Image forming apparatus, control method, and program

Abstract

This approach reduces security risks while mitigating the loss of convenience caused by the discarding of jobs that lack authentication credentials. [Solution] The image forming apparatus 1 performs user authentication based on authentication information attached to the print job, and if user authentication is successful, it permits print output based on the print job. If authentication information is not attached to the print job, the image forming apparatus 1 obtains device information indicating the source of the print job and identifies the user who sent the print job based on the device information. The image forming apparatus 1 saves the print job as a pending job for the sending user, and if user authentication for the sending user is successful, it releases the pending status of the pending job and starts print output.

Description

Technical Field

[0001] The present invention relates to an image forming apparatus, a control method, and a program.

Background Art

[0002] Conventionally, an apparatus has been proposed that replaces a guest user's job with a registered user's job and executes it (for example, Patent Document 1). When this conventional apparatus receives a job without attached authentication information, it identifies a user based on device information indicating the job's transmission source. If it can identify the user, the conventional apparatus executes the received job as the job of the identified user.

[0003] However, when the above conventional technology can identify a user, it executes a job without performing user authentication. Therefore, there is a possibility that a job may be executed illegally due to forgery of device information or the like in the conventional apparatus, and there is a security risk.

[0004] An image forming apparatus such as an MFP (Multifunction Peripheral) can enable an authentication setting for a received print job for security improvement. When the authentication setting is valid, the image forming apparatus performs user authentication based on the authentication information attached to the received print job and permits printing when the user authentication is successful. As one method of adding authentication information to a print job, for example, there is a method of registering authentication information in a printer driver installed on a PC and automatically adding the authentication information when the printer driver transmits a print job to the image forming apparatus.

[0005] However, when the authentication setting in the image forming apparatus is changed from disabled to enabled, or when the user's PC is replaced, the user may forget to register the authentication information in the printer driver and send a print job. In this case, the print job sent to the image forming apparatus will not have the authentication information attached. If the authentication setting is enabled, the image forming apparatus will discard the received print job if it does not have the authentication information attached.

[0006] However, the user may not realize that the print job has been discarded by the image forming machine and will move to the machine's location to retrieve the printout. Only then will the user realize that the print job has been discarded by the image forming machine. In this case, the user must return to their PC's location and resubmit the same print job with authentication information added, which is inefficient.

[0007] On the other hand, if, as with the conventional technology described above, a user is identified based on device information attached to the print job and the job is executed as the job of the identified user, there is a possibility that the job may be executed illegally, which poses a security problem. [Prior art documents] [Patent Documents]

[0008] [Patent Document 1] Japanese Patent Publication No. 2022-45658 [Overview of the Initiative] [Problems that the invention aims to solve]

[0009] This invention was made to solve the above problems. Specifically, the present invention aims to provide an image forming apparatus, a control method, and a program that can reduce security risks while suppressing the decrease in convenience caused by the discarding of jobs that do not have authentication information attached. [Means for solving the problem]

[0010] To achieve the above objective, the invention according to claim 1 is an image forming apparatus that performs user authentication based on authentication information attached to a print job and permits print output based on the print job when the user authentication is successful, and is characterized by comprising: an acquisition unit that acquires device information indicating the source of the print job when authentication information is not attached to the print job; a user identification unit that identifies the user who sent the print job based on the device information; a job storage unit that stores the print job as a pending job for the sending user; and a job control unit that releases the pending state of the pending job and starts print output when the user authentication of the sending user is successful.

[0011] The invention according to claim 2 is an image forming apparatus according to claim 1, further comprising a setting unit for setting whether to allow or prohibit print output by a guest user, wherein the acquisition unit acquires the device information when print output by a guest user is prohibited by the setting unit.

[0012] The invention according to claim 3 is an image forming apparatus according to claim 1, further comprising a storage unit that stores user information in which the device information is registered for each user, wherein the user identification unit identifies the transmitting user by referring to the user information.

[0013] The invention according to claim 4 is an image forming apparatus according to claim 3, wherein the user information further includes authentication information for each user, and the job control unit releases the pending state of the pending job when it successfully authenticates the sending user based on the authentication information registered in the user information.

[0014] The invention according to claim 5 is an image forming apparatus according to claim 3, wherein the user identification unit, when the device information is not registered in the user information, queries an external source for the user of the device information and identifies the transmitting user based on the response from the external source.

[0015] The invention according to claim 6 is an image forming apparatus according to claim 5, characterized in that when the user identification unit receives a response from an external source regarding the user of the device information, it registers the device information in the user information.

