Information processing system and program
The information processing system effectively manages and secures user access to rules by distinguishing and restricting unauthorized use, enhancing security and usability in a networked environment with varying authentication authorities.
Patent Information
- Authority / Receiving Office
- JP · JP
- Patent Type
- Applications
- Current Assignee / Owner
- Filing Date
- 2024-08-30
- Publication Date
- 2026-03-12
AI Technical Summary
Existing systems fail to effectively prevent users from executing rules that they are not authorized to use, especially when multiple external processes with varying authentication authorities are involved, leading to potential security breaches and unintentional process failures.
An information processing system that includes processors to receive and distinguish user authentication information, display available rules clearly, and restrict access to unauthorized rules, using a networked architecture to manage and secure authentication and process authorization across multiple devices.
Enhances user selection of authorized rules, improves security by preventing unauthorized rule execution, and ensures seamless processing across multiple devices with varying authentication requirements.
Smart Images
Figure 2026044527000001_ABST
Abstract
Description
[Technical Field]
[0001] The present disclosure relates to an information processing system and a program. [Background technology]
[0002] For example, Patent Document 1 discloses an image processing device that requests multiple information processes for image data based on user operations. The flow management device determines whether authentication information required to perform the requested information processes is missing by inquiring of an authentication management device. If it is determined that authentication information is missing, the flow management device determines the type of image processing device, and if the type of image processing device is a predetermined type, transmits information to a device cooperating with the image processing device that requested the information processes, prompting the acquisition of authentication information. [Prior art documents] [Patent documents]
[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2014-182710 Summary of the Invention [Problem to be solved by the invention]
[0004] The object of the present disclosure is to provide an information processing system and a program that make it difficult for a user to execute rules that the user cannot use, compared to when all rules for pre-defined procedures for using a service are shown to the user regardless of authentication information. [Means for solving the problem]
[0005] The information processing system of the first aspect includes a processor, which receives authentication information of a user and indicates to the user, among the rules that have predetermined procedures for using processing including external processing, rules that are available to the user, in a manner that makes it clear that the rules are available to the user.
[0006] In a second aspect of the information processing system, in the information processing system described in the first aspect, the processor distinguishes between predetermined regulations that the user can use and regulations that the user cannot use, and displays the distinguished results to the user.
[0007] An information processing system of a third aspect is the information processing system according to the second aspect, wherein the processor restricts the user from selecting a rule that cannot be used by the user from among predetermined rules.
[0008] An information processing system of a fourth aspect is an information processing system described in any one of the first to third aspects, wherein the processors include a first processor arranged on a first network and a second processor arranged on the Internet, and the first processor accepts the user's authentication information and transmits the authentication information of the user who uses a transmitting device arranged on the first network and that transmits information to be input into the processing provided on the Internet to the second processor, and the second processor indicates the available regulations to the user based on predetermined regulations and authority information that determines whether the processing can be used, which is stored in a recording unit arranged on the Internet.
[0009] An information processing system of a fifth aspect is the information processing system according to the fourth aspect, wherein the second processor transmits the available regulations to the first processor via the Internet without including the authority information.
[0010] An information processing system of a sixth aspect is an information processing system described in the fourth or fifth aspect, in which the predetermined regulations include multiple external processes, each with different authentication authorities, as the external processes, and the second processor obtains the authority information regarding each of the authentication authorities from the recording unit.
[0011] An information processing system of a seventh aspect is an information processing system according to the sixth aspect, wherein the predetermined rules include a procedure for starting execution of another external process without sending the processing results of the external process to the second processor.
[0012] The program of the eighth aspect causes a processor to accept authentication information of a user and to indicate to the user, among rules that have predetermined procedures for using processing including external processing, rules that are available to the user in a manner that makes it clear that the rules are available to the user. [Effects of the Invention]
[0013] According to the information processing system of the first aspect, it is possible to make it more difficult for the user to execute a rule that the user cannot use, compared to when the rule is presented to the user regardless of the authentication information.
[0014] According to the information processing system of the second aspect, it is easier for the user to select a usable rule, compared to when usable rules and unusable rules are displayed to the user without any relation to each other.
[0015] According to the information processing system of the third aspect, compared to when it is possible to select unavailable regulations, by allowing the user to select unavailable regulations, it is easier to prevent the user from unintentionally selecting unavailable regulations.
[0016] According to the information processing system of the fourth aspect, it is possible to use processing based on a predetermined rule from any of a plurality of transmission devices.
[0017] According to the information processing system of the fifth aspect, the security of the authority information can be improved compared to when the second processor notifies the first processor of available regulations via the Internet, including the authority information.
