Information processing apparatus, information processing method, and program

Abstract

To allow even a user not having any one of a plurality of authorities necessary for installation to instruct installation.SOLUTION: An information processing apparatus has: a determination unit that determines whether a first user related to an installation instruction has a plurality of authorities necessary for the installation of a certain program; and a control unit that, when the first user does not have any one of the plurality of authorities, if a second user having the authority that the first user does not have and permitting the installation is authenticated, performs control to make the program available.SELECTED DRAWING: Figure 3

Description

Technical Field

[0001] The present invention relates to an information processing apparatus, an information processing method, and a program.

Background Art

[0002] Regarding an information processing apparatus shared by a plurality of people such as an image forming apparatus, there are cases where users who can install programs such as applications are limited to predetermined users. Specifically, a user who has the authority required for installing a program (for example, an administrator) can give an installation instruction, and there are cases where other users cannot give an installation instruction.

[0003] Also, a technique for granting users different authorities regarding the setting of a function for each function of an information processing apparatus is also known. For example, in the case of an image forming apparatus having a copy function, a scanner function, and a fax function, it is possible to give user A the authority regarding the copy function and give user B the scanner function and the fax function.

Summary of the Invention

Problems to be Solved by the Invention

[0004] Conventionally, when it is desired to install a program that uses a plurality of functions (for example, a copy function and a scanner function) of an information processing apparatus, an installation instruction cannot be given unless the user has the authority for all of the plurality of functions. In other words, a user who has the authority only for some of the plurality of functions cannot give an installation instruction for the program.

[0005] The present invention has been made in view of the above points, and an object thereof is to enable an installation instruction even for a user who does not have any of a plurality of authorities required for installation.

Means for Solving the Problems

[0006] To solve the above problem, the information processing device has a determination unit that determines whether a first user related to an installation instruction has multiple permissions required to install a certain program, and a control unit that, if the first user does not have any of the multiple permissions, performs control to make the program available if a second user who has permissions that the first user does not have and who authorizes the installation is authenticated. [Effects of the Invention]

[0007] Even a user who does not have any of the multiple rights required for installation can issue an installation instruction. [Brief explanation of the drawings]

[0008]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

[0009] Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a diagram showing a configuration example of an information processing system according to an embodiment of the present invention. In FIG. 1, an image forming apparatus 10 is connected to an application store server 20 via a network such as the Internet.

[0010] The image forming apparatus 10 is an image forming apparatus that realizes a plurality of functions such as copying, scanning, printing, and faxing in a single housing. By installing one or more applications that utilize the functions of the image forming apparatus 10 in the image forming apparatus 10, the convenience of the image forming apparatus 10 can be improved.

[0011] The application store server 20 is one or more computers that store and publish a plurality of applications developed for installation in the image forming apparatus 10.

[0012] FIG. 2 is a diagram showing a hardware configuration example of the image forming apparatus 10 according to an embodiment of the present invention. The image forming apparatus 10 in FIG. 2 includes a drive device 100, an auxiliary storage device 102, a memory device 103, a CPU 104, an interface device 105, a display device 106, and an input device 107, etc., which are mutually connected by a bus B.

[0013] A program for realizing processing in the image forming apparatus 10 is provided by a recording medium 101 such as an SD card. When the recording medium 101 storing the program is set in the drive device 100, the program is installed from the recording medium 101 via the drive device 100 into the auxiliary storage device 102. However, the installation of the program does not necessarily have to be performed from the recording medium 101, and it may be downloaded from another computer via a network. The auxiliary storage device 102 stores the installed program and also stores necessary files, data, etc.

[0014] When there is an instruction to start a program, the memory device 103 reads and stores the program from the auxiliary storage device 102. The CPU 104 realizes the functions related to the image forming apparatus 10 according to the program stored in the memory device 103. The interface device 105 is used as an interface for connecting to a network. The display device 106 displays a GUI (Graphical User Interface) or the like according to the program. The input device 107 is composed of buttons, a touch panel, etc., and is used to input various operation instructions.

[0015] Note that the display device 106 and the input device 107 constitute the operation panel of the image forming apparatus 10. Further, the drive device 100, the auxiliary storage device 102, the memory device 103, the CPU 104, and the interface device 105 may also be hardware that constitutes the operation panel of the image forming apparatus 10.

