Image forming apparatus, control method for image forming apparatus, control program for image forming apparatus

Abstract

A separate server was needed for PIN generation, distinct from the image forming apparatus. [Solution] The image forming apparatus comprises a generation unit that generates authentication information, a transmission unit that transmits the authentication information to a terminal device, a reception unit that receives input authentication information input to the user interface unit of the image forming apparatus, and an authentication unit that performs user authentication based on the input authentication information and the authentication information.

Description

Technical Field

[0001] The present invention relates to an image forming apparatus, a control method for an image forming apparatus, and a control program for an image forming apparatus.

Background Art

[0002] Patent Document 1 describes that logging in to an image forming apparatus is performed by inputting a PIN code.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] However, conventionally, it has been necessary to install a server for generating a PIN separately from the image forming apparatus.

Means for Solving the Problems

[0005] An image forming apparatus for solving the above problems includes a generation unit that generates authentication information, a transmission unit that transmits the authentication information to a terminal device, a reception unit that receives input authentication information input to a user interface unit of the image forming apparatus, and an authentication unit that performs user authentication based on the input authentication information and the authentication information.

[0006]

[0007] ​The control program for the image forming apparatus that solves the above problems causes the computer to function as a generation unit that generates authentication information, a transmission unit that transmits the authentication information to a terminal device, a reception unit that receives input authentication information entered into the user interface unit of the image forming apparatus, and an authentication unit that performs user authentication based on the input authentication information and the authentication information. [Brief explanation of the drawing]

[0008] [Figure 1] A block diagram showing the configuration of a multifunction printer. [Figure 2] A diagram showing an example of user information. [Figure 3] A diagram showing an example of screen transitions. [Figure 4] A diagram showing an example of screen transitions. [Figure 5] A flowchart of the user authentication process. [Modes for carrying out the invention]

[0009] Here, embodiments of the present invention will be described in the following order. (1) Configuration of the multifunction printer: (2) User authentication process: (3) Other embodiments:

[0010] (1) Configuration of the multifunction printer: Figure 1 is a block diagram showing the configuration of a multifunction printer 100 as an image forming apparatus according to an embodiment of the present invention. The multifunction printer 100 works in cooperation with a terminal device 200. The terminal device 200 is a terminal used by the user of the multifunction printer 100, and may be assumed to be a PC, tablet, smartphone, etc.

[0011] In this embodiment, it is assumed that the multifunction printer 100 is installed in a company office. Employees working in the office are permitted to use the multifunction printer 100, and each permitted user is given an IC card indicating that they are authorized to use the multifunction printer 100. The recording medium of the IC card has a card ID recorded on it to identify the IC card. In addition, each user is assigned a user ID.

[0012] In this embodiment, a user of the multifunction printer 100 can log in to the multifunction printer 100 and use it by holding their IC card over the multifunction printer 100 and then performing authentication using a PIN, as described later.

[0013] The multifunction printer 100 comprises a processor 110, a storage medium 120, a communication unit 130, a UI unit 140, a fax communication unit 150, a printing unit 160, and a reading unit 170. The processor 110 includes a CPU, ROM, RAM, etc. (not shown), and can execute a control program recorded in the storage medium 120 to control each part of the multifunction printer 100. The processor 110 may consist of a single chip or multiple chips. Furthermore, for example, an ASIC may be used instead of a CPU, or a configuration in which a CPU and an ASIC cooperate may be used. When each device in this embodiment is equipped with a processor, that processor can be realized in various forms, similar to the processor 110.

[0014] The communication unit 130 includes various communication interfaces for communicating with other devices via wired or wireless connections. Furthermore, the communication unit 130 includes interfaces for communicating with various removable memory devices installed in the multifunction printer 100, enabling printing and faxing of data recorded in the removable memory, saving scanned data to the removable memory, and other similar operations.

[0015] Also, in this embodiment, the communication unit 130 includes an NFC (Near Field Communication) unit 131. When the NFC unit 131 approaches within a predetermined distance an IC card equipped with an IC chip and an antenna corresponding to short-range wireless communication, it has a function of communicating with the IC card and acquiring data recorded on the recording medium of the IC card.

