A functional execution device, a computer program for the functional execution device, and a method executed by the functional execution device.

Abstract

The present invention provides a functional execution device, method, and computer program that execute predetermined processes when authentication is successful according to the authentication process. [Solution] In the communication system 2, the function execution device (MFP (Multi-Function Peripheral) 10A) capable of performing a scanning function comprises a scan execution unit 22A, a second transmission unit BTI / F18A that, when a scan instruction is received from the user after an authentication start instruction has been received from the user, transmits authentication-related information to a terminal 100, which is a second external device, without having the scan execution unit 22A perform the scanning of the document, an authentication control unit 130 that controls an authentication process using specific information obtained using the authentication-related information after the authentication-related information has been transmitted to the terminal 100, and a predetermined processing execution unit print execution unit 20A that performs a predetermined process when authentication according to the authentication process is successful.

Claims

1. A function execution device capable of performing a scanning function, Scan execution unit, A scan control unit that causes the scan execution unit to perform scanning of a document when a scan command is received from the user without an authentication start command being received from the user, A first transmission unit that transmits the scan data obtained by the scan to a first external device, After the authentication start instruction is received from the user, if the scan instruction is received from the user, a second transmission unit transmits authentication-related information to a second external device without causing the scan execution unit to perform a scan of the document. After the authentication-related information is transmitted to the second external device, an authentication control unit controls an authentication process that uses specific information obtained using the authentication-related information, A predetermined processing execution unit executes predetermined processing when authentication according to the aforementioned authentication process is successful, A functional execution device equipped with the following features.

2. The aforementioned function execution device further, When the user gives the instruction to start authentication, the authentication request transmission unit sends an authentication request to the server, A response receiving unit receives a response from the server in response to the authentication request being sent to the server. Equipped with, The function execution device according to claim 1, wherein the second transmitting unit transmits the authentication-related information to the second external device when the user issues a scan instruction after the response has been received from the server.

3. The authentication control unit, After the authentication-related information is transmitted to the second external device, the establishment unit establishes a connection with the authenticator using the specific information, An authentication execution instruction transmission unit that transmits an authentication execution instruction to the authenticator using the aforementioned connection, wherein the authentication execution instruction is information for instructing the execution of user authentication in accordance with a predetermined authentication method that utilizes biometric authentication information, After the authentication execution instruction is transmitted to the authenticator, if the user authentication using the biometric authentication information is successful in the authenticator, a first success information receiving unit receives first success information from the authenticator indicating that the user authentication was successful, using the connection. Equipped with, The function execution device according to claim 1, wherein the predetermined processing execution unit executes the predetermined processing when the first success information is received from the authenticator.

4. The authentication control unit further, A success information transmission unit that transmits the first success information to a server when the authenticator receives the first success information, A second success information receiving unit receives, after the first success information has been transmitted to the server, a second success information receiving unit that receives from the server a second success information indicating that the user authentication in accordance with the predetermined authentication method has been successful, if the verification using the first success information is successful at the server. Equipped with, The function execution device according to claim 3, wherein the predetermined processing execution unit executes the predetermined processing when the first success information is received from the authenticator and the second success information is received from the server.

5. The second transmitting unit transmits the authentication-related information to the second external device via the first communication interface. The authentication control unit further, The system includes a communication execution unit that performs communication with the authenticator via a second communication interface different from the first communication interface, The function execution device according to claim 3, wherein the establishment unit establishes the connection when the communication is performed via the second communication interface.

6. The function execution device according to claim 5, wherein the establishment unit establishes the connection when the communication via the second communication interface is performed with the authenticator and the distance between the authenticator and the function execution device is less than or equal to a predetermined distance.

7. The aforementioned specific information includes key information, The communication execution unit receives encrypted information from the authenticator by performing the communication with the authenticator via the second communication interface, the encrypted information is information obtained by encrypting communication-related information using the key information, and the communication-related information is information for establishing the connection between the authenticator and the function execution device. The function execution device according to claim 5, wherein the establishment unit establishes the connection in response to the successful decryption of the encrypted information using the key information.