[0016] FIG. 3 is a diagram showing a functional configuration example of the image forming apparatus 10 according to an embodiment of the present invention. In FIG. 3, the image forming apparatus 10 includes a login control unit 11, a user management unit 12, an application management unit 13, and an installation unit 14. Each of these units is realized by processing that causes the CPU 104 to execute one or more programs installed in the image forming apparatus 10. The image forming apparatus 10 also uses a user information storage unit 15. The user information storage unit 15 can be realized, for example, using the auxiliary storage device 102 or a storage device that can be connected to the image forming apparatus 10 via a network.

[0017] The login control unit 11 controls user login to the image forming apparatus 10. The user management unit 12 authenticates users by referencing the user information storage unit 15. The user information storage unit 15 stores a username, a password, etc. for each user who can use the image forming apparatus 10. The application management unit 13 controls applications designated as targets for installation so that they are available for use in the image forming apparatus 10 (can be executed by the image forming apparatus 10). The available state of an application refers to the state in which it is installed. Alternatively, if usage restrictions can be lifted even after installation, the installation unit 14 installs applications designated as targets for installation in accordance with instructions from the application management unit 13.

[0018] The following describes the processing procedure executed by the image forming apparatus 10. Fig. 4 is a sequence diagram for explaining an example of the processing procedure for installing an application executed by the image forming apparatus 10. In Fig. 4, a situation is assumed in which user A attempts to install an application on the image forming apparatus 10.

[0019] In step S101, the login control unit 11 receives a login request including the user A's username and password from the user A via a login screen displayed on the display device 106. The user A's username and password are entered on the login screen. The login request is entered by pressing a predetermined button on the login screen, for example.

[0020] Next, the login control unit 11 requests the user management unit 12 to check (authenticate) the username and password related to the login request (S102). The user management unit 12 refers to the user information storage unit 15 and determines whether the username and password are correct, thereby authenticating the user A.

[0021] Fig. 5 is a diagram showing an example of the configuration of the user information storage unit 15. As shown in Fig. 5, the user information storage unit 15 stores a user name, a password, administrative authority, etc. for each user who can use the image forming apparatus 10. The user name is the name of the user (account name). The password is the user's password. The administrative authority is information indicating the authority given to the user regarding operations for managing the image forming apparatus 10 (settings, installation, etc.).

[0022] Fig. 6 is a diagram showing an example of administrative rights that can be granted to a user. As shown in Fig. 6, administrative rights such as "copy," "scanner," "printer," "fax," "install," and "other" can be granted to a user.

[0023] "Copy" indicates the authority to make settings related to copying (updating parameters). "Scanner" indicates the authority to make settings related to scanners. "Printer" indicates the authority to make settings related to printers. "Fax" indicates the authority to make settings related to faxes. "Install" indicates the authority to install or uninstall applications. "Other" indicates the authority to make settings other than those mentioned above.

[0024] 5, the administrative authority of user X is "all." "All" indicates that user X has all the authorities shown in FIG.

[0025] The user management unit 12 determines that the authentication has been successful if a record including the user name and password requested to be checked by the login control unit 11 is stored in the user information storage unit 15, and determines that the authentication has not been successful if not. If the authentication has been unsuccessful, the processing from step S103 onwards is not executed. If the authentication has been successful, the user management unit 12 notifies the login control unit 11 of a response indicating the success of the authentication and including the administrative rights ("install", "copy") of the authenticated user (here, user A) (S103).

[0026] When the login control unit 11 receives the response indicating successful authentication, it changes the login status of the image forming apparatus 10 from a not-logged-in state to a logged-in state (S104). At this time, the login control unit 11 stores the user name and administrative authority of the authenticated user A as the user name and administrative authority of the logged-in user in, for example, the memory device 103.

[0027] Next, the login control unit 11 notifies the user A that the login has been successful (S105). The success of the login may be indicated, for example, by switching the display content of the display device 106 to a screen for receiving operations from the user (hereinafter referred to as an "operation screen").