[0016] The invention according to claim 7 is an image forming apparatus according to claim 5, characterized in that the user identification unit discards the print job when it is unable to obtain a response from an external source regarding the user of the device information.

[0017] The invention according to claim 8 is an image forming apparatus according to claim 1, characterized in that the device information includes any of the following: an IP address, a MAC address, or a computer name.

[0018] The invention according to claim 9 is a control method for an image forming apparatus that performs user authentication based on authentication information attached to a print job, and permits print output based on the print job if the user authentication is successful, characterized in that, if authentication information is not attached to the print job, device information indicating the source of the print job is obtained, the user who sent the print job is identified based on the device information, the print job is saved as a pending job for the sending user, and the pending state of the pending job is released and print output is started when the user authentication of the sending user is successful.

[0019] The invention according to claim 10 is a program executed in an image forming apparatus that performs user authentication based on authentication information added to a print job and permits print output based on the print job when the user authentication is successful. The image forming apparatus is caused to execute steps of: when authentication information is not added to a print job, acquiring device information indicating a transmission source of the print job; specifying a transmission user of the print job based on the device information; saving the print job as a held job of the transmission user; and when user authentication of the transmission user is successful, releasing the held state of the held job and starting print output. The configuration is characterized by these steps.

Effects of the Invention

[0020] According to the present invention, it is possible to suppress a decrease in convenience due to a job without added authentication information being discarded while reducing security risks.

Brief Description of the Drawings

[0021] [Figure 1] The figure shows a configuration example of a network system including an image forming apparatus. [Figure 2] The figure shows a hardware configuration example of an image forming apparatus. [Figure 3] The figure shows an example of user information. [Figure 4] The figure shows an example of a print job received by an image forming apparatus from an information processing apparatus when authentication settings are valid. [Figure 5] The figure is a block diagram showing a functional configuration of a control unit in an image forming apparatus. [Figure 6] The figure shows an example of setting items set by a setting unit and their setting values. [Figure 7] The figure is a flowchart showing an example of a processing procedure performed in an image forming apparatus. [Figure 8] The figure is a flowchart showing an example of a detailed processing procedure of held job saving processing. [Figure 9] This flowchart shows the processing procedure when an image forming apparatus is saving pending jobs. [Modes for carrying out the invention]

[0022] Preferred embodiments of the present invention will be described in detail below with reference to the drawings. In the embodiments described below, elements common to all are denoted by the same reference numerals, and redundant explanations of these elements will be omitted.

[0023] (Embodiment) Figure 1 shows an example configuration of a network system including an image forming apparatus 1, which is one embodiment of the present invention. This network system is a system that is built, for example, in an office environment. The network system has a configuration in which the image forming apparatus 1 and an information processing apparatus 2 are connected to a network 3 such as a local area network (LAN). Figure 1 shows an example in which one information processing apparatus 2 is connected to the network 3. However, multiple information processing apparatuses 2 may be connected to the network 3. Furthermore, the network system may also have a configuration that includes a server device 4 connected to the network 3.

[0024] The image forming apparatus 1 is composed of, for example, an MPF ​​(Multi-Purpose Printer) and has scanning and printing functions. The image forming apparatus 1 receives print jobs transmitted from the information processing device 2 via the network 3. Upon receiving a print job, the image forming apparatus 1 forms an image on a sheet such as printing paper based on the image data contained in the print job and outputs it.

[0025] The information processing device 2 is comprised of, for example, a personal computer (PC). The information processing device 2 is used by a user working in an office. The information processing device 2 has a printer driver installed that generates print jobs to be sent to the image forming apparatus 1. The information processing device 2 sends print jobs to the image forming apparatus 1 by activating the printer driver based on user input.

[0026] Image forming apparatus 1 can enable authentication settings for incoming print jobs to enhance security. When authentication settings are enabled, the image forming apparatus performs user authentication based on the authentication information attached to the incoming print job and executes print output only if user authentication is successful. For example, a user can register authentication information in advance in the printer driver of information processing device 2. If the user's authentication information is registered, the printer driver automatically attaches the authentication information to the print job when generating a print job to send to image forming apparatus 1. Therefore, when authentication settings are enabled in image forming apparatus 1, the user does not need to manually set authentication information for each print job each time they send a print job, as they can do so by registering their authentication information in the printer driver.