[0018] According to the information processing system of the sixth aspect, it is easier for a user to use regulations that include multiple external processes compared to when the regulations presented to the user are based on the assumption that all of the multiple external processes are available with the same authentication authority.
[0019] According to the information processing system of the seventh aspect, it is easy to prevent external processes from being executed due to differences in authentication authority between external processes, and to prevent the provision from being completed unintentionally by the user.
[0020] According to the program of the eighth aspect, it is possible to make it more difficult for the user to execute a rule that the user cannot use, compared to when the rule is presented to the user regardless of the authentication information. [Brief explanation of the drawings]
[0021] [Figure 1] 1 is a diagram illustrating a system configuration of an information processing system according to an embodiment. [Figure 2] 1 is a block diagram illustrating a hardware configuration of an image forming apparatus according to an embodiment. [Figure 3] 1 is a block diagram showing the hardware configuration of a digital shadow server according to an embodiment. [Figure 4] FIG. 2 is a block diagram showing a hardware configuration of an information management server according to the embodiment. [Figure 5] 10A and 10B are diagrams showing items included in a rule list and a rule recipe stored in the information management server according to the embodiment. [Figure 6] FIG. 10 is a sequence diagram showing an example of a case where the image forming apparatus according to the embodiment communicates with a digital shadow server and uses a service. [Figure 7]FIG. 10 is a sequence diagram illustrating an example of a procedure in which an image forming apparatus according to an embodiment communicates with a digital shadow server and acquires whether a rule is available. [Figure 8] 10A and 10B are diagrams illustrating how usable and unusable rules are displayed on the input / output unit of the multifunction peripheral according to the embodiment, with the rules being distinguished from each other. DETAILED DESCRIPTION OF THE INVENTION
[0022] An example of an embodiment of the present disclosure will be described below with reference to the drawings. In each drawing, the same or equivalent components and parts are designated by the same reference numerals. Furthermore, the dimensional proportions in the drawings are exaggerated for the sake of explanation and may differ from the actual proportions.
[0023] [First embodiment] <Information Processing System 10> FIG. 1 is a diagram illustrating the system configuration of an information processing system 10 according to an embodiment of the present disclosure. As illustrated in FIG. 1, the information processing system 10 according to an embodiment of the present disclosure is configured such that a plurality of multifunction peripherals 32 are installed at a plurality of locations 30, each of which is connected via the Internet 12. The information processing system 10 also includes an information management server 14, a digital shadow server 22, a translation server 16A, and a summary server 16B, all of which are connected via the Internet 12. In the following description, all of the multifunction peripherals 32 are the same device and will not be distinguished unless otherwise specified. In the following description, the multifunction peripherals 32 may refer to a single device or any one of multiple devices.
[0024] (Translation server 16A and summary server 16B) As shown in Figure 1, the translation server 16A and the summarization server 16B are servers located on the Internet. When the translation server 16A and the summarization server 16B receive information via the Internet as described below, they process the information according to a predetermined procedure to provide services. The translation server 16A and the summarization server 16B each provide a different service. In the following description, when there is no need to distinguish between the translation server 16A and the summarization server 16B, they will be referred to as the "cloud server 16."
[0025] The specific services provided by the cloud server 16 are not particularly limited, but in this embodiment, they are defined as follows as an example: The translation server 16A is a server that, when it receives text data containing a sentence, provides a service of translating the received text into a language different from the language of the received text. The summary server 16B is a server that, when it receives text data, provides a service of summarizing the received text.
[0026] In this embodiment, the cloud server 16 is provided by a different company from the company that provides the multifunction peripheral 32, the information management server 14, the digital shadow server 22, etc. In other words, all of the services provided by the cloud server 16 are services provided by third parties.
[0027] (Multifunction machine 32) The multifunction peripheral 32 is a device known as a multifunction peripheral that has multiple functions such as printing, scanning, copying, and facsimile functions and is connected to one another via a network within the base 30. The network within the base 30 is an example of the "first network" in this embodiment.
[0028] Fig. 2 is a block diagram showing the hardware configuration of the multifunction device 32 in this embodiment. As shown in Fig. 2, the multifunction device 32 includes a control unit 40, an input / output unit 50, an image forming unit 52, an image reading unit 54, a communication unit 56, and an authentication receiving unit 58. These components are connected to each other via an input / output interface (I / O) 45.
[0029] The control unit 40 is a device that controls each part of the multifunction device 32. The control unit 40 has the functions of a computer, and includes a CPU 41 (Central Processing Unit), a RAM 42 (Random Access Memory), and a ROM 43 (Read Only Memory), as shown in Fig. 2. The CPU 41, RAM 42, and ROM 43 are interconnected by a control bus 44.