[0028] Next, when user A inputs an instruction to display a list of applications via the operation screen (S106), the application management unit 13 obtains a list of application information for each application stored and published in the application store server 20 from the application store server 20 (S107, S108).

[0029] Fig. 7 is a diagram showing an example of application information. As shown in Fig. 7, the application information includes application information application name and type. The application name is the name of the application. The type is identification information of the function of the image forming apparatus 10 used by the application. In other words, the type is information indicating the administrative authority required for installing the application.

[0030] Next, the application management unit 13 requests the login control unit 11 to acquire the management authority of the logged-in user (S109). The login control unit 11 notifies the application management unit 13 of the management authority of the logged-in user stored in, for example, the memory device 103 (S110).

[0031] Next, the application management unit 13 selects application information whose type includes the administrative authority of the logged-in user from the list of application information acquired from the application store server 20 as application information of the application to be displayed (S111). According to the example of FIG. 5, the administrative authority of user A is "install" and "copy". In this case, the application management unit 13 selects application information whose type includes either or both of "install" and "copy". According to the example of FIG. 7, the copy application and the copy scan application each include "copy" in the type. Therefore, the application information of the copy application and the copy scan application is selected.

[0032] Next, the application management unit 13 displays a list of applications related to each piece of application information selected in step S111 on the operation screen (S112). In the list, each application is displayed as an option to be installed. Note that each application may be represented by, for example, an icon.

[0033] Next, when user A selects one of the applications from the list (designates it as an application to be installed), the application management unit 13 stores the application information of the selected application (hereinafter referred to as the "target application") (S113).

[0034] Next, when user A inputs an installation instruction via the operation screen (S114), the application management unit 13 determines whether the logged-in user can install the target application by himself or herself (whether or not the logged-in user has the authority to install the target application) (S115). This determination is made by checking (1) whether or not the logged-in user has the administrative authority to "install" and (2) whether or not the administrative authority of the logged-in user includes all of the types of application information of the target application. If (1) is not satisfied (if the logged-in user does not have the administrative authority to "install"), it is determined that installation is not possible. Therefore, if (1) is satisfied, (2) may be determined.

[0035] Since User A has the management authority for "Installation", the determination in (2) is made. That is, if the app management unit 13 determines that all of the types of app information of the target app are included in the management authority of the logged-in user, it is determined that the logged-in user can install the target app alone. On the other hand, if the app management unit 13 determines that some of the types of app information of the target app are not included in the management authority of the logged-in user, it is determined that the logged-in user cannot install the target app alone. Therefore, if the target app is a copy app, it is determined that the logged-in user can install the target app alone. On the other hand, if the target app is a copy scan app, it is determined that the logged-in user cannot install the target app alone. This is because the management authority of User A does not include "Scanner" among the types of copy apps.

[0036] If it is determined that the logged-in user can install the target app alone, the process proceeds to step S123. If it is determined that the logged-in user cannot install the target app alone, after steps S116 to S122 are executed, steps S123 and subsequent steps are executed.

[0037] In step S116, the application management unit 13 displays an additional authentication request screen on the display device 106. The additional authentication request screen includes, for example, a message indicating that the logged-in user lacks sufficient management authority for the target application, and a message indicating that authentication of a user having insufficient management authority (in this embodiment, "scanner") is required. The additional authentication request screen further includes an area for inputting the username and password of a user having insufficient management authority ("scanner"). When displaying the additional authentication request screen, the application management unit 13 may inquire of the user management unit 12 about the username of a user having insufficient management authority ("scanner"). The user management unit 12 refers to the user information storage unit 15 (FIG. 5), identifies a list of usernames of users having the management authority, and responds to the application management unit 13 with the list of usernames. The application management unit 13 may include the list of usernames in the additional authentication request screen. By doing so, user A can easily grasp who the users with insufficient authority are.

[0038] According to FIG. 5, the users having insufficient management authority "scanner" are user B and user C. Therefore, for example, user A requests authentication from user B for installing the target application. When user B permits the installation of the target application, user B inputs his / her own username and password to the additional authentication request screen and instructs the authentication request (S117). Subsequently, the application management unit 13 requests the login control unit 11 to acquire the management authority of user B (S118). At this time, the application management unit 13 notifies the login control unit 11 of the username and password of user B input to the additional authentication request screen.

