Image processing device, method of controlling image processing device, information processing device, and program

Abstract

To solve the problem that when a scan document is uploaded from an image processing device to a cloud service, a user needs to perform complicated operation on the image processing device, and introduction is not easy because of the need for large-scale constitution including structuring of external service on a network, saving of scan settings, etc.SOLUTION: An MFP 100 receives, from a client terminal 130, a scan job including scan settings, a transmission destination of scan data read based upon the scan settings, and a token acquired from an authorization server 110 to access the storage server 120, and keeps the received scan job (Fig. 8B). The MFP 100 identifies an object scan job from the kept jobs according to user operation through an operation part 102, executes the identified scan job, and transmits the scan document to the storage server 120 as the transmission destination by using the token (S1105 to S1107).SELECTED DRAWING: Figure 11

Description

[Technical Field]

[0001] The present invention relates to an image processing apparatus, a control method for an image processing apparatus, an information processing apparatus, and a program. [Background technology]

[0002] In recent years, there has been an increasing use of cloud storage servers as a storage destination for images scanned by image processing devices such as scanners and multifunction peripherals, and scanning workflows that link image processing devices with cloud services are also on the rise. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2017-135691 Summary of the Invention [Problem to be solved by the invention]

[0004] However, when uploading documents scanned with an image processing device to a cloud service, the user must specify the resolution, save destination, etc. on the image processing device, which makes the operation cumbersome and time-consuming. In particular, when the image processing device is a shared device, it is desirable to shorten the operation time on the device as much as possible.

[0005] Patent Document 1 proposes a technology that allows a user to easily specify the resolution, save destination, etc. when uploading a scanned document to a cloud service. Patent Document 1 discloses a technology that stores scan settings, cloud service information, and authentication information on an external service on a network, uses these to scan from an image processing device, and enables the scanned document to be uploaded to the cloud service. However, the method of saving scan settings and the like to an external service on the network, as described in Patent Document 1, requires the external service to be separately built on the network, which is a large-scale configuration and is not easily implemented.

[0006] The present invention has been made to solve the above-mentioned problems, and aims to provide a system that allows users to easily send scanned documents from an image processing device such as an MFP to a cloud service or the like, with a simple configuration that has a low barrier to entry and does not require the creation of a separate external service on a network, thereby significantly improving convenience. [Means for solving the problem]

[0007] The present invention is an image processing device equipped with a scanner and a storage means, and is characterized by having: a receiving means for receiving from an information processing device a scan job including scan settings, a destination for scan data read by the image processing device based on the scan settings, and a token for accessing the destination obtained from an authorization server; a storage means for storing the received scan job data in the storage means, thereby storing the scan job; an identification means for identifying a target scan job from among the stored jobs in response to user operation from an operation unit of the image processing device; an execution means for executing the identified scan job; and a sending means for sending the scan data read by the scanner by executing the scan job to the destination included in the scan job using the token. [Effects of the Invention]

[0008] According to the present invention, with a simple configuration that has a low barrier to entry and does not require the construction of a separate external service on the network, users can easily send scanned documents from image processing devices such as MFPs to cloud services, etc., thereby significantly improving convenience. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 is a diagram showing an example of a system configuration according to an embodiment of the present invention. [Figure 2] FIG. 2 is a block diagram showing an example of details of a controller unit of the MFP according to the embodiment. [Figure 3] FIG. 2 is a block diagram showing an example of details of an authorization server and a storage server according to the embodiment. [Figure 4] FIG. 3 is a block diagram showing an example of details of a client terminal according to the embodiment. [Figure 5] FIG. 2 is a block diagram showing an example of the software configuration of the MFP according to the embodiment. [Figure 6] 10 is a diagram showing an example of a sequence in which a client terminal acquires an access token for accessing a storage server and sets a storage destination in this embodiment. FIG. [Figure 7] FIG. 4 is a diagram showing an example of an authorization screen according to the embodiment. [Figure 8A] 6 is a flowchart showing an example of processing of a client terminal in the first embodiment. [Figure 8B] 5 is a flowchart showing an example of processing of the MFP in the first embodiment. [Figure 9] FIG. 10 is a diagram showing an example of an indwelling scan setting screen according to the present embodiment. [Figure 10] FIG. 10 is a diagram showing an example of a data configuration when a storage scan job is saved according to the present embodiment. [Figure 11] 10 is a flowchart showing an example of processing for executing a storage scan job in the MFP according to the present embodiment. [Figure 12A] FIG. 10 is a diagram showing an example of a screen when a storage scan job is executed in the present embodiment. [Figure 12B] FIG. 10 is a diagram showing an example of a screen when a storage scan job is executed in the present embodiment. [Figure 13A] 10 is a flowchart showing an example of processing of a client terminal in the second embodiment. [Figure 13B] 10 is a flowchart showing an example of processing by the MFP in the second embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. However, not all of the features described in the embodiment are necessarily essential to the solution of the present invention. In the embodiment of the present invention, an example of a service in which an image forming apparatus, a client terminal such as a personal computer (PC) or a smartphone, an authorization server, and a storage server cooperate with each other will be described.

[0011] [First embodiment] FIG. 1 is a diagram showing an example of a system configuration according to an embodiment of the present invention. The system in this embodiment includes an MFP 100, an authorization server 110, a storage server 120, and a client terminal 130. The MFP 100, the authorization server 110, the storage server 120, and the client terminal 130 are connected via a network 150 so as to be able to communicate with each other.

[0012] The network 150 may be either a wired connection or a wireless connection, and may be either the Internet or an intranet. For example, the network 150 may be a wireless connection, Wi-Fi, or a data communication line, or may be any form that allows data exchange. The networks to which the MFP 100, authorization server 110, storage server 120, and client terminal 130 are connected do not all need to be the same network type. For example, the MFP 100, authorization server 110, and storage server 120 may be connected to the Internet via a wired connection, and the client terminal 130 may be connected to the Internet via a data communication line.

[0013] The MFP 100 is an image processing device (multifunction peripheral) that can read images with a scanner and print images with a printer. The MFP 100 has an operation unit 102 that inputs and outputs data to and from the user. The MFP 100 has a printer unit 103 that outputs electronic data to paper media. The MFP 100 has a scanner unit 104 that reads paper media and converts it into electronic data. The operation unit 102, printer unit 103, and scanner unit 104 are connected to a controller unit 101 and function as a multifunction peripheral under the control of the controller unit 101. The MFP 100 has an MFP user DB 105 and image storage 106. The MFP user DB 105 stores MFP user information for authentication when using the MFP 100. The image storage 106 consists of a temporary area where temporary image data such as data used by the printer unit 103 and data converted by the scanner unit 104 is stored, and a long-term storage area where image data that needs to be stored for a longer period of time is stored.

[0014] The authorization server 110 is configured to include an authorization application (hereinafter referred to as "authorized application") 111. In this embodiment, an example is shown in which the authorization application 111 complies with the OAuth mechanism defined in RFC6479, for example. When the client terminal 130 requests access to the storage server 120 along with appropriate authentication information, the authorization application 111 issues an access token for granting access authority to the storage server 120. Furthermore, when the client terminal 130 passes the access token to the storage server 120 to make an access request, the storage server 120 confirms the validity of the access token with the authorization server 110. At this time, the authorization application 111 determines whether the access token is valid. Furthermore, because an access token generally has a short expiration time, the authorization application 111 may issue a refresh token with a longer expiration time to update the access token. When the client terminal 130 requests updating of the access token using a refresh token, the authorization application 111 reissues the access token and refresh token and returns them to the client terminal 130. Note that OAuth is just an example, and other methods may be used for authorization and authentication. The authorization server 110 is configured using known technology, and therefore a detailed description thereof will be omitted.