8. The function execution device according to claim 1, wherein the authentication-related information is image data representing a code image obtained by encoding the specific information.

9. The function execution device according to claim 1, wherein the second transmitting unit transmits the authentication-related information to the terminal device, which is the second external device, when the first scan instruction is received from the terminal device after the authentication start instruction has been received from the user.

10. The second transmission unit, after receiving the authentication start instruction from the user, transmits the authentication-related information to the server, which is the second external device, when it receives a second scan instruction from the server. The authentication-related information is transmitted from the server to the terminal device, as described in claim 1.

11. The aforementioned function execution device further, Display unit and A first display control unit, which, after receiving the authentication start instruction from the user and when receiving a display operation from the user, causes the user to display the authentication-related information, which is a code image obtained by coding the specific information, on the display unit, Equipped with, The function execution device according to claim 1, wherein even if the user has received the display operation and then the user has received the scan instruction, the authentication-related information is not transmitted to an external device.

12. The function execution device according to claim 11, wherein the display of the code image is restricted after the authentication start instruction is received from the user and the scan instruction is received from the user.

13. The aforementioned function execution device further, The system includes a second display control unit that, when the authentication start instruction is received from the user, displays an inquiry screen on the display unit to ask the user whether or not to display the code image on the display unit. The function execution device according to claim 11, wherein the display operation is an operation to display the code image on the display unit on the inquiry screen.

14. A function execution device, After receiving an authentication start instruction from the user, if a predetermined instruction is received, the output control unit outputs authentication-related information via a predetermined route. After the aforementioned authentication-related information is output, an authentication control unit controls the authentication process that uses specific information obtained using the aforementioned authentication-related information, A predetermined processing execution unit executes predetermined processing when authentication according to the aforementioned authentication process is successful, Equipped with, The output control unit is a function execution device that, even if a predetermined instruction is received after the authentication-related information has been output via a route different from the predetermined route, does not output the authentication-related information via the predetermined route.

15. The aforementioned authentication process is an authentication process that conforms to the Fast Identity Online (FIDO) standard. The authentication-related information includes at least a public key, as described in any one of claims 1 to 14.

16. A computer program for a function execution device capable of performing a scanning function, The aforementioned function execution device is Scan execution unit, Computers and, Equipped with, The aforementioned computer program comprises the following components of the computer, namely: A scan control unit that causes the scan execution unit to perform scanning of a document when a scan command is received from the user without an authentication start command being received from the user, A first transmission unit that transmits the scan data obtained by the scan to a first external device, After the authentication start instruction is received from the user, if the scan instruction is received from the user, a second transmission unit transmits authentication-related information to a second external device without causing the scan execution unit to perform a scan of the document. After the authentication-related information is transmitted to the second external device, an authentication control unit controls an authentication process that uses specific information obtained using the authentication-related information, A predetermined processing execution unit executes predetermined processing when authentication according to the aforementioned authentication process is successful, A computer program that functions as such.

17. A method performed by a function execution device capable of performing a scanning function, The device that performs the above function includes a scan execution unit, The aforementioned method, A scan control step in which, when a scan command is received from the user but no authentication start command is received from the user, the scan execution unit is instructed to perform scanning of the document; A first transmission step of transmitting the scan data obtained by the scan to a first external device, If, after the user has given the authentication start command, the user has given the scan command, a second transmission step is performed to transmit authentication-related information to a second external device without causing the scan execution unit to perform the scan of the document. After the authentication-related information is transmitted to the second external device, an authentication control step controls the authentication process that uses specific information obtained using the authentication-related information, If authentication in accordance with the aforementioned authentication process is successful, a predetermined process execution step is performed, A method that includes [a certain feature].

Images