[0016] The UI unit 140 as the user interface unit includes a touch panel display, keys, LEDs, speakers, etc. The processor 110 guides various information to the user through output units such as the touch panel display, LEDs, and speakers, and inputs the user's instructions through input units such as the touch panel display and keys.

[0017] The FAX communication unit 150 includes a modem for performing FAX communication of image data via a public switched telephone network or the like, a circuit for detecting or generating a control signal for transmitting and receiving the image data, a circuit for encoding transmission data or decoding received data, etc. The printing unit 160 includes a drive unit, mechanical components, sensors, etc. for performing printing on various printing media by various printing methods such as an inkjet method or an electrophotographic method. The reading unit 170 includes a device for reading a document placed on the document table glass or a document set in the ADF document tray, for example, an image sensor, a light source, a drive unit for reading the document, mechanical components, sensors, etc.

[0018] As described above, each user of the multifunction device 100 carries an IC card indicating that the use of the multifunction device 100 is permitted, and the IC card is capable of the above-described communication with the NFC unit 131. A card ID for identifying the card is recorded on the recording medium of the IC card.

[0019] The memory medium 120 stores user information 121. FIG. 2 is a diagram showing an example of the user information 121. The user information 121 stores the card ID of the IC card given to the user, the user display name, and the email address, in association with the user ID for identifying the user. Also, when a PIN (Personal Identification Number) as authentication information is generated during the operation process of the multifunction device 100, the PIN and the PIN generation date and time are stored. Note that the PIN is invalidated by being discarded from the user information 121 by the processor 110 when a predetermined period has elapsed since its generation. The "null" shown in the PIN column of FIG. 2 indicates that no valid PIN is stored.

[0020] The processor 110 of the multifunction device 100 can execute a control program for realizing the function of transmitting the authentication information generated by the multifunction device 100 to the user's terminal device 200. By executing the control program, the processor 110 functions as the first authentication unit 111, the generation unit 112, the transmission unit 113, the reception unit 114, and the authentication unit 115.

[0021] The first authentication unit 111 performs the first authentication by the processor 110. In the present embodiment, the first authentication is authentication using an IC card, which is performed before authentication by PIN. When the user holds the IC card over the NFC unit 131, the processor 110 acquires the card ID stored in the IC card by the NFC unit 131. The processor 110 determines that the first authentication is successful if the user ID corresponding to the card ID recorded in the IC card is stored in the user information 121.

[0022] In this embodiment, the processor 110 generates authentication information using the generation unit 112 when the first authentication is successful. In this embodiment, the authentication information is a PIN code represented by a six-digit number. The processor 110 generates a random six-digit number as the PIN using the generation unit 112, which is different from six-digit numbers that have already been issued and are valid, or six-digit numbers that have been issued in the past, for example, within the last few days, even if they are invalid. The processor 110 stores the PIN and the date and time the PIN was generated, as shown in Figure 2, in association with the user ID of the first authenticated user.

[0023] Furthermore, the processor 110 transmits the generated PIN to the terminal device 200 via the transmission unit 113. That is, the processor 110 transmits the PIN to the terminal device 200 based on the user information of the user authenticated by the first authentication. More specifically, the processor 110 sends an email containing the PIN issued to the authenticated user to the email address stored in association with that user. The user confirms this email on the terminal device 200, so the processor 110 has finally transmitted the PIN to the terminal device 200.

[0024] A user who has viewed the email on their terminal device 200 enters a PIN into the UI unit 140 of the multifunction printer 100. The entered PIN is the input authentication information. The receiving unit 114 allows the processor 110 to receive the PIN as input authentication information entered into the UI unit 140 of the multifunction printer 100.