[0015] The storage server 120 is, for example, a cloud storage, and is configured to include a storage application (hereinafter referred to as "storage app") 121 and storage 122. Upon receiving instructions from the client terminal 130, the storage app 121 returns a list of files and directories stored in the storage 122, saves files to the storage 122, and so on. When an access token is passed from the client terminal 130, the storage app 121 checks with the authorization server 110 whether the access token is valid, and if it is not valid, denies access from the client terminal 130. The storage server 120 is configured using known technology, and therefore a detailed description thereof will be omitted.

[0016] The client terminal 130 is configured to include a storage scan application (hereinafter referred to as "storage scan app") 131. Although only one client terminal 130 is shown in FIG. 1, multiple client terminals may be present. The storage scan app 131 sets scan settings for performing a scan on the MFP 100 and a save destination for the scanned image file, and instructs the MFP 100 to issue a storage scan job. Examples of client terminals include information processing devices such as smartphones, tablets, and personal computers (PCs). Note that FIG. 1 only describes the configuration for explaining this embodiment, and therefore other configurations may be included as long as the configuration of this embodiment is satisfied, and it goes without saying that the connection between the components is not limited to this.

[0017] FIG. 2 is a block diagram showing an example of details of the controller unit 101 of the MFP. The CPU 201 performs the main arithmetic processing within the controller. The CPU 201 is connected to the DRAM 202 via a bus. The DRAM 202 is used by the CPU 201 as a working memory for temporarily storing program data representing arithmetic instructions during the CPU 201's arithmetic operations and data to be processed.

[0018] The CPU 201 is connected to an I / O controller 203 via a bus. The I / O controller 203 performs input and output to various devices according to instructions from the CPU 201. A SATA (Serial Advanced Technology Attachment) I / F 205 is connected to the I / O controller 203, and a flash ROM 210 is connected to the SATA I / F 205. The CPU 201 uses the flash ROM 210 to permanently store programs for realizing the functions of the MFP and document files. Note that instead of a flash ROM, a large-capacity storage device such as an HDD (Hard Disk Drive) may be connected to the SATA I / F 205.

[0019] A network I / F 204 is also connected to the I / O controller 203. Wired LAN devices and wireless LAN devices are connected to the network I / F 204. The CPU 201 controls the wired LAN devices and wireless LAN devices via the network I / F 204 to realize communication on the network 150.

[0020] A panel I / F 206 is connected to the I / O controller 203 , and the CPU 201 realizes input and output to the operation unit 102 via the panel I / F 206 for the user. A printer I / F 207 is connected to the I / O controller 203 , and the CPU 201 performs output processing on paper media using the printer unit 103 via the printer I / F 207 . A scanner I / F 208 is connected to the I / O controller 203, and the CPU 201 uses the scanner unit 104 via the scanner I / F 208 to implement processing for reading an image from a document.

[0021] The MFP 100 has various applications for utilizing the functions of the MFP, such as a copy function, a transmission function, a fax function, and a box function.

[0022] For example, when a copy function is to be performed, the CPU 201 loads program data from the flash ROM 210 into the DRAM 202 via the SATA I / F 205. The CPU 201 detects a copy instruction from the user via the panel I / F 206 on the operation unit 102 in accordance with the program loaded into the DRAM 202. When the CPU 201 detects a copy instruction, it receives an original document as electronic data from the scanner unit 104 via the scanner I / F 208 and stores the data in the DRAM 202. The CPU 201 performs color conversion processing suitable for output on the image data stored in the DRAM 202. The CPU 201 transfers the image data stored in the DRAM 202 to the printer unit 103 via the printer I / F 207, and performs output processing onto paper media.

[0023] In the transmission function, the process in which the CPU 201 detects a transmission instruction from the user is the same as in the copy function described above. The transmission instruction includes a transmission protocol, destination specification, image format, and the like from the user. The transmission protocol may be SMB, FTP, email (SMTP), or the like. The destination specification is, for example, specified using UNC (Universal Naming Convention). The image format may be JPEG, PDF, or the like. When the CPU 201 detects a transmission instruction, it receives an original document as electronic data from the scanner unit 104 via the scanner I / F 208 and stores the data in the DRAM 202. The CPU 201 performs image format conversion, etc., as specified by the user, on the image data stored in the DRAM 202. The CPU 201 transfers the image data stored in the DRAM 202 to the destination via the network I / F 204 using a protocol specified by the user. At this time, the storage server 120 may be specified as the destination, and transmission may be performed using an authorization mechanism using an access token.

[0024] In the fax function, the process in which the CPU 201 detects a fax instruction from the user is the same as in the copy function described above. When the CPU 201 detects a fax instruction, it receives the original as electronic data from the scanner unit 104 via the scanner I / F 208 and stores the data in the DRAM 202. The CPU 201 performs image format conversion for fax on the image data stored in the DRAM 202. The CPU 201 transfers the image data stored in the DRAM 202 to a fax telephone number specified in the fax instruction via a telephone line network (not shown) to which the fax I / F 209 is connected. Faxing via a telephone line is one example, and the data may also be an Internet fax.

[0025] The box function stores scanned images in a storage area within the MFP 100 or on a memory medium connected to the MFP 100, and makes the images stored in the MFP 100 available to an external PC (not shown) or other image processing devices by using the MFP 100 as a file server. In the box function, the CPU 201 detects a box save instruction from a user in the same manner as in the copy function described above. The box save instruction includes the user's save destination and image format. The save destination is a path to the internal storage of the MFP 100 or a memory medium connected to the MFP 100. The image format is, for example, JPEG or PDF. When the CPU 201 detects a box save instruction, it receives the original as electronic data from the scanner unit 104 via the scanner I / F 208 and stores it in the DRAM 202. The CPU 201 performs image format conversion, etc., as specified by the user, on the image data stored in the DRAM 202. The CPU 201 transfers the image data stored in the DRAM 202 via the SATA I / F 205 to a storage destination designated by the user, such as a flash ROM 210 inside the MFP 100 or a memory medium (not shown).

[0026] In the fax function, instead of printing received images, the images may be converted into a format viewable on a PC or the like and saved in a box. Furthermore, as a box function, the MFP 100 functions as a file server such as an SMB server, and makes the contents of the Flash ROM 211 public. In the box function, the CPU 201 detects an external box access instruction via the network I / F 204. The box access instruction includes the image file path of the access destination. The CPU 201 transfers the image data stored in the Flash ROM 210 corresponding to the specified image file path to the source of the box access instruction via the network I / F 204. The above is an example of the functions of the MFP 100, and other functions may also be included.

[0027] 3 is a block diagram showing an example of the details of the authorization server 110 and the storage server 120 according to this embodiment. In this embodiment, for simplicity of explanation, the authorization server 110 and the storage server 120 are described as having the same configuration, but they may have different configurations. The authorization server 110 and the storage server 120 may have a configuration that is realized using cloud computing technology, for example.

[0028] The CPU 301 is connected to the DRAM 302 via a bus. The DRAM 302 is used by the CPU 301 as a working memory for temporarily storing program data representing arithmetic instructions and data to be processed during the arithmetic process performed by the CPU 301.

[0029] The CPU 301 is connected to the I / O controller 303 via a bus. A network I / F 304 is connected to the I / O controller 303. Wired LAN devices and wireless LAN devices are connected to the network I / F 304. The CPU 301 realizes communication on the network 150 by controlling the wired LAN devices and wireless LAN devices via the network I / F 304.