[0030] The CPU 41 is a central processing unit that executes various programs including a program 46 such as an information synchronization program, and controls various components. In this embodiment, the CPU 41 is an example of a "processor" in the present disclosure. The ROM 43 stores various programs including the program 46 and various data. The RAM 42 serves as a working area and temporarily stores the program 46 or data.
[0031] In the control unit 40, the CPU 41 reads various programs including the program 46 from the ROM 43 and executes the program 46 using the RAM 42 as a work area. By executing the program 46, the CPU 41 realizes various functions for controlling each part of the multifunction device 32.
[0032] The input / output unit 50 is a device that receives instructions from the person using the multifunction device 32 and notifies the CPU 41 of the control unit 40 of the received instructions. The input / output unit 50 is also a device that presents information to the person using the multifunction device 32 in accordance with instructions from the CPU 41. The input / output unit 50 may be, for example, a device that receives input and displays information, such as a touch panel.
[0033] The image forming unit 52 is a component that forms an image on a recording medium such as paper. The image forming unit 52 forms an image on the recording medium by, for example, an electrophotographic method that performs the steps of charging, exposing, developing, transferring, and fixing. Note that the image forming unit 52 may also form an image on the recording medium by another method such as an inkjet method.
[0034] The image reading unit 54 is a component (e.g., a scanner) that reads an image of a document. The image reading unit 54 optically reads the image of the document and converts it into a digital signal to generate image data. In this description, as an example, it is assumed that the document includes text.
[0035] The communication unit 56 is a component for communicating with other devices such as the digital shadow server 22. Specifically, the communication unit 56 communicates with other devices using communication means such as wired, wireless, the Internet 12, an intranet, or public lines such as telephone lines. Note that the communication means may also be communication means using sound, light, vibration, images, etc.
[0036] The authentication reception unit 58 is a component that receives authentication information of a user who uses the multifunction device 32. The authentication reception unit 58 may have any configuration as long as it is capable of identifying a user who uses the multifunction device 32. As an example, the authentication reception unit 58 reads information from an ID card or the like held by the user, and identifies the individual user by reading the information contained in the ID card.
[0037] In this embodiment, when an inquiry is made from the multifunction device 32 to the digital shadow server 22 via the communication unit 56, the communication unit 56 receives a communication from the digital shadow server 22 as a response to the inquiry.
[0038] In the multifunction device 32, for example, the image reading unit 54 reads an image of an original document and generates image data, thereby performing a scan process using the scan function. In addition, in the multifunction device 32, for example, the image data generated by reading an image of an original document with the image reading unit 54 is transmitted to another device, such as another multifunction device, thereby performing a facsimile process using the facsimile function. In other words, the multifunction device 32 having a scan function is an example of a "transmitting device" in this embodiment.
[0039] (Digital Shadow Server 22) 4, the digital shadow server 22 includes a control unit 60, a communication unit 76, and a recording device 70. The specific functions of the communication unit 76 of the digital shadow server 22 are the same as those of the communication unit 56 of the multifunction device 32, except for the performance (processing capacity).
[0040] The control unit 60 also has computer functions, and includes, for example, a CPU 61, a ROM 63, and a RAM 62. These components and the recording device 70 are interconnected by a control bus 64. The digital shadow server 22 executes the procedure described below by having the CPU 61 read a program 66 recorded in the ROM 63.
[0041] The control unit 60 is a device that controls each part of the digital shadow server 22, and includes a CPU 61, a ROM 63, and a RAM 62. These components and the recording device 70 are interconnected by a control bus 64. The ROM 63 of the digital shadow server 22 includes a program 66. The digital shadow server 22 executes the procedure described below by having the CPU 61 read the program 66 recorded in the ROM 63. In this embodiment, the CPU 61 of the digital shadow server 22 is an example of a "processor" in this disclosure.
[0042] 1, the digital shadow server 22 stores data on the multifunction peripheral 32 as a physical device connected via the Internet 12 and the corresponding digital shadow 32S as a virtual device. The digital shadow server 22 executes the behavior of the digital shadow 32S by having the CPU execute the stored program. In the description of this embodiment, although not shown or distinguished, it is assumed that a digital shadow 32S is formed for each multifunction peripheral 32.
[0043] (Digital Shadow 32S) The digital shadow 32S is a virtual device that holds the setting information of the multifunction device 32 and reflects its status (for example, the number of printed sheets, the operating time, etc.), and is created based on the status of the multifunction device 32 recorded as data in the ROM 43. For example, when the digital shadow 32S receives an inquiry from the information management server 14, it notifies the information management server 14 of the status of the multifunction device 32 by replying with information about the model and functions of the multifunction device 32 and information about its status that the digital shadow 32S holds.
