Information processing device, control method, and program

Abstract

To reduce the burden on users caused by version upgrades of applications that interact with resource servers. [Solution] The image management device is an image management device operated by an application that has been granted permission to use a linked resource server, and includes an acquisition means for acquiring information representing the scope of the permission granted to the application before the application was updated, and a notification means for notifying the user if the permission to use the linked resource server, which is necessary for the user to use the functions added as a result of the application being updated, is not included in the scope.

Description

Technical Field

[0001] The present disclosure relates to a method for managing images.

Background Art

[0002] There is a resource server that provides an external service for managing image files and the like through cloud computing or the like. There is also a client device on which an application with permission to use the resource server operates. By such cooperation between the client device and the resource server, operations such as managing the image files processed by the client device on the resource server can be performed. In this case, the application operating on the client device is granted the permission to use the resource server within a set range. As an authentication method used to grant permissions to an application, a technique called OAuth2.0 is widely used.

[0003] Patent Document 1 proposes a method for determining the range of resources of an external storage service available to an application that performs processing in cooperation with the external storage service.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] Applications running on client devices are repeatedly updated to fix bugs or improve functionality. Therefore, even if an older version of an application had the necessary permissions to use the resource server, these permissions may be insufficient for the new version of the application, requiring additional permissions to be granted.

[0006] However, users cannot easily determine whether additional permissions need to be granted to an application when it is updated. Furthermore, users may not know how to grant additional permissions to an application. Patent Document 1 also does not describe how to grant additional permissions to an application. Therefore, there is a risk that users may not properly perform the operations necessary to enable the added functions after an application update. [Means for solving the problem]

[0007] The image management device disclosed herein is an image management device operated by an application that has been granted permission to use a linked resource server, and is characterized by comprising: an acquisition means for acquiring information representing the scope of the permission granted to the application before the application was updated; and a notification means for notifying the user if the permission to use the linked resource server, which is necessary for the user to use the functions added as a result of the application being updated, is not included in the scope. [Effects of the Invention]

[0008] The technology disclosed herein can reduce the burden on users caused by version upgrades of applications that interact with resource servers. [Brief explanation of the drawing]

[0009] [Figure 1]This figure shows an example of the configuration of an image management system. [Figure 2] This figure shows an example of the hardware configuration of an image management device. [Figure 3] A diagram illustrating the transfer functionality provided by the application. [Figure 4] This diagram shows an example of a screen display when an application interacts with a resource server. [Figure 5] This figure shows an example of the functional configuration of an image management device application. [Figure 6] This figure shows an example of the integration settings screen. [Figure 7] A diagram showing an example of a data structure for managing authorization information. [Figure 8] A diagram illustrating an example of a data structure for managing resource server policies. [Figure 9] A diagram illustrating an example of a data structure for managing messages presented to users. [Figure 10] This flowchart shows an example of the process for displaying a message. [Figure 11] This figure shows an example of a message screen. [Figure 12] This is a flowchart to explain the process that takes place after a message is displayed. [Modes for carrying out the invention]

[0010] Embodiments of the technology of this disclosure will be described with reference to the drawings. The components described in the following embodiments are for illustrative purposes only and are not intended to limit the scope of the technology of this disclosure to these embodiments only. The technology of this disclosure is not limited to the following embodiments, and various forms that do not depart from the gist of the technology of this disclosure are also included. Some of the following embodiments may be combined as appropriate.

[0011] <Embodiment 1> [System Configuration] Figure 1 shows an example of the configuration of the image management system according to this embodiment. The image management system includes an image management device 100, a user terminal 102, and resource servers 101a to 101e.

[0012] The image management device 100 is an information processing device that receives image data transmitted from a camera or terminal of a user who has an account described later, and provides services such as storing the received image data. The services provided by the image management device 100 include, for example, a cloud service that uploads and stores captured images obtained by taking pictures with a digital camera in real time using a network such as Wi-Fi. Various functions are provided to the user by an application 110 that runs on the image management device 100. The functions provided by the application 110 will be described later. The image management device 100 is connected to one or more resource servers 101 and one or more user terminals 102 via a network.

[0013] In this embodiment, a user is a user who has an account for services provided by an application 110 running on the image management device 100 and who uses the services provided by said application 110. A user can create an account via a user terminal 102 owned by the user that is connected to the network. The user terminal 102 may be a PC, tablet, smartphone, camera, etc. The user terminal 102 may be the same terminal used to upload images to the image management device 100.

[0014] An application 110 running on the image management device 100 can display a screen on the user terminal 102. The user can issue various instructions to the application 110 running on the image management device 100 via this screen. For example, the user can view or delete images managed by the image management device 100. Furthermore, the user can change settings related to services provided by the application running on the image management device 100 via this screen.

[0015] The resource servers 101a to 101e are information processing apparatuses that provide services such as a storage service, an editing service, and a microblog service, respectively. In order to distinguish the services provided by the resource servers 101a to 101e from the services provided by the application 110 operating in the image management apparatus 100, they may be referred to as external services. Although the image management system is described as including various resource servers 101a to 101e that each provide an external service, the number of resource servers 101a to 101e is not limited. Hereinafter, when referring to a resource server, it shall also refer to the external service operated by the resource server. Further, when referring to any one of the resource servers 101a to 101e, it may be simply described as the resource server 101.

[0016] The network is, for example, a LAN (Local Area Network), the Internet, or the like. Since the image management apparatus 100, the resource servers 101a to 101e, and the user terminal 102 are connected via the network, intercommunication between these apparatuses is configured to be possible.