[0030] Furthermore, the I / O controller 303 performs input and output to and from various devices in accordance with instructions from the CPU 301. A SATA I / F 305 is connected to the I / O controller 303, and an HDD 306 is connected to the SATA I / F 305. In the case of the authorization server 110, the CPU 301 uses the HDD 306 to permanently store programs such as the authorization application 111, setting values, etc. In the case of the storage server 120, the CPU 301 uses the HDD 306 to permanently store programs such as the storage application 121, setting values, etc. Note that the configuration may include other storage devices such as an SSD (Solid State Drive) or an eMMC (embedded MultiMediaCard) instead of or in addition to the HDD.

[0031] In this manner, the hardware such as the CPU 301, DRAM 302, and HDD 306 constitute a so-called computer. For the sake of explanation, this embodiment illustrates a case in which one CPU 301 uses one memory (DRAM 302) to execute each process shown in the flowcharts described below, but other embodiments are also possible. For example, each process shown in the flowcharts described below can be executed by having multiple processors, RAMs, ROMs, and storages work together. Also, each process can be executed using multiple server computers.

[0032] FIG. 4 is a block diagram showing an example of details of the client terminal 130 according to this embodiment. The CPU 401 is connected to the DRAM 402 via a bus. The DRAM 402 is used by the CPU 401 as a working memory for temporarily storing program data representing arithmetic instructions and data to be processed during the CPU 401's arithmetic operations.

[0033] The CPU 401 is connected to the I / O controller 403 via a bus. A network I / F 404 is connected to the I / O controller 403. A wired LAN device, a wireless LAN device, or a data communication device is connected to the network I / F 404. The CPU 401 realizes communication on the network 150 by controlling the wired LAN device, the wireless LAN device, or the data communication device via the network I / F 404. The I / O controller 403 performs input and output to and from various devices according to instructions from the CPU 401.

[0034] The I / O controller 403 is also connected to a SATA I / F 405, which is connected to a flash ROM 406. Instead of a flash ROM, other storage devices such as a HDD may be connected. The CPU 401 uses the flash ROM 406 to permanently store setting values for programs such as the indwelling scan application 131.

[0035] A panel I / F 407 is connected to the I / O controller 403, and the CPU 401 performs input and output for the user to an operation unit (not shown) of the client terminal 130 connected via the panel I / F 407. An example of the operation unit is a touch panel. A display device such as a display for displaying information and an input device such as a keyboard for inputting information may be connected to the panel I / F 407.

[0036] 5 is a block diagram showing an example of the software configuration executed by controller unit 101 of MFP 100. All software executed by controller unit 101 is executed after CPU 201 reads programs stored in Flash ROM 210 into DRAM 202, and realizes functional units such as those shown as 501 to 510 in FIG.

[0037] The operation control unit 501 displays a screen image for the user on the operation unit 102, detects a user operation, and executes processing associated with screen components such as buttons displayed on the screen. The data storage unit 502 stores requests from other control units in the flash ROM 211 and reads them out. A job control unit 503 controls the execution of jobs in accordance with instructions from other control units. The image processing unit 504 processes the image data into a format suitable for the intended use in accordance with instructions from the job control unit 503 .

[0038] A print processing unit 505 prints and outputs an image on a paper medium via the printer I / F 207 in accordance with an instruction from the job control unit 503 . The reading processing unit 506 reads the set document via the scanner I / F 208 in accordance with an instruction from the job control unit 503 .

[0039] In accordance with instructions from each control unit, the network control unit 507 inputs and outputs data from a LAN or a public line network via the network I / F 204. The network control unit 507 also makes data stored in the flash ROM 210 accessible from an external device via the data storage unit 502. An example of data stored in the flash ROM 210 is image data such as PDF or JPEG.

[0040] The detention scan control unit 508 generates a detention scan job based on the detention scan instruction of the client terminal 130 received from the network control unit 507. The detention scan control unit 508 also displays the detention scan job on the operation unit 102 via the operation control unit 501. The detention scan control unit 508 also executes the detention scan job and transmits image data and the like read by the reading processing unit 506 to the storage server 120 via the network control unit 507.

[0041] An authentication control unit 509 can enable or disable the user authentication function for the MFP 100, and manages authentication information such as users who can access the MFP 100 and passwords. The scan capability management unit 510 manages scan-related capability information such as the read size, color mode, and file type that can be scanned by the MFP 100 .

[0042] In this embodiment, all software executed on the client terminal 130 is executed after the CPU 401 reads the program stored in the Flash ROM 406 into the DRAM 402, thereby realizing the function of the storage scan application 131 in Figure 1. In addition, all software executed by the authorization server 110 is executed after the CPU 301 of the authorization server 110 loads the program stored in the HDD 306 into the DRAM 302, thereby realizing the function of the authorization application 111 in FIG. In addition, all software executed by the storage server 120 is executed after the CPU 301 of the storage server 120 reads the program stored in the HDD 306 into the DRAM 302, thereby realizing the function of the storage application 121 in FIG.

[0043] The operation of this embodiment will be outlined below. 6 is a diagram showing an example of a sequence in which the storage scan application 131 of the client terminal 130 acquires an access token to access the storage server 120 and sets a storage destination for the storage scan. Note that the processing of the client terminal 130 in FIG. 6 is executed by a function realized by the CPU 401 of the client terminal 130 loading a program stored in the Flash ROM 406 or the like into the DRAM 402 and executing it. Also, the processing of the authorization server 110 is executed by each function realized by the CPU 301 of the authorization server 110 loading a program stored in the HDD 306 or the like into the DRAM 302 and executing it. Also, the processing of the storage server 120 is executed by each function realized by the CPU 301 of the storage server 120 loading a program stored in the HDD 306 or the like into the DRAM 302 and executing it.

[0044] When the user starts an operation to start setting the storage destination of the storage server 120 on the client terminal 130, the client terminal 130 executes the process of S601 in response to detecting the operation.

[0045] In S601, the deposit scan application 131 of the client terminal 130 transmits an authorization request for storage access to the storage server 120 to the authorization server 110. In response to the request, the authorization application 111 of the authorization server 110 executes the process of S602. In S602, the authorization application 111 of the authorization server 110 instructs the storage scan application 131 of the client terminal 130 to display an authorization screen. In response to this instruction, the storage scan application 131 of the client terminal 130 executes the processing of S603. Note that although explanation is omitted because it is not the essence of the present invention, it is assumed that the authorization for the storage scan application 131 of the client terminal 130 to access the storage server 120 has been applied for in advance.

[0046] In S603, the storage scan application 131 of the client terminal 130 displays an authorization screen such as that shown in FIG. FIG. 7 is a diagram showing an example of the authorization screen in this embodiment. As shown in Fig. 7, the authorization screen includes a display (701) of authority for the storage server 120, a user name input field (702), and a password input field (703). When the user permits the storage scan application 131 to access the storage server 120, the user enters the user name and password in the user name input field (702) and password input field (703), respectively, and presses the "Yes" button. Note that the screen in Fig. 7 is an example, and other information may be displayed as long as it is possible to realize this embodiment. Furthermore, if it is selected not to permit access, re-authentication and error processing are performed, but since this is not the essence of this embodiment, a description thereof will be omitted.

[0047] When an operation to permit access is performed on the authorization screen displayed in S603, the in-dwelling scan application 131 of the client terminal 130 that detects the operation executes the process of S604.