[0044] (Information Management Server 14) As shown in Fig. 4, the information management server 14 according to this embodiment includes a control unit 80, a communication unit 98, and a recording device 90. The specific functions of the communication unit 98 of the information management server 14 are the same as those of the communication unit 56 of the multifunction peripheral 32, except for performance (processing capacity). In this embodiment, the information management server 14 communicates with the digital shadow server 22.
[0045] The control unit 80 is a device that controls each part of the information management server 14, and has a CPU 81, a ROM 83, and a RAM 82. These components and the recording device 90 are connected to each other by a control bus 84. The ROM 83 of the information management server 14 has a program 86. The information management server 14 executes the procedure described below by having the CPU 81 read the program 86 recorded in the ROM 83. In this embodiment, the CPU 81 of the information management server 14 is another example of a "processor" in the present disclosure.
[0046] Furthermore, as shown in FIG. 4, the recording device 90 stores authority information 91, a rule list 92, and a rule recipe 93.
[0047] The authority information 91 is data that records the authority information of a user who uses the multifunction device 32. When the information management server 14 receives authentication information of a user who uses the multifunction device 32 from the digital shadow server 22, it transmits information related to the authority of the user associated with the user to the digital shadow server 22.
[0048] 5, the rule list 92 is data that associates rule names with multiple rule recipes 93. The rule recipes 93 are data that define the procedures for processing image data that a user reads using the multifunction device 32.
[0049] More specifically, for example, when a user who has created scan data using the multifunction device 32 uses a service based on "Rule B" shown in FIG. 5, the scan data is processed according to the procedure shown in rule recipe 93. That is, the scan data is processed based on the "α storage" service. Next, it is processed based on the "OCR" service. Next, it is processed based on the "high-quality translation" service. Next, it is processed based on the "text summarization" service. Next, it is processed based on the "β storage" service.
[0050] In this embodiment, the "OCR" service is provided by the digital shadow server 2, the "high-quality translation" service is provided by the translation server 16A, and the "text summarization" service is provided by the summarization server 16B. Therefore, in this embodiment, when a user uses a service specified in a rule, the communication shown in FIG. 6 takes place. The "high-quality translation" service and the "text summarization" service are examples of "external processing" in this embodiment. The "account" shown in FIG. 5 is different when using the "high-quality translation" service and when using the "text summarization" service.
[0051] The rules included in the rule list 92 are set arbitrarily by the administrator of the multifunction device 32. The authority required to use the services required in the rule recipe 93 is investigated in advance, for example, by the administrator of the multifunction device 32. The rule list 92 and rule recipe 93 including these rules are registered in advance in the information management server 14.
[0052] 1, the information processing system 10 is provided with a plurality of multifunction peripherals 32. Each of these multifunction peripherals 32 is capable of using the same rules. For example, if a user selects the same rule name in any of the multifunction peripherals 32, the user can use the service in the same procedure.
[0053] More specifically, as shown in FIG. 6, when a user reads an original using the multifunction device 32, the multifunction device first transmits image data and authentication information of the user to the digital shadow server 22 (S102).
[0054] The digital shadow server 22 then records the received image data as an "α storage" service (S104). Furthermore, as an "OCR" service, the digital shadow server 22 reads the character images contained in the received image data and converts them into character data (S104). The digital shadow server 22 also obtains authority information based on the user's authentication information from the information management server 14 (S104).
[0055] The digital shadow server 22 then combines the read character data (original data) with the authority information and transmits the combined data to the translation server 16A (S106).
[0056] The translation server 16A translates the original data based on the received original data and authority information to create translated data as a "high quality translation" service (S108).
[0057] Furthermore, the translation server 16A further transmits the created translation data to the summary server 16B (S110).
[0058] The summary server 16B provides a "text summarization" service by creating translation summary data that summarizes the text included in the translation data based on the created translation data and authority information (S112).
[0059] Furthermore, the summary server 16B transmits the created translation summary data to the translation server 16A (S114).
[0060] The translation server 16A also transmits the translation summary data to the digital shadow server 22 (S116).
[0061] The digital shadow server 22 records the received translation summary data as a "β storage" service (S118).
[0062] (When a rule becomes unavailable) However, the above procedure is not guaranteed to be successful. The reason for this is that the translation server 16A and the summary server 16B are services provided by third parties, and the authorization information provided by the digital shadow server 22 may not be sufficient to provide the authorization required to use these services. In other words, the above procedure is for cases where the translation server 16A and the summary server 16B have successfully authenticated the authorization information combined with the user's authentication information (in the case of [Authentication Success]).