[0027] Furthermore, if authentication settings are disabled, the image forming apparatus 1, upon receiving a print job, will execute print output based on the received print job, regardless of whether authentication information is attached to the print job. In this case, the user does not need to register their authentication information with the printer driver.

[0028] Furthermore, if authentication settings are enabled, the image forming apparatus 1 can be configured to allow or disallow print output by guest users. A guest user is a user not registered with the image forming apparatus 1. If print output by guest users is permitted, the image forming apparatus 1 will execute any print job that does not have authentication information attached as a print job for the guest user. When the image forming apparatus 1 executes a print job for a guest user, it implements functional restrictions during print output. For example, even if color printing is specified in the print job, the image forming apparatus 1 will restrict the color printing function and execute monochrome printing.

[0029] If guest users are prohibited from printing, the image forming apparatus 1, upon receiving a print job without authentication information, saves the print job as a pending job under predetermined conditions. If user authentication for the pending job is successful, the image forming apparatus 1 reads the pending job and executes the print output.

[0030] Server device 4 is set up as an authentication server and performs user authentication when it receives an authentication request from an external source via network 3. When the image forming apparatus 1 performs user authentication, it may send an authentication request to server device 4 via network 3 and receive the authentication result from server device 4. However, the image forming apparatus 1 is not limited to this configuration and may perform all user authentication processing on its own without using server device 4.

[0031] Figure 2 shows an example of the hardware configuration of the image forming apparatus 1. The image forming apparatus 1 comprises a control unit 10, a storage unit 13, an operation panel 14, a scanner unit 17, a printer unit 18, and a network interface 19, and these units are interconnected via a bus 20.

[0032] The control unit 10 provides overall control over the operation of the image forming apparatus 1. The control unit 10 includes a hardware processor 11 and a memory 12. The hardware processor 11 reads and executes the program 21 stored in the storage unit 13. The memory 12 stores temporary data and other information generated by the hardware processor 11 executing the program 21.

[0033] The storage unit 13 is a non-volatile storage device consisting of a hard disk drive (HDD) or a solid-state drive (SSD), etc. The storage unit 13 stores the program 21 executed by the hardware processor 11. The storage unit 13 also stores user information 22. User information 22 is pre-registered information concerning users authorized to use the image forming apparatus 1. The storage unit 13 is also provided with a pending job storage unit 23. The pending job storage unit 23 is a storage area for storing pending jobs 24.

[0034] The control panel 14 is the user interface for when a user operates the image forming apparatus 1. The control panel 14 comprises a display unit 15 and an operation unit 16. The display unit 15 is composed of, for example, a color liquid crystal display. The display unit 15 displays various operation screens for accepting user operations. The operation unit 16 is composed of, for example, touchscreen keys arranged on the screen of the display unit 15. The operation unit 16 accepts user operations on the various operation screens displayed on the display unit 15.

[0035] The scanner unit 17 optically reads the image of the document and generates image data. For example, the scanner unit 17 operates when a scan job is executed in the image forming apparatus 1 and reads the image of the document.

[0036] The printer unit 18 forms and outputs an image on a sheet such as printing paper. For example, the printer unit 18 operates when a print job is executed in the image forming apparatus 1. The printer unit 18 then transports the sheets one by one and prints the image to be printed onto the sheets for output. For example, the printer unit 18 forms the image on the sheet using an electrophotographic method. However, the image forming method used by the printer unit 18 is not limited to electrophotography. For example, the printer unit 18 may form the image on the sheet using an inkjet method.

[0037] The network interface 19 is an interface that connects the image forming apparatus 1 to the network 3. The control unit 10 communicates with external devices via this network interface 19. For example, the control unit 10 receives print jobs transmitted from the information processing device 2 via the network interface 19.

[0038] Figure 3 shows an example of user information 22. As described above, user information 22 is information that registers information about users who are permitted to use the image forming apparatus 1. For example, user information 22 may register information about multiple users. User information 22 is information that registers authentication information, device information, and a count value for each user. Authentication information is information used for user authentication. Authentication information includes, for example, a user ID and password for each user. Device information is information that identifies the information processing device 2 used by each user. For example, device information includes at least one of the following: the IP address, MAC address, and computer name of the information processing device 2. The count value is information that records the usage history of the image forming apparatus 1 by each user. The count value is recorded as a value that is incremented by 1 each time a print output is made, for example.

