device. (((1)))'s information processing system.

[0112] (((3))) when the processor permits the second user to use the authentication target device, the processor permits the second user to operate a process for which the first user has not been permitted to operate. (((2)))'s information processing system.

[0113] (((4))) Further comprising a memory; The processor stores the issued temporary authentication information in the memory in association with information of the first user who requested issuance of the temporary authentication information; when the second user inputs temporary authentication information, the second user is required to input information about a first user who issued the temporary authentication information, and only when the input information about the first user matches the information about the first user stored in the memory, the biometric information of the second user is registered as second authentication information. (((1)))'s information processing system.

[0114] (((5))) When the processor receives temporary authentication information from the second user, the processor displays information of a plurality of users including the first user, and has the second user select one user from the displayed plurality of users, thereby inputting information of the first user who has issued the temporary authentication information. (((4)))'s information processing system.

[0115] (((6))) when registering the biometric information of the second user as second authentication information, the processor sets an expiration date for the second authentication information to be registered, and invalidates the second authentication information after the expiration date has passed. 1. An information processing system according to any one of ((1))) to (((5))).

[0116] (((7))) issuing temporary authentication information having a validity period set in response to a request from a first user who is an administrator managing the authentication target device; a step of requesting the second user to input temporary authentication information when the second user who performs maintenance work on the authentication target device logs in using first authentication information which is stored information or retained information preset for the second user and second authentication information which is biometric information corresponding to the logged-in second user is not registered; registering biometric information of the second user as second authentication information when the temporary authentication information input by the second user matches with previously issued temporary authentication information; A program for causing a computer to execute the following.

[0117] The effects of the above configuration are described below.

[0118] According to the information processing system (((1))), it is possible to perform authentication processing by multi-factor authentication using stored information and biometric information even for users performing maintenance work who have not been registered in advance.

[0119] According to the information processing system (((2))), after the biometric information of a user who has not been registered in advance is registered, the user can use the authentication target device using the stored information and the biometric information.

[0120] According to the information processing system (((3))), it is possible to perform authentication processing using multi-factor authentication that uses stored information and biometric information even for maintenance workers who may have broader operating authority than an administrator.

[0121] According to the information processing system of (((4))), it is possible to prevent a maintenance worker who has fraudulently obtained temporary authentication information from using an authentication target device.

[0122] According to the information processing system of (((5))), the maintenance worker can identify the administrator who has issued the temporary authentication information by simply selecting the administrator from among a plurality of users.

[0123] According to the information processing system of (((6))), the period during which a maintenance worker can use an authentication target device can be limited.

[0124] According to the program (((7))), it is possible to perform authentication processing by multi-factor authentication using stored information and biometric information even for a user performing maintenance work who has not been registered in advance. [Explanation of symbols]

[0125] 10 Image forming device 11 CPU 12. Memory 13 Storage device 14 Communication Interface 15 User Interface Device 16 Scan Unit 17 Image forming unit 18 Control Bus 20 Proxy Authentication Server 30 Network 31 Fingerprint information reader 32 Operation input section 33 Display section 34 Data transmission and reception unit 35 Control section 36 Image reading unit 37 Data storage section 38 Image output section 40 Fingerprint Reader 41 Operation Panel

Claims

1. A processor is provided. The processor, issuing temporary authentication information with a validity period set in response to a request from a first user who is an administrator managing the authentication target device; When a second user who performs maintenance work on the authentication target device logs in using first authentication information which is stored information or retained information previously set for the second user, if second authentication information which is biometric information corresponding to the logged-in second user is not registered, a request is made to the second user to input temporary authentication information; if the temporary authentication information input by the second user matches the temporary authentication information issued in advance, registering biometric information of the second user as second authentication information; Information processing system.

2. When the second user logs in using first authentication information, which is stored information or retained information preset for the second user, and second authentication information corresponding to the logged-in second user is registered, the processor executes an authentication process for the second user using the second authentication information, and if the authentication is successful, permits the second user to use the authentication target device.

2. The information processing system according to claim 1.

3. when the processor permits the second user to use the authentication target device, the processor permits the second user to perform operations for which the first user has not been permitted to perform the operations.

3. The information processing system according to claim 2.

4. Further comprising a memory; The processor stores the issued temporary authentication information in the memory in association with information of the first user who requested issuance of the temporary authentication information; when the second user inputs temporary authentication information, the second user is required to input information about a first user who issued the temporary authentication information, and only when the input information about the first user matches the information about the first user stored in the memory, biometric information about the second user is registered as second authentication information.

2. The information processing system according to claim 1.

5. When the processor receives temporary authentication information from the second user, the processor displays information of a plurality of users including the first user, and has the second user select one user from the displayed plurality of users, thereby inputting information of the first user who has issued the temporary authentication information.

5. The information processing system according to claim 4.

6. when registering the biometric information of the second user as second authentication information, the processor sets an expiration date for the second authentication information to be registered, and invalidates the second authentication information after the expiration date has passed.

2. The information processing system according to claim 1.

7. issuing temporary authentication information having a validity period set in response to a request from a first user who is an administrator managing the authentication target device; a step of requesting the second user to input temporary authentication information when the second user who performs maintenance work on the authentication target device logs in using first authentication information which is stored information or retained information previously set for the second user, and second authentication information which is biometric information corresponding to the logged-in second user is not registered; registering biometric information of the second user as second authentication information when the temporary authentication information input by the second user matches with previously issued temporary authentication information; A program for causing a computer to execute the following.

Images