[0048] In S604, the storage scan application 131 of the client terminal 130 transmits the user name and password entered as authentication information on the authentication screen displayed in S603 to the authorization server 110. Upon receiving the authentication information (user name and password), the authorization application 111 of the authorization server 110 executes the process of S605. In S605, the authorization application 111 of the authorization server 110 checks whether the authentication information sent from the client terminal 130 in S604 above is valid by using an authentication information DB (not shown) or the like. For example, the authentication information DB stores a combination of a user name and a password, and checks whether it matches the sent authentication information.

[0049] Next, in S606, if the authorization application 111 of the authorization server 110 is able to confirm that the authentication information received from the client terminal 130 in the authentication information confirmation in 605 above is valid, it issues an authorization code. In S607, the authorization application 111 of the authorization server 110 transmits the authorization code issued in S606 to the client terminal 130. Upon receiving the authorization code, the in-dwelling scan application 131 of the client terminal 130 executes the process of S608.

[0050] In S608, the in-depot scan application 131 of the client terminal 130 transmits the acquired authorization code to the authorization server 110 to request issuance of an access token. Upon receiving the request, the authorization application 111 of the authorization server 110 executes the process of S609.

[0051] In S609, the authorization application 111 of the authorization server 110 checks whether the authorization code sent from the client terminal 130 in S608 above is valid. Next, in S610, if the authorization code sent from the client terminal 130 is valid, the authorization application 111 of the authorization server 110 issues an access token and a refresh token. Next, in S611, the authorization application 111 of the authorization server 110 transmits the access token and refresh token issued in S610 to the client terminal 130. Upon receiving the access token and refresh token, the storage scan application 131 of the client terminal 130 executes the process of S612.

[0052] In S612, the storage scan application 131 of the client terminal 130 requests acquisition of a directory and file list by passing the access token received in S611 to the storage server 120. Upon receiving the request, the storage application 121 of the storage server 120 executes the process of S613.

[0053] In S613, the storage application 121 of the storage server 120 confirms with the authorization server 110 whether the access token received from the client terminal 130 is valid. Upon receiving the access token, the authorization application 111 of the authorization server 110 executes the process of S614.

[0054] In S614, the authorization application 111 of the authorization server 110 checks the validity of the access token received from the storage server 120 in S613 above. Next, in S615, the authorization application 111 of the authorization server 110 returns the confirmation result of the access token to the storage server 120. Upon receiving the confirmation result, the storage application 121 of the storage server 120 executes the process of S616. In S616, the storage application 121 of the storage server 120 checks the verification result of the access token returned from the authorization server 110.

[0055] In the following, in this sequence, only the case where the access token is valid will be described, and the case where it is invalid will be omitted. For example, if the access token is invalid, error processing will be performed (not shown). If the access token is valid, in S617, the storage application 121 of the storage server 120 returns a list of files and directories of the storage server 120 to the client terminal 130. Upon receiving the list, the storage scan application 131 of the client terminal 130 executes the process of S618.

[0056] In S618, the storage scan application 131 of the client terminal 130 displays a directory list of the storage server 120 (not shown) on the operation unit of the client terminal 130, and prompts the user operating the client terminal 130 to select a save destination. When the save destination selection operation is performed, the storage scan application 131 of the client terminal 130 receives information about the selected save destination.

[0057] In this embodiment, an example is shown in which a list of files and directories in the storage server 120 is returned only once in S617. However, in order to move through directory levels, a list of files and directories in the destination directory may be returned, and communication may be performed multiple times between the client terminal 130 and the storage server 120. Note that although the explanation of FIG. 7 shows an example in which an authorization code is used, it goes without saying that an access token may be issued by other methods. In this sequence, for simplicity, the description of whether the authorization code or access token has expired is omitted, but it is not necessary to obtain an authorization code or access token every time. It is sufficient to check whether the authorization code or access token has expired, and obtain the authorization code or access token only if it has expired.

[0058] The process of transmitting a detention scan job from the client terminal 130 to the MFP 100 in the first embodiment will be described with reference to FIG. 8A. Fig. 8A is a flowchart showing an example of processing for transmitting a storage scan job from the client terminal 130 to the MFP 100 in the first embodiment. Note that the processing of the client terminal 130 in Fig. 8A is executed by a function realized by the CPU 401 of the client terminal 130 reading a program stored in the Flash ROM 406 or the like into the DRAM 402 and executing it. When the user performs an operation to execute the storage scan application 131 on the client terminal 130, the storage scan application 131 of the client terminal 130 starts the processing of this flowchart.

[0059] In step S801, the storage scan application 131 transmits a connection establishment request to the MFP 100. Next, in S802, the on-residence scan application 131 receives a request result for connection establishment from the MFP 100, and determines based on the result whether or not the connection to the MFP 100 has been successful. If it is determined that the connection to the MFP 100 has failed (No in S802), the on-residence scan application 131 displays an error message on the operation unit of the client terminal 130 via the panel I / F 407 (S810), and ends the processing of this flowchart.

[0060] On the other hand, if it is determined that the connection with the MFP 100 has been successful (Yes in S802), the storage scan application 131 advances the process to S803. In S803, the detention scan application 131 determines whether authentication is required when accessing from the MFP 100 (whether an authentication request has been received from the MFP 100). If it is determined that authentication is not required (No in S803), the detention scan application 131 proceeds to the process of S804.

[0061] On the other hand, if it is determined that authentication is necessary (Yes in S803), the storage scan application 131 proceeds to the process in S809. In S809, the detention scan application 131 displays an authentication screen (not shown) on the operation unit of the client terminal 130 via the panel I / F 407, and prompts the user to enter information (authentication information) required for authentication, such as a user name and password. When the authentication information is entered by the user, the detention scan application 131 transmits the entered authentication information to the MFP 100 and attempts authentication with the MFP 100. If the authentication fails (No in S809), the detention scan application 131 displays an error message on the operation unit of the client terminal 130 via the panel I / F 407 (S810), and ends the processing of this flowchart.

[0062] On the other hand, if the authentication is successful (Yes in S809), the storage scan application 131 proceeds to S804.

[0063] In S804, the in-dwelling scan application 131 acquires the scanning capability of the MFP 100 transmitted from the MFP 100, and then proceeds to S805. In acquiring the scanning capability of the MFP, information necessary for scan settings such as the scanning size, color mode, and file type that can be scanned by the MFP is acquired. 9 on the operation unit of the client terminal 130 via the panel I / F 407, and prompts the user to perform scan settings. The detention scan setting screen will now be described.

[0064] FIG. 9 is a diagram showing an example of the indwelling scan setting screen in this embodiment. The storage scan setting screen displays the scan size, color mode, and file type according to the scan capabilities acquired in S804 of Fig. 8A as scan settings 901. Also displayed are the settings of the path 902 of the storage destination on the storage server 120 and the name 903 of the storage scan job.

[0065] The path selection button 904 is a button for selecting a path to the storage destination of the storage server 120. When the path selection button 904 is pressed, the storage scan application 131 acquires an access token according to the sequence shown in Fig. 6 described above, and displays a directory list screen (not shown) of the storage server 120, allowing the user to select a path to the storage destination.

[0066] 9 are merely an example, and other settings or only some of the settings may be possible as long as this embodiment can be realized. For example, scan settings other than those exemplified in FIG. 9 may be set, and the name of the reserved scan job may not be set. Also, in this embodiment, the storage server 120 as the save destination and the MFP 100 as the transmission destination of the reserved scan job are assumed to be specified in advance on the client terminal 130. However, it may also be possible to select the storage server 120 or the MFP 100 on the screen of FIG. 9 or the like, without specifying these in advance on the client terminal 130. The indwelling scan setting screen also has an execute button 905. When the execute button 905 is pressed, the indwelling scan application 131 executes the process of S806 in Fig. 8A.

