Information processing device, user authentication system, and user authentication method

Abstract

To register identification information of a user to be approved by a simple procedure.SOLUTION: An image forming device 10 includes a short-range communication unit 17 that receives a user's identification information from the user through short-range communication, a storage unit 18 that stores the received user's identification information, an operation unit 12 to which instructions are input, and a control unit 21 that approves the user's identification information when the received user's identification information is associated with approval and stored in the storage unit 18. When the received user's identification information is not stored in the storage unit 18, control unit 21 does not authenticate the user's identification information, causes the user's identification information to be stored in the storage unit 18, and causes the user's identification information to be associated with approval and stored in the storage unit 18 in accordance with the instructions input to the operation unit 12.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present invention relates to an information processing apparatus, a user authentication system, and a user authentication method for authenticating a user based on the user's identification information, and particularly to a technique for simplifying the registration and management of the user's identification information.

Background Art

[0002] For example, in an image forming apparatus, when the user's identification information is input and the input identification information matches any of the identification information of a plurality of users registered in advance, the input identification information is approved and login to the image forming apparatus is permitted. In this case, it is necessary to register the identification information of a plurality of users in advance, and the processing procedure for this registration is complicated.

[0003] For example, the information processing system described in Patent Document 1 includes a mobile terminal, a printing server, and an image forming apparatus that are interconnected via a network. The mobile terminal generates a print job including user information and identification information for identifying the mobile terminal, and transmits the print job to the printing server, where the print job is stored. The image forming apparatus receives, by short-range wireless communication, the user information of the logged-in user and the identification information for identifying the mobile terminal from the mobile terminal, and also receives a print job including the user information from the printing server, and allows the user to select the print job. When the image forming apparatus determines that the identification information included in the selected print job is the same as the identification information received from the mobile terminal, the image forming apparatus executes the print job. Thereby, when using the image forming apparatus by the mobile terminal, authentication can be performed without using an authentication card, and leakage, forgery, impersonation, etc. can be prevented.

[0004] In addition, the identification information of the mobile terminal is generated when a program for realizing the processing of the print job is first started and stored in the identification information storage unit of the mobile terminal.

Prior Art Documents

Patent Documents

[0005] [Patent Document 1] Japanese Unexamined Patent Application Publication No. 2016-058072 [Summary of the Invention] [Problems to be Solved by the Invention]

[0006] Here, when registering the identification information of a plurality of users in advance as described above, the processing procedure for this registration was complicated. In the technology described in Patent Document 1, since the image forming apparatus executes a print job when it determines that the identification information included in the print job received from the server is the same as the identification information received from the mobile terminal, it does not reduce the work of registering in advance the identification information of a plurality of users who are approved.

[0007] The present invention has been made in view of the above circumstances, and an object thereof is to enable the registration of the identification information of a user who is approved by a simple procedure. [Means for Solving the Problems]

[0008] An information processing apparatus according to an aspect of the present invention includes a short-range communication unit that receives identification information of a user by short-range communication from the user, a storage unit that stores the received identification information of the user, an operation unit to which an instruction is input, and a control unit that approves the identification information of the user when the received identification information of the user is stored in the storage unit in association with approval. The control unit stores the received identification information of the user in the storage unit when the received identification information of the user is not stored in the storage unit and the identification information of the user is not approved, and stores the identification information of the user in the storage unit in association with approval according to the instruction input to the operation unit.

[0009] A user authentication system according to an aspect of the present invention is a user authentication system including an image forming apparatus and a management terminal device that performs data communication with the image forming apparatus through a network. The image forming apparatus includes a short-range communication unit that receives user identification information from the user by short-range communication, a first communication unit that transmits the user identification information received by the short-range communication unit to the management terminal device through the network, and a first control unit that permits login to the image forming apparatus when information indicating approval of the user identification information is received from the management terminal device by the first communication unit. The management terminal device includes a second communication unit that receives the user identification information transmitted from the image forming apparatus, a storage unit that stores user identification information, an operation unit to which an instruction is input, and a second control unit that approves the user identification information when the received user identification information is associated with approval and stored in the storage unit, and transmits approval of the user identification information from the second communication unit to the image forming apparatus through the network. When the received user identification information is not stored in the storage unit and the user identification information is not approved, the second control unit stores the user identification information in the storage unit and stores the user identification information in the storage unit in association with approval according to the instruction input to the operation unit.