[0025] The authentication unit 115 enables the processor 110 to perform user authentication based on the input authentication information and the authentication information. Specifically, the processor 110 determines whether the PIN received by the reception unit 114 matches the PIN generated by the generation unit 112 and stored in association with the user ID. If the two match, the processor 110 considers authentication successful and puts the multifunction printer 100 into a state where various functions such as fax, copy, print, and scan functions are available, i.e., a logged-in state. In this way, when the input authentication information and the authentication information match, the multifunction printer 100 can transition to a state where the authenticated user is logged in to the multifunction printer 100, and that user can use the functions of the multifunction printer 100.

[0026] As described above, the processor 110 performs first authentication using an IC card, followed by authentication using a PIN. In other words, authentication can be performed in two stages. Therefore, according to this embodiment, security in the multifunction printer 100 can be enhanced. Furthermore, according to this embodiment, the multifunction printer 100 itself can generate authentication information and notify the terminal device 200, so there is no need to set up a separate server for generating authentication information.

[0027] Furthermore, the processor 110 invalidates the PIN as authentication information after a predetermined period has elapsed since its generation, as determined by the generation unit 112. Specifically, for example, after generating a PIN and storing it in association with a user ID, the processor 110 counts the time elapsed since the PIN was generated. When the predetermined period has elapsed since the PIN was generated, it discards the PIN and the PIN generation date and time that were stored in association with the user ID. If the PIN is discarded after the predetermined period, the processor 110 will not consider the authentication successful even if the PIN is entered into the UI unit 140 of the multifunction printer 100 after the predetermined period, i.e., after the PIN has become invalid, and will not transition the multifunction printer 100 to the logged-in state of the user to whom the PIN was associated. Therefore, the possibility of the authentication information being used by another person and another person impersonating the user to log in can be reduced.

[0028] In this embodiment, the email sent to the terminal device 200 includes information other than the PIN. Specifically, the processor 110, via the transmission unit 113, sends identification information for identifying the multifunction printer 100 to the terminal device along with the PIN as authentication information. The identification information for the multifunction printer 100 is, for example, a device ID, an IP address, etc. For example, by attaching a sticker printed with the identification information for the multifunction printer 100 to the housing of the multifunction printer 100, or by configuring the standby screen of the multifunction printer 100 to display the identification information for the multifunction printer 100, the user can identify the multifunction printer indicated by the identification information.

[0029] For example, as shown in Figure 1, there may be multiple multifunction printers in an office that, like printer 100, have the function of issuing PINs and sending them to the user's terminal device. Figure 1 shows that in addition to printer 100, printers 300 and 400 are installed in the office. In this case, one user may use multiple printers 100, 300, and 400 in parallel. In such a situation, the email sent from each printer to the user's terminal device 200 contains the PIN and the identification information of the printer that issued it, allowing the user to know which printer generated the PIN and which printer the PIN should be entered into.

[0030] Figure 3 shows an example of screen transitions for the multifunction printer 100. g1 shows the waiting screen before any user logs in. When the waiting screen g1 is displayed on the UI unit 140, it indicates that all users have logged out of the multifunction printer 100. In addition, the waiting screen g1 is also displayed on the UI unit of multifunction printers 300 and 400 before any user logs in. The waiting screen g1 includes a PIN input button b11.

[0031] When the standby screen g1 is displayed, and the user holds their IC card over the NFC unit 131 of the multifunction printer 100, the processor 110 performs the first authentication as described above. If the first authentication is successful, the PIN issuance confirmation screen g2 is displayed on the UI unit 140 of the multifunction printer 100. Successful first authentication indicates that the user ID corresponding to the card ID has been identified. The PIN issuance confirmation screen g2 is a screen for obtaining permission from the user to generate a PIN and send it to the email address associated with the identified user ID. When the processor 110 receives confirmation that the user has given permission, i.e., pressed the "yes" button b22, it generates the PIN and sends the email, and then, in this embodiment, displays the PIN input screen g3 on the UI unit 140 of the multifunction printer 100. After the processor 110 has sent the email containing the PIN, it displays the PIN input screen g3 on the UI unit 140 for a predetermined period of time. If the terminal device 200 is a portable terminal, the user can immediately check their email on the terminal device 200 in front of the multifunction printer 100, obtain the PIN, and enter the PIN on the PIN input screen g3 within a predetermined period. If the PIN is not entered into the UI unit 140 for a predetermined period after the PIN input screen g3 is displayed, the processor 110 will transition the display of the UI unit 140 to the standby screen g1 after the predetermined period has elapsed.