[0067] In S806, the reserved scan application 131 sends the scan settings 901, the save destination 902, the name of the reserved scan job 903, the access token, and the user name (if authentication processing was performed in S809 of Figure 8A) to the MFP 100 via the network I / F 404, and submits the reserved scan job.

[0068] Next, in S807, the detention scan application 131 determines whether the submission of the detention scan job was successful. If the submission of the detention scan job failed (No in S807), the detention scan application 131 displays an error message on the operation unit of the client terminal 130 via the panel I / F 407 (S810), and ends the processing of this flowchart.

[0069] On the other hand, if the deposit scan job has been successfully submitted (Yes in S807), the deposit scan application 131 proceeds to S808. In S808, the storage scan application 131 waits for the scan ID for the storage scan job submitted in S806 to be sent from the MFP 100. If an error notification is received from the MFP 100, the storage scan application 131 determines that acquisition of the scan ID has failed (No in S808), displays an error message on the operation unit of the client terminal 130 via the panel I / F 407 (S810), and ends the processing of this flowchart.

[0070] On the other hand, if a scan ID is received from the MFP 100 (Yes in S808), the storage scan application 131 displays the received scan ID on the operation unit of the client terminal 130 via the panel I / F 407 (step not shown), and terminates the processing of this flowchart.

[0071] Next, the process of receiving a storage scan job in the MFP 100 according to the first embodiment will be described with reference to a flowchart in FIG. 8B. Fig. 8B is a flowchart showing an example of a process for receiving a storage scan job in the MFP 100 in the first embodiment. The processes shown in Fig. 8B and Fig. 11 described later are executed by each function realized by the CPU 201 of the MFP 100 reading a program stored in the Flash ROM 210 or the like into the DRAM 202 and executing it.

[0072] 5 at startup, the MFP 100 becomes ready to receive the connection request shown in S801 in Fig. 8A via the network control unit 507. When the MFP 100 receives the connection request of S801 in Fig. 8A via the network control unit 507 (S850), the MFP 100 proceeds to the process of S851. In S851, in response to the connection request of S850, MFP 100 attempts to connect to client terminal 130. If the connection to client terminal 130 fails (No in S851), MFP 100 returns an error to client terminal 130 via network control unit 507 (S861), and ends the processing of this flowchart.

[0073] On the other hand, if the connection with the client terminal 130 is successful (Yes in S851), the MFP 100 proceeds to S852. In S852, the detention scan control unit 508 acquires whether or not user authentication is enabled from the authentication control unit 509. Here, if user authentication is disabled (No in S852), the detention scan control unit 508 proceeds to S853.

[0074] On the other hand, if the user authentication is valid (Yes in S852), the indwelling scan control unit 508 advances the process to S862. In S862, the indwelling scan control unit 508 transmits an authentication request via the network control unit 507 to the client terminal 130 with which the connection was established in S851. Next, in S863, when the detention scan control unit 508 receives authentication information (S809 in FIG. 8A) sent from the client terminal 130 in response to the authentication request via the network control unit 507, it passes the authentication information to the authentication control unit 509 and requests authentication. Furthermore, the detention scan control unit 508 determines whether or not authentication has been successful in the authentication control unit 509. Here, if authentication has failed (No in S863), the detention scan control unit 508 returns an error to the client terminal 130 via the network control unit 507 (S861), and ends the processing of this flowchart.

[0075] On the other hand, if the authentication is successful (Yes in S863), the indwelling scan control unit 508 advances the process to S853.

[0076] In S853, the indwelling scan control unit 508 acquires scan capabilities such as reading size, color mode, and file type from the scan capability management unit 510. Next, in S854, the indwelling scan control unit 508 transmits the scan capability acquired in S853 to the client terminal 130 with which the connection has been established via the network control unit 507.

[0077] Next, in S855, the detention scan control unit 508 waits for the detention scan job (S806 in FIG. 8A) to be sent from the client terminal 130. When the detention scan control unit 508 receives the detention scan job of S806 via the network control unit 507, it analyzes the detention scan job. If the analysis fails (No in S855), the detention scan control unit 508 returns an error to the client terminal 130 via the network control unit 507 (S861), and ends the processing of this flowchart.

[0078] On the other hand, if the analysis of the retention scan job is successful (Yes in S855), the retention scan control unit 508 advances the process to S856. In S856, the reserved scan control unit 508 issues a scan ID (identification information of the reserved scan job) to the received reserved scan job and stores the scan job together with the reserved scan job (associating the scan ID with the reserved scan job) in the data storage unit 502, thereby reserving the scan job.

[0079] FIG. 10 is a diagram showing an example of a data format when a retention scan job of this embodiment is saved in the data storage unit 502. In FIG. In S856, the scan settings 1002, save destination 1003, name 1004, access token 1005, scan ID 1006, reception date and time 1001, user name 1007, etc. are saved as a reserved scan job.

[0080] The reception date and time 1001 stores the date and time of job reception when the reserved scan job is received in S855 above. Furthermore, the scan settings 1002, save destination 1003, and name 1004 store the scan settings 901, save destination 902, and name 903 of the reserved scan job set on the reserved scan setting screen shown in Fig. 9, respectively. Furthermore, the access token 1005 stores the access token acquired by the reserved scan application 131 when setting the save destination 902 during the reserved scan setting. Furthermore, the scan ID 1006 stores the scan ID 1006 generated in S856 above. Furthermore, if user authentication has been performed in S863 above, the user name used during the user authentication is stored in the user name 1007.

[0081] Returning to the description of FIG. 8B below. Next, in S857, the deferred scan control unit 508 transmits the scan ID generated in S856 above to the client terminal 130 (the sender of the deferred scan job received in S855 above) with which a connection was established in S851 above, via the network control unit 507. If transmission of the scan ID fails (No in S857), the deferred scan control unit 508 deletes the deferred scan job received in S855 above (S860), returns an error to the client terminal 130 via the network control unit 507 (S861), and terminates the processing of this flowchart.

[0082] On the other hand, if the transmission of the scan ID is successful (Yes in S857), the indwelling scan control unit 508 ends the processing of this flowchart.

[0083] Hereinafter, the process of executing a storage scan job in the MFP 100 according to this embodiment will be described with reference to FIGS. 11, 12A, and 12B. FIG. 11 is a flowchart showing an example of processing for executing a storage scan job in the MFP 100 according to this embodiment. 12A and 12B are diagrams showing examples of screens when a storage scan job is executed in this embodiment. hereinafter, FIGS. 12A and 12B are collectively referred to as "FIG. 12." When the user operates the operation unit 102 of the MFP 100, the MFP 100 starts the processing shown in FIG.

[0084] In S1101, the detention scan control unit 508 of the MFP 100 acquires from the authentication control unit 509 whether or not the user authentication function is enabled when the MFP 100 is operated. If the user authentication function is disabled (No in S1101), the detention scan control unit 508 proceeds to S1108. In S1108, the operation control unit 501 displays a default display screen such as that shown in FIG. When the operation control unit 501 detects that the indwelling scan button 1201 on the default display screen has been pressed, the process proceeds to S1109. Note that a description of the process when a button other than the indwelling scan button 1201 has been pressed will be omitted.

[0085] In S1109, the operation control unit 501 displays an indwelling scan screen as shown in FIG. As shown in FIG. 12( b ), the indwelling scan screen has a scan ID input field 1202 , an OK button 1203 , a job list button 1204 , and a cancel button 1205 . The operation control unit 501 performs control in response to a user operation on the indwelling scan screen (S1110). If it is detected that the cancel button 1205 has been pressed (if "cancel" is selected in S1110), the operation control unit 501 returns the process to S1108.