[0017] [Hardware Configuration] FIG. 2 is a diagram showing an example of the hardware configuration of an image management apparatus 100, which is an information processing apparatus of the present embodiment.

[0018] The CPU 201 performs the calculations performed in each process and the control of each part. Note that the image management apparatus 100 may have one or more dedicated hardware different from the CPU 201 and may be configured to execute at least a part of the processes by the CPU 201. Examples of dedicated hardware include a processor used for image processing and control, an ASIC (Application Specific Integrated Circuit), an FPGA (Field Programmable Gate Array), and a DSP (Digital Signal Processor).

[0019] RAM202 functions as the main memory of CPU201 and is used as both the area where the executable program is deployed and the data area.

[0020] ROM203 is memory that stores the operating procedures of the CPU201. For example, ROM203 includes an area where the operating system (OS), which is the system program that controls the image management device 100, is recorded, and an area where information necessary for the system to operate is recorded. In addition, the data stored in ROM203 may also be stored in HDD209, as described later. Furthermore, the image management device 100 may include storage units such as NAND flash memory, SD cards, or solid-state drives (SSDs) instead of, or in addition to, HDD209. In this case, the data stored in ROM203 may also be stored in these storage units.

[0021] NETI / F204 is a network interface that communicates with the resource server 101 and the user terminal 102 via the network.

[0022] The VRAM 205 performs display control, which displays a screen representing the operating status of the image management device 100 on the display unit 206, based on instructions from the CPU 201. The display unit 206 is, for example, a display device such as a monitor.

[0023] The input / output controller 207 controls the input signals from the external input unit 208. The external input unit 208 is a device that receives operations performed by the operator. The external input unit 208 can be, for example, a keyboard, a pointing device such as a mouse, or an input device such as a touch panel display.

[0024] HDD209 is a storage unit used as a storage area for applications and various types of data.

[0025] The external storage device 210 is a device that reads the storage medium 211. For example, the external storage device 210 is a removable disk such as a floppy disk drive, CD-ROM drive, or SD card. The storage medium 211 is a storage medium that the external storage device 210 can read. For example, the storage medium 211 is a removable data recording device (removable media) such as a magnetic recording medium such as a floppy disk, an optical recording medium (e.g., CD-ROM), a magneto-optical recording medium (e.g., MO), or a semiconductor recording medium (e.g., SD card).

[0026] The external storage device 210 is used to read applications and data stored in the HDD 209 from the storage medium 211, etc. Alternatively, applications and data may be received from a device connected to the network via NETI / F 204.

[0027] The transmission bus 212 is a path for data exchange between each device. Data transmission between the CPU 201, RAM 202, ROM 203, NETI / F 204, VRAM 205, input / output controller 207, HDD 209, and external storage device 210 is performed via the transmission bus 212.

[0028] In this embodiment, the image management device 100 is described as a single device for the sake of explanation, but the image management device 100 may be a system in which multiple information processing devices behave as a single image management device 100.

[0029] [About the functions that Application 110 provides to the user] The application 110 that runs on the image management device 100 may be updated, and functions that can be used by the user may be added in accordance with the update. In this embodiment, the application 110 will be described as having an old version and a new version which is an updated version from the old version.

[0030] Figure 3 is a diagram illustrating the functionality provided by application 110. Figure 3(a) is a diagram illustrating the functionality provided by the old version of the application. Figure 3(b) is a diagram illustrating the functionality provided by the new version of application 110.

[0031] The older version of application 110 has a normal transfer function that saves user images, which are uploaded from the user to the image management device 100 and managed by application 110 on the image management device 100, to a designated location on a linked resource server. As shown in Figure 3(a), the designated location is, for example, the root folder.

[0032] A linked resource server is a resource server for which a user has an account, and which the user has authorized application 110 to access. In the explanation of Figure 3, the linked resource server is described as resource server 101a among resource servers 101a to 101e, but any of resource servers 101a to 101e can be a linked resource server. Also, the linked resource servers differ depending on the user. There may be multiple linked resource servers.

[0033] The new version of application 110 will include, in addition to the functions provided by the old version of application 110, a sorting function and a sorted transfer function (also called a sorted image transfer function).

[0034] The sorting function allows application 110 to select images from a specific user's images managed by application 110 that match registered sorting criteria. For example, if a sorting criterion is registered to sort images containing cats, application 110 will select images containing cats from the images of that specific user it manages. The process of selecting images that match the sorting criteria is also called "sorting" or "sorting process." Multiple sorting criteria may be registered, in which case a sorting process is performed for each registered sorting criterion. The sorted images are managed in association with an identifier that indicates the matching sorting criterion.

[0035] The sorting and transfer function allows application 110 to create albums for each registered sorting condition on the linked resource server 101a. If the linked resource server 101a has an album function, the user can enable the sorting and transfer function of application 110. If there are multiple linked resource servers, the sorting and transfer function can be enabled for each linked resource server.

[0036] An album refers to a container for managing image files together. That is, a folder containing image files that meet certain sorting criteria also constitutes an album. Resource server 101a is described as having an album function. Users can view a list of images belonging to an album.

[0037] For example, suppose application 110 has two sorting conditions registered: sorting condition 1 for sorting images containing ships, and sorting condition 2 for sorting images containing fish. In this case, the sorting function of application 110 sorts the images of a specific user managed by application 110 into images containing ships and images containing fish.