[0032] If the terminal device 200 is not a portable terminal, the user will have to move from the location of the multifunction printer 100 to the location of the terminal device 200 to check their email, memorize or write down the PIN contained in the email, and then return to the multifunction printer 100. This means that the user who has completed the first authentication may be temporarily away from the multifunction printer 100. It is also conceivable that another user may want to use the multifunction printer 100 during the period when the user who has completed the first authentication is away from the multifunction printer 100. Therefore, in this embodiment, the PIN input screen g3 is configured to transition to the standby screen g1 if a predetermined period of time has elapsed without a PIN being entered.

[0033] We will continue the explanation by referring to a user who has completed the first authentication and is away from the multifunction printer 100 as the first user, and other users who attempt to perform the first authentication with the multifunction printer 100 while the first user is away as the second user. The second user can perform the first authentication by holding their IC card over the NFC unit 131 while the standby screen g1 is displayed. In other words, in this embodiment, the multifunction printer 100 can store the PINs issued to multiple users and wait for PIN input from multiple users, as long as the number of users is below a predetermined upper limit.

[0034] Note that the order in which users perform the first authentication and the order in which users perform PIN authentication do not have to match. For example, the second user may enter their PIN and log in and use the functions of the multifunction printer 100 before the first user. When a PIN is entered that matches one of the issued valid PINs, the processor 110 considers the user corresponding to the entered PIN to have been authenticated successfully and transitions to the logged-in state for that user.

[0035] As described above, the standby screen g1 includes a PIN input button b11. The PIN input button b11 is a button that allows users who have already completed the first authentication to display the PIN input screen g3 without having to hold their IC card over the reader again. Therefore, users who have completed the first authentication can display the PIN input screen g3 by pressing the PIN input button b11 on the standby screen g1 without having to perform the first authentication again, and can enter their PIN on the PIN input screen g3. In addition, in this embodiment, the PIN input screen g3 is displayed for a predetermined period after PIN generation and email transmission, so during that predetermined period, users can enter their PIN on the PIN input screen g3 without having to perform any operation to display the PIN input screen g3.

[0036] When a PIN is entered on the PIN input screen g3, the processor 110 determines whether it matches any of the valid PINs stored, and if it matches, transitions to a logged-in state with the user ID corresponding to the matched PIN. Figure 3, g4 shows an example of the user home screen for user_A, indicating the logged-in state as user_A. The user home screen g4 includes a username display section p41 for the logged-in user and a logout button b41 for the logged-in user to log out. The user home screen g4 also includes buttons b42, b43, b44, and b45 for using the functions of the multifunction printer 100. For example, when the print button b42 is pressed, the system is configured to transition to a screen for selecting the file to print, setting the number of copies, setting the paper size, setting the layout, setting the double-sided printing, setting the color, and other various print settings.

[0037] If the PIN entered on the PIN input screen g3 does not match any of the stored valid PINs, the processor 110 displays an authentication failure screen g5 on the UI unit 140 of the multifunction printer 100. The authentication failure screen g5 is a screen that displays a message indicating that authentication failed because the entered PIN does not match any of the issued valid PINs. By displaying such a message, the multifunction printer 100 can let the user know that authentication has failed and that they cannot log in.

[0038] In this embodiment, the authentication failure screen g5 includes a PIN reissue button b51. When the PIN reissue button b51 is pressed, the processor 110 regenerates the PIN using the generation unit 112 and retransmits the regenerated PIN to the terminal device 200 using the transmission unit 113. Use cases that lead to PIN reissue include cases where the user has deleted the email notifying them of the PIN, or where the validity period of the PIN notified by email has expired and it has become invalid.