[0063] Figure 6 shows what happens when authentication fails. As shown in Figure 6, in this embodiment, if the summary server 16B determines that the authority information received from the translation server 16A is insufficient (in the case of [Authentication Failed]), it does nothing. In other words, if the authority is insufficient, the digital shadow server 22 cannot obtain the translation summary data. In other words, "Rule B" shown in Figure 5 is a service that cannot be used by the user because it fails midway.
[0064] In this description, "available" refers to the completion of the specified procedure to the end, as shown in Figure 5, etc. In other words, "unavailable" refers to the inability to complete the specified procedure to the end, as shown in Figure 6, etc.
[0065] Here, when the control unit 40 of the multifunction device 32 in this embodiment reads the program 46, it executes the procedure shown in Fig. 7. Furthermore, the CPU 61 of the digital shadow server 22 executes the procedure shown in Fig. 7 based on the program 66. Furthermore, the CPU 81 of the information management server 14 executes the procedure shown in Fig. 7 based on the program 86.
[0066] (Procedure for showing users whether rules are available or not) The CPU 41 receives authentication of the user (S202). More specifically, the CPU 41 acquires, from the authentication reception unit 58, authentication information of the user who uses the multifunction peripheral 32.
[0067] Next, the CPU 41 transmits the authentication information to the digital shadow server 22 (S204). More specifically, the CPU 41 transmits the received authentication information to the digital shadow server 22.
[0068] Next, the CPU 61 of the digital shadow server 22 requests the rule list 92 from the information management server 14 (S206). The CPU 61 also requests a list of rule recipes 93 from the information management server 14 (S206). More specifically, as shown in FIG. 5, the CPU 61 requests the rule list 92 and the list of rule recipes 93 recorded in the information management server 14.
[0069] Next, the CPU 81 of the information management server 14 returns the rule list 92 and the list of rule recipes 93 to the digital shadow server 22 (S208).
[0070] Next, the CPU 61 of the digital shadow server 22 requests the authority information from the information management server 14 (S210). More specifically, the CPU 61 requests the authority information combined with the user authentication information received from the multifunction device 32 from the information management server 14.
[0071] Next, the CPU 81 of the information management server 14 returns the authorization information combined with the authentication information to the digital shadow server 22 (S212).
[0072] Next, the CPU 61 of the digital shadow server 22 compares the rules recorded in the rule list 92 with the authority information (S214). More specifically, the CPU 61 compares the authority items required for using the service, which are set in the corresponding rule recipe 93 for each rule recorded in the rule list 92, based on the authority information to see if they satisfy the conditions. Note that in the description of this embodiment, it is assumed that the user does not have the authority to use the "Text Summary" service. Also, in the description of this embodiment, it is assumed that the user has the authority to use other services.
[0073] Next, the CPU 61 transmits the result of comparing the rules recorded in the rule list 92 with the authority information to the multifunction device 32 (S216). The result of comparing the rules with the authority information is an example of the "determination result" in this embodiment.
[0074] Next, the CPU 41 of the multifunction device 32 displays the acquired collation result and the rules included in the rule list 92 on the input / output unit 50 (S218). More specifically, as shown in Fig. 8, the rules included in the rule list 92 are displayed with a distinction between rules that can be used based on the authentication information and rules that cannot be used.
[0075] In Fig. 8, "Rule A" and "Rule C" are shown as icons 94A indicating that they are available rules. As shown in Fig. 8, "Rule A" and "Rule C" allow the user to execute the procedure of a service based on the rule by performing an input operation on the input / output unit 50. In other words, displaying icon 94A is an example of "indicating to the user in a manner that allows the user to recognize that the rule is available to the user" in this embodiment.
[0076] 8, "rule B" and "rule D" are shown as icons 94B indicating that they are unavailable rules. As shown in FIG. 8, "rule B" and "rule D" are displayed on the input / output unit 50, but are displayed in a different manner (specifically, shaded) from the icon 94A.
[0077] When the user starts execution of a process based on "rule A" or "rule C," the user selects the icon 94A of the rule and then instructs the start of execution. More specifically, after selecting the icon 94A of the rule, the user performs an input operation on the execution start icon 98 to start execution of the rule. Here, "select" refers to the user performing an input operation on the icon 94A displayed on the input / output unit 50 and instructing the user to select the icon 94A. Similarly, "execute" refers to instructing the CPU 41 to start processing that executes the procedure according to the rule combined with the selected icon 94A or icon 94B.
[0078] Furthermore, the user is prohibited from performing an input operation on icon 94B, and therefore the user cannot start the execution of the service procedures based on "rule B" and "rule D."