[0086] Furthermore, when the user inputs a scan ID into the scan ID input field 1202 and presses the OK button 1203 ("OK" in S1110), the operation control unit 501 advances the process to S1105. In S1105, the detention scan control unit 508 searches (identifies) a detention scan job that matches the scan ID entered in the scan ID input field 1202 from among the detention scan jobs shown in FIG. 10, and instructs the operation control unit 501 to display the matching detention scan job on a detention scan execution screen like that shown in FIG. 12(d). As a result, information about the detention scan job that matches the entered scan ID is displayed on the detention scan execution screen via the operation control unit 501. Note that the detention scan execution screen shown in FIG. 12(d) is merely an example, and information other than the scan ID, scan settings, and transmission destination may also be displayed. Next, the detention scan control unit 508 proceeds to S1106. Although not shown, if there is no information about a detention scan job that matches the entered scan ID, the detention scan control unit 508 displays a message indicating this on the operation unit 102 via the operation control unit 501. Depending on the user's confirmation operation on the screen, the process proceeds to S1109.

[0087] As shown in FIG. 12( d ), the retention scan execution screen has information 1214 of the retention scan job that matches the input scan ID, an execution button 1213 , and a cancel button 1212 . When the operation control unit 501 detects a user operation on the indwelling scan execution screen, it performs control according to the user operation (S1106). When it is detected that the cancel button 1212 has been pressed (in the case of "cancel" in S1106), the operation control unit 501 ends the processing of this flowchart.

[0088] Furthermore, if it is detected that the execute button 1213 has been pressed (if "execute" in S1106), the operation control unit 501 advances the process to S1107. In S1107, the operation control unit 501 transmits an instruction to execute the reserved scan job to the reserved scan control unit 508. When the reserved scan control unit 508 receives the instruction to execute the reserved scan job from the operation control unit 501, it instructs the reading processing unit 506 to scan using settings corresponding to the scan settings set for the reserved scan job. As a result, the reading processing unit 506 executes the scan. Then, when the reserved scan control unit 508 detects that the scan is complete, it uses the access token 1005 set for the reserved scan job to perform authorization at the authorization server 110 via the network control unit 507, and transmits the scanned document to the storage server 120 specified as the storage destination 1003. Then, when the storage server 120 specified as the storage destination 1003 receives the scan data (hereinafter referred to as the "scanned document") transmitted from the MFP 100, it stores the received scanned document in the specified storage destination.

[0089] Also, in S1110 above, if the operation control unit 501 detects that the job list button 1204 has been pressed on the storage scan screen as shown in Figure 12 (b) (if "job list" is selected in S1110), the process proceeds to S1111. In S1111, the operation control unit 501 acquires all the reserved scan jobs via the reserved scan control unit 508, and displays a list screen of reserved scan jobs as shown in FIG. 12(c).

[0090] As shown in Figure 12(c), the reserved scan job list screen has a reserved scan job list display 1220, an OK button 1211, and a cancel button 1210. In the reserved scan job list display 1220, the user can select a reserved scan job from the list, and can also select multiple reserved scan jobs. As an example of the reserved scan job list display 1220, information such as a scan ID 1206, a reserved scan job reception date and time 1207, scan settings 1208, and a transmission destination 1209 is displayed, but other information may also be displayed.

[0091] When the operation control unit 501 detects a user operation on the reserved scan job list screen as shown in FIG. 12(c), it performs control according to the user operation (S1112). When it is detected that the cancel button 1210 has been pressed (in the case of "cancel" in S1112), the operation control unit 501 cancels the selection of the indwelling scan job and returns the process to S1109. On the other hand, if it is detected that one or more reserved scan jobs have been selected and the OK button 1211 has been pressed ("OK" in S1112), the operation control unit 501 proceeds to S1105. In this case, in S1105, the reserved scan control unit 508 identifies one or more reserved scan jobs selected on the reserved scan job list screen such as that shown in Fig. 12(c), and instructs the operation control unit 501 to display the matching reserved scan jobs on the reserved scan execution screen such as that shown in Fig. 12(d). The rest is as described above.

[0092] Furthermore, in the above S1101, if the indwelling scan control unit 508 determines that the user authentication function is enabled (Yes in S1101), the process proceeds to S1102 after the user login is successful through user authentication. Note that a description of the process when the user login fails will be omitted. In S1102, the detention scan control unit 508 searches for a detention scan job that matches the name of the user operating the MFP 100 (login user) from among the detention scan jobs shown in FIG. If there is no matching storage scan job (No in S1102), the storage scan control unit 508 advances the process to S1108. The processes from S1108 onwards are as described above.

[0093] On the other hand, if there is a detention scan job that matches the name of the user operating the MFP 100 (Yes in S1102), the detention scan control unit 508 advances the process to S1103.

[0094] In S1103, the in-retention scan control unit 508 detects via the reading processing unit 506 whether a document has been placed on the scanner unit 104. If it is determined that the original is not placed (No in S1103), the storage scan control unit 508 advances the process to S1108.

[0095] On the other hand, if it is detected that a document is placed (Yes in S1103), the storage scan control unit 508 advances the process to S1104. In S1104, the detention scan control unit 508 determines whether or not there are multiple detention scan jobs searched for in S1102. If there are not multiple devices (No in S1104), the indwelling scan control unit 508 advances the process to S1105.

[0096] On the other hand, if there are multiple devices (Yes in S1104), the indwelling scan control unit 508 advances the process to S1113. In S1113, the operation control unit 501 displays an indwelling scan screen as shown in FIG. The operation control unit 501 performs control in response to a user operation on the indwelling scan screen (S1114). If it is detected that the cancel button 1205 has been pressed (if "cancel" is selected in S1114), the operation control unit 501 moves the process to S1120. In S1120, the operation control unit 501 displays a default display screen such as that shown in Fig. 12(a) on the operation unit 102. Here, when the operation control unit 501 detects that the retention scan button 1201 has been pressed, the process proceeds to S1113. Note that a description of the process when a button other than the retention scan button 1201 has been pressed will be omitted.

[0097] Furthermore, in S1114 above, if the operation control unit 501 detects that a scan ID has been entered into the scan ID input field 1202 on the storage scan screen as shown in Fig. 12(b) and the OK button 1203 has been pressed (if "OK" in S1114), the operation control unit 501 proceeds to S1105. In this case, in S1105, the storage scan control unit 508 searches (identifies) a storage scan job that matches the scan ID entered into the scan ID input field 1202 from among the storage scan jobs saved in association with the user information of the user who logged in by login operation, and instructs the operation control unit 501 to display the matching storage scan job on the storage scan execution screen as shown in Fig. 12(d). The rest is as described above.

[0098] Furthermore, in S1114, if the operation control unit 501 detects that the job list button 1204 has been pressed on the storage scan screen (in the case of "job list" in S1114), the process proceeds to S1115. In S1115, the operation control unit 501 identifies and acquires only the reserved scan jobs that match the user name (user information of the user who logged in by login operation) operating the MFP100 from all the reserved scan jobs via the reserved scan control unit 508, and displays a reserved scan job list screen as shown in Figure 12 (c).

[0099] When the operation control unit 501 detects a user operation on the indwelling scan execution screen, it performs control according to the user operation (S1116). When it is detected that the cancel button 1210 has been pressed (in the case of "cancel" in S1116), the operation control unit 501 cancels the selection of the indwelling scan job and returns the process to S1113. On the other hand, if it is detected that one or more indwelling scan jobs have been selected and the OK button 1211 has been pressed ("OK" in S1116), the operation control unit 501 advances the process to S1105.