[0039] In response to a request from the application management unit 13, the login control unit 11 requests the user management unit 12 to check (authenticate) the user name and password of user B notified by the application management unit 13 (S119). The user management unit 12 refers to the user information storage unit 15 (Fig. 5) and authenticates user B by determining the validity of the user name and the password. Note that the method for determining the validity of authentication is the same as that for user A. If the authentication fails, the steps after S120 are not executed. If the authentication is successful, the user management unit 12 notifies the login control unit 11 of a response indicating the success of authentication and including the management authority (「installation」, 「scanner」) of the authenticated user (here, user B) (S120).

[0040] When the login control unit 11 is notified of a response indicating the success of authentication, it notifies the application management unit 13 of the management authority of user B (S121).

[0041] Subsequently, the application management unit 13 determines whether the management authority of the additionally authenticated user B satisfies the insufficient management authority (S122). That is, the application management unit 13 determines that the management authority of user B satisfies the insufficient management authority if the management authority of user B includes all of the insufficient management authority, and otherwise determines that the management authority of user B does not satisfy the insufficient management authority. If the management authority of user B does not satisfy all of the insufficient management authority, the steps after S123 are not executed. In this case, steps S116 and subsequent steps may be repeated to request additional authentication of users who also have insufficient management authority, including user A and user B. That is, the type of the target application may be satisfied by the management authorities of three or more users.

[0042] In this embodiment, the management authority of user B satisfies the insufficient management authority. Therefore, the process proceeds to step S123.

[0043] In step S123, the application management unit 13 displays an application download start screen on the display device 106. The application download start screen is a screen for notifying the user of the start of the download of the target application. Subsequently, the application management unit 13 downloads (acquires) the target application from the application store server 20 (S124, S125). Subsequently, the application management unit 13 requests the installation unit 14 to install the downloaded target application (S126).

[0044] In response to the request from the application management unit 13, the installation unit 14 installs the target application in the image forming apparatus 10. When the installation is completed, the installation unit 14 notifies the application management unit 13 of the completion of the installation (S127). In response to the notification of the completion of the installation, the application management unit 13 displays on the display device 106 a screen for notifying the user of the completion of the installation (S128).

[0045] Note that the application management unit 13 may keep the installation of the target application in a pending state without authenticating user B who has insufficient administrative privileges. Specifically, in response to the installation instruction in step S114, the application management unit 13 may not execute steps S116 and subsequent steps, and may store the insufficient administrative privileges in the auxiliary storage device 102 or the like in association with the application name of the target application. Thereafter, when any user logs in to the image forming apparatus 10 again, if the user has insufficient administrative privileges, the application management unit 13 may execute steps S116 and subsequent steps. In this case, when the user permits the installation of the target application, the user inputs his / her user name and password to the additional authentication request screen. On the other hand, when the user does not permit the installation of the target application, the user does not input his / her user name and password to the additional authentication request screen. However, in this case, since the user has already been authenticated at the time of login, the application management unit 13 may display a screen for inquiring whether to permit the installation of the target application instead of the additional authentication request screen. In this case, the user may simply select an option of permitting or not permitting the installation of the target application.

[0046] Alternatively, the application management unit 13 may execute the installation without authenticating a user who lacks the necessary management authority. That is, the application management unit 13 may execute steps S123 to S128 without executing steps S116 to S122. In this case, the application management unit 13 stores the target application and the lacking management authority in the auxiliary storage device 102, and sets the target application to a state where it cannot be started. The state where the target application cannot be started means that, for example, the application management unit 13 may prevent the target application from being started by not including the target application in the options on the screen that displays the list of applications to be used by the user. Alternatively, the option may be displayed, and when the option is selected, the application management unit 13 may reject the start of the target application. Then, when any user logs in to the image forming apparatus 10 again, if the user lacks the necessary management authority, the application management unit 13 may execute steps S116 to S122. At this time, if the user permits the installation of the target application, the user inputs his or her username and password to the additional authentication request screen. On the other hand, if the user does not permit the installation of the target application, the user does not input his or her username and password to the additional authentication request screen. However, in this case, since the user has already been authenticated at the time of login, the application management unit 13 may display a screen for inquiring whether to permit the installation of the target application instead of the additional authentication request screen. In this case, the user simply needs to select an option of whether to permit the installation of the target application. When the installation of the target application is permitted by the user, the application management unit 13 may change the target application to a state where it can be started.

