Image forming apparatus, information processing method, and program

Abstract

To provide an image forming apparatus, a method, and a program in which a user does not necessarily need to perform an authentication operation for use of a cloud service when using the cloud service.SOLUTION: An image forming apparatus 100 connected to a cloud server that provides a cloud service includes: a storage unit 102 that stores card information of a card distributed to an authorized user of the image forming apparatus 100 and a token enabling the use of the cloud service in association with each other; a card information acquisition unit 103 that acquires card information of a card possessed by a target user being the user who attempts to use the cloud service via the image forming apparatus 100; and a service use unit 105 that uses the cloud service by using the token stored in the storage unit 102 in association with the acquired card information.SELECTED DRAWING: Figure 2

Description

[Technical Field]

[0001] The present disclosure relates to an image forming apparatus, an information processing method, and a program. [Background technology]

[0002] Cloud services have become widespread in recent years. Accordingly, technologies for using cloud services via image forming devices such as printers have been proposed. For example, Patent Document 1 discloses a technology for accessing files or folders in cloud service storage from an image forming device. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Publication No. 2022-140537 Summary of the Invention [Problem to be solved by the invention]

[0004] In the technology disclosed in Patent Document 1, a user must perform authentication operations to use a cloud service via an image forming device. That is, the user must constantly enter login information into the image forming device to use the cloud service. This reduces the user's convenience when using cloud services. [Means for solving the problem]

[0005] The image forming device according to the present disclosure is an image forming device that connects to a server that provides a cloud service, and has a memory unit that stores card information of a card distributed to a legitimate user of the image forming device in association with a token that enables use of the cloud service, a card information acquisition unit that acquires card information of a card held by a target user who is a user who intends to use the cloud service via the image forming device, and a service usage unit that uses the token stored in the memory unit in association with the acquired card information to use the cloud service.

[0006] In addition, the information processing method disclosed herein is an information processing method for an image forming device connected to a server that provides a cloud service, which stores card information of a card distributed to a legitimate user of the image forming device in association with a token that enables use of the cloud service, obtains card information of a card held by a target user who is a user who wishes to use the cloud service via the image forming device, and uses the token stored in association with the obtained card information to use the cloud service.

[0007] In addition, the program disclosed herein causes a computer of an image forming device connected to a server that provides a cloud service to execute a storage processing step of storing in a memory unit card information of a card distributed to a legitimate user of the image forming device in association with a token that enables use of the cloud service; a card information acquisition step of acquiring card information of a card held by a target user who is a user who intends to use the cloud service via the image forming device; and a service utilization step of using the token stored in the memory unit in association with the acquired card information. [Brief explanation of the drawings]

[0008] [Figure 1] 1 is a block diagram illustrating an example of a configuration of an information processing system according to an embodiment. [Figure 2] FIG. 2 is a block diagram showing an example of a functional configuration of the image forming apparatus according to the embodiment; [Figure 3] FIG. 4 is a diagram showing a specific example of information stored in a storage unit. [Figure 4] FIG. 2 is a block diagram showing an example of a hardware configuration of the image forming apparatus according to the embodiment; [Figure 5A] 1 is a flowchart showing a flow of processing performed by the image forming apparatus according to the embodiment; [Figure 5B] 1 is a flowchart showing a flow of processing performed by the image forming apparatus according to the embodiment; [Figure 6] FIG. 4 is a diagram showing a specific example of information stored in a storage unit. [Figure 7] FIG. 10 is a diagram showing a specific example of information acquired from a cloud server in the first confirmation process. [Figure 8] FIG. 4 is a diagram showing a specific example of information stored in a storage unit. [Figure 9] FIG. 10 is a diagram illustrating the deletion of invalid information. [Figure 10] FIG. 4 is a diagram showing a specific example of information stored in a storage unit. [Figure 11] FIG. 4 is a diagram showing a specific example of information stored in a storage unit. DETAILED DESCRIPTION OF THE INVENTION

[0009] Hereinafter, embodiments will be described with reference to the drawings. For clarity of explanation, the following description and drawings have been omitted and simplified as appropriate. In addition, the same elements in each drawing are designated by the same reference numerals, and duplicate explanations have been omitted as necessary.

[0010] Fig. 1 is a block diagram showing an example of a configuration of an information processing system 1 according to an embodiment. In the example shown in Fig. 1, the information processing system 1 includes an image forming apparatus 100 and a cloud server 200. The image forming apparatus 100 and the cloud server 200 are connected to a network N such as the Internet.

[0011] In this embodiment, a user U uses a cloud service provided by a cloud server 200 via an image forming apparatus 100. In this embodiment, a token that enables the use of the cloud service provided by the cloud server 200 is stored in the image forming apparatus 100. The image forming apparatus 100 then uses the cloud service using this token. As a result, the user U can use the cloud service without performing an authentication operation for using the cloud service, i.e., without performing an operation of inputting login information for using the cloud service. Therefore, this embodiment can improve the user's convenience in using the cloud service. Furthermore, the image forming apparatus 100 permits the use of functions of the image forming apparatus 100 and the use of the cloud service via the image forming apparatus 100 only to the user U who has successfully passed user authentication by the authentication unit 104 (described later). This allows the information processing system 1 to be operated securely. In this embodiment, authentication by authentication unit 104 basically succeeds when the card ID (card identification information) input to image forming apparatus 100 is registered in cloud server 200, but in other cases, as an exception, authentication by authentication unit 104 also succeeds when predetermined conditions are met. Details of this embodiment will be described below.

[0012] Cloud server 200 is a server that provides a predetermined cloud service. The provided service is, for example, a data storage service. In this case, the cloud service is used via image forming apparatus 100 as follows. For example, image forming apparatus 100 downloads data stored on cloud server 200 by a data storage service provided as a cloud service, and prints an image of the data. Furthermore, image forming apparatus 100 stores image data generated by scanning a document on cloud server 200 using the data storage service. Note that these are merely examples of using a cloud service via image forming apparatus 100, and processes other than those described above may also be performed as part of using a cloud service via image forming apparatus 100.

[0013] When the login information acquired by the cloud server 200 through an input operation by the user U matches the login information pre-registered for each user in the cloud server 200, the cloud server 200 allows the user U to use the cloud service. Specifically, the login information is a combination of a user ID (user identification information) and a password, and may also be referred to as account information. Furthermore, when the cloud server 200 acquires a token issued for each user that enables the use of the cloud service, the cloud server 200 allows the user U corresponding to the token to use the cloud service.