[0010] A user authentication method according to an aspect of the present invention includes an input step in which user identification information is input, an authentication permission step in which the user identification information is approved when the input user identification information is associated with approval and stored in a storage unit, and an authentication management step in which when the input user identification information is not stored in the storage unit and the user identification information is not approved, the user identification information is stored in the storage unit and the user identification information is stored in the storage unit in association with approval according to an instruction input to an operation unit.

Effects of the Invention

[0011] According to the present invention, identification information of a user who approves can be registered by a simple procedure.

Brief Description of the Drawings

[0012]

Figure 1

Figure 2

Figure 3

Figure 4A

Figure 4B

Figure 5

Figure 6

Figure 7

Figure 8

Embodiments for Carrying Out the Invention

[0013] Hereinafter, a user authentication system according to an embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing a user authentication system according to an embodiment of the present invention, as well as the configurations of an image forming apparatus, a management server, and a portable terminal device in the user authentication system. In the user authentication system Sy of the present embodiment, an image forming apparatus 10, a management server 30, and a portable terminal device 50 are provided. Data communication is performed between the image forming apparatus 10 and the management server 30 through a network (such as an intranet) N, data communication is performed between the image forming apparatus 10 and the portable terminal device 50 by short-range communication, and further data communication is performed between the management server 30 and the portable terminal device 50 through the network N.

[0014] In this user authentication system Sy, the image forming apparatus 10 is, for example, an MFP (multifunction peripheral) having a plurality of functions such as a copy function and a scanner function. The image forming apparatus 10 includes a display unit 11, an operation unit 12, a touch panel 13, a network communication unit 14, an image reading unit 15, an image forming unit 16, a short-range communication unit 17, a storage unit 18, a control unit 19, and the like. These components transmit and receive data or signals to and from each other through a bus.

[0015] The display unit 11 is composed of, for example, a liquid crystal display (LCD) or an organic EL (OLED: Organic Light-Emitting Diode) display.

[0016] The touch panel 13 is overlaid on the screen of the display unit 11. The touch panel 13 detects a contact (touch) of a user's finger or the like on the touch panel 13 together with the contact position, and outputs a detection signal indicating the coordinates of the contact position to the control unit 21 of the control unit 19. Thereby, operations such as a GUI (Graphical User Interface) displayed on the screen of the display unit 11 can be performed through the touch panel 13. Therefore, the touch panel 13 functions as an operation unit for inputting a user operation to the screen of the display unit 11.

[0017] The operation unit 12 is provided with hard keys such as a numeric keypad, an enter key, and a start key. Instructions corresponding to the operations of the respective keys are input to the operation unit 12.

[0018] The image reading unit 15 has a scanner that optically reads an image of a document, and generates image data indicating the image of the document.

[0019] The image forming unit 16 includes a photosensitive drum, a charging device that uniformly charges the surface of the photosensitive drum, an exposure device that exposes the surface of the photosensitive drum to form an electrostatic latent image on the surface of the photosensitive drum, a developing device that develops the electrostatic latent image on the surface of the photosensitive drum into a toner image, and a transfer device that transfers the toner image (image) on the surface of the photosensitive drum to a recording sheet, etc., and prints the image indicated by the above image data on the recording sheet.

[0020] The network communication unit 14 is a communication interface provided with a communication module such as a LAN chip. The network communication unit 14 is connected to the management server 30 through a network (such as an intranet) N, and performs data communication with the management server 30.

[0021] The short-distance communication unit 17 has a short-distance communication (Near Field Communication) function, and performs data communication with the mobile terminal device 50 by this function.

[0022] The storage unit 18 is a large-capacity storage device such as an SSD (Solid State Drive) or an HDD (Hard Disk Drive), and stores various application programs and various data.

[0023] The control unit 19 is composed of a processor, a RAM (Random Access Memory), a ROM (Read Only Memory), and the like. The processor is, for example, a CPU (Central Processing Unit), an ASIC (Application Specific Integrated Circuit), or an MPU (Micro Processing Unit). When the control program stored in the above ROM or the storage unit 18 is executed by the above processor, the control unit 19 functions as the control unit 21.