[0039] In this embodiment, when the PIN reissue button b51 is pressed, the processor 110 displays the pre-reissue screen g6 shown in Figure 4 on the UI unit 140. The pre-reissue screen g6 is a screen that includes a message prompting the user to hold the IC card over the device to reissue the PIN. When the IC card is held over the NFC unit 131 of the multifunction printer 100 while the pre-reissue screen g6 is displayed, the processor 110 obtains the card ID from the IC card and identifies the user ID corresponding to the card ID based on the user information 121. The processor 110 then displays the PIN issuance confirmation screen g2, and if PIN generation and email sending are permitted on the PIN issuance confirmation screen g2, the processor 110 regenerates the PIN and stores it in association with the identified user ID. If a PIN with an expiration date is stored in association with the user ID, the processor 110 overwrites it with the newly regenerated PIN and also overwrites the generation date and time with the regeneration date and time. The processor 110 also sends an email containing the newly regenerated PIN to the email address corresponding to the identified user ID. With this configuration, if PIN authentication fails, the processor 110 can prompt the user to try authenticating again with a newly generated PIN.

[0040] (2) User authentication process: Figure 5 is a flowchart of the user authentication process. The flow of the user authentication process will be explained with reference to the screen transition examples shown in Figures 3 and 4. The user authentication process shown in Figure 5 starts when the standby screen g1 shown in Figure 3 is displayed on the UI unit 140 of the multifunction printer 100. When the standby screen g1 is displayed on the UI unit 140, the multifunction printer 100 indicates that all users have logged out of the multifunction printer 100. The standby screen g1 is a screen that prompts the user to hold an IC card over the reader.

[0041] When the standby screen g1 is displayed, if the user holds the IC card over the NFC unit 131, the processor 110 obtains the card ID from the IC card via the NFC unit 131. The processor 110 determines whether or not the card ID was obtained using the first authentication unit 111 (step S100), and if it is determined that it was obtained, it identifies the user ID associated with the card ID of the IC card (step S105). That is, the processor 110 refers to the user information 121 and identifies the user ID associated with the card ID.

[0042] Next, the processor 110 displays the PIN issuance confirmation screen g2 (step S110). The processor 110 determines whether or not there is an issuance instruction on the PIN issuance confirmation screen g2 (step S115). If it is determined that there is no issuance instruction, i.e., the "No" button b21 is pressed, the processor 110 displays the standby screen g1 (step S120) and returns to step S100.

[0043] If it is determined in step S115 that there is an issuance instruction, that is, if the "Yes" button b22 is pressed, the processor 110 issues a PIN, stores it in the storage medium 120 in association with the user ID, and notifies the user of the PIN by email (step S125). Specifically, the processor 110 generates a random 6-digit number using the generation unit 112 and stores it in association with the user ID identified in step S105. Furthermore, the processor 110 generates an email using the transmission unit 113 that includes the generated PIN and the identification information of the multifunction printer 100, and sends it to the email address corresponding to the user ID. The processor 110 also obtains the current date and time at the time of PIN issuance from a timing circuit (not shown) and stores the generation date and time. If a predetermined period has elapsed since the generation date and time, the processor 110 separately executes a process to invalidate the PIN generated at that time.

[0044] Next, the processor 110 displays the PIN input screen g3 (step S130). The PIN input screen g3 is a screen that prompts the user to enter the issued 6-digit number. Subsequently, the processor 110 uses the reception unit 114 to determine whether or not the PIN has been entered (step S135). That is, it is determined whether or not a 6-digit number has been entered on the PIN input screen g3. A numeric keypad for entering the number is displayed, for example, on the screen of the PIN input screen g3.

[0045] If it is determined in step S135 that a PIN has been entered, the processor 110 determines whether the PIN matches using the authentication unit 115 (step S140). That is, it is determined whether the PIN issued as authentication information in step S125 matches the PIN obtained as input authentication information via the UI unit 140 in step S135.