[0014] The above-mentioned token will now be described in more detail. Specifically, the above-mentioned token is a refresh token. In this embodiment, two types of tokens are issued: an access token and a refresh token. The access token is information that proves that the access is made by a legitimate user. A refresh token is issued together with the access token when the access token is issued. Both the access token and the refresh token have a validity period. That is, these tokens are valid for a predetermined period of time from the time of issuance of the token. While the validity period of the access token is short, on the order of a few hours, the validity period of the refresh token is longer than the validity period of the access token. In this embodiment, the validity period of the refresh token is, for example, 90 days. The access token is issued when the login information acquired by the cloud server 200 matches the login information pre-registered for each user in the cloud server 200 and when the cloud server 200 acquires a refresh token. That is, the refresh token is information that can be used in place of login information to issue an access token. The cloud server 200 permits use of the cloud service in response to a usage request from the image forming apparatus 100 using the access token. As described above, an access token is issued when a refresh token is used. Therefore, a refresh token can be considered information that enables the use of a cloud service. Furthermore, since the use of a refresh token makes it possible to omit the authentication operation for using a cloud service, i.e., the operation of inputting login information for using a cloud service, a refresh token can also be considered information for passing the authentication required when using a cloud service. A refresh token can also be considered information that serves as a substitute for login information. In the following description, a refresh token will simply be referred to as a "token."

[0015] Furthermore, cloud server 200 registers card information of cards distributed to authorized users of image forming apparatus 100 in association with the user IDs (user identification information) of those users. That is, cloud server 200 registers card information of cards distributed to authorized users of image forming apparatus 100 in association with the user IDs of those users who are also users of the cloud service. In other words, cloud server 200 registers the user IDs of authorized users of the cloud service in association with the card information of those users. In this embodiment, the card information is, more specifically, card IDs (card identification information). Registration of card information is achieved, for example, by an administrator performing a registration operation on cloud server 200. However, for some reason, such as when the administrator neglects to perform a registration operation, it is possible that card information for some or all of the cards distributed to authorized users of image forming apparatus 100 is not registered on cloud server 200.

[0016] Next, details of the image forming apparatus 100 will be described. The image forming apparatus 100 is connected to a cloud server 200, which is a server that provides cloud services, via a network N. FIG. 2 is a block diagram showing an example of the functional configuration of the image forming apparatus 100. As shown in FIG. 2, the image forming apparatus 100 has a storage processing unit 101, a storage unit 102, a card information acquisition unit 103, an authentication unit 104, a service use unit 105, an apparatus function use unit 106, and a notification unit 107.

[0017] The storage processing unit 101 performs a process of storing information in the storage unit 102. For example, the storage processing unit 101 performs a process of storing, in the storage unit 102, card information of a card distributed to a legitimate user of the image forming apparatus 100 in association with a token that enables use of a cloud service. More specifically, the storage processing unit 101 stores, in association with each user, the card ID (card information) of the card distributed to the legitimate user of the image forming apparatus 100, the user ID (user identification information) of the user, the token that enables use of a cloud service, and information indicating the issuance time of the token. More specifically, the token stored in the storage unit 102 is a refresh token issued based on legitimate login information or a refresh token reissued based on a legitimate refresh token.

[0018] The storage unit 102 is a storage area that stores information used by the authentication unit 104, the service use unit 105, etc. Fig. 3 is a diagram showing a specific example of information stored in the storage unit 102. As shown in Fig. 3, the information stored in the storage unit 102 is information that associates, for each user, a user ID, a card ID, a token, and information indicating the time at which the token was issued (hereinafter referred to as issue time information).

[0019] The card information acquisition unit 103 acquires card information of a card held by the target user. More specifically, the card information acquisition unit 103 acquires a card ID, which is identification information of the card, as the card information. Here, the target user refers to a user who intends to use a cloud service provided by the cloud server 200 via the image forming apparatus 100, and in this embodiment, the target user is user U. The card information acquisition unit 103 acquires the card ID via the UI device 152, which will be described later. More specifically, the card information acquisition unit 103 acquires the card ID read by a card reader provided as the UI device 152 in the image forming apparatus 100. Note that the card information acquisition unit 103 may also acquire the card ID input by the user U via an input device provided as the UI device 152 in the image forming apparatus 100.

[0020] The authentication unit 104 performs an authentication process to authenticate that the target user (user U) is a legitimate user of the image forming apparatus 100. In this embodiment, use of the functions of the image forming apparatus 100 and use of cloud services via the image forming apparatus 100 are permitted if the result of the authentication process by the authentication unit 104 is successful authentication. That is, if the result of the authentication process is successful authentication, the authentication unit 104 permits the user U to use the functions of the image forming apparatus 100 and use of cloud services via the image forming apparatus 100. On the other hand, if the result of the authentication process is unsuccessful authentication, the authentication unit 104 prohibits the user U from using the functions of the image forming apparatus 100 and use of cloud services via the image forming apparatus 100.

[0021] The authentication process by the authentication unit 104 may include a first confirmation process, a second confirmation process, and a third confirmation process. The authentication process performed for the user U may include all of these confirmation processes, or may include only some of the confirmation processes. The cases in which the confirmation processes are performed will be described later with reference to flowcharts.

[0022] The first confirmation process is a process of acquiring user identification information (user ID) registered in cloud server 200 in association with the card information (card ID) acquired by card information acquisition unit 103. That is, in the first confirmation process, a process is performed to acquire from cloud server 200, among the user identification information of legitimate users of the cloud service registered in cloud server 200, information that corresponds to the acquired card information (card ID).

[0023] The second confirmation process is a process of confirming that the card information (card ID) acquired by the card information acquisition unit 103 is stored in the storage unit 102. That is, in the second confirmation process, a process of confirming that the card information acquired by the card information acquisition unit 103 is managed in the image forming apparatus 100 as card information of the card of a legitimate user of the image forming apparatus 100 is performed.

[0024] The third confirmation process is a process of acquiring specific user identification information from cloud server 200 and confirming that the acquired user identification information matches the user identification information stored in memory unit 102 in association with the card information (card ID) acquired by card information acquisition unit 103. Here, the above-mentioned specific user identification information is specifically the user identification information of a legitimate user of the cloud service, which is registered in cloud server 200 in association with the token stored in memory unit 102 in association with the card information (card ID) acquired by card information acquisition unit 103.

[0025] As shown in a flowchart described later, if the first confirmation process fails, the authentication unit 104 determines whether the cause of the failure is a communication error with the cloud server 200. If the authentication unit 104 does not receive a response from the cloud server 200 during the first confirmation process, the authentication unit 104 determines that the cause of the failure in the first confirmation process is a communication error. Furthermore, if the authentication unit 104 receives a response but is unable to obtain user identification information (user ID) registered in the cloud server 200 in association with the card information (card ID) acquired by the card information acquisition unit 103, the authentication unit 104 determines that the cause of the failure in the first confirmation process is something other than a communication error.