[0039] Figure 4 shows an example of a print job received by the image forming apparatus 1 from the information processing device 2 when authentication settings are enabled. Figure 4(a) shows an example of the image forming apparatus 1 receiving a print job 26 with authentication information 27 attached. The authentication information 27 includes, for example, a user ID and password. When the image forming apparatus 1 receives a print job 26 with authentication information 27 attached, it performs user authentication based on the authentication information 27. For example, the image forming apparatus 1 performs user authentication by determining whether or not authentication information matching the user ID and password included in the authentication information 27 is registered in the user information 22. If user authentication is successful, the image forming apparatus 1 identifies the user who sent the print job 26 from among the users registered in the user information 22. The image forming apparatus 1 then executes the print job 26 and prints the image specified as the print target. At this time, the image forming apparatus 1 executes the print job 26 while reflecting the print settings specified in the print job 26.

[0040] On the other hand, if user authentication fails, the image forming apparatus 1 cannot identify the user who sent the print job 26. In this case, the image forming apparatus 1 discards the received print job 26.

[0041] Figure 4(b) shows an example where the image forming apparatus 1 receives a print job 28 without authentication information. For example, if the authentication setting of the image forming apparatus 1 is changed from disabled to enabled, or if the information processing device 2 used by the user is replaced, the authentication information may not yet be registered in the printer driver of the information processing device 2. In such cases, the information processing device 2 of a legitimate user registered in the user information 22 may send a print job 28 without authentication information to the image forming apparatus 1.

[0042] When authentication settings are enabled, the image forming apparatus 1 determines whether or not printing by a guest user is permitted if the print job 28 received from the information processing device 2 does not have authentication information attached. If printing by a guest user is permitted, the image forming apparatus 1 prints the print job 28 as a job for the guest user. At this time, the image forming apparatus 1 executes the print job 28 with functional restrictions imposed during printing.

[0043] On the other hand, if printing by guest users is prohibited, the image forming apparatus 1 saves the print job 28 without authentication information as a pending job. When user authentication for the pending job is successful, the image forming apparatus 1 reads and executes the pending job. A detailed configuration example and operation example of such an image forming apparatus 1 will be described below.

[0044] Figure 5 is a block diagram showing the functional configuration of the control unit 10 in the image forming apparatus 1. The hardware processor 11 executes the program 21 to cause the control unit 10 to function as a setting unit 30, a job receiving unit 31, a user authentication unit 32, a job control unit 33, an acquisition unit 34, a user identification unit 35, and a job storage unit 36.

[0045] The setting unit 30 configures settings related to the print output of the image forming apparatus 1. Figure 6 shows an example of setting items and their values ​​set by the setting unit 30. The setting items set by the setting unit 30 include "Authentication settings when receiving a print job" and "Print output by guest users". In the example in Figure 6, the setting item for "Authentication settings when receiving a print job" is set to "Enabled". Also in the example in Figure 6, the setting item for "Print output by guest users" is set to "Prohibited". When the image forming apparatus 1 receives a print job, it performs actions according to the settings of these setting items.

[0046] The job receiving unit 31 receives print jobs via the network interface 19. If the authentication setting for print job reception is enabled, the job receiving unit 31 determines whether or not authentication information is attached to the received print job. If authentication information is attached, the job receiving unit 31 outputs the authentication information attached to the print job to the user authentication unit 32.

[0047] Furthermore, when authentication settings are enabled and a print job without authentication information is received, the job receiving unit 31 determines whether or not printing by the guest user is permitted. If printing by the guest user is permitted, the job receiving unit 31 outputs the received print job to the job control unit 33. On the other hand, if printing by the guest user is prohibited, the job receiving unit 31 sequentially activates the acquisition unit 34, the user identification unit 35, and the job storage unit 36.

[0048] The user authentication unit 32, when the authentication setting is enabled, performs user authentication to determine whether the received print job is a job from a legitimate user. If authentication information is attached to the received print job, the user authentication unit 32 obtains the authentication information attached to the print job. The user authentication unit 32 then determines whether authentication information matching the authentication information attached to the print job is registered in the user information 22.

[0049] If the same authentication information is registered in user information 22, user authentication by user authentication unit 32 will be considered successful. In other words, user authentication unit 32 can identify the user sending the print job from among the registered users in user information 22. If user authentication is successful, user authentication unit 32 outputs the received print job to job control unit 33.

[0050] The job control unit 33 drives the printer unit 18 to control the execution of print jobs. For example, the job control unit 33 starts feeding and transporting sheets, and controls the operation of forming and outputting the image to be printed on the transported sheets. When the user authentication unit 32 successfully authenticates the user and the job control unit 33 executes the print job, it reflects the print settings specified in the print job. Therefore, when user authentication is successful and the print job is executed, the job control unit 33 outputs the printed material intended by the user.