[0047] As described above, according to the present embodiment, if the set of management authorities of a plurality of users can satisfy the authorities necessary for installation, the installation can be executed. Therefore, even a user who does not have any of the plurality of authorities necessary for installation can give an installation instruction.

[0048] In addition, each function of the embodiments described above can be realized by one or more processing circuits. Here, the "processing circuit" in this specification refers to a processor programmed to execute each function by software, such as a processor implemented by an electronic circuit, an ASIC (Application Specific Integrated Circuit) designed to execute each function described above, a DSP (digital signal processor), an FPGA (field programmable gate array), and devices such as conventional circuit modules.

[0049] Note that in this embodiment, the image forming apparatus 10 is an example of an information processing apparatus. However, the information processing apparatus is not limited to an image forming apparatus as long as it is a device shared by a plurality of users. The information processing apparatus may be, for example, an output device such as a PJ (Projector), an IWB (Interactive White Board), a digital signage, a HUD (Head Up Display) device, an industrial machine, an imaging device, a sound collection device, a medical device, a network home appliance, a notebook PC (Personal Computer), a mobile phone, a smartphone, a tablet terminal, a game machine, a PDA (Personal Digital Assistant), a digital camera, a wearable PC, or a desktop PC.

[0050] Also, the application management unit 13 is an example of a determination unit, a control unit, an authentication request unit, and an inquiry unit. The target application is an example of a certain program.

[0051] As described above in detail, the embodiments of the present invention have been described in detail. However, the present invention is not limited to such specific embodiments, and various modifications and changes are possible within the scope of the gist of the present invention described in the claims.

Explanation of Reference Numerals

[0052] 10 Image forming apparatus 11 Login Control Unit 12 User Management Unit 13 Application Management Unit 14 Installation Unit 15 User Information Storage Unit 20 Application Store Server 100 Drive Device 101 Recording Medium 102 Auxiliary Storage Device 103 Memory Device 104 CPU 105 Interface Device 106 Display Device 107 Input Device B Bus

Prior Art Documents

Patent Documents

[0053]

Patent Document 1

Claims

1. a determination unit that determines whether a first user related to an installation instruction has a plurality of permissions required for installation of a certain program; a control unit that, when the first user does not have any of the plurality of permissions, performs control to make the program available if a second user who has the permission that the first user does not have and permits the installation is authenticated; An information processing apparatus comprising the above.

2. When the first user does not have any of the plurality of permissions, for each of the plurality of permissions that the first user does not have, if a second user who has the permission and permits the installation is authenticated, the control unit performs control to make the program available. The information processing apparatus according to claim 1, characterized in that.

3. an authentication request unit that requests input of authentication information of the second user when the first user does not have any of the plurality of permissions; The information processing apparatus according to claim 1 or 2, characterized in that it comprises the above.

4. an inquiry unit that inquires of the second user whether to permit the installation in response to login of the second user; The information processing apparatus according to claim 1 or 2, characterized in that it comprises the above.

5. The determination unit determines whether the first user has the plurality of permissions by referring to a storage unit that stores information indicating the permissions that each user has for each user. The information processing apparatus according to any one of claims 1 to 4, characterized in that.

6. The plurality of permissions are permissions related to functions of the information processing apparatus used by the program. The information processing apparatus according to any one of claims 1 to 5, characterized in that.

7. a determination procedure for determining whether a first user related to an installation instruction has a plurality of permissions required for installation of a certain program; a control procedure for performing control to make the program available if a second user who has the permission that the first user does not have and permits the installation is authenticated when the first user does not have any of the plurality of permissions; An information processing method, characterized in that a computer executes the above.

8. a determination procedure for determining whether a first user related to an installation instruction has a plurality of permissions required for installation of a certain program; When the first user does not have any of the plurality of authorities, if a second user who has the authority that the first user does not have and permits the installation is authenticated, a control procedure for performing control to make the program available; A program characterized by causing a computer to execute the same.

Images