[0026] The service usage unit 105 performs a process to use a cloud service provided by the cloud server 200 in accordance with an instruction from the user U. If the authentication process performed by the authentication unit 104 for the user U results in successful authentication, the service usage unit 105 executes a process to use the cloud service in accordance with the instruction from the user U. In particular, in this embodiment, the service usage unit 105 uses the cloud service using a token stored in the storage unit 102 in association with card information (card ID) acquired by the card information acquisition unit 103. In this case, specifically, the service usage unit 105 transmits a refresh token, which is the token stored in the storage unit 102, to the cloud server 200 and requests issuance of an access token and a new refresh token. When the image forming apparatus 100 receives the access token, the service usage unit 105 transmits a cloud service usage request together with the access token to the cloud server 200, thereby using the cloud service. For example, the service usage unit 105 may download data from the cloud server 200 or upload image data generated by scanning to the cloud server 200 in accordance with an instruction from the user.

[0027] When the image forming apparatus 100 receives a new refresh token, the storage processing unit 101 stores the new refresh token in the storage unit 102 in association with the card information acquired by the card information acquisition unit 103. As a result, the old refresh token stored in association with the card information acquired by the card information acquisition unit 103 is updated to the new refresh token. The storage processing unit 101 also stores issuance time information of the new refresh token in association with the card information acquired by the card information acquisition unit 103 in the storage unit 102. As a result, the old issuance time information stored in association with the card information acquired by the card information acquisition unit 103 is updated to the new issuance time information.

[0028] Note that the service use unit 105 does not necessarily need to use the token stored in the storage unit 102 when using a cloud service. Specifically, if the user U performs an input operation of valid login information for using a cloud service, the service use unit 105 uses the cloud service without using the token stored in the storage unit 102. In this case, the service use unit 105 transmits the login information to the cloud server 200 and requests the issuance of an access token and a refresh token. Then, when the image forming apparatus 100 receives the access token, the service use unit 105 transmits a cloud service usage request together with the access token to the cloud server 200, thereby using the cloud service. In this case as well, the storage processing unit 101 stores the received refresh token and its issuance time information in the storage unit 102 in association with the card information acquired by the card information acquisition unit 103.

[0029] The device function utilization unit 106 performs processing to utilize functions provided by the image forming device 100 in accordance with instructions from the user U. In the present embodiment, as an example, the device function utilization unit 106 performs processing to utilize a printing function by the printing unit 150 or a scanning function by the scanner 151, which will be described later, in accordance with instructions from the user U. If the result of the authentication processing for the user U by the authentication unit 104 is successful, the device function utilization unit 106 executes processing to utilize functions provided by the image forming device 100 in accordance with instructions from the user U.

[0030] When the remaining validity period of a token identified from the issuance time information stored in the storage unit 102 is less than a predetermined threshold, the notification unit 107 notifies the user corresponding to the token of a predetermined message. Specifically, the notification unit 107 notifies the user of the token with a message informing the user that the token's validity period will soon expire. Note that this message may also be a message encouraging the user to use a cloud service via the image forming apparatus 100. In this embodiment, more specifically, the notification unit 107 performs notification processing as follows. The notification unit 107 checks whether there is a token whose validity period will soon expire based on the time (date) indicated by each piece of issuance time information stored in the storage unit 102 and the current time (date). For example, the notification unit 107 checks whether there is a token that has been issued for 80 days or more. Note that this check may be performed at any timing. For example, it may be performed every time the image forming apparatus 100 is powered on, when the authentication unit 104 performs authentication processing for the first time in a day, or every time a predetermined time arrives. If there is a token whose validity period will soon expire, the notification unit 107 acquires the email address of the user corresponding to that token. In this embodiment, the cloud server 200 manages the email address of each registered user, and the notification unit 107 inquires of the cloud server 200 about the email address of that user. More specifically, the notification unit 107 inquires about the email address using the token of that user stored in the storage unit 102. The notification unit 107 then sends the above-mentioned message email using the email address acquired in this manner. The user's email address does not necessarily have to be acquired from the cloud server 200, but may be stored in advance in the storage unit 102 of the image forming apparatus 100, for example.

[0031] Next, an example of the hardware configuration of the image forming apparatus 100 will be described. Fig. 4 is a block diagram showing an example of the hardware configuration of the image forming apparatus 100. As shown in Fig. 4, the image forming apparatus 100 has a printing unit 150, a scanner 151, a UI device 152, a network interface 153, a memory 154, and a processor 155.

[0032] The printing unit 150 has a printing function for forming an image on a print medium such as paper. For example, the printing unit 150 includes a print engine. The print engine is a mechanical configuration that prints an image on a print medium using color materials. The print engine may have a mechanism that prints using ink, for example, using an inkjet system. Alternatively, the print engine may have a mechanism that prints using toner, for example, using an electrophotographic system. The scanner 151 scans an original document to generate image data. For example, the scanner 151 uses a light source and a sensor to scan the original document in a predetermined direction, i.e., the sub-scanning direction, to optically read the original document and generate image data. Note that the image forming apparatus 100 may also have a transport mechanism that transports the print medium on which the printing unit 150 prints or the original document scanned by the scanner 151.

[0033] The UI device 152 is a device that functions as a user interface. Specifically, the UI device 152 is configured with a display that displays various information and an input device such as a keyboard or a pointing device that accepts input operations from the user. The UI device may be configured as a touch panel in which the display and the input device are integrated.

[0034] The network interface 153 is used for communication over the network N. The network interface 153 may include, for example, a network interface card (NIC).

[0035] The memory 154 is configured, for example, by a combination of a volatile memory and a non-volatile memory. The memory 154 is used to store programs executed by the processor 155. The storage unit 102 described above may be realized by a storage device such as the memory 154. The memory 154 may include multiple memories.

[0036] The processor 155 reads and executes a program from the memory 154. As a result, the processor 155 realizes the functions of the storage processing unit 101, the card information acquisition unit 103, the authentication unit 104, the service utilization unit 105, the device function utilization unit 106, and the notification unit 107 described above. The processor 155 may be, for example, a microprocessor, an MPU (Micro Processor Unit), or a CPU (Central Processing Unit). The processor 155 may include multiple processors. In this way, the image forming apparatus 100 has a configuration as a computer.

[0037] Cloud server 200 also has a computer configuration, and the processor of cloud server 200 reads and executes programs from the memory of cloud server 200 to realize various functions of cloud server 200.