[0038] If the sorting image function is enabled, application 110 performs sorting transfer. In sorting transfer, application 110 transfers the sorted images to the linked resource server 101a so that an album is created for each image that matches each sorting condition. For example, application 110 creates two empty albums on the linked resource server 101a, transfers images that match sorting condition 1 to one album, and transfers images that match sorting condition 2 to the other album. If albums have already been created on the linked resource server 101a, application 110 transfers images that match the sorting condition to the album corresponding to that sorting condition.

[0039] In this way, the linked resource server 101a is created (updated) by application 110, containing album 1 with images of fish and album 2 with images of boats. For this reason, in order to enable the sorting and transfer function, the linked resource server 101a must not only have an album function, but application 110 must also be granted permission to create albums on the linked resource server 101a.

[0040] [Regarding the delegation of authority] The process of granting application 110 the same permission that a user has to use the resources of resource server 101a, which is already linked to resource server 101a, is also referred to as the delegation of authority to application 110. In other words, the delegation of authority to application 110 means that application 110 is permitted to use a predetermined range of resources from resource server 101a.

[0041] The user's permissions to use resource server 101a (the scope of available resources) include, for example, saving data to the linked resource server 101a and creating new albums (folders) on the linked resource server 101a. Delegation of permissions occurs when application 110 is permitted to cooperate with the resource server.

[0042] Figure 4 shows an example of a confirmation screen displayed on the user terminal 102 to confirm whether the user allows the resource server to integrate with application 110 before integration. For example, when resource server 101a integrates with application 110, confirmation screens 400 and 410 also display the scope of permissions to be delegated (granted) to application 110 in area 402. When the user presses the allow button 401 on confirmation screens 400 and 410, resource server 101a becomes an integrated resource server. Furthermore, the permissions displayed in area 402 of confirmation screen 400 are delegated to application 110 in the user's account.

[0043] It is preferable that the scope of user privileges delegated to application 110 from the user privileges held by the linked resource server 101a account be limited to the necessary scope. That is, the privileges necessary to execute the functions of the current version of application 110 should be delegated to application 110.

[0044] For example, when new features are added to an application with a version upgrade, the system administrator of the image management device 100 refers to developer manuals issued by the resource server to determine the permissions that should be granted to the application 110. The types of permissions required for each resource server are then managed using tables or similar systems.

[0045] For example, when an older version of application 110 interacts with the resource server 101a before integration, the permissions necessary for application 110 to perform normal transfers are delegated. Specifically, as shown in area 402 of Figure 4(a), the permissions delegated from the user to the older version of application 110 are the permission to save image data to the resource server 101a, but do not include the permission to create albums.

[0046] In this embodiment, the new version of application 110 includes a sorting and transfer function. Therefore, for a user to use the sorting and transfer function of application 110, application 110 must be granted permission to create albums in addition to the permission to save images to the resource server 101a.

[0047] Figure 4(b) shows the confirmation screen displayed when a user interacts with the resource server 101a using the new version of application 110. As shown in area 402 of Figure 4(b), when interacting with the new version of application 110, the permissions delegated to application 110 include the permission to create albums. Therefore, when interacting with the resource server 101a for the first time using the new version of the application, the appropriate permissions are delegated to application 110.

[0048] However, in older versions of the application, if it is already linked with a resource server, the method for delegating additional permissions to application 110 varies depending on the resource server. This embodiment describes a method to prevent users from failing to perform the required operations by notifying them so that the delegation of additional permissions to application 110 is performed appropriately.

[0049] [Functional Configuration] Figure 5 shows an example of the configuration of the functions of an application 110 executed in the image management device 100. In this embodiment, as shown in Figure 5, the application 110 of the image management device 100 has processing modules 501 to 515.

[0050] After automatic startup or when an operator inputs an instruction via the external input unit 208, the content of the instruction is transmitted to the CPU 201. The CPU 201 retrieves the program corresponding to the processing module among the processing modules 501 to 515 that corresponds to the content of the received instruction from the ROM 203, HDD 209, external storage device 210, or RAM 202, loads it into RAM 202, and executes the processing. The CPU 201 writes the calculation result to RAM 202, HDD 209, external storage device 210, etc. The CPU 201 also functions as a display control unit that displays the calculation result on the display unit 206 via VRAM 205 as needed. By operating in this manner, processing according to the processing modules 501 to 515 is performed. In this way, the processing modules 501 to 515 operate as part of the application or program used by the CPU 201. Note that some or all of the functions of the processing modules 501 to 515 may be implemented in hardware such as ASICs or electronic circuits.

[0051] The integration unit 501 performs integration processing with resource servers 101 to which the user has an account. When application 110 integrates with a resource server 101 using a user's account, the user authenticates application 110 from their own account on the resource server 101 to which they wish to integrate. That is, the user authorizes integration with application 110 from the confirmation screens 400 and 410 in Figure 4, as described above. If the authority to use the resources of the integrated resource server 101 is delegated to application 110 during integration, resource server 101 issues authorization information indicating the scope of the delegated authority. The authorization information is managed in application 110 by the authorization information management unit 502, which will be described later.

[0052] The authorization information management unit 502 manages authorization information by associating it with the user's ID and the resource server that issued the authorization information. The data structure for managing authorization information will be described later.

[0053] If the operation instructed by the user is an operation that instructs the start of a process to be performed in cooperation with the resource server 101, the authorization determination unit 504 determines, based on the authorization information managed by the authorization information management unit 502, whether the user has delegated the necessary authority for that process.