[0024] The control unit 21 is in charge of the overall control of the image forming apparatus 10. Also, the control unit 19 is connected to a display unit 11, an operation unit 12, a touch panel 13, a network communication unit 14, an image reading unit 15, an image forming unit 16, a short-range communication unit 17, a storage unit 18, and the like. The control unit 21 controls the above components and performs signal or data transmission and reception between the components.

[0025] The control unit 21 serves as a processing unit that executes various processes. Also, the control unit 21 has a function of controlling the display unit 11, the network communication unit 14, and the short-range communication unit 17.

[0026] Also, in the user authentication system Sy, the management server 30 includes a display unit 31, an operation unit 32, a network communication unit 34, a storage unit 38, a control unit 39, and the like. These components perform data or signal transmission and reception with each other through a bus.

[0027] The display unit 31 is composed of a liquid crystal display or an organic EL display. The operation unit 32 is a keyboard, a pointing device, or the like. An instruction corresponding to the operation of the keyboard or the like is input to the operation unit 32.

[0028] The network communication unit 34 is a communication interface and is connected to the image forming apparatus 10 through the network N to perform data communication with the image forming apparatus 10.

[0029] The storage unit 38 is a storage device such as an SSD or an HDD, and stores programs and various data.

[0030] The control unit 39 is composed of a processor, a RAM, a ROM, etc. When the program stored in the above ROM or storage unit 38 is executed by the above processor, the control unit 39 functions as the control unit 41.

[0031] The control unit 41 is in charge of the overall control of the management server 30. Also, the control unit 39 is connected to the display unit 31, the operation unit 32, the network communication unit 34, the storage unit 38, etc. The control unit 41 controls the above components and performs signal or data transmission and reception between the components.

[0032] In the user authentication system Sy, the mobile terminal device 50 is, for example, a smartphone. The mobile terminal device 50 includes a display unit 51, a touch panel 53, a network communication unit 54, an imaging camera 55, a short-range communication unit 57, a storage unit 58, and a control unit 59, etc. These components perform data or signal transmission and reception with each other through a bus.

[0033] The display unit 51 is composed of a liquid crystal display, etc. The touch panel 53 is overlaid on the screen of the display unit 51 and detects touch operations by a user's finger, etc.

[0034] The network communication unit 54 is a communication interface, is connected to the management server 30 through the network N, and transmits and receives data to and from the management server 30.

[0035] The short-range communication unit 57 has a short-range communication function and performs data communication with the image forming apparatus 10 by the function.

[0036] The storage unit 58 is a large-capacity storage device such as an SSD or an HDD, and stores various application programs and various data.

[0037] The control unit 59 is composed of a processor, a RAM, a ROM, etc. When the control program stored in the above ROM or the storage unit 58 is executed by the above processor, the control unit 59 functions as a control unit 61.

[0038] The control unit 61 is in charge of the overall control of the mobile terminal device 50. Also, the control unit 59 is connected to a display unit 51, a touch panel 53, a network communication unit 54, an imaging camera 55, a short-range communication unit 57, a storage unit 58, etc. The control unit 61 controls the above respective components and performs transmission and reception of signals or data between the respective components.

[0039] In the user authentication system Sy configured as described above, when the user brings his / her mobile terminal device 50 close to the short-range communication unit 17 of the image forming apparatus 10, data communication based on a prescribed communication protocol is started between the mobile terminal device 50 and the short-range communication unit 17, and the user identification information ID stored in advance in the storage unit 58 of the mobile terminal device 50 is transmitted from the mobile terminal device 50 to the short-range communication unit 17.

[0040] In the image forming apparatus 10, when the user identification information ID is received by the short-range communication unit 17, the control unit 21 executes processing for authenticating the user identification information ID, which will be described in detail later, and permits the user to log in to the image forming apparatus 10 when approval of the user identification information ID is obtained.

[0041] When the user's login is permitted, for example, the user sets the original document on the image reading unit 15 and operates the start key of the operation unit 12 to input an instruction to execute a copy operation. The control unit 21 causes the image reading unit 15 to read the image of the original document according to the input copy operation execution instruction, and causes the image forming unit 16 to print the image of the original document on the recording paper.

[0042] In the user authentication system Sy of this embodiment, on the management server 30 side, the identification information IDs of a plurality of users are stored in the identification information data table D1 in the storage unit 38 as shown in FIG. 2, and the identification information IDs of the plurality of users are collectively managed.

[0043] In the identification information data table D1 shown in FIG. 2, the identification information IDs of a plurality of users are stored, and approval or disapproval is stored in association with the identification information ID of each user.