[0079] In the information processing system 10 of this embodiment, the CPU 41, CPU 61, and CPU 81 execute the above-described procedures based on the respective programs 46, 66, and 86. Here, the above-described rules are an example of "predetermined procedures for using processes including external processes" in this embodiment. Also, the above-described CPU 61 accepting the user's authentication information and accepting the authority information combined with the authentication information are an example of "accepting the user's authentication information" in this embodiment.
[0080] Next, the actions and effects of the digital shadow server 22, the information management server 14, and the multifunction device 32 in this embodiment operating in the above-described procedure will be described.
[0081] (Action and effect) In the information processing system 10 according to this embodiment, the CPU 61 executes the process of accepting authentication information of a user. The CPU 41 also executes the process of displaying an icon 94A for a rule that is available to the user among recipes included in the rule list 92. Therefore, the information processing system 10 according to this embodiment makes it less likely for the user to execute a rule that the user cannot use, compared to when all rules included in the rule list 92 are presented to the user regardless of the user's authentication information. In other words, the information processing system 10 according to this embodiment makes it easier to prevent the user from selecting an unavailable rule and unintentionally failing to complete the steps of a rule, compared to when all rules are presented to the user regardless of authentication information.
[0082] Furthermore, in the information processing system 10 according to this embodiment, the CPU 41 distinguishes between rules that the user can use and rules that the user cannot use among the predetermined rules. The distinguished results are then displayed to the user as icons 94A and 94B. Therefore, according to the information processing system 10 according to this embodiment, it is easier for the user to select a rule that the user can use, compared to when usable rules and unusable rules are displayed to the user independently.
[0083] Furthermore, in the information processing system 10 according to this aspect, the CPU 41 restricts the user from selecting a rule that the user cannot use from among the predetermined rules. Therefore, in the information processing system 10 according to this aspect, the user can select an unavailable rule, which makes it easier to prevent the user from unintentionally selecting an unavailable rule, compared to when the selection of an unavailable rule is allowed.
[0084] The information processing system 10 according to this embodiment includes a processor, a CPU 41 located on the network within the base 30, and CPUs 61 and 81 located on the Internet. The CPU 41 receives user authentication information, acquires the authentication information of the user using a transmitting device located on the network within the base 30 that transmits information to be input into a process provided on the Internet, and transmits the acquired information to the digital shadow server 22. The CPU 61 indicates available rules to the user, and acquires, from a storage unit located on the Internet, authorization information that determines whether or not the predetermined rules and processes can be used. Therefore, the information processing system 10 according to this embodiment allows a process based on the predetermined rules to be used from any of a plurality of transmitting devices.
[0085] Furthermore, in the information processing system 10 according to this embodiment, the CPU 61 indicates available rules to the user based on the authority information. Therefore, according to the information processing system 10 according to this embodiment, the security of the authority information can be improved compared to when the CPU 61 notifies the control unit 40 of available rules via the Internet, including the authority information.
[0086] Furthermore, in the information processing system 10 according to this embodiment, the predetermined rule includes, as external processes, a plurality of external processes each having a different authentication authority. Furthermore, the CPU 41 acquires authority information relating to each authentication authority from the information management server 14. Therefore, according to the information processing system 10 according to this embodiment, it is easier for a user to use a rule including a plurality of external processes, compared to a case where a rule presented to a user is based on the premise that the plurality of external processes are all available with the same authentication authority.
[0087] Furthermore, according to the information processing system 10 of this embodiment, it is easy to prevent a rule from being completed unintentionally by the user due to different authentication authorities between external processes preventing other external processes from being executed.
[0088] The program 46 according to this embodiment also causes the CPU 41 to receive user authentication information. The program 46 also causes the CPU 41 to display, as an icon 94A, rules available to the user that are presented to the user, among rules for which a rule procedure using a process including an external process is predetermined. Therefore, the program 46 according to this embodiment makes it more difficult for the user to execute a rule that the user cannot use, compared to when rules are presented to the user regardless of authentication information. In other words, the program 46 according to this embodiment makes it easier to prevent the user from selecting an unavailable rule and unintentionally failing to complete a rule procedure, compared to when all rules are presented to the user regardless of authentication information.
[0089] (Variation) In the above description, the CPU 41 displayed the icon 94B for a rule that the user cannot use. The procedure performed by the program 46 in this embodiment is not limited to this. For example, the program 46 may be configured so that the CPU 41 does not display the icon 94B on the input / output unit 50. Even in this case, the user can select only the icon 94A, which is a rule that the user can use.