[0100] As described above, MFP 100 receives from client terminal 130 a scan job including scan settings, a destination for scan data to be scanned by the image processing device based on the scan settings, and a token obtained from authorization server 110 for accessing the destination, and stores the received scan job data in a storage unit, thereby reserving the scan job. Furthermore, MFP 100 identifies and executes a target scan job from among the jobs reserved in MFP 100 in response to a user operation from operation unit 102. Then, MFP 100 transmits the scan data obtained by the scanner as a result of the execution of the scan job to the destination included in the scan job using the access token included in the scan job. As described above, according to the first embodiment, scan settings set on client terminal 130 can be directly stored in MFP 100, eliminating the need to set up a separate external service on the network and allowing a user to easily send scanned documents to a storage server on a cloud service or the like. Furthermore, if the user who has performed user authentication has only one reserved scan job, the reserved scan job can be submitted simply by placing the document on the scanner unit 104, improving user operability.

[0101] In either case, the user can execute a reserved scan job that was previously sent from the client terminal 130 and upload the scanned document to the storage server 120 with a simple user operation on the operation unit 102 of the MFP 100. In other words, it is possible to create a scanning environment that significantly improves the convenience of uploading scanned documents from an image processing device to a storage server with a simple configuration that has low barriers to entry and does not require the creation of a separate external service on the network.

[0102] Second Embodiment In the second embodiment, a configuration will be described in which the MFPs to which a storage scan job can be submitted from the storage scan application 131 of the client terminal 130 are restricted, thereby enabling the authentication token to be used only in trusted MFPs.

[0103] In the storage server 120 on the cloud service of this embodiment, it is possible to register in advance to the cloud service information about devices that can store data in the storage server 120. This information registration is performed by an administrator of the MFP 100 via the network from the operation unit 102 of the MFP 100 or the like, but it may also be possible for a general user to perform this registration. When the MFP 100 completes the registration with the storage server 120, it stores information indicating that the registration with the storage server 120 has been completed in the Flash ROM 210. The MFP 100 manages the information using a record that includes, for example, identification information of the target cloud service, identification information of the storage server 120, and the date of registration.

[0104] The operation of each device in the second embodiment will be described below. First, a process of transmitting a storage scan job from the client terminal 130 to the MFP 100 in the second embodiment will be described with reference to FIG. 13A. Fig. 13A is a flowchart showing an example of processing for transmitting a storage scan job from client terminal 130 to MFP 100 in the second embodiment. The processing shown in Fig. 13A is executed by a function realized by CPU 401 of client terminal 130 reading a program stored in Flash ROM 406 or the like into DRAM 402 and executing it. Note that the same steps as those in Fig. 8A are assigned the same step numbers, and descriptions thereof will be omitted.

[0105] In the second embodiment, if the result of S803 is No, the storage scan application 131 of the client terminal 130 advances the process to S1301. Also, if the result of S809 is Yes, the storage scan application 131 advances the process to S1301. In S1301, the storage scan application 131 inquires of the MFP 100 whether the MFP 100 has been registered in the storage server 120 as the storage destination, and acquires a response from the MFP 100. Next, in S1302, the storage scan application 131 determines whether or not the MFP 100 has been registered in the storage server 120 as the storage destination, based on the information acquired in S1301.

[0106] Here, if it is determined that the MFP 100 has already been registered in the storage server 120 of the storage destination (Yes in S1302), the storage scan application 131 advances the process to S804. On the other hand, if it is determined that the MFP 100 has not been registered in the storage server 120 as the save destination (No in S1302), the storage scan application 131 displays an error message on the operation unit of the client terminal 130 via the panel I / F 407 (S810), and ends the processing of this flowchart. In other words, it prohibits the MFP 100 from being instructed to perform a storage scan job.

[0107] Next, the process of receiving a detention scan job in the MFP 100 according to the second embodiment will be described with reference to a flowchart in FIG. 13B. Fig. 13B is a flowchart showing an example of a process for receiving a storage scan job in MFP 100 in the second embodiment. The process shown in Fig. 13B is executed by each function realized by CPU 201 of MFP 100 reading a program stored in Flash ROM 210 or the like into DRAM 202 and executing it. Note that the same steps as those in Fig. 8B are assigned the same step numbers, and descriptions thereof will be omitted.

[0108] In the second embodiment, if the result of S852 is No, the process proceeds to S1351 in the detention scan control unit 508 of the MFP 100. Also, if the result of S862 is Yes, the detention scan control unit 508 proceeds to S1351. In S1351, when the indwelling scan control unit 508 receives an inquiry from the client terminal 130 (an inquiry as to whether the MFP 100 has been registered in the storage server 120 shown in S1301 of FIG. 13A), the process proceeds to S1352. In S1352, the detention scan control unit 508 transmits information indicating whether the MFP 100 has been registered with the storage server 120 to the client terminal 130. In detail, if information indicating that the MFP 100 has been registered with the storage server 120 is stored in the Flash ROM 210, the detention scan control unit 508 transmits information indicating that the MFP 100 has been registered, and if the information is not stored, the control unit 508 transmits information indicating that the MFP 100 has not been registered.

[0109] As described above, according to the second embodiment, it is possible to allow only trusted image processing devices to use the access token to access the storage server 120. In other words, it is possible to prohibit the use of the access token in image processing devices whose reliability cannot be guaranteed.

[0110] In the above embodiments, an MFP has been used as an example of an image processing device equipped with a scanner, but a network scanner or the like may also be used.

[0111] As described above, according to each embodiment, a simple configuration with low barriers to entry, which does not require the construction of a separate external service on the network, enables users to easily send scanned documents from an image processing device such as an MFP to a cloud service, etc., thereby significantly improving convenience.

[0112] It goes without saying that the configurations and contents of the various data described above are not limited to those described above, and that the data may be configured in various configurations and contents depending on the application and purpose. Although one embodiment has been described above, the present invention can be embodied as, for example, a system, an apparatus, a method, a program, a storage medium, etc. Specifically, the present invention may be applied to a system made up of multiple devices, or may be applied to an apparatus made up of a single device. Furthermore, the present invention also includes any combination of the above embodiments.

[0113] Other Embodiments The present invention can also be realized by supplying a program that realizes one or more functions of the above-described embodiments to a system or device via a network or a storage medium, and having one or more processors in the computer of the system or device read and execute the program.The present invention can also be realized by a circuit (e.g., ASIC) that realizes one or more functions. Furthermore, the present invention may be applied to a system made up of multiple devices, or to an apparatus made up of a single device. The present invention is not limited to the above-described embodiments, and various modifications (including organic combinations of the embodiments) are possible based on the spirit of the present invention, and these modifications are not excluded from the scope of the present invention. In other words, all configurations that combine the above-described embodiments and their modifications are included in the present invention.