[0046] If it is determined that both match in step S140, the processor 110 declares authentication successful and displays the user home screen g4 (step S145). If it is determined that both do not match in step S140, the processor 110 displays the authentication failure screen g5 (step S150).

[0047] In this embodiment, the authentication failure screen g5 includes a PIN reissue button b51. The processor 110 determines whether or not the PIN reissue button b51 has been pressed (step S155). If it is determined in step S155 that the PIN reissue button b51 has been pressed, the processor 110 displays the pre-reissue screen g6 shown in Figure 4 (step S170) and returns to the process in step S100.

[0048] If it is determined in step S155 that the PIN reissue button b51 was not pressed, the processor 110 determines whether a certain period of time has elapsed without any operation (step S160). If it is determined that no time has elapsed, the process returns to step S155. If it is determined in step S160 that no time has elapsed, the processor 110 displays the standby screen g1 (step S165) and returns to step S100.

[0049] If it is not determined in step S135 that a PIN has been entered, the processor 110 determines whether a predetermined period of time has elapsed without any operation (step S175). If it is determined in step S175 that a predetermined period of time has elapsed, the processor 110 displays the standby screen g1 (step S180) and returns to step S100. If it is not determined in step S175 that a predetermined period of time has elapsed, the processor 110 returns to step S135.

[0050] If it is determined in step S100 that the card ID has not been obtained, the processor 110 determines whether or not the PIN input button b11 was pressed on the standby screen g1 (step S165). If it is determined in step S165 that the PIN input button b11 was pressed, the processor 110 proceeds to step S130 and displays the PIN input screen g3. If it is determined in step S165 that the PIN input button b11 was not pressed, the processor 110 returns to step S100.

[0051] (3) Other embodiments: The embodiments described above are merely examples for carrying out the present invention, and various other embodiments can be adopted. For example, in the above embodiments, the image forming apparatus was configured as a multifunction device equipped with an image forming function, an image reading function, and a fax transmission and reception function, but the invention is not limited to this configuration. Whether or not the image forming apparatus has functions other than the image forming function is optional. The image forming apparatus may be used not only in companies but also in various organizations such as schools.

[0052] In the above embodiment, authentication using an IC card was described as the first authentication method. However, other methods may also be used, such as authentication using a user ID and password. Alternatively, both IC card authentication and user ID authentication may be possible, and the system may be configured to allow the user to choose which method to use each time.

[0053] The screen transitions and screen configurations shown in the above embodiment are examples only and are not limited thereto. For example, the PIN issuance confirmation screen g2 may be omitted. Also, in the above embodiment, when authentication information is transmitted, the PIN input screen g3 is displayed for a predetermined period, and after the predetermined period has elapsed, the system transitions to a waiting screen g1 including a PIN input button b11, and when the PIN input button b11 on the waiting screen g1 is pressed, the system transitions to the PIN input screen g3. However, the system may be configured to transition to the waiting screen g1 immediately after sending the PIN notification email. For example, when the "Yes" button b22 on the PIN issuance confirmation screen g2 in Figure 3 is pressed, the system may be configured to transition immediately to the waiting screen g1 without going through the PIN input screen g3.

[0054] Furthermore, the PIN reset button b51 may be provided on the PIN input screen, for example, as shown as g3 in Figure 3.

[0055] The transmitting unit only needs to be able to send authentication information to the terminal device used by the user and notify the user of the authentication information. In addition to email, notifications may also be sent via short message, chat application, or talk application. In this case, the user information includes information such as the recipient for each notification method corresponding to the user, so that notifications can be sent in each manner. Furthermore, it is sufficient that the user who has been notified of the authentication information can input the authentication information into the image forming apparatus. The form of the authentication information may be text data, image data such as a 2D code or barcode, or audio data. When notified by a 2D code or barcode, the image forming apparatus is equipped with a reader for reading the 2D code or barcode and a decoding module for the 2D code or barcode. In the case of audio data, the system may be configured so that the user listens to the audio and manually inputs the authentication information indicated by the audio into the image forming apparatus.