[0090] In the above description, the CPU 41 prohibited the user from selecting the icon 94B, which is an unavailable rule for the user. The procedure performed by the program 46 in this embodiment is not limited to this. For example, the program 46 may also allow the user to select and execute the icon 94B. In this case, the user can recognize that the rule is unavailable before selecting to execute the rule. Therefore, the user can either try to use a different rule or execute the rule after recognizing that it is unavailable.
[0091] In the above description, the CPU 41 displayed the icon 94B representing a rule unavailable to the user and the icon 94A representing a rule available to the user in different ways. The procedure of the program 46 in this embodiment is not limited to this. For example, the program may display available rules and unavailable rules in the same way and issue a warning about the unavailable rule after the user selects it. In this case, the user can recognize that the rule is unavailable before starting to execute the rule. Therefore, the user can either try to use a different rule or execute the rule after recognizing that it is unavailable.
[0092] In the above description, the information management server 14 and the digital shadow server 22 are different servers. However, the configuration of this embodiment is not limited to this, and the information management server 14 and the digital shadow server 22 may be the same server. In other words, among the steps in Fig. 7, the steps from the step of requesting the list of the rule list 92 and the rule recipe 93 (S206) to the step of transmitting the determination result to the multifunction device 32 (S216) may be executed by a single server.
[0093] In the above embodiment, the term "processor" refers to a processor in a broad sense, and includes general-purpose processors (e.g., the aforementioned CPU41, CPU61, and CPU81) and dedicated processors (e.g., GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic device, etc.).
[0094] Furthermore, the operations of the processors in the above embodiments may not only be performed by a single processor, but may also be performed by multiple processors located at physically separate locations working together. Furthermore, the order of the operations of the processors is not limited to the order described in the above embodiments, and may be changed as appropriate.
[0095] In the above embodiments, the processes executed by CPU 41, CPU 61, and CPU 81 after loading software (program 46, program 66, and program 86) may be executed by various processors other than CPUs. Examples of such processors include programmable logic devices (PLDs) whose circuit configuration can be changed after fabrication, such as field-programmable gate arrays (FPGAs), and dedicated electrical circuits, such as application-specific integrated circuits (ASICs), which are processors with circuit configurations specifically designed to execute specific processes. Furthermore, the processes may be executed by one of these various processors, or by a combination of two or more processors of the same or different types (e.g., multiple FPGAs, or a combination of a CPU and an FPGA). Furthermore, the hardware structure of these various processors is, more specifically, an electrical circuit that combines circuit elements such as semiconductor devices.
[0096] In addition, in each of the above embodiments, the processing program is described as being pre-stored (installed) in storage, but this is not limiting. The program may be provided in a form stored in a non-transitory storage medium such as a CD-ROM (Compact Disk Read Only Memory), a DVD-ROM (Digital Versatile Disk Read Only Memory), or a USB (Universal Serial Bus) memory. The program may also be downloaded from an external device via a network.
[0097] The above describes an embodiment of the present disclosure with reference to the accompanying drawings. However, it is clear that a person with ordinary knowledge in the field of technology to which the present disclosure pertains can conceive of various modifications or applications within the scope of the technical ideas set forth in the claims, and it is understood that these also naturally fall within the technical scope of the present disclosure.
[0098] Further preferred aspects of the present disclosure will be described below.
[0099] (((1))) a processor; The processor accepts user authentication information; Among the rules in which procedures for using processes including external processes are predetermined, rules that are available to the user based on the authentication information of the user that is shown to the user are shown to the user in a manner that makes it clear that the rules are available to the user; An information processing system that executes the above.
[0100] (((2))) the processor distinguishes between rules available to the user and rules unavailable to the user from among the predetermined rules, and displays the distinguished result to the user; (((1)))'s information processing system.
[0101] (((3))) The processor restricts the user's selection of a predetermined rule that is unavailable to the user. (((2)))'s information processing system.
[0102] (((4))) the processors include a first processor located on a first network and a second processor located on the Internet; The first processor receives the authentication information of the user and transmits the authentication information of the user to the second processor using a transmitting device that is disposed on a first network and transmits information to be input into the process provided on the Internet; The second processor, upon presenting the available rules to the user, transmits a determination result to the first processor based on predetermined rules and authority information determining whether or not the process can be used, from a recording unit located on the Internet. An information processing system according to any one of (((1))) to (((3))).
[0103] (((5))) the second processor transmits the determination result to the first processor via the Internet without including the authority information; (((4)))'s information processing system.
[0104] (((6))) the predetermined rule includes, as the external process, a plurality of external processes each having a different authentication authority; the second processor acquires the authority information relating to each of the authentication authorities from the recording unit; An information processing system according to any one of (((1))) to (((5))).