[0114] The disclosure of this embodiment includes the following configuration, method, and program. (Configuration 1) An image processing device comprising a scanner and a storage means, a receiving means for receiving, from the information processing device, a scan job including scan settings, a destination of scan data read by the image processing device based on the scan settings, and a token for accessing the destination, which the information processing device has acquired from an authorization server; a storage unit for storing the received scan job data in the storage unit; an identification unit for identifying a target scan job from among the reserved jobs in response to a user operation on an operation unit of the image processing apparatus; an execution means for executing the identified scan job; a sending means for sending scan data read by the scanner by executing the scan job to a destination included in the scan job using the token; 1. An image processing device comprising: (Configuration 2) an issuing unit that issues identification information for identifying each job reserved by the reserving unit, and transmits the identification information to the information processing device that is the sender of the scan job corresponding to the identification information; the retention unit retains the received scan job by storing the received scan job in association with identification information issued by the issuing unit of the image processing device; the user operation includes a user input of the identification information; 2. The image processing apparatus according to configuration 1, wherein the identification unit identifies a scan job corresponding to the identification information input by the user from among the reserved jobs. (Configuration 3) the user operation includes an operation of selecting one or more scan jobs from the list of reserved scan jobs, 2. The image processing apparatus according to configuration 1, wherein the identifying means identifies the scan job that is the target of the selection operation from among the reserved jobs. (Configuration 4) an authentication means for performing user authentication when the information processing device makes a connection; the storing unit stores the received scan job data in the storage unit in association with the user information of the authenticated user; the user operation includes a login operation to the image processing device, The image processing device according to configuration 1, wherein the identification means identifies, from the reserved jobs, a scan job that is saved in association with user information of the user who logged in by the login operation. (Configuration 5) an authentication means for performing user authentication when the information processing device makes a connection; the storing unit stores the received scan job data in the storage unit in association with the user information of the authenticated user; the user operation includes a login operation to the image processing device and an operation to select one or more scan jobs from a list of scan jobs corresponding to user information of a user who has logged in by the login operation, among the reserved scan jobs; The image processing device according to configuration 1, wherein the identification means identifies the scan job that is the target of the selection operation from among the reserved jobs, and executes the selected scan job. (Method 1) A control method for an image processing device having a scanner and a storage means, comprising: a receiving step of receiving, from the information processing device, a scan job including scan settings, a destination of scan data read by the image processing device based on the scan settings, and a token for accessing the destination, which the information processing device has acquired from an authorization server; a storing step of storing the received scan job data in the storage means; an identification step of identifying a target scan job from among the reserved jobs in response to a user operation on an operation unit of the image processing device; an execution step of executing the identified scan job; a sending step of sending scan data read by the scanner by executing the scan job to a destination included in the scan job using the token; 1. A method for controlling an image processing apparatus, comprising: (Configuration 7) An information processing device, a transmission means for transmitting a scan job to the image processing device, the scan job including scan settings set based on the scan capability acquired from the image processing device, a destination of scan data read by the image processing device, and a token for accessing the destination acquired from the authorization server; a receiving unit for receiving identification information issued by the image processing device when the scan job is reserved in the image processing device, An information processing device characterized in that, by executing a scan job identified by identification information input by a user from an operation unit of the image processing device from among the scan jobs reserved in the image processing device, the scan data read by the image processing device is sent to a destination included in the scan job using a token included in the scan job. (Configuration 8) The information processing device according to configuration 7 is characterized in that it has a control means for controlling so that, if it is determined as a result of an inquiry to the image processing device that information about the image processing device is registered in the service as the destination, transmission of scan data based on the execution of the scan job is permitted, and, if it is determined that information about the image processing device is not registered in the service as the destination, transmission of scan data based on the execution of the scan job is prohibited. (Program 1) Computer, a transmission means for transmitting a scan job to the image processing device, the scan job including scan settings set based on the scan capability acquired from the image processing device, a destination of scan data read by the image processing device, and a token for accessing the destination acquired from the authorization server; a program for causing the image processing device to function as a receiving unit for receiving identification information issued by the image processing device when the scan job is reserved in the image processing device, A program characterized in that, by executing a scan job identified by identification information input by a user from an operation unit of the image processing device from among the scan jobs reserved in the image processing device, the scan data read by the image processing device is sent to a destination included in the scan job using a token included in the scan job.

Claims

1. An image processing device comprising a scanner and a storage means, a receiving means for receiving, from the information processing device, a scan job including scan settings, a destination of scan data to be read by the image processing device based on the scan settings, and a token for accessing the destination acquired from an authorization server; a storage unit for storing the received scan job data in the storage unit; an identification unit for identifying a target scan job from among the reserved jobs in response to a user operation on an operation unit of the image processing apparatus; an execution means for executing the identified scan job; a sending means for sending scan data read by the scanner by executing the scan job to a destination included in the scan job using the token; 1. An image processing device comprising:

2. an issuing unit that issues identification information for identifying each job reserved by the reserving unit, and transmits the identification information to the information processing device that is the sender of the scan job corresponding to the identification information; the retention unit retains the received scan job by storing the received scan job in association with identification information issued by the issuing unit of the image processing device; the user operation includes a user input of the identification information; 2. The image processing apparatus according to claim 1, wherein the identifying unit identifies the scan job corresponding to the identification information input by the user from among the reserved jobs.

3. the user operation includes an operation of selecting one or more scan jobs from the list of reserved scan jobs, 2. The image processing apparatus according to claim 1, wherein the identifying unit identifies the scan job that is the target of the selection operation from among the reserved jobs.

4. an authentication means for performing user authentication when the information processing device makes a connection; the storing unit stores the received scan job data in the storage unit in association with the user information of the authenticated user; the user operation includes a login operation to the image processing device, 2. The image processing apparatus according to claim 1, wherein the identification unit identifies, from the reserved jobs, a scan job that is saved in association with user information of a user who has logged in by the login operation.

5. an authentication means for performing user authentication when the information processing device makes a connection; the storing unit stores the received scan job data in the storage unit in association with the user information of the authenticated user; the user operation includes a login operation to the image processing device and an operation to select one or more scan jobs from a list of scan jobs corresponding to user information of a user who has logged in by the login operation, among the reserved scan jobs; 2. The image processing apparatus according to claim 1, wherein the identifying unit identifies the scan job that is the target of the selecting operation from among the reserved jobs, and executes the selected scan job.

6. A control method for an image processing device having a scanner and a storage means, comprising: a receiving step of receiving, from the information processing device, a scan job including scan settings, a destination of scan data to be read by the image processing device based on the scan settings, and a token for accessing the destination acquired from an authorization server; a storing step of storing the received scan job data in the storage means; an identification step of identifying a target scan job from among the reserved jobs in response to a user operation on an operation unit of the image processing device; an execution step of executing the identified scan job; a sending step of sending scan data read by the scanner by executing the scan job to a destination included in the scan job using the token; 1. A method for controlling an image processing apparatus, comprising:

7. An information processing device, a transmission means for transmitting a scan job to the image processing device, the scan job including scan settings set based on the scan capability acquired from the image processing device, a destination of scan data read by the image processing device, and a token for accessing the destination acquired from the authorization server; a receiving unit for receiving identification information issued by the image processing device when the scan job is reserved in the image processing device, An information processing device characterized in that, by executing a scan job identified by identification information input by a user from an operation unit of the image processing device from among the scan jobs reserved in the image processing device, the scan data read by the image processing device is sent to a destination included in the scan job using a token included in the scan job.

8. The information processing device according to claim 7, further comprising a control means for controlling the image processing device so that, if it is determined that information about the image processing device is registered in the service as the destination as a result of an inquiry to the image processing device, the sending of scan data based on the execution of the scan job is permitted, and, if it is determined that information about the image processing device is not registered in the service as the destination, the sending of scan data based on the execution of the scan job is prohibited.

9. Computer, a transmission means for transmitting a scan job to the image processing device, the scan job including scan settings set based on the scan capability acquired from the image processing device, a destination of scan data read by the image processing device, and a token for accessing the destination acquired from the authorization server; a program for causing the image processing device to function as a receiving unit for receiving identification information issued by the image processing device when the scan job is reserved in the image processing device, A program characterized in that, by executing a scan job identified by identification information input by a user from an operation unit of the image processing device from among the scan jobs reserved in the image processing device, the scan data read by the image processing device is sent to a destination included in the scan job using a token included in the scan job.

Images