[0051] In contrast, when a print job is executed as a guest user's job, the job control unit 33 disables some of the print settings specified in the print job before executing the print job. For example, if color printing is specified in a print job executed as a guest user's job, the job control unit 33 disables the color printing setting and outputs the image in monochrome. Therefore, when a print job is executed as a guest user's job, the job control unit 33 may not output the printout intended by the user. Note that the functional restrictions when executing as a guest user's job are not limited to color output restrictions. That is, the job control unit 33 may impose functional restrictions other than color output restrictions.

[0052] The acquisition unit 34 functions when authentication settings are enabled, a print job without authentication information is received, and printing by guest users is prohibited. The acquisition unit 34 obtains device information indicating the source of the print job from the information received along with the print job. For example, the acquisition unit 34 obtains device information such as the IP address, MAC address, or computer name indicating the source from information contained in the header information when the print job is received. Once the acquisition unit 34 obtains the device information, it outputs that device information to the user identification unit 35.

[0053] The user identification unit 35 searches for device information registered in the user information 22 based on the device information acquired by the acquisition unit 34, and identifies the user who sent the print job. That is, the user identification unit 35 determines whether or not device information matching the device information acquired by the acquisition unit 34 is registered in the user information 22. For example, if the device information includes an IP address, MAC address, and computer name, the user identification unit 35 determines whether or not at least one of the IP address, MAC address, and computer name matches.

[0054] As a result, if device information matching the device information acquired by the acquisition unit 34 is registered in the user information 22, the user identification unit 35 can identify the user based on the device information registered in the user information 22. The user identified based on the device information is the user who sends the print job. Therefore, the user identification unit 35 can identify the user who sends the print job based on the device information.

[0055] On the other hand, there may be cases where no device information matching the device information acquired by the acquisition unit 34 is registered in the user information 22. In that case, even if the user identification unit 35 searches the user information 22, it cannot identify the user who sent the print job. If the user cannot be identified by searching the user information 22, the user identification unit 35 queries an external party via the network interface 19 for the user of the device information. For example, the user identification unit 35 sends an email containing the device information to the administrator of the image forming apparatus 1 and asks the administrator for the user of the device information. Alternatively, the user identification unit 35 may send an inquiry command with the device information attached to an external server device 4 and query the server device 4 for the user of the device information.

[0056] When the user of the device information is inquired about externally, the user identification unit 35 obtains a response from the external source. This response may include user information indicating the user of the device information, or it may not include user information. For example, if the administrator or server device 4 can identify the user of the device information, it adds user information to the response to the inquiry. Conversely, if the administrator or server device 4 cannot identify the user of the device information, it does not add user information to the response to the inquiry.

[0057] When the user identification unit 35 obtains user information as a response to an inquiry, it associates the user indicated by the user information with the device information and registers it in the user information 22. For example, the user identification unit 35 determines whether the user indicated by the user information is a registered user in the user information 22. If it is a registered user, the user identification unit 35 changes the device information of the registered user in the user information 22 to the device information obtained by the acquisition unit 34 and registers it. However, if the user indicated by the user information is not a registered user, the user identification unit 35 does not have to register the device information obtained by the acquisition unit 34 in the user information 22.

[0058] The user identification unit 35 identifies the user indicated by the user information as the user who will send the print job if the user indicated by the user information is a registered user in the user information 22. If the user indicated by the user information is an unregistered user in the user information 22, the user identification unit 35 does not identify the user who will send the print job.

[0059] If the user identification unit 35 can identify the user who sent the print job, it activates the job storage unit 36. Conversely, if the user identification unit 35 cannot identify the user who sent the print job, it discards the received print job.

[0060] The job storage unit 36 ​​sets the received print job as a pending job 24 for the sending user and stores the pending job 24 in the pending job storage unit 23. In other words, the job storage unit 36 ​​stores and manages print jobs that do not have authentication information attached as pending jobs 24 without discarding them.

[0061] When the pending job 24 is saved by the job saving unit 36, the user authentication unit 32 in the control unit 10 functions. The user authentication unit 32 displays an authentication information input screen on the operation panel 14 where the user can enter authentication information such as a user ID and password. When authentication information is entered on the authentication information input screen, the user authentication unit 32 performs user authentication. That is, the user authentication unit 32 determines whether the authentication information entered on the operation panel 14 matches the authentication information registered in the user information 22.