[0054] The resource server policy management unit 505 manages the policies of the resource server. Policies include the scope of permissions that can be delegated to the application 110 on the resource server 101, the actions taken when adding permissions, and whether or not an API is provided to add permissions. Since the policies defined differ for each resource server 101, the resource server policy management unit 505 manages the policies for each resource server 101. The method for managing policies will be described later. The application's processing module can refer to the policies and execute processing according to the policies.

[0055] The message management unit 506 manages the messages presented to the user. The method for managing messages will be described later.

[0056] The message determination unit 507 determines the message based on the determination result of the authorization determination unit 504 and the policy of the resource server 101 managed by the resource server policy management unit 505, and the message management unit 506 determines the message from among the messages.

[0057] The message display unit 508 generates a message screen 1100 (see Figure 11) based on the message determined by the message determination unit 507, and controls the user terminal 102 to display the message screen 1100. Details of the message screen 1100 will be described later.

[0058] The integration settings screen display unit 509 generates an integration settings screen 600 (see Figure 6) for the user to configure settings related to integration with the resource server 101, and controls the display of the integration settings screen 600 on the user terminal 102. Details of the integration settings screen 600 will be described later.

[0059] The integration settings reception unit 510 receives instructions from the user via the integration settings screen 600. Details will be described later.

[0060] After the message is presented by the message presentation unit 508, the processing decision unit 511 determines the necessary processing to add permissions based on the policy of the resource server 101 managed by the resource server policy management unit 505.

[0061] The disconnection unit 512 disconnects the connection with the connected resource server 101. The method of disconnection is to delete the authorization information of the connected resource server managed by the authorization information management unit 502, thereby disconnecting the connection with the connected resource server 101.

[0062] When the processing decision unit 511 decides to add authority, the additional authorization unit 513 requests the resource server 101 to delegate the additional authority by executing the additional authorization API of the resource server 101. As a result, the authorization information managed by the authorization information management unit 502 is updated.

[0063] The image management unit 514 manages images uploaded from a specific user's camera or other device, associating them with the user ID of that specific user. For example, a user's images are stored and managed on the HDD 209 or external storage device 210.

[0064] The sorting unit 515 performs sorting processing to select images that match registered sorting conditions from among the images of a specific user managed by the image management unit 514. The sorting unit 515 is included in the new version of application 110.

[0065] The transfer unit 503 uses authorization information managed by the authorization information management unit 502 to transfer images of a specific user managed by the image management unit 514 to the linked resource server 101. If the sorting transfer function is enabled in the new version of the transfer unit 503, it performs the sorting transfer described above.

[0066] [Regarding the integration settings screen presented to users] Figure 6 shows an example of a linkage settings screen 600 for users to configure settings related to linkage with the resource server 101. The linkage settings screen display unit 509 sends information to the user terminal 102 to display the linkage settings screen 600 shown in Figures 6(a) to (c), and the linkage settings screen 600 is displayed on the display unit of the user terminal 102.

[0067] The integration settings screens 600 in Figures 6(a) to 6(c) are all integration settings screens presented by the integration settings screen presentation unit 509 of the new version of application 110. The integration settings screen 600 will be explained using Figure 6(a). The resource server name display area 604 is the area in the integration settings screen 600 where the name (resource server name) representing the resource server to be configured (referred to as the target resource server) is displayed. Figure 6 will be explained assuming that the target resource server is resource server 101a. The resource server name is, for example, the name of the external service provided by the target resource server.

[0068] The integration status display area 601 is an area that displays the integration status between application 110 and the target resource server 101a in the user's account. Either "Integrated" or "Not Integrated" is displayed as the integration status.

[0069] Buttons 602 and 612 are buttons that allow the user to instruct application 110 whether to connect or disconnect from the target resource server 101a in the user's account. Depending on the connection status displayed in the connection status display area 601, the labels displayed on buttons 602 and 612 are switched to "Connect" or "Disconnect". In addition, the operation of application 110 when buttons 602 and 612 are pressed is switched according to the labels displayed on buttons 602 and 612. If the connection button 612 has the label "Connect", when pressed by the user, the connection unit 501 connects with the target resource server 101a in the user's account. If the disconnection button 602 has the label "Disconnect", when pressed by the user, the disconnection unit 512 disconnects from the target resource server 101a in the user's account.

[0070] The sorting transfer selection area 603 is where the user can choose whether to enable sorting transfers to the target resource server 101a in their account. There are radio buttons corresponding to "Enable" and "Do not enable," and the user can select either "Enable" or "Do not enable" by pressing one of the radio buttons. If "Enabled" is displayed in the integration status display area 601, the radio buttons become selectable. After integration with the target resource server 101a, the sorting transfer selection area 603 defaults to the "Do not enable" radio button being selected, and the integration settings screen 600 is displayed by default. The sorting transfer selection area 603 is a new setting item that was added when the application 110 was updated to a new version and the sorting transfer function was added.

[0071] Figure 6(b) shows an example of the integration settings screen 600 displayed when application 110 has not yet integrated with the target resource server 101a in the user's account. Therefore, "Not Integrated" is displayed in the integration status display area 601, and the label of the integration button 612 becomes "Integrate". In addition, when "Not Integrated" is displayed in the integration status display area 601, the radio button is displayed in a grayed-out state, indicating that it is disabled and cannot be pressed.

[0072] [Regarding authorization information] Figure 7 shows an example of the data structure of the authorization information management table 700, which is managed by the authorization information management unit 502. The authorization information management unit 502 is described as managing authorization information and related information in a table format, but the format of the data structure for managing authorization information is not limited to a table format.

[0073] Column 701 of the authorization information management table 700 holds the user ID value, which uniquely identifies the user.