[0044] When the control unit 41 of the management server 30 receives the identification information ID of the user transmitted from the image forming apparatus 10 via the network communication unit 34, it stores this identification information ID of the user in the identification information data table D1. Also, the control unit 41 sets approval or disapproval in association with the identification information ID of each user stored in the identification information data table D1 according to the instruction transmitted from the image forming apparatus 10.

[0045] In addition, a user folder registration data table D2 as shown in FIG. 3 is stored in the storage unit 38 of the management server 30. In this user folder registration data table D2, the addresses of the respective user folders UD are stored in association with the identification information ID of each user.

[0046] The control unit 41 of the management server 30 creates a user folder UD for each identification information ID of the users stored in the identification information data table D1, stores it in the storage unit 38, and stores the address of the user folder UD in the user folder registration data table D2.

[0047] Next, the process of registering the identification information ID of the user in the identification information data table D1 and setting permission or non - permission for login to the image forming apparatus 10 for the identification information ID of the user will be described with reference to the flowcharts shown in FIGS. 4A and 4B.

[0048] When the user approaches the image forming apparatus 10 with his / her mobile terminal device 50, data communication is started between the short-range communication units 57 and 17 of the respective devices, and the user identification information ID stored in advance in the storage unit 58 of the mobile terminal device 50 is transmitted to the image forming apparatus 10.

[0049] In the image forming apparatus 10, when the user identification information ID is received by the short-range communication unit 17 (S101), the control unit 21 transmits the user identification information ID from the network communication unit 14 to the management server 30 through the network N (S102).

[0050] In the management server 30, when the user identification information ID is received by the network communication unit 34 (S201), the control unit 41 determines whether the received user identification information ID matches any of the identification information IDs already stored in the identification information data table D1 (S202).

[0051] For example, when the control unit 41 determines that the received user identification information ID matches any of the identification information IDs already stored in the identification information data table D1 (S202 “Yes”), it determines whether permission or non-permission is stored in the identification information data table D1 in association with this identification information ID (S203). Note that the control unit 41 does not use the identification information ID stored in the identification information data table D1 without either permission or non-permission being associated therewith as the subject of this determination.

[0052] When the control unit 41 of the management server 30 determines that non-permission is stored in association with the user identification information ID received in S201 (S203 “No”), it transmits information indicating non-approval (hereinafter simply referred to as non-approval) from the network communication unit 34 to the image forming apparatus 10 through the network N (S204).

[0053] Also, when the control unit 41 of the management server 30 determines that the user identification information ID received in S201 does not match any of the identification information IDs already stored in the identification information data table D1 (S202 “No”), the received user identification information ID is stored in the identification information data table D1 (S206).

[0054] In the image forming apparatus 10, when disapproval of the user identification information ID received in S101 is received by the network communication unit 14 (S103 “No”), the control unit 21 disallows login to the image forming apparatus 10 (S105) and prohibits the use of the image forming apparatus 10.

[0055] On the other hand, when the control unit 41 of the management server 30 determines that permission is stored in association with the user identification information ID received in S201 (S203 “Yes”), approval is transmitted from the network communication unit 34 to the image forming apparatus 10 through the network N (S207).

[0056] In the image forming apparatus 10, when approval is received by the network communication unit 14 (S103 “Yes”), the control unit 21 permits login to the image forming apparatus 10 for the user identification information ID received in S101 (S107) and sets the image forming apparatus 10 to an operable state. The control unit 21 causes the display unit 11 to display an operation screen G1 as shown in the example in FIG. 5 (S108).

[0057] On the operation screen G1 shown in the example in FIG. 5, keys K11 and K12 associated with copy and scan, a first QR code (registered trademark) W1, a second QR code W2, and a third QR code W3 are displayed.

[0058] The first QR code W1, the second QR code W2, and the third QR code W3 are generated by the control unit 21 of the image forming apparatus 10. The first QR code W1 includes the IP address of the management server 30, the user identification information ID, and an access request to the user information associated with the identification information ID. The second QR code W2 includes the IP address of the management server 30, the user identification information ID, and an instruction to download image data. The third QR code W3 includes the IP address of the management server 30, the user identification information ID, and an instruction to upload image data.