[0038] The program includes instructions (or software code) that, when loaded into a computer, cause the computer to perform one or more functions described in the embodiments. The program may be stored on a non-transitory computer-readable medium or a tangible storage medium. By way of example and not limitation, computer-readable medium or tangible storage medium includes random-access memory (RAM), read-only memory (ROM), flash memory, solid-state drive (SSD) or other memory technology, CD-ROM, digital versatile disc (DVD), Blu-ray disc or other optical disk storage, magnetic cassette, magnetic tape, magnetic disk storage or other magnetic storage device. The program may be transmitted on a transitory computer-readable medium or communication medium. By way of example and not limitation, transitory computer-readable medium or communication medium includes electrical, optical, acoustic, or other forms of propagated signals.

[0039] Next, a description will be given of the processing flow of the image forming apparatus 100. Figures 5A and 5B are flowcharts showing an example of the processing flow of the image forming apparatus 100. The processing flow will be described below with reference to Figures 5A and 5B.

[0040] In step S100, the card information acquisition unit 103 acquires card information, i.e., a card ID, of a card held by the target user, user U. After step S100, in steps S101 and onward, authentication processing is performed by the authentication unit 104.

[0041] In step S101, authentication unit 104 executes a first confirmation process. That is, authentication unit 104 attempts to acquire a user ID registered in cloud server 200 in association with the card ID acquired in step S100. That is, authentication unit 104 inquires of cloud server 200 about a user ID registered in cloud server 200 in association with the card ID acquired in step S100. Specifically, authentication unit 104 requests cloud server 200 to transmit a user ID corresponding to the card ID acquired in step S100. If the first confirmation process is successful, that is, if the user ID registered in cloud server 200 in association with the card ID acquired in step S100 can be acquired from cloud server 200 (YES in step S102), the process proceeds to step S103. On the other hand, if the first confirmation process fails, that is, if the user ID registered in the cloud server 200 in association with the card ID obtained in step S100 cannot be obtained from the cloud server 200 (NO in step S102), the process proceeds to step S106.

[0042] In step S103, authentication unit 104 executes a second confirmation process. That is, authentication unit 104 confirms whether or not the card ID acquired in step S100 is stored in storage unit 102. If the second confirmation process is successful, that is, if the card ID acquired in step S100 is stored in storage unit 102 (YES in step S104), the process proceeds to step S119. On the other hand, if the second confirmation process fails, that is, if the card ID acquired in step S100 is not stored in storage unit 102 (NO in step S104), the process proceeds to step S105.

[0043] In step S105, storage processing unit 101 associates the card ID acquired in step S100 with the user ID acquired in step S101 and stores them in storage unit 102. After step S105, the process proceeds to step S119.

[0044] When the process proceeds to step S106, in step S106, authentication unit 104 determines whether the cause of the failure of the first confirmation process in step S101 is a communication error with cloud server 200. If the cause of the failure of the first confirmation process is a communication error (YES in step S106), the process proceeds to step S107. On the other hand, if the cause of the failure of the first confirmation process is not a communication error (NO in step S106), the process proceeds to step S110.

[0045] In step S107, authentication unit 104 executes a second confirmation process. That is, authentication unit 104 confirms whether or not the card ID acquired in step S100 is stored in storage unit 102. If the second confirmation process is successful, that is, if the card ID acquired in step S100 is stored in storage unit 102 (YES in step S108), the process proceeds to step S119. On the other hand, if the second confirmation process is unsuccessful, that is, if the card ID acquired in step S100 is not stored in storage unit 102 (NO in step S108), the process proceeds to step S109. In step S109, authentication unit 104 determines that authentication has failed. The reason for this determination is that although the reason that it was not possible to confirm that the card ID of user U's card was registered in cloud server 200 was a communication error, the card ID was not found in image forming apparatus 100 either, and therefore authentication cannot be considered successful as an exception. If it is determined that the authentication has failed, the process ends and user U, who is the target user, cannot use image forming apparatus 100.

[0046] If the process proceeds to step S110, authentication unit 104 executes a second confirmation process in step S110. That is, authentication unit 104 confirms whether or not the card ID acquired in step S100 is stored in storage unit 102. If the second confirmation process is successful, that is, if the card ID acquired in step S100 is stored in storage unit 102 (YES in step S111), the process proceeds to step S112. On the other hand, if the second confirmation process fails, that is, if the card ID acquired in step S100 is not stored in storage unit 102 (NO in step S111), the process proceeds to step S115.

[0047] In step S112, the authentication unit 104 executes a third confirmation process. In the third confirmation process, the authentication unit 104 first finds the token stored in the storage unit 102 in association with the card ID acquired in step S100, and queries the cloud server 200 for a user ID registered in the cloud server 200 in association with this token. Specifically, the authentication unit 104 requests the cloud server 200 to transmit the user ID corresponding to this token. Next, the authentication unit 104 checks whether the user ID acquired from the cloud server 200 matches the user ID stored in the storage unit 102 in association with the card ID acquired in step S100. If the third confirmation process is successful, that is, if the user ID from the cloud server 200 is successfully acquired and the acquired user ID matches the user ID stored in the storage unit 102 in association with the card ID acquired in step S100 (YES in step S113), the process proceeds to step S119. On the other hand, if the third confirmation process fails (NO in step S113), the process proceeds to step S114. That is, if acquisition of the user ID from cloud server 200 fails, or if the acquired user ID differs from the user ID stored in storage unit 102 in association with the card ID acquired in step S100, the process proceeds to step S114.

[0048] In step S114, storage processing unit 101 deletes the invalid information. Specifically, storage processing unit 101 deletes the information stored in storage unit 102 in association with the card ID acquired in step S100. After step S114, the process proceeds to step S115.

[0049] In step S115, authentication unit 104 prompts user U to input login information for using the cloud service, i.e., to perform an authentication operation for logging in to the cloud service. In response, user U performs an operation to input login information, for example, via UI device 152. Cloud server 200 determines whether the login information input by user U is valid. If the login information is valid, login to the cloud service is successful. In step S116, authentication unit 104 determines whether login to the cloud service is successful. If login to the cloud service is successful (YES in step S116), the process proceeds to step S118. On the other hand, if login to the cloud service is unsuccessful (NO in step S116), the process proceeds to step S117. In step S117, authentication unit 104 determines that authentication has failed. If it is determined that authentication has failed, the process ends, and user U, the target user, cannot use image forming apparatus 100.

[0050] On the other hand, if the login to the cloud service is successful, in step S118, the storage processing unit 101 performs processing to newly store information about the target user in the storage unit 102. Specifically, the storage processing unit 101 stores the user ID and token acquired from the cloud service, and the issuance time information of the token, in association with the card ID acquired in step S100, in the storage unit 102.