[0074] Column 702 holds the resource server name mentioned above, which identifies the resource server that the user indicated by the user ID held in column 701 of the same row has been authorized to interact with application 110. The resource server name held in column 702 is the same as the resource server name managed in the data structure that manages the policies described later.

[0075] Column 703 holds the authorization information issued by resource server 101 when a user whose user ID is stored in column 701 of the same row delegates authority to resource server 101, whose name is stored in column 702 of the same row, to application 110. Application 110 can obtain the details of the authority contained in the authorization information by sending the authorization information to resource server 101 for querying. Using the authority contained in this authorization information, application 110 transfers images to resource server 101 and creates an album.

[0076] In Figure 7, column 703 at row 711 holds authorization information issued by the linked "Resource Server A". Also, in Figure 7, column 703 at row 712 holds authorization information issued by the linked "Resource Server C". Therefore, it can be seen that the user with user ID "1" in column 701 of Figure 7 has authorized application 110 to link with "Resource Server A" and "Resource Server C", and has delegated user authority to application 110.

[0077] Column 704 holds a setting value (sorting transfer setting value) indicating whether to perform sorting transfer to resource server 101, whose name is stored in column 702 of the same row. The sorting transfer setting value can be ON, OFF, or NULL. If column 704 is a blank cell, it indicates that the value is NULL.

[0078] Sorting and transferring is a feature added in the new version of Application 110. Let's assume that Application 110 was previously linked with Resource Server A in its old version, and after upgrading to the new version, the sorting and transferring settings for Resource Server A have not yet been configured on the linkage settings screen 600. In this case, the column 704 of row 711, where the information for Resource Server A is stored, will contain a NULL value.

[0079] Setting the sorting transfer setting to ON indicates that sorting transfer is enabled. Setting the sorting transfer setting to OFF indicates that album creation authority has been delegated, but sorting transfer is not enabled.

[0080] In this way, the authorization information management table 700 manages the names of the linked resource servers 101 that a user has authorized to link with application 110, and the user IDs that indicate the user who authorized the link. Furthermore, authorization information issued by the linked resource servers 101 is managed in association with the resource server that issued the authorization information.

[0081] The authorization information management table 700 in Figure 7 may be modified when application 110 is upgraded, depending on newly added functions. For example, the authorization information management table 700 in the old version of the application does not have column 704, but column 704 is added to the authorization information management table 700 in the new version of the application.

[0082] The relationship between the integration settings screen 600 in Figure 6 and the authorization information management table 700 in Figure 7 will be explained. For example, suppose user 1, whose user ID is "1", instructs application 110 to display the integration settings screen for configuring settings for resource server A.

[0083] Suppose User 1 authorized the connection with resource server A when application 110 was an older version. Therefore, authorization information is stored in column 703 of row 711 in Figure 7. Consequently, as shown in Figure 6(a), "Connected" is displayed in the connection status display area 601 of the connection settings screen 600, and the disconnect button 602 with the label "Disconnect" is displayed.

[0084] Furthermore, after application 110 is updated to a new version, let's assume that user 1 has not yet configured the sorting transfer settings for resource server A on the integration settings screen 600. In this case, a NULL value is retained as the sorting transfer setting value, as shown in column 704 of row 711 in Figure 7. When the sorting transfer setting value is NULL, the radio button in the sorting transfer selection area 603 is displayed with "Do not perform" selected, as shown in Figure 6(a). In other words, if the sorting transfer setting value held in column 704 is NULL, the integration settings screen 600 shown in Figure 6(a) will be displayed.

[0085] On the other hand, user 2, whose user ID is "2", has not authorized communication with resource server A in their account. In this case, application 110 is not delegated user privileges on resource server A. Also, in this case, as shown in Figure 7, information about resource server A is not registered in the authorization information management table 700 for user 2. When user 2 instructs application 110 to display the resource server A communication settings screen 600, the communication settings screen 600 shown in Figure 6(b) is displayed.

[0086] In the integration settings screen 600 shown in Figure 6(b), let's assume that User 2 presses the integration button 612 to integrate with resource server A using the new version of application 110. In this case, a new row is added to the authorization information management table 700 in Figure 7, with "2" in column 701, "Resource Server A" in column 702, authorization information in column 703, and "OFF" in column 704. In this way, when integrating with a resource server using the new version of application 110, the initial value of the sorting transfer setting value in column 704 of the row containing the information of that resource server is set to OFF. For example, in Figure 7, the sorting transfer setting value for "Resource Server C" in row 712 is "OFF". Therefore, the integration has been performed using the new version of application 110.

[0087] If the sorting transfer setting value in column 704 of the authorization information management table 700 is OFF, the integration settings screen 600 shown in Figure 6(a) will be displayed, just as if the sorting transfer setting value were NULL. Therefore, if the sorting transfer setting value held in column 704 is NULL or OFF, the same integration settings screen 600 shown in Figure 6(a) will be displayed. However, the processing is different when the "Implement" radio button in the sorting transfer selection area 603 in Figure 6(a) is selected. By checking the sorting transfer setting value held in column 704 of the authorization information management table 700 in Figure 7, it is possible to determine whether the integration was performed in the old version or the new version, and thus the processing can be switched. Details will be described later.

[0088] [Regarding the policy for services provided by the resource server] Figure 8 shows a policy management table 800, which is an example of the data structure of information managed by the resource server policy management unit 505. The resource server policy management unit 505 is described as managing resource server policies in a table format as an example, but the policy management format is not limited to a table format.