[0059] For example, when the user sets the original document on the image reading unit 15 and performs a touch operation on the key K11 on the operation screen G1 displayed on the display unit 11, an instruction to execute a copy operation is received by the control unit 21 via the touch panel 13 (S109 “Yes”). The control unit 21 causes the image reading unit 15 to read the image of the original document and causes the image forming unit 16 to print the image of the original document on the recording paper (S110). Also, when the user sets the original document on the image reading unit 15 and performs a touch operation on the key K12 on the operation screen G1 displayed on the display unit 11, an instruction to execute a scan operation is received by the control unit 21 via the touch panel 13 (S109 “Yes”). The control unit 21 causes the image reading unit 15 to read the image of the original document and stores the current image in the storage unit 18 (S110). After S110, the process ends.

[0060] Also, the user causes the imaging camera 55 of the mobile terminal device 50 to image the first QR code W1 on the operation screen G1 of the image forming apparatus 10. The control unit 61 of the mobile terminal device 50 analyzes the first QR code W1 imaged by the imaging camera 55, detects the IP address of the management server 30, the user identification information ID, and an access request to the user information, accesses the management server 30 from the network communication unit 54 through the network N based on the IP address of the management server 30, starts data communication with the management server 30, and transmits a control code including the user ID information and an access request to the user information to the management server 30.

[0061] In the management server 30, as the above control code, when the user identification information ID and the access request to the user information are received by the network communication unit 34 (S208 “Yes”, S209 “Yes”), the control unit 41 determines the address of the user folder UD associated with the received user identification information ID (the same as the user identification information ID received in S201) from the addresses of the user folders UD associated with the identification information IDs of the respective users shown in the user folder registration data table D2 shown in FIG. 3 (S210). The control unit 41 reads out the user information file from the user folder UD at the determined address and transmits this user information file from the network communication unit 34 to the mobile terminal device 50 through the network N (S211).

[0062] In the mobile terminal device 50, when the user information file is received by the network communication unit 54, the control unit 61 causes the user information (such as the user's personal information) stored in the received user information file to be displayed on the screen of the display unit 51. The user inputs instructions such as addition and modification to the user information displayed on the screen of the display unit 51 to the touch panel 53, and the control unit 61 updates the user information file according to the instruction. When a transmission instruction is input via the touch panel 53, the control unit 61 transmits this updated user information file from the network communication unit 54 to the management server 30 through the network N.

[0063] In the management server 30, when the above updated user information file is received by the network communication unit 34 (S212), the control unit 41 stores the received updated user information file in the user folder UD at the address determined in S210 and updates the user information file in the user folder UD. After that, the process ends.

[0064] Also, assume that the user causes the imaging camera 55 of the mobile terminal device 50 to image the second QR code W2 on the operation screen G1 of the image forming apparatus 10. The control unit 61 of the mobile terminal device 50 analyzes the second QR code W2 imaged by the imaging camera 55, detects the IP address of the management server 30, the identification information ID of the user, and an instruction to download image data, accesses the management server 30 through the network N from the network communication unit 54 based on the IP address of the management server 30, starts data communication with the management server 30, and transmits a control code including the identification information ID of the user and the instruction to download image data to the management server 30.

[0065] In the management server 30, when the identification information ID of the user and the download of the image data are received by the network communication unit 34 (S208 “Yes”, S209 “No”, S214 “Download”), the user folder registration data table D2 stored in the storage unit 38 is referred to, and the address of the user folder UD associated with the received identification information ID of the user (the same as the identification information ID of the user received in S201) is determined (S215). The control unit 41 reads out the names of all the image data files stored in the user folder UD at the determined address, and transmits these names of the image data files from the network communication unit 34 to the mobile terminal device 50 through the network N (S216).

[0066] In the mobile terminal device 50, when the name of the image data file is received by the network communication unit 54, the control unit 61 causes the received name of the image data file to be displayed on the screen of the display unit 51. The user inputs a selection instruction to select an arbitrary name of the image data file from among the names of the image data files displayed on the screen of the display unit 51 to the touch panel 53. The control unit 61 transmits the selection instruction from the network communication unit 54 to the management server 30 through the network N.

[0067] In the management server 30, when the above selection instruction is received by the network communication unit 34 (S217), the control unit 41 reads out the image data file with the name indicated by the selection instruction from the user folder UD at the address determined in S215, and transmits the read image data file and the user identification information ID received in S201 from the network communication unit 34 to the image forming apparatus 10 through the network N (S218). After that, the process ends.