[0051] When the process proceeds to step S119, authentication unit 104 determines that authentication has been successful. This determination allows user U, the target user, to use image forming apparatus 100. The reason why the process proceeds from step S104 or step S105 to step S119 and the authentication is determined to be successful is because the first confirmation process has been successful. This is because it has been confirmed that the card ID entered into image forming apparatus 100 is registered in cloud server 200. When the process proceeds from step S108 to step S119, authentication is exceptionally determined to be successful, even though the first confirmation process has failed. This is because it has been confirmed that the failure of the first confirmation process was merely a communication error and that the card ID acquired in step S100 is managed by image forming apparatus 100. Based on these facts, the target user can be inferred to be a legitimate user of image forming apparatus 100. Furthermore, when the process transitions from step S113 to step S119, the authentication is determined to be successful as an exception, even though the first confirmation process has failed. This is because, although the cause of the failure of the first confirmation process is not a communication error, it is confirmed that the card ID acquired in step S100 is managed in image forming apparatus 100, and it is also confirmed that the user ID linked to the card ID is registered in cloud server 200. In other words, from these facts, the target user can be inferred to be a legitimate user of image forming apparatus 100. Furthermore, when the process transitions from step S118 to step S119, the authentication is determined to be successful, even though the first confirmation process has failed. This is because it is confirmed that the target user (user U) is a legitimate user of the cloud service based on the login information.

[0052] After step S119, the process proceeds to step S120. In step S120, the service use unit 105 performs a process of using a cloud service provided by the cloud server 200 in accordance with an instruction from the target user (user U). At this time, if a token stored in the memory unit 102 in association with the card ID acquired in step S100 exists, the service use unit 105 uses the cloud service using the token. In this case, a new token is acquired, and the storage processing unit 101 updates the token and the issuance time information in the memory unit 102. Note that, although the process of the service use unit 105 is described in step S120 in this flowchart, the process of the device function use unit 106 may also be performed in step S120.

[0053] Next, some specific examples will be described to aid in understanding the image forming apparatus 100 described above. In describing the specific examples, reference will be made to FIG. 3 and FIGS. 6 to 11 as appropriate. FIG. 6 is a diagram showing a specific example of information stored in the storage unit 102. FIG. 7 is a diagram showing a specific example of information acquired from the cloud server 200 in the first confirmation process. FIG. 8 is a diagram showing a specific example of information stored in the storage unit 102. FIG. 9 is a diagram schematically showing deletion of invalid information. FIG. 10 is a diagram showing a specific example of information stored in the storage unit 102. FIG. 11 is a diagram showing a specific example of information stored in the storage unit 102.

[0054] [Case 1] Case 1 is an example in which a user U is the user to be authenticated, whose card ID is registered in cloud server 200 by an administrator and whose user ID, card ID, token, and issuance time information are stored in storage unit 102. For example, a user who became the user to be authenticated in Case 7, which will be described later, becomes the user to be authenticated in Case 1 when using image forming apparatus 100 again. The flow of Case 1 described below corresponds to the processing flow that passes through the above-mentioned steps S100, S101, S102, S103, and S104 and reaches step S119.

[0055] As a premise of Case 1, it is assumed that the information shown in FIG. 6 is stored in the storage unit 102, and that "4444" is acquired as the card ID in step S100. At this time, in Case 1, the first confirmation process (step S101) is successful (YES in step S102), and the authentication unit 104 acquires user information shown in FIG. 7, for example, from the cloud server 200. That is, the authentication unit 104 acquires "user4" as the user ID corresponding to the card ID "4444". Thereafter, the second confirmation process (step S103) is performed. Because the card ID "4444" is stored in the storage unit 102, the second confirmation process is successful (YES in step S104). Therefore, it is determined that the authentication is successful (step S119) without performing the process of step S105. Thereafter, the service use unit 105 uses the cloud service using the token "Dd" stored in the storage unit 102 (step S120). That is, the user U can use the cloud service without having to enter login information for the cloud service.

[0056] [Case 2] Case 2 is an example in which the user U to be authenticated is a user whose card ID has been registered in cloud server 200 by the administrator but whose information is not stored in storage unit 102. The flow of Case 2 described below corresponds to the processing flow that passes through the above-mentioned steps S100, S101, S102, S103, S104, and S105 and reaches step S119.

[0057] As a premise of Case 2, it is assumed that the information shown in FIG. 3 is stored in the storage unit 102, and that "4444" is acquired as the card ID in step S100. At this time, in Case 2, the first confirmation process (step S101) is successful (YES in step S102), and the authentication unit 104 acquires user information shown in FIG. 7, for example, from the cloud server 200. That is, the authentication unit 104 acquires "user4" as the user ID corresponding to the card ID "4444". Thereafter, the second confirmation process (step S103) is performed. Because the card ID "4444" is not stored in the storage unit 102, the second confirmation process fails (NO in step S104). Therefore, as shown in FIG. 8, the storage processing unit 101 associates the card ID "4444" with the user ID "user4" acquired from the cloud server 200, and stores the associated information in the storage unit 102 (step S105). Then, the authentication unit 104 determines that the authentication is successful (step S119). In this case, since the token has not yet been stored in the storage unit 102, the user U needs to input login information for the cloud service when using the cloud service (step S120).

[0058] [Case 3] Case 3 is an example of a case where a user U, whose user ID, card ID, token, and issuance time information is stored in storage unit 102, is the user to be authenticated, and image forming apparatus 100 and cloud server 200 cannot communicate with each other. For example, this case applies when a communication failure occurs when a user who became the user to be authenticated in Case 7, which will be described later, tries to use image forming apparatus 100 again. The flow of Case 3 described below corresponds to the processing flow that passes through the above-mentioned steps S100, S101, S102, S106, S107, and S108, and then reaches step S119.

[0059] As a premise of Case 3, it is assumed that the information shown in FIG. 6 is stored in the storage unit 102, and that "4444" is acquired as the card ID in step S100. In this case, in Case 3, the first confirmation process (step S101) fails due to a communication error (NO in step S102, YES in step S106), and the second confirmation process (step S107) is performed. Since the card ID "4444" is stored in the storage unit 102, the second confirmation process is successful (YES in step S108). In this case, although the first confirmation process failed, the cause of the failure was merely a communication error, and the second confirmation process was successful, so it is exceptionally determined that the authentication was successful (step S119). Thereafter, the service use unit 105 uses the cloud service using the token "Dd" stored in the storage unit 102 (step S120). In other words, the user U can use the cloud service without inputting login information for the cloud service.

[0060] [Case 4] Case 4 is an example of a case where user U, the user to be authenticated, is a user whose information is not stored in storage unit 102, and image forming apparatus 100 cannot communicate with cloud server 200. The flow of Case 4 described below corresponds to the processing flow that passes through the above-mentioned steps S100, S101, S102, S106, S107, and step S108, and reaches step S109.