[0062] If the authentication information matches, user authentication by the user authentication unit 32 is successful. In other words, the user authentication unit 32 can identify the user operating the operation panel 14 from among the registered users in the user information 22. The user authentication unit 32 then notifies the job control unit 33 of the identified user.

[0063] The job control unit 33 determines whether the pending job 24 of the user identified by the user authentication unit 32 is stored in the pending job storage unit 23. If the identified user's pending job 24 is stored, the job control unit 33 reads the identified user's pending job 24 from the pending job storage unit 23. The job control unit 33 then executes the read pending job 24 and prints it. At this time, the job control unit 33 executes the pending job 24 while reflecting the print settings specified in the pending job 24. Therefore, if user authentication is successful and the pending job 24 is executed, the job control unit 33 outputs the printout intended by the user.

[0064] Furthermore, the pending job storage unit 23 may store multiple pending jobs 24 of a user identified by the user authentication unit 32. In this case, the job control unit 33 reads the multiple pending jobs 24 in order and executes them in order. However, it is not limited to this; if the user specifies each pending job 24 one by one and performs an authentication information input operation, the job control unit 33 may read each pending job 24 specified by the user one by one and execute them.

[0065] If the authentication information entered by the user into the control panel 14 does not match the authentication information registered in the user information 22, user authentication by the user authentication unit 32 fails. In this case, the job control unit 33 does not read the pending job 24. Therefore, no print output based on the pending job 24 is performed.

[0066] Next, the operation of the image forming apparatus 1 will be described. Figures 7 and 8 are flowcharts illustrating an example of a processing procedure performed in the image forming apparatus 1. Specifically, Figures 7 and 8 show the processing procedure when the image forming apparatus 1 receives a print job. This processing procedure is performed, for example, by the hardware processor 11 executing program 21.

[0067] The image forming apparatus 1 receives a print job via the network 3 (step S10). Upon receiving a print job, the image forming apparatus 1 determines whether the authentication setting for the print job is valid (step S11). If the authentication setting is invalid (NO in step S11), the image forming apparatus 1 executes the received print job and prints an image onto a sheet based on the image data contained in the print job (step S12).

[0068] If the authentication setting is enabled (YES in step S11), the image forming apparatus 1 determines whether authentication information is attached to the received print job (step S13). If authentication information is attached (YES in step S13), the image forming apparatus 1 performs user authentication (step S14). At this time, the image forming apparatus 1 determines whether authentication information matching the authentication information attached to the print job is registered in the user information 22. Then the image forming apparatus 1 determines whether the authentication was successful (step S15). If the authentication is successful (YES in step S15), the image forming apparatus 1 executes the received print job and produces print output based on the print job (step S16). As a result, the user can obtain the intended printout from the image forming apparatus 1.

[0069] In contrast, if authentication fails (NO in step S15), the image forming apparatus 1 discards the received print job without executing it (step S17). This prevents unauthorized use by unknown users.

[0070] Furthermore, if the authentication setting is valid (YES in step S11) and authentication information is not attached to the received print job (NO in step S13), the image forming apparatus 1 determines whether or not printing by the guest user is permitted (step S18). If printing by the guest user is permitted (YES in step S18), the image forming apparatus 1 imposes functional restrictions on the print output (step S19). Then, the image forming apparatus 1 performs print output based on the received print job with the functional restrictions imposed (step S20). As a result, the print job is executed as a guest user job in the image forming apparatus 1 and printed with functional restrictions imposed.

[0071] Furthermore, if printing output by the guest user is prohibited (NO in step S18), the image forming apparatus 1 performs the pending job saving process (step S21).

[0072] Figure 8 is a flowchart showing an example of a detailed processing procedure for the pending job saving process (step S21). When the image forming apparatus 1 starts the pending job saving process, it acquires device information when it receives a print job (step S30). Based on this device information, the image forming apparatus 1 searches for user information 22 (step S31). That is, the image forming apparatus 1 determines whether or not device information matching the acquired device information is registered in user information 22. If device information matching the acquired device information is registered in user information 22, the image forming apparatus 1 can identify the user who sent the print job. Therefore, the image forming apparatus 1 determines whether or not it was able to identify the user who sent the print job as a result of searching user information 22 (step S32).