[0068] In the image forming apparatus 10, when the above image data file and the user identification information ID are received by the network communication unit 14 from the management server 30 (S111), the control unit 21 causes the image forming unit 16 to print the image indicated by the image data file on the recording paper when it determines that the received user identification information ID matches the user identification information ID authenticated in S106 (S112).

[0069] Note that the user may input a deletion selection instruction for selecting the name of the image data file to be deleted from the names of the image data files displayed on the screen of the display unit 51 of the portable terminal device 50 from the touch panel 53, and the control unit 61 may transmit the deletion selection instruction from the network communication unit 54 to the management server 30 through the network N. In the management server 30, when the deletion selection instruction is received by the network communication unit 34, the control unit 41 deletes the image data file with the name indicated by the deletion selection instruction from the user folder UD determined in S210.

[0070] In addition, the user may also use the imaging camera 55 of the mobile terminal device 50 to image the third QR code W3 on the operation screen G1 of the image forming apparatus 10. In this case, the control unit 61 of the mobile terminal device 50 analyzes the third QR code W3 imaged by the imaging camera 55 to detect the IP address of the management server 30, the user identification information ID, and an instruction to upload image data. According to this instruction, the name of the image data file stored in the storage unit 58 is displayed on the screen of the display unit 51. When an upload instruction is input after the user selects the name of an arbitrary image data file via the touch panel 53, the control unit 61 reads out the image data file with the selected name from the storage unit 58, accesses the management server 30 through the network N from the network communication unit 54 based on the IP address of the management server 30, starts data communication with the management server 30, and transmits a control code including the user identification information ID, the upload instruction, and the read image data file from the network communication unit 54 through the network N to the management server 30.

[0071] At the management server 30, when the user identification information ID, the upload instruction, and the read image data file are received by the network communication unit 34 (S208 “Yes”, S209 “No”, S214 “Upload”, S219), the user folder registration data table D2 stored in the storage unit 38 is referred to, and the address of the user folder UD associated with the received user identification information ID (the same as the user identification information ID received in S201) is determined (S220), and the received image data file is stored in the user folder UD at the determined address (S221).

[0072] Then, the control unit 41 of the management server 30 transmits the image data file and the received user identification information ID from the network communication unit 34 through the network N to the image forming apparatus 10 (S221).

[0073] In the image forming apparatus 10, when an image data file and the user's identification information ID are received by the network communication unit 14 (S111), the control unit 21 determines that the received user's identification information ID matches the user's identification information ID authenticated in S106, and causes the image forming unit 16 to print the image indicated by the image data file on the recording paper (S112).

[0074] In addition, when the management server 30 does not receive an instruction based on the first QR code W1 to the third QR code W3 on the operation screen G1 by the imaging camera 55 of the mobile terminal device 50 (S208 “No”), the process ends after a predetermined time has elapsed.

[0075] When the user's identification information ID is received by the short-range communication unit 17 of the image forming apparatus 10 in this way, the user's identification information ID is transmitted from the image forming apparatus 10 to the management server 30. Then, when the user's identification information ID matches any of the identification information IDs already stored in the identification information data table D1 and permission is stored in association with this identification information ID, approval is transmitted and received between the management server 30 and the image forming apparatus 10, the user's identification information ID is authenticated, login to the image forming apparatus 10 is permitted, and image formation, update of the user information file, download, and upload of the image data file by the image forming apparatus 10 can be executed. Also, when the user's identification information ID does not match any of the identification information IDs already stored in the identification information data table D1 in association with approval or disapproval, this identification information ID is stored in the identification information data table D1.

[0076] Next, the update process of the identification information data table D1 stored in the storage unit 38 of the management server 30 will be described with reference to the flowchart shown in FIG. 6.

[0077] The administrator operates the operation unit 32 of the management server 30 to input a reference request for the identification information data table D1. The control unit 41 receives the reference request for the identification information data table D1 (S301). The control unit 41 reads the identification information data table D1 from the storage unit 38 according to the reference request for the identification information data table D1, and causes the display unit 31 to display a registration / update screen G20 showing the content stored in the identification information data table D1 as illustrated in FIG. 7 (S302). On this registration / update screen G20, the identification information ID of each user stored in the identification information data table D1 and the status "Approved" or "Not Approved" associated with each are displayed.