[0061] As a premise of Case 4, it is assumed that the information shown in FIG. 3 is stored in storage unit 102, and that "4444" is acquired as the card ID in step S100. At this time, in Case 4, the first confirmation process (step S101) fails due to a communication error (NO in step S102, YES in step S106), and the second confirmation process (step S107) is performed. Because card ID "4444" is not stored in storage unit 102, the second confirmation process also fails (NO in step S108). For this reason, it is not possible to exceptionally determine that authentication is successful, and it is determined that authentication is unsuccessful (step S109).

[0062] [Case 5] Case 5 is an example in which user U, whose card ID has not been registered in cloud server 200 by the administrator, is the user to be authenticated, whose user ID, card ID, token, and issuance time information are stored in storage unit 102. Note that although user U's card ID is not registered in cloud server 200, he or she is registered in cloud server 200 as a legitimate user of the cloud service. Because registering a card ID in cloud server 200 is not required to use the cloud service, a situation may arise in which the card ID of a legitimate user of the cloud service is not stored in cloud server 200. Note that in this case, as described above, user U's user ID and card ID are stored in storage unit 102. These are stored in advance in storage unit 102 of image forming apparatus 100, for example, by user U's own registration operation or by the administrator's registration operation. Furthermore, the storage unit 102 also stores a token and the token's issuance time information in association with user U's user ID and card ID. These are, for example, stored token information issued when user U successfully logged in to the cloud service by entering login information before the occurrence of case 5. The flow of case 5 described below corresponds to the processing flow that passes through the above-mentioned steps S100, S101, S102, S106, S110, S111, S112, and S113, and reaches step S119.

[0063] As a premise of Case 5, it is assumed that the information shown in FIG. 6 is stored in the storage unit 102, and that "4444" is acquired as the card ID in step S100. In this case, in Case 5, the card ID "4444" is not registered in the cloud server 200, so the first confirmation process (step S101) fails (NO in step S102). That is, the first confirmation process fails for a reason other than a communication error (NO in step S106). Thereafter, the second confirmation process (step S110) is performed. Since the card ID "4444" is stored in the storage unit 102, the second confirmation process is successful (YES in step S111). In this case, the third confirmation process is then performed (step S112). Since the token stored in the storage unit 102 in association with the card ID "4444" is "Dd," the third confirmation process attempts to acquire the user ID of the user registered in the cloud server 200 in association with this token "Dd." Here, it is assumed that the user ID "user4" is acquired from the cloud server 200 in the third confirmation process. Since the user ID "4444" acquired from the cloud server 200 matches the user ID "4444" stored in the storage unit 102 in association with the card ID "4444," the third confirmation process is successful in this case (YES in step S113). As a result, it is determined that the authentication is successful in this case (step S119). That is, although the cause of the failure of the first confirmation process is not a communication error, it is confirmed that the card ID "4444" exists in the storage unit 102 and that the user ID "user4" associated with the card ID "4444" in the storage unit 102 is also registered in the cloud server 200, so it is determined that the authentication is successful. Thereafter, the service use unit 105 uses the cloud service by using the token "Dd" stored in the storage unit 102 (step S120). That is, the user U can use the cloud service without having to input login information for the cloud service.

[0064] [Case 6] Case 6 is an example in which a card used by another user who previously had qualifications to use image forming apparatus 100 and cloud services but no longer has the qualifications (e.g., a card used by a retired employee) is distributed to user U, who is the target of authentication. Also in this case, the card ID of the card used by user U, the target of authentication, is not registered in cloud server 200 by the administrator. Also, the storage unit 102 stores the user ID, card ID, token, and issuance time information of the aforementioned other user who previously used the card. It is assumed that user U is registered in cloud server 200 as a legitimate user of the cloud services, and that the aforementioned other user who previously used the card has been deleted from cloud server 200 as a legitimate user of the cloud services. The flow of Case 6 described below corresponds to the processing flow that passes through the above-mentioned steps S100, S101, S102, S106, S110, S111, S112, S113, S114, S115, S116, and S118 and reaches step S119.

[0065] As a premise of Case 6, it is assumed that the information shown in FIG. 6 is stored in the storage unit 102, and that "4444" is acquired as the card ID in step S100. In this case, in Case 6, the card ID "4444" is not registered in the cloud server 200, so the first confirmation process (step S101) fails (NO in step S102). That is, the first confirmation process fails for a reason other than a communication error (NO in step S106). Thereafter, the second confirmation process (step S110) is performed. Since the card ID "4444" is stored in the storage unit 102, the second confirmation process is successful (YES in step S111). In this case as well, thereafter, the third confirmation process is performed (step S112). Since the token stored in the storage unit 102 in association with the card ID "4444" is "Dd," the third confirmation process attempts to acquire the user ID of the user registered in the cloud server 200 in association with this token "Dd." In this case, information about the user who previously owned the card with card ID "4444" has been deleted from cloud server 200, and therefore, there is no user ID associated with token "Dd" in cloud server 200. Therefore, in the third confirmation process, the user ID cannot be acquired from cloud server 200, and the third confirmation process fails (NO in step S113). Therefore, invalid information is deleted from storage unit 102 (step S114). As a result, information about card ID "4444" is deleted from storage unit 102, as shown in FIG. 9 . Thereafter, authentication unit 104 prompts user U to perform an authentication operation involving input of login information, and in response, user U inputs the login information (step S115). Here, it is assumed that user U has successfully logged in to the cloud service (YES in step S116). Accordingly, a process is performed to newly store information about the target user in storage unit 102 (step S118). As a result, as shown in Figure 10, the user ID "user5" and token "Ee" obtained from the cloud server 200 are stored in the memory unit 102 in association with the card ID "4444", as well as the issuance time information for the token.In this case, since login to the cloud service was successful, it is determined that authentication was successful (step S119). In this case, since login to the cloud service was successful by inputting login information, service use unit 105 can use the cloud service (step S120).

[0066] [Case 7] Case 7 is an example in which user U, the target of authentication, is a user whose card ID has not been registered in cloud server 200 by the administrator and whose information is not stored in storage unit 102. However, although user U's card ID has not been registered in cloud server 200, user U is registered in cloud server 200 as a legitimate user of the cloud service. In other words, user U, the target of authentication in this case, differs from user U, the target of authentication in Case 2, in that his card ID has not been registered in cloud server 200. The flow of Case 7 described below corresponds to the processing flow that passes through steps S100, S101, S102, S106, S110, S111, S115, S116, and S118 and reaches step S119.