[0089] Column 801 of the policy management table 800 stores the resource server names of all resource servers with which the application 110 of the image management device 100 can interact.

[0090] Column 802 stores the album flag value, which indicates whether the resource server 101 whose name is stored in column 801 of the same row has the album function. Resource server 101 associated with the album flag value "TRUE" has the album function. Resource server 101 associated with the album flag value "FALSE" does not have the album function.

[0091] Column 803 holds the policy details for when additional permissions are delegated to application 110 on resource server 101, whose name is stored in column 801 of the same row. Column 803 can hold either "Reconnect", "Add", or a NULL value. "Reconnect" indicates that, in order to delegate additional permissions to application 110, the current connection must be terminated and then reconnected. "Add" indicates that, when adding permissions to be delegated to application 110, it is permitted to add them to the current permissions. If the value of the album flag in column 802 is "FALSE", then a NULL value is stored in column 803 of the same row.

[0092] Column 804 holds the URL information for the API used to add permissions to application 110, provided that column 803 in the same row contains "Add". The information held in column 804 is an API exposed by resource server 101. By executing this API, application 110 can retrieve the authorization information to which the permission to create albums has been added. If resource server 101 has "Reconnect" in column 803, column 804 in the same row will contain a NULL value.

[0093] Column 805 holds a message ID that uniquely identifies the message to be displayed when a user chooses to add a sorting transfer function to resource server 101, whose name is stored in column 801 in the same row.

[0094] Figure 9 shows an example of a data structure for managing messages corresponding to a message ID, specifically a message management table 900. Column 901 of the message management table 900 holds the aforementioned message ID.

[0095] Column 902 holds the message indicated by the message ID held in column 901 of the same row. Column 902 is pre-registered with messages that conform to the policy of resource server 101.

[0096] The data held in the policy management table 800 and the message management table 900 is pre-registered by the system administrator of the image management device 100 according to the new functions added in the new version of application 110. The system administrator edits the data held in the policy management table 800 and the message management table 900 as needed. For example, when adding a new resource server 101, deleting a registered resource server 101, or when there is a change in the policy of a resource server, the system administrator edits each table.

[0097] [flowchart] Figure 10 is a flowchart illustrating the process for enabling sorting transfer. The process shown in the flowchart in Figure 10 involves loading program code stored in ROM 203, HDD 209, and external storage device 210 into RAM 202, and then executing it using CPU 201. Alternatively, some or all of the steps in Figure 10 may be implemented using hardware such as ASICs or electronic circuits. The symbol "S" in the description of each process indicates a step in that flowchart, and the same applies to subsequent flowcharts.

[0098] The flowchart in Figure 10 begins when the integration settings screen 600 in Figure 6(a) is displayed on the user terminal 102. In the explanation of the flowchart in Figure 10, unless otherwise specified, the target resource server is assumed to be resource server 101a, whose resource server name is resource server A. Also, application 110 is the new version of application 110.

[0099] When configuring settings related to integration with the target resource server 101a, the user selects the target resource server from the screen presented by application 110 displayed on the user terminal 102. Application 110 extracts the row containing the user's user ID and the name of the target resource server 101a selected by the user from the authorization information management table 700 in Figure 7, and obtains the sorting transfer setting value in column 704 of the extracted row. If the sorting transfer setting value is NULL or OFF, the integration settings screen 600 shown in Figure 6(a) is displayed on the user terminal 102 with the "Do not perform" radio button in the sorting transfer selection area 603 selected by default.

[0100] In S1001, the linkage setting reception unit 510 determines whether the state in which the "Do not perform" radio button in the sorting transfer selection area 603 of the linkage setting screen 600 in Figure 6(a) has been selected has been changed to the state in which the "Perform" radio button has been selected. If the linkage setting reception unit 510 determines that the user has changed to the state in which the "Perform" radio button has been selected, it proceeds to S1002.

[0101] In S1002, the message determination unit 507 searches column 801 of the policy management table 800 in Figure 8 for a row containing the name of the target resource server 101a. From columns 802 and 805 of the row associated with the information of the target resource server 101a found as a result of the search, the value of the album flag and the message ID are obtained. In the case of resource server A, "TRUE" is obtained as the value of the album flag and "1" is obtained as the message ID.

[0102] In S1003, the message determination unit 507 determines whether the target resource server 101a has an album function based on the value of the album flag obtained in S1002. If the value of the obtained album flag is "TRUE", the message determination unit 507 determines that the album function exists (S1003 is YES) and proceeds to S1004. If the album flag is FALSE, the message determination unit 507 determines that the album function does not exist (S1003 is NO) and terminates this flowchart. If the album function does not exist, as described above, the application 110 cannot perform sorting transfer to the target resource server. Therefore, the application 110 cannot accept the selection of the "Execute" radio button in the sorting transfer selection area 603. Thus, the flowchart terminates. For this reason, the message determination unit 507 may be controlled to display a message on the user terminal 102 indicating that sorting transfer cannot be enabled for the target resource server.

[0103] In S1004, the authorization determination unit 504 extracts the row containing the user's user ID and the name of the target resource server 101a from the authorization information management table 700 in Figure 7, and retrieves the authorization information stored in column 703 of the extracted row.

[0104] The authorization determination unit 504 sends the acquired authorization information to the target resource server 101a to query the scope of the permissions delegated to application 110. Based on the query results, the authorization determination unit 504 determines whether the scope of permissions granted to application 110 includes the permission to create an album.