[0078] Furthermore, on the registration / update screen G20, when the identification information ID of the user received in S201 above does not match any of the identification information IDs already stored in the identification information data table D1 (S202 "No"), the identification information ID of the received user stored in the identification information data table D1 and its status "Not Registered" are also displayed.

[0079] When the registration / update screen G20 is displayed, for example, when the approval key K21 associated with the identification information ID10 whose status is "Not Approved" is operated from the operation unit 32, the control unit 41 of the management server 30 receives an instruction to change the status of the identification information ID10 to "Approved" via the operation unit 32 (S304 "Approved"), changes the status of the identification information ID10 to "Approved", and stores it in the identification information data table D1 (S305).

[0080] Also, when the registration / update screen G20 is displayed, for example, when the disapproval key K22 associated with the identification information ID20 whose status is "Approved" is operated from the operation unit 32, the control unit 41 of the management server 30 receives an instruction to change the status of the identification information ID20 to "Not Approved" via the operation unit 32 (S304 "Not Approved"), changes the status of the identification information ID20 to "Not Approved", and stores it in the identification information data table D1 (S306).

[0081] Also, when the registration update screen G20 is displayed, for example, when the registration key K25 associated with the identification information ID30 whose status is "unregistered" is operated from the operation unit 32, the control unit 41 of the management server 30, via the operation unit 32, sets the status of the identification information ID30 to "approved" and then accepts a registration instruction to store the identification information ID30 in the identification information data table D1 (S304 "Registration"), and stores the identification information ID30 in the identification information data table D1 after setting the status of the identification information ID30 to "approved" (S307).

[0082] After the processes of S305 to S307 are performed, the control unit 41 reads out the content of the identification information data table D1 at the time when the above processes are completed, and causes the display unit 31 to display a registration update screen G21 reflecting the stored content at this time as shown in the example of FIG. 8 (S307). FIG. 8 shows the registration update screen G21 displayed when the above processes are respectively performed for the identification information IDs 10 to 30. Note that when the control unit 41 changes the status of the unregistered identification information ID to "approved" and stores the identification information ID30 in the identification information data table D1, thereafter, in accordance with an instruction to change the status of the identification information ID to "disapproved" based on the operation of the disallow key associated therewith as the identification information ID whose status is "approved", the control unit 41 performs a process of changing the status to "disapproved".

[0083] Therefore, the administrator can rewrite the permission associated with the user's identification information ID to disapproval or rewrite the disapproval associated with the user's identification information ID to permission for each user's identification information ID in the identification information data table D1.

[0084] Thus, in this embodiment, when the identification information ID of the user received in the above S201 does not match any of the identification information IDs already stored in the identification information data table D1 (S202 “No”), the received identification information ID of the user is stored in the identification information data table D1. Further, when there is a reference request for the identification information data table D1, the identification information ID is displayed on the registration update screen G21 with its status set to “unregistered”. Further, in accordance with the above registration instruction, after changing the status of the identification information ID to “approved”, the identification information ID is stored in the identification information data table D1. Therefore, the administrator can store the identification information ID that has been authenticated for login once in the identification information data table D1 with a simple operation. Also, the status of each identification information ID already stored in the identification information data table D1 can be easily changed between “approved” and “not approved”.

[0085] In the above embodiment, a single image forming apparatus 10 is illustrated. However, even in a configuration where a plurality of image forming apparatuses 10 are connected to the management server 30 through the network N, for each image forming apparatus 10, based on the identification information data table D1 stored in the storage unit 38 of the management server 30 in accordance with the processes shown in FIGS. 4A and 4B, login to the image forming apparatus 10 can be permitted or not permitted, and image formation and the like by the image forming apparatus 10 can be executed.

[0086] Also, in the management server 30, the administrator can easily manage the identification information IDs of multiple users in a batch by rewriting the non - permission or permission associated with the user's identification information ID in the identification information data table D1 for a plurality of image forming apparatuses 10 in accordance with the update process of the identification information data table D1 shown in FIG. 6.