[0067] As a premise of Case 7, it is assumed that the information shown in FIG. 3 is stored in storage unit 102, and that "4444" is acquired as the card ID in step S100. In this case, in Case 7, card ID "4444" is not registered in cloud server 200, so the first confirmation process (step S101) fails (NO in step S102). That is, the first confirmation process fails for a reason other than a communication error (NO in step S106). Thereafter, second confirmation process (step S110) is performed. Since card ID "4444" is not stored in storage unit 102, the second confirmation process fails (NO in step S111). Therefore, authentication unit 104 prompts user U to perform an authentication operation involving input of login information, and in response, user U inputs the login information (step S115). Here, it is assumed that login to the cloud service is successful (YES in step S116). Accordingly, a process is performed to newly store the target user's information in the storage unit 102 (step S118). As a result, as shown in FIG. 6, the user ID "user4" and token "Dd" acquired from the cloud server 200, as well as the token issuance time information, are stored in the storage unit 102 in association with the card ID "4444". In this case, since login to the cloud service was successful, it is determined that authentication was successful (step S119). In this case, since login to the cloud service was successful by inputting the login information, the service use unit 105 can use the cloud service (step S120).

[0068] [Case 8] Case 8 is an example of a case where the notification unit 107 notifies a message. It is assumed that the information shown in FIG. 11 is stored in the storage unit 102 and the current date is December 23, 2023. The notification unit 107 notifies a message when a token that has been issued 80 days ago exists. In this case, in Case 8, the notification unit 107 detects that the token of a user with a user ID of "user4" has been issued 80 days ago. For example, this is detected by the notification unit 107 checking the issuance time information of each user stored in the storage unit 102 when the image forming apparatus 100 is powered on. The notification unit 107 notifies the user with the user ID of "user4" with a message informing them that the validity period of their token will soon expire. Specifically, the notification unit 107 obtains the user's email address from the cloud server 200 and sends an email containing the above message to the obtained email address.

[0069] The embodiment has been described above. Image forming apparatus 100 according to the present embodiment acquires card information of a card held by a target user, and uses a token stored in storage unit 102 in association with the acquired card information to use a cloud service. Therefore, the target user does not necessarily need to perform an authentication operation to use the cloud service. This provides a high level of convenience for the user when using the cloud service.

[0070] Furthermore, as shown in the above-described Case 6 or Case 7, in this embodiment, when a target user performs an authentication operation to log in to a cloud service and thereby successfully logs in to the cloud service via image forming apparatus 100, storage processing unit 101 performs the following process. That is, in this case, storage processing unit 101 performs a process of storing in storage unit 102 the card information acquired by card information acquisition unit 103 and the token acquired from the cloud service in association with the login. Therefore, for this target user, the card information and the token are automatically stored in association with each other in storage unit 102. Therefore, according to this embodiment, information for using a cloud service can be automatically saved in storage unit 102 without performing an authentication operation.

[0071] Furthermore, in this embodiment, as shown in steps S119 and S120, if the result of the authentication process by authentication unit 104 is successful, service use unit 105 uses a cloud service by using the token stored in storage unit 102 in association with the card information acquired by card information acquisition unit 103. This makes it possible to prevent fraudulent use of cloud services using tokens.

[0072] Furthermore, in this embodiment, as shown in the above-described Case 1 or Case 2, if the first confirmation process is successful, the authentication unit 104 determines that the authentication is successful in the authentication process. That is, by confirming that the user corresponding to the card information acquired by the card information acquisition unit 103 is registered in the cloud service, the target user is authenticated as a legitimate user of the image forming apparatus 100. Therefore, in this embodiment, it is possible to realize the authentication process in cooperation with the cloud server 200 without requesting an authentication operation to the cloud service.

[0073] Furthermore, in this embodiment, as shown in the above-described Case 3, when the first confirmation process fails due to an error in communication with cloud server 200, authentication unit 104 determines that authentication has been successful in the authentication process if the second confirmation process is successful. Therefore, when a communication error occurs, the target user can be authenticated using information stored in image forming apparatus 100. This improves user convenience.

[0074] Furthermore, in this embodiment, as shown in the above-described Case 2, if the first confirmation process is successful but the second confirmation process fails in the authentication process by authentication unit 104, a process is performed to store the target user's card information acquired by card information acquisition unit 103 in storage unit 102. As a result, information for making the second confirmation process, which is performed for this target user when the first confirmation process fails due to a communication error, successful (i.e., the target user's card information) is automatically stored in storage unit 102. This improves user convenience.

[0075] Furthermore, in this embodiment, as shown in Case 5 above, if the first confirmation process fails due to a factor other than an error in communication with cloud server 200, authentication unit 104 determines that authentication has been successful in the authentication process if both the second confirmation process and the third confirmation process are successful. Therefore, even if card information is not registered in cloud server 200 because the administrator has neglected to perform the registration operation, it is possible to infer whether the target user is a legitimate user. This improves user convenience.

[0076] Furthermore, in this embodiment, as shown in Case 6 above, the storage processing unit 101 performs the following processing. If the first confirmation process fails due to a factor other than an error in communication with the cloud server 200, the second confirmation process is successful, and the third confirmation process fails, the storage processing unit 101 deletes the information stored in the storage unit 102 in association with the card information acquired by the card information acquisition unit 103. Therefore, information that should be invalidated, such as information about retirees, is deleted. This allows the system to be operated more securely.

[0077] Furthermore, in this embodiment, as shown in Case 8 above, when the remaining validity period of a token identified from the issuance time information stored in the storage unit 102 is less than a predetermined threshold, the notification unit 107 notifies the user corresponding to the token. This improves user convenience. In particular, in this embodiment, when a user who has confirmed this message uses a cloud service via the image forming apparatus 100, a new token is issued, thereby preventing the token from expiring. In other words, the period during which the cloud service can be used without performing an authentication operation can be extended.

[0078] Although the embodiments have been described above, the present invention is not limited to the above-described embodiments, and can be modified as appropriate within the scope of the invention.