[0105] As mentioned above, if the sorting transfer setting value is NULL, it means that the old version of application 110 has already linked with the target resource server 101a, and therefore only the permission to save images has been delegated to application 110. In other words, application 110 is not granted the permission to create albums. Therefore, as a general rule, if the sorting transfer setting value is NULL, it is determined that the permission to create albums is not included. If the permission determination unit 504 determines that application 110 is not granted the permission to create albums (S1004 is NO), it proceeds to S1005.

[0106] On the other hand, if the sorting transfer setting value is set to NO, it means that the new version of application 110 has already linked with the target resource server 101a, but sorting transfer is not enabled. Normally, when linking with the new version of application 110, the authority to create albums on the target resource server 101a is delegated to application 110. Therefore, in principle, if the sorting transfer setting value is set to NO, it is determined that the application has the authority to create albums. If the authority determination unit 504 determines that the application 110 has the authority to create albums (S1004 is YES), it proceeds to S1007. S1007 will be explained later.

[0107] In S1005, the message determination unit 507 retrieves the message corresponding to the message ID obtained in S1002 from the message management table 900 in Figure 9.

[0108] In S1006, the message display unit 508 generates information for displaying the message screen 1100 (see Figure 11), which contains the message acquired in S1005, and sends the generated information to the user terminal 102. The message screen 1100 is displayed on the user terminal 102. The flowchart in Figure 10 then ends. The linkage settings screen 600 is also closed.

[0109] Figure 11 shows an example of a message screen displayed on the user terminal 102 as a result of S1006. Figure 11(a) shows an example of a message screen 1100 when the policy for adding permissions to the target resource server 101a is "re-linking". Figure 11(b) shows an example of a message screen 1100 displayed when the policy for adding permissions held in column 803 of the target resource server is "add".

[0110] The system administrator of the image management device 100 has prepared message templates for when the policy for adding permissions is "re-linking" and for when the policy for adding permissions is "add". The message management table 900 in Figure 9 holds messages generated from the templates corresponding to the permission addition policy for each resource server 101. Therefore, S1006 displays a message corresponding to the permission addition policy of the target resource server. By displaying a message corresponding to the policy of the target resource server in this way, the user can be prompted to take the necessary action.

[0111] Figure 12 is a flowchart showing an example of the process that takes place after the message screen 1100 is displayed on the user terminal 102.

[0112] In this embodiment, the message screen 1100 includes an OK button 1101, and when the OK button 1101 is pressed, the flowchart in Figure 12 is started. The flowchart in Figure 12 may also be started when the message screen 1100 is closed.

[0113] Note that the OK button 1101 does not necessarily have to be included in the message screen 1100. In this case, for example, the flowchart in Figure 12 may be started when the message screen 1100 is displayed.

[0114] Furthermore, as shown in Figure 11(c), the message screen 1100 may also include a cancel button 1102. If the cancel button 1102 is pressed, the result of the flowchart in Figure 10 may be canceled, and the "Do not perform" radio button in the sorting transfer selection area 603 on the linkage settings screen 600 may be returned to the selected state.

[0115] In S1201, the processing decision unit 511 searches column 801 of the policy management table 800 in Figure 8 for a row containing the name of the target resource server. From column 803 of the row associated with the information of the target resource server found as a result of the search, it retrieves the policy for when permission is added. If "Add" is stored in column 803, it also retrieves "Add Authorization API" in column 804. If the target resource server is resource server 101a, which is resource server A, then "Reconnection" is retrieved.

[0116] In S1202, the processing decision unit 511 switches the processing according to the content of the policy obtained in S1201 when the privilege was added. If the value of the policy when the privilege was added is "add", the process proceeds to S1203.

[0117] In S1203, the additional authorization unit 513 processes the request from the target resource server to grant additional permission to create albums. First, the additional authorization unit 513 executes the API for additional authorization of the target resource server obtained in S1201. As a result of executing the API, the additional authorization unit 513 obtains authorization information from the target resource server. The additional authorization unit 513 updates the authorization information in the row of the authorization information management table 700 in Figure 7 that holds the user ID of the relevant user and the name of the target resource server. It also changes the sorting transfer setting value in the same row to ON. Finally, the flowchart in Figure 12 is completed.

[0118] For example, suppose the user's user ID is 3 and the name of the target resource server is resource server B. In this case, the authorization information held in column 703 of row 715 in the authorization information management table 700 in Figure 7 will be updated to authorization information that includes the permission to create albums. Also, the sorting transfer setting value held in column 704 of row 715 will be changed to ON.

[0119] The processing decision unit 511 proceeds to S1204 if the policy value when adding permissions is "re-linking". The target resource server is assumed to be resource server 101a.

[0120] In S1204, the disconnection unit 512 disconnects the connection with the target resource server 101a. For example, the disconnection unit 512 deletes the row in the authorization information management table 700 in Figure 7 that holds the user ID of the relevant user and the name of the target resource server.

[0121] For example, if the user's user ID is 1 and the name of the target resource server is resource server A, then row 711 in the authorization information management table 700 in Figure 7 will be deleted.

[0122] The reason for disconnecting the connection is that, for resource servers where the policy for adding permissions is reconnection, the permissions delegated to application 110 can only be changed when connecting with the resource server. Therefore, in order to enable sorting transfer on the target resource server 101a, and to delegate the permission to create albums to application 110, it is necessary to temporarily disconnect the connection with the target resource server 101a.

[0123] In S1205, the linkage settings screen display unit 509 prompts the user to re-link with the target resource server 101a by displaying the linkage settings screen 600 shown in Figure 6(b) on the user terminal 102.