[0087] In the above-described embodiment, the image forming apparatus 10, the management server 30, and the mobile terminal device 50 are exemplified. However, the management server 30 may be omitted, and the identification information data table D1 may be stored in the storage unit 28 of the image forming apparatus 10, and the control unit 21 of the image forming apparatus 10 may determine approval or disapproval based on the identification information data table D1. That is, the control unit 21 of the image forming apparatus 10 performs all processes related to the identification information ID, including the authentication process performed by the control unit 41 of the management server 30 described above. Communication between the image forming apparatus 10 and the management server 30 regarding the identification information ID is not performed, and all processes related to the transmission and reception of data corresponding to the communication are completed within the image forming apparatus 10. In this case, the image forming apparatus 10 is an example of an information processing apparatus according to the claims. Further, the input of the user's identification information ID to the image forming apparatus 10 is not limited to the mobile terminal device 50, and other media that stores the user's identification information ID and performs short-range communication with the short-range communication unit 57 of the image forming apparatus 10 to transmit the user's identification information ID to the image forming apparatus 10, for example, an NFC card or the like may be used.

[0088] In addition, the configurations and processes of the above-described embodiment described with reference to FIGS. 1 to 8 are merely examples of the present invention, and the present invention is not intended to be limited to such configurations and processes.

Description of Reference Numerals

[0089] 10 Image forming apparatus 11 Display unit 12 Operation unit 13 Touch panel 14 Network communication unit 15 Image reading unit 16 Image forming unit 17 Short-range communication unit 18 Storage unit 19 Control unit 21 Control unit 30 Management server 31 Display unit 32 Operation unit 34 Network communication unit 38 Storage unit 39 Control unit 41 Control Unit 50 Mobile Terminal Device 51 Display Unit 53 Touch Panel 54 Network Communication Unit 55 Imaging Camera 57 Short-Range Communication Unit 58 Storage Unit 59 Control Unit 61 Control Unit

Claims

1. A short-range communication unit that receives the identification information of a user from the user by short-range communication; A storage unit that stores the received identification information of the user; An operation unit for inputting an instruction; A control unit that approves the identification information of the user when the received identification information of the user is associated with approval and stored in the storage unit, and when the received identification information of the user is not stored in the storage unit and the control unit does not approve the identification information of the user, the control unit stores the identification information of the user in the storage unit, and according to the instruction input to the operation unit, stores the identification information of the user in the storage unit in association with approval. An information processing apparatus.

2. The control unit changes the approval associated with the identification information of the user stored in the storage unit to disapproval according to the instruction input to the operation unit, or changes the disapproval associated with the identification information of the user stored in the storage unit to approval according to the instruction input to the operation unit. The information processing apparatus according to claim 1.

3. A user authentication system including an image forming apparatus and a management terminal apparatus that performs data communication with the image forming apparatus through a network, and the image forming apparatus includes A short-range communication unit that receives the identification information of a user from the user by short-range communication; A first communication unit that transmits the identification information of the user received by the short-range communication unit to the management terminal apparatus through a network; A first control unit that permits login to the image forming apparatus when information indicating approval of the identification information of the user is received from the management terminal apparatus by the first communication unit, and the management terminal apparatus includes A second communication unit that receives the identification information of the user transmitted from the image forming apparatus; A storage unit that stores the identification information of the user; An operation unit to which an instruction is input, a second control unit that approves the received user identification information when the received user identification information received by the second communication unit is associated with approval and stored in the storage unit, and transmits the approval of the user identification information from the second communication unit to the image forming apparatus through the network; The second control unit stores the user identification information in the storage unit when the received user identification information is not stored in the storage unit and the user identification information is not approved, and stores the user identification information in the storage unit in association with approval according to an instruction input to the operation unit. A user authentication system.

4. The management terminal device, The second control unit changes the approval associated with the user identification information stored in the storage unit to disapproval according to an instruction input to the operation unit, or changes the disapproval associated with the user identification information stored in the storage unit to approval according to an instruction input to the operation unit. The user authentication system according to claim 3.

5. An input step for inputting user identification information, An authentication permission step for approving user identification information when the input user identification information is associated with approval and stored in a storage unit, An authentication management step of storing the user identification information in the storage unit when the input user identification information is not stored in the storage unit and the user identification information is not approved, and storing the user identification information in the storage unit in association with approval according to an instruction input to the operation unit. A user authentication method.

6. In the authentication management step, according to the instruction input to the operation unit, the approval associated with the identification information of the user stored in the storage unit is changed to disapproval, or according to the instruction input to the operation unit, the disapproval associated with the identification information of the user stored in the storage unit is changed to approval. The user authentication method according to claim 5.

Images