[0079] Some or all of the above embodiments can be described as, but are not limited to, the following supplementary notes. (Appendix 1) An image forming apparatus connected to a server that provides a cloud service, a storage unit that stores card information of a card distributed to a legitimate user of the image forming device and a token that enables use of the cloud service, in association with each other; a card information acquisition unit that acquires card information of a card held by a target user who is a user who intends to use the cloud service via the image forming apparatus; a service use unit that uses the cloud service by using the token stored in the storage unit in association with the acquired card information; An image forming apparatus having the same. (Appendix 2) When the target user performs an authentication operation to log in to the cloud service and successfully logs in to the cloud service via the image forming device, the acquired card information and a token acquired from the cloud service upon login are stored in the storage unit in association with each other. 10. The image forming apparatus according to claim 1. (Appendix 3) an authentication unit that performs an authentication process to authenticate that the target user is a legitimate user of the image forming apparatus; If the result of the authentication process is successful, the service use unit uses the token stored in the storage unit in association with the acquired card information to use the cloud service. 3. The image forming apparatus according to claim 1 or 2. (Appendix 4) the authentication process includes a first confirmation process of acquiring user identification information of a legitimate user of the cloud service, the user identification information being associated with the acquired card information and registered on the server; When the first confirmation process is successful, the authentication unit determines that the authentication process is successful. 4. The image forming apparatus according to claim 3. (Appendix 5) the authentication process includes the first confirmation process and a second confirmation process for confirming that the acquired card information is stored in the storage unit, When the first confirmation process fails due to an error in communication with the server, if the second confirmation process is successful, the authentication unit determines that the authentication has been successful in the authentication process. 5. The image forming apparatus according to claim 4. (Appendix 6) If the first verification process is successful and the second verification process is unsuccessful, the acquired card information is stored in the storage unit. 6. The image forming apparatus according to claim 5. (Appendix 7) the storage unit stores user identification information in association with the card information; The authentication process includes: the first confirmation process; a second confirmation process for confirming that the acquired card information is stored in the storage unit; a third confirmation process of acquiring user identification information of a legitimate user of the cloud service that is registered on the server in association with the token stored in the storage unit in correspondence with the acquired card information, and confirming that the acquired user identification information matches the user identification information stored in the storage unit in correspondence with the card information; Including, When the first confirmation process fails due to a factor other than an error in communication with the server, if both the second confirmation process and the third confirmation process are successful, the authentication unit determines that the authentication is successful in the authentication process. 7. The image forming apparatus according to claim 4, (Appendix 8) If the first confirmation process fails due to a factor other than an error in communication with the server, the second confirmation process is successful, and the third confirmation process fails, the information stored in the storage unit in association with the acquired card information is deleted. 8. The image forming apparatus according to claim 7. (Appendix 9) The token is valid for a predetermined period of time from the time of issuance of the token, The storage unit further stores issuance time information indicating a time when the token was issued, in association with the token; The image forming apparatus further includes a notification unit that notifies a user corresponding to the token when the remaining validity period of the token identified from the issuance time information is less than a predetermined threshold. 9. The image forming apparatus according to claim 1. (Appendix 10) An information processing method for an image forming apparatus connected to a server that provides a cloud service, comprising: storing card information of a card distributed to a legitimate user of the image forming device in association with a token that enables use of the cloud service; acquiring card information of a card held by a target user who is a user who intends to use the cloud service via the image forming device; The token stored in association with the acquired card information is used to use the cloud service. Information processing methods. (Appendix 11) The computer of the image forming device that connects to the server that provides the cloud service a storage processing step of storing, in a storage unit, card information of a card distributed to a legitimate user of the image forming device and a token that enables use of the cloud service in association with each other; a card information acquisition step of acquiring card information of a card held by a target user who is a user who intends to use the cloud service via the image forming apparatus; a service using step of using the cloud service by using the token stored in the storage unit in association with the acquired card information; A program that executes the following. [Explanation of symbols]

[0080] 1...information processing system, 100...image forming device, 101...storage processing unit, 102...memory unit, 103...card information acquisition unit, 104...authentication unit, 105...service usage unit, 106...device function usage unit, 107...notification unit, 150...printing unit, 151...scanner, 152...UI device, 153...network interface, 154...memory, 155...processor, 200...cloud server, N...network, U...user

Claims

1. An image forming apparatus connected to a server that provides a cloud service, a storage unit that stores card information of a card distributed to a legitimate user of the image forming device and a token that enables use of the cloud service, in association with each other; a card information acquisition unit that acquires card information of a card held by a target user who is a user who intends to use the cloud service via the image forming apparatus; a service use unit that uses the cloud service by using the token stored in the storage unit in association with the acquired card information; An image forming apparatus having the same.

2. When the target user performs an authentication operation to log in to the cloud service and successfully logs in to the cloud service via the image forming device, the acquired card information and a token acquired from the cloud service upon login are stored in the storage unit in association with each other.

2. The image forming apparatus according to claim 1.

3. an authentication unit that performs an authentication process to authenticate that the target user is a legitimate user of the image forming apparatus; If the result of the authentication process is successful, the service use unit uses the token stored in the storage unit in association with the acquired card information to use the cloud service.

3. The image forming apparatus according to claim 1.

4. the authentication process includes a first confirmation process of acquiring user identification information of a legitimate user of the cloud service, the user identification information being associated with the acquired card information and registered on the server; If the first confirmation process is successful, the authentication unit determines that the authentication process is successful. The image forming apparatus according to claim 3 .

5. the authentication process includes the first confirmation process and a second confirmation process for confirming that the acquired card information is stored in the storage unit, When the first confirmation process fails due to an error in communication with the server, the authentication unit determines that the authentication has been successful if the second confirmation process is successful. The image forming apparatus according to claim 4 .

6. If the first verification process is successful and the second verification process is unsuccessful, the acquired card information is stored in the storage unit. The image forming apparatus according to claim 5 .

7. the storage unit stores user identification information in association with the card information; The authentication process includes: the first confirmation process; a second confirmation process for confirming that the acquired card information is stored in the storage unit; a third confirmation process of acquiring user identification information of a legitimate user of the cloud service that is registered on the server in association with the token stored in the storage unit in association with the acquired card information, and confirming that the acquired user identification information matches the user identification information stored in the storage unit in association with the card information; Including, When the first confirmation process fails due to a factor other than an error in communication with the server, if both the second confirmation process and the third confirmation process are successful, the authentication unit determines that the authentication is successful in the authentication process. The image forming apparatus according to claim 4 .

8. If the first confirmation process fails due to a factor other than an error in communication with the server, the second confirmation process is successful, and the third confirmation process is unsuccessful, the information stored in the storage unit in association with the acquired card information is deleted. The image forming apparatus according to claim 7 .

9. The token is valid for a predetermined period of time from the time of issuance of the token, The storage unit further stores issuance time information indicating a time when the token was issued, in association with the token; The image forming apparatus further includes a notification unit that notifies a user corresponding to the token when the remaining validity period of the token identified from the issuance time information is less than a predetermined threshold. The image forming apparatus according to claim 1 .

10. An information processing method for an image forming apparatus connected to a server that provides a cloud service, comprising: storing card information of a card distributed to a legitimate user of the image forming device in association with a token that enables use of the cloud service; acquiring card information of a card held by a target user who is a user who intends to use the cloud service via the image forming device; The token stored in association with the acquired card information is used to use the cloud service. Information processing methods.

11. The computer of the image forming device that connects to the server that provides the cloud service a storage processing step of storing, in a storage unit, card information of a card distributed to a legitimate user of the image forming device and a token that enables use of the cloud service in association with each other; a card information acquisition step of acquiring card information of a card held by a target user who is a user who intends to use the cloud service via the image forming apparatus; a service using step of using the cloud service by using the token stored in the storage unit in association with the acquired card information; A program that executes the following.

Images