[0073] If the sending user can be identified (YES in step S32), the image forming apparatus 1 associates the received print job with the sending user (step S33). The image forming apparatus 1 then stores the received print job as a pending job 24 for the sending user in the pending job storage unit 23 (step S34).

[0074] On the other hand, if the sending user cannot be identified (NO in step S32), the image forming apparatus 1 queries an external source for the user of the device information (step S35). Along with querying an external source, the image forming apparatus 1 temporarily saves the print job as a job under review (step S36). The area where it temporarily saves the job may be the pending job storage unit 23 or another storage area. The image forming apparatus 1 then waits until it receives a response to the query (step S37).

[0075] When the image forming apparatus 1 receives a response to the inquiry (YES in step S37), it determines, based on the response, whether the user of the device information is a registered user registered in the user information 22 (step S38). If the user of the device information is a registered user (YES in step S38), the image forming apparatus 1 identifies that registered user as the user who sends the print job (step S39). The image forming apparatus 1 then associates the received print job with the sending user (step S33) and stores the received print job in the held job storage unit 23 as a held job 24 for the sending user (step S34).

[0076] If the user of the device information is not a registered user (NO in step S38), the image forming apparatus 1 discards the received print job (step S40). Therefore, the image forming apparatus 1 can prevent print jobs from being executed by unauthorized users.

[0077] Figure 9 is a flowchart illustrating an example of another processing procedure performed in the image forming apparatus 1. Specifically, Figure 9 shows the processing procedure when the image forming apparatus 1 is saving a pending job 24. This processing procedure is performed, for example, by the hardware processor 11 executing program 21.

[0078] When the image forming apparatus 1 starts this process, it determines whether or not it has saved the pending job 24 (step S50). If the pending job 24 is not saved (NO in step S50), the processing by the image forming apparatus 1 ends. On the other hand, if the pending job 24 is saved (YES in step S50), the image forming apparatus 1 displays an authentication information input screen on the operation panel 14 (step S51).

[0079] For example, when a user moves to the location where the image forming apparatus 1 is installed to obtain a printed document, and notices that no printed document has been output, they perform an operation on the control panel 14. The user then enters their authentication information on the authentication information input screen of the control panel 14.

[0080] The image forming apparatus 1 waits until authentication information is entered by the user (step S52). Once authentication information is entered by the user, the image forming apparatus 1 performs user authentication (step S53). That is, the image forming apparatus 1 determines whether or not authentication information matching the authentication information entered by the user is registered in the user information 22. If authentication information matching the authentication information entered by the user is registered in the user information 22, the user authentication is successful. The image forming apparatus 1 determines whether or not the authentication was successful (step S54). If the user authentication fails (NO in step S54), processing by the image forming apparatus 1 ends. In this case, the saved state of the pending job 24 remains.

[0081] On the other hand, if user authentication is successful (YES in step S54), the image forming apparatus 1 identifies the user who entered the authentication information based on the user information 22 (step S55). The image forming apparatus 1 determines whether or not the pending job 24 of the user identified in user authentication is stored in the pending job storage unit 23 (step S56). If, as a result, the pending job 24 of the identified user is not stored (NO in step S56), the processing by the image forming apparatus 1 ends.

[0082] Furthermore, if a pending job 24 for the identified user is stored (YES in step S56), the image forming apparatus 1 reads the pending job 24 for the identified user from the pending job storage unit 23 (step S57). The image forming apparatus 1 then performs print output based on the read pending job 24 (step S58). It is preferable that the image forming apparatus 1 deletes the pending job 24 from the pending job storage unit 23 after performing print output.

[0083] As described above, in this embodiment, if the authentication setting is enabled, the image forming apparatus 1 performs user authentication based on the authentication information attached to the print job, and if user authentication is successful, it permits printing output based on the print job. However, the image forming apparatus 1 may receive a print job that does not have authentication information attached. In that case, the image forming apparatus 1 obtains device information indicating the source of the print job and identifies the user who sent the print job based on the device information. The image forming apparatus 1 then saves the received print job as a pending job for the sending user. If the image forming apparatus 1 successfully authenticates the sending user while a pending job is saved, it releases the pending status of the pending job and starts printing output.

[0084] The image forming apparatus 1, having the above configuration, identifies the user sending the print job based on device information. Instead of immediately executing the user's print job, it executes print output based on the pending job, provided that user authentication of the sending user is successful. Therefore, the image forming apparatus 1 can prevent jobs from being executed fraudulently due to impersonation or other means.