[0105] (((7))) the predetermined rule includes a procedure for starting execution of another external process without transmitting a processing result of the external process to the processor; (((6)))'s information processing system.
[0106] (((8))) accepting user authentication information; Indicating to the user, among the rules in which procedures for using processes including external processes are predetermined, rules that are available to the user based on the authentication information of the user, in a manner that makes it clear that the rules are available to the user; A program that causes a processor to execute the following.
[0107] According to the information processing system of (((1))), it is possible to make it more difficult for the user to execute a rule that the user cannot use, compared to when the rule is presented to the user regardless of the authentication information. According to the information processing system of (((2))), it is easier for the user to select a usable provision than when usable provisions and unusable provisions are displayed to the user independently. According to the information processing system of (((3))), by allowing the user to select unavailable regulations, it is easier to prevent the user from unintentionally selecting unavailable regulations, compared to when unavailable regulations are allowed to be selected. According to the information processing system of (((4))), it is possible to use processing based on a predetermined rule from any of a plurality of transmitting devices. According to the information processing system of (((5))), the security of the authorization information can be improved compared to when the second processor notifies the first processor of available regulations via the Internet, including the authorization information. According to the information processing system of (((6))), it is easier for a user to use regulations that include multiple external processes, compared to when it is assumed that multiple external processes are all available with the same authentication authority for the regulations presented to the user. According to the information processing system of (((7))), it is easy to prevent external processes from being executed due to differences in authentication authority between external processes, and to prevent regulations from not being completed unintentionally by the user. According to the program of (((8))), it is possible to make it more difficult for the user to execute a rule that the user cannot use, compared to when the rule is presented to the user regardless of the authentication information. [Explanation of symbols]
[0108] 10 Information Processing Systems 12. Internet 14 Information management server (example of a server) 16 Cloud Server 22 Digital Shadow Providing Server (Example of a Server) 30 locations 32 Multifunction device (example of transmitting device) 32S Digital Shadow 40 Control Unit 41 CPU (an example of a processor, an example of a first processor) 42 RAM 43 ROM 44 control bus 45 Input / Output Interface 46 Program (Example of a program) 50 Input / output section 52 Image forming unit 54 Image reading unit 56 Communications Department 58 Authentication Reception Department 60 Control Unit 61 CPU (an example of a processor and an example of a second processor) 62 RAM 63 ROM 64 control bus 65 Input / Output Interface 66 Program (Example of a program) 70 Recording Device 76 Communications Department 80 Control Unit 81 CPU (an example of a processor and an example of a second processor) 82 RAM 83 ROM 84 control bus 85 Input / Output Interface 86 Program (Example of a program) 90 Recording device (an example of a recording unit) 91 Permission Information 92 Rules List 93 Rule Recipe 94A Icons showing available rules 94B Unavailable rule icon 96 Communications Department 98 Run button
Claims
1. a processor; The processor accepts user authentication information; Among the rules in which procedures for using processes including external processes are predetermined, rules that are available to the user based on the authentication information of the user that is shown to the user are shown to the user in a manner that makes it clear that the rules are available to the user; An information processing system that executes the above.
2. the processor distinguishes between rules available to the user and rules unavailable to the user from among the predetermined rules, and displays the distinguished result to the user; The information processing system according to claim 1 .
3. The processor restricts the user's selection of a predetermined rule that is unavailable to the user. The information processing system according to claim 2 .
4. the processors include a first processor located on a first network and a second processor located on the Internet; The first processor receives the authentication information of the user and transmits the authentication information of the user to the second processor using a transmitting device that is disposed on a first network and transmits information to be input into the process provided on the Internet; The second processor, upon presenting the available rules to the user, transmits a determination result to the first processor based on predetermined rules and authority information determining whether or not the process can be used, from a recording unit located on the Internet. The information processing system according to any one of claims 1 to 3.
5. the second processor transmits the determination result to the first processor via the Internet without including the authority information; The information processing system according to claim 4 .
6. the predetermined rule includes, as the external process, a plurality of external processes each having a different authentication authority; the second processor acquires the authority information relating to each of the authentication authorities from the recording unit; 6. The information processing system according to claim 4 or claim 5.
7. the predetermined rule includes a procedure for starting execution of another external process without transmitting a processing result of the external process to the second processor; The information processing system according to claim 6 .
8. accepting user authentication information; Indicating to the user, among the rules in which procedures for using processes including external processes are predetermined, rules that are available to the user based on the authentication information of the user, in a manner that makes it clear that the rules are available to the user; A program that causes a processor to execute the following.
Citation Information
Patent Citations
Information processing apparatus, communication system and program
JP2014182710A