[0056] Furthermore, the present invention is also applicable as a program or method executed by a computer. For example, the above can be applied as an invention of a control method for an image forming apparatus, which includes generating authentication information, transmitting the authentication information to a terminal device, receiving input authentication information entered to the user interface unit of the image forming apparatus, and performing user authentication based on the input authentication information and the authentication information. In addition, the above can be applied as an invention of a control program for an image forming apparatus, which causes a computer to function as a generation unit that generates authentication information, a transmission unit that transmits the authentication information to a terminal device, a reception unit that receives input authentication information entered to the user interface unit of the image forming apparatus, and an authentication unit that performs user authentication based on the input authentication information and the authentication information.

[0057] Furthermore, the systems, programs, and methods described above may be implemented as a single device or by utilizing components from multiple devices, encompassing various forms. They can also be modified as needed, with some being software and others hardware. Moreover, the invention also functions as a recording medium for a program that controls the system. Of course, this recording medium could be a magnetic recording medium, a semiconductor memory, or any recording medium developed in the future; the same principle applies. [Explanation of symbols]

[0058] 100...Multifunction printer, 110...Processor, 111...First authentication unit, 112...Generation unit, 113...Transmission unit, 114...Reception unit, 115...Authentication unit, 120...Storage medium, 121...User information, 130...Communication unit, 131...NFC unit, 140...UI unit, 150...FAX communication unit, 160...Printing unit, 170...Reading unit, 200...Terminal device, 300,400...Multifunction printer, b11...PIN input button, b51...PIN reissue button, g1...Standby screen, g2...PIN issuance confirmation screen, g3...PIN input screen, g4...User home screen, g5...Authentication failure screen, g6...Screen before reissue

Claims

1. An image forming apparatus, A generation unit that generates authentication information, A transmitting unit that transmits the aforementioned authentication information to a terminal device, A receiving unit that receives input authentication information input to the user interface unit of the image forming apparatus, An authentication unit that performs user authentication based on the input authentication information and the authentication information, An image forming apparatus equipped with the following features.

2. The system includes a first authentication unit that performs a first authentication different from the authentication using the aforementioned authentication information, The generation unit generates the authentication information when the first authentication is successful. The transmitting unit transmits the authentication information to the terminal device based on the user information of the user authenticated by the first authentication. The image forming apparatus according to claim 1.

3. The transmission unit transmits the identification information of the image forming apparatus along with the authentication information to the terminal device. The image forming apparatus according to claim 2.

4. When the reception unit receives the authentication information, it transitions to a waiting screen including an input button, and when the input button on the waiting screen is pressed, it transitions to an input screen for the authentication information. The image forming apparatus according to claim 2.

5. When the reception unit receives the authentication information, it displays the input screen on the user interface unit for a predetermined period, and after the predetermined period has elapsed, it transitions to the waiting screen. The image forming apparatus according to claim 4.

6. The generation unit invalidates the authentication information after a predetermined period has elapsed since its generation. The image forming apparatus according to claim 1.

7. The authentication unit determines that authentication is successful if the input authentication information matches the authentication information, and makes the image forming apparatus usable. The image forming apparatus according to claim 1.

8. If the authentication unit does not match the input authentication information, it displays a message indicating that authentication has failed on the user interface unit. The image forming apparatus according to claim 1.

9. When the reissue button displayed on the user interface is pressed, the generation unit regenerates the authentication information. The transmission unit transmits the regenerated authentication information to the terminal device. The image forming apparatus according to claim 1.

10. In an image forming apparatus, Generate authentication information, The authentication information is transmitted to the terminal device. The user interface unit of the image forming apparatus receives input authentication information, User authentication is performed based on the input authentication information and the authentication information. A control method for an image forming apparatus, including the following.

11. Computers A generation unit that generates authentication information. A transmitting unit that transmits the aforementioned authentication information to a terminal device. A receiving unit that receives input authentication information entered into the user interface unit of an image forming apparatus. An authentication unit that performs user authentication based on the input authentication information and the authentication information. A control program for an image forming apparatus that functions as such.

Images