[0085] Furthermore, when a user who has sent a print job moves to the location of the image forming apparatus 1 to retrieve the printed material, they may notice that the print job has not been executed. At this point, the user can operate the operation panel 14 and enter their authentication information to execute the print job at that time. Therefore, the user who has sent the print job does not need to return to the location of their information processing device 2 and re-attach their authentication information to the same print job and send it again. Thus, the image forming apparatus 1 of this embodiment can improve user convenience when authentication information has not been attached.

[0086] (modified version) Preferred embodiments of the present invention have been described above. However, the present invention is not limited to those described in the above embodiments, and various modifications are applicable.

[0087] For example, the above embodiment illustrates a case where the image forming apparatus 1 is configured as an MFP. However, the image forming apparatus 1 is not limited to being configured as an MFP. For example, the image forming apparatus 1 may be a printer that only has a printing function.

[0088] Furthermore, in the above embodiment, an example was described in which the authentication information includes a user ID and a password. However, the authentication information may also include information other than a user ID and a password. For example, the image forming apparatus 1 can perform card authentication or biometric authentication as a method for user authentication. In that case, the authentication information will be configured as information including card information or biometric information.

[0089] Furthermore, in the above embodiment, an example was described in which the program 21 executed by the hardware processor 11 is pre-stored in the storage unit 13. However, the program 21 is not limited to being pre-stored in the storage unit 13. That is, the program 21 can be traded on its own. For this reason, the program 21 may be provided in a state recorded on a computer-readable recording medium. Alternatively, the program 21 may be provided in a form that can be downloaded via a network such as the Internet. [Explanation of Symbols]

[0090] 1. Image forming apparatus 10 Control Unit 13 Storage section 21 Programs 22 User Information 23. Pending Job Memory Unit 24 pending jobs 30 Setting section 31 Job receiving unit 32 User Authentication Section 33 Job Control Unit 34 Acquisition Department 35 User Identification Section 36 Job Storage Section

Claims

1. An image forming apparatus that performs user authentication based on authentication information attached to a print job, and permits print output based on the print job if the user authentication is successful, An acquisition unit that acquires device information indicating the source of the print job when authentication information is not attached to the print job, A user identification unit that identifies the user who sends the print job based on the device information, A job storage unit that saves the print job as a pending job for the sending user, A job control unit that, upon successful user authentication of the sending user, releases the pending state of the pending job and starts printing output, An image forming apparatus characterized by comprising:

2. A settings section for allowing or prohibiting printing output by guest users. Furthermore, The image forming apparatus according to claim 1, characterized in that the acquisition unit acquires the device information when the setting unit prohibits printing output by the guest user.

3. A storage unit that stores user information in which the device information is registered for each user, Furthermore, The image forming apparatus according to claim 1, characterized in that the user identification unit identifies the transmitting user by referring to the user information.

4. The aforementioned user information also includes authentication information for each user. The image forming apparatus according to claim 3, characterized in that the job control unit releases the pending state of the pending job when it successfully authenticates the sending user based on the authentication information registered in the user information.

5. The image forming apparatus according to claim 3, characterized in that, when the device information is not registered in the user information, the user identification unit queries an external source for the user of the device information and identifies the transmitting user based on the response from the external source.

6. The image forming apparatus according to claim 5, characterized in that when the user identification unit obtains a response from an external source regarding the user of the device information, it registers the device information in the user information.

7. The image forming apparatus according to claim 5, characterized in that the user identification unit discards the print job when it is unable to obtain a response from an external source regarding the user of the device information.

8. The image forming apparatus according to claim 1, characterized in that the device information includes an IP address, a MAC address, or a computer name.

9. A control method for an image forming apparatus that performs user authentication based on authentication information attached to a print job, and permits print output based on the print job if the user authentication is successful, If authentication information is not attached to the print job, obtain device information indicating the source of the print job. Based on the device information, the user who sent the print job is identified. The print job is saved as a pending job for the sending user. A control method characterized by releasing the pending state of the pending job and starting print output when user authentication of the sending user is successful.

10. A program executed in an image forming apparatus that performs user authentication based on authentication information attached to a print job and permits print output based on the print job if the user authentication is successful, wherein the image forming apparatus... A step of obtaining device information indicating the source of the print job when authentication information is not attached to the print job, A step of identifying the user who sends the print job based on the device information, The steps include saving the print job as a pending job for the sending user, The steps include: releasing the pending state of the pending job and starting print output if user authentication of the sending user is successful; A program characterized by causing the execution of a specific action.

Images