[0124] When the user presses the link button 612 on the link settings screen 600 in Figure 6(b) on the user terminal 102, a link request is sent from the new version of application 110 to the target resource server 101a. Upon receiving the request, the target resource server 101a displays the confirmation screen 410 in Figure 4(b) on the user terminal 102. As mentioned above, when linking with the new version of application 110, the delegated permissions include the permission to create albums.

[0125] In S1206, when the authorization button 401 is pressed on the confirmation screen 410 in Figure 4(b), the authorization information management unit 502 updates the authorization information management table 700 in Figure 7 because the target resource server 101a becomes a linked resource server again. Specifically, the authorization information management unit 502 adds a row to the authorization information management table 700 in Figure 7 that holds the user ID of the relevant user and resource server A, which is the name of the target resource server 101a. Column 703 of the added row holds authorization information including the permission to create albums. Also, column 704 of the added row holds OFF as the initial value for the sorting transfer setting.

[0126] In S1207, the linkage settings screen display unit 509 causes the linkage settings screen 600 shown in Figure 6(a) for configuring the target resource server 101a to be displayed again on the user terminal 102. Then, the flowchart in Figure 12 ends, and the flowchart in Figure 10 starts again.

[0127] In the flowchart shown in Figure 10, the determination in S1004 is that the user has the authority to create an album (S1004 is YES), and the process proceeds to S1007.

[0128] In S1007, the authorization information management unit 502 changes the sort transfer setting value held in column 704 of the row in the authorization information management table 700 shown in Figure 7 that holds the user ID of the relevant user and the name of the target resource server 101a to ON. The linkage settings screen 600 then shows the "Implement" radio button selected, as shown in Figure 6(c).

[0129] In this embodiment, when adding permissions, S1006 is controlled to display a message to the user according to the policy of the target resource server. For example, if the policy when adding permissions to the target resource server 101a is "reconnect," the connection with the target resource server 101a is temporarily disconnected. After that, the user needs to instruct application 110 to connect with the target resource server 101a via the connection settings screen 600 in Figure 6(b). If the connection with the target resource server 101a is disconnected without the message screen 1100 in Figure 11 being displayed, the user may not understand why the connection with the target resource server 101a was disconnected. For this reason, the user may not perform the following operations appropriately. For example, if the message screen 1100 in Figure 11(a) is not displayed, after the connection with the target resource server 101a is disconnected, the user may close the screen without pressing the connection button 612 on the connection settings screen 600 in Figure 6(b).

[0130] In this embodiment, a message screen 1100 as shown in Figure 11(a) is displayed. Therefore, after the connection with the target resource server 101a is terminated, the user can be notified that reconnection is necessary by pressing the connection button 612 on the connection settings screen 600 in Figure 6(b). As a result, after the connection with the target resource server 101a is terminated, reconnection with the target resource server 101a is performed smoothly. Therefore, the sorting and transfer function of application 110 can be appropriately enabled even for resource servers 101a whose policy when adding permissions is "reconnection". Thus, when a user uploads an image to the image management device 100, sorting is performed automatically and the corresponding image is transferred to the album on resource server 101a.

[0131] Furthermore, the flowchart process shown in Figure 10 will not be disclosed unless the user selects the "Execute" radio button in the sorting transfer selection area 603 of the linkage settings screen 600 in Figure 6(a). Even before selecting the "Execute" radio button for the target resource server 101a, the user can still use the normal transfer that transfers all images.

[0132] Furthermore, if the target resource server does not have an album function, the system is controlled to prevent the display of the message screen 1100 in Figure 11 on the user terminal 102, and to prevent the execution of the flowchart in Figure 12. In sorting transfers to resource servers without an album function, application 110 will perform a normal transfer with delegated permissions.

[0133] As described above, according to this embodiment, it is possible to display a message in accordance with the policy of the resource server 101 to users who have linked with the old version of application 110, prompting them to delegate their authority to application 110.

[0134] <Other Embodiments> This disclosure can also be implemented by supplying a program that implements one or more of the functions of the embodiments described above to a system or device via a network or storage medium, and by having one or more processors in the computer of that system or device read and execute the program. It can also be implemented by a circuit (e.g., an ASIC) that implements one or more functions. Furthermore, the program may be recorded on a storage medium readable by a computer and provided.

[0135] The technology disclosed in the embodiments described above includes the following configuration.

[0136] (Composition 1) An image management device operated by an application that has been granted permission to use a linked resource server, An acquisition means for acquiring information representing the scope of the permissions granted to the application before the application was upgraded, If the user does not have the authority to use the linked resource server, which is necessary for the user to use the functions added as a result of the application being updated, a notification means is provided to notify the user accordingly. An image management device characterized by having the following features.

[0137] (Configuration 2) A sorting method for sorting images from a specific user's images that meet sorting criteria, The system further includes a transfer means for transferring the image of the specific user to the linked resource server, The added function is a function that transfers images matching the sorting criteria to the corresponding album on the linked resource server using the transfer means. The permission required to use the aforementioned added functionality is the permission to create the aforementioned album on the linked resource server. The image management device according to configuration 1, characterized in that it is a picture management device.

[0138] (Composition 3) The aforementioned album is a function for managing image files in a group. The image management device according to configuration 2, characterized in that...

[0139] (Composition 4) The application is granted the right to use the resource server, and the application further has authorization information management means for managing authorization information issued by the resource server in association with a value that indicates the resource server. The acquisition means acquires the authorization information associated with the linked resource server and transmits the acquired authorization information to the linked resource server, thereby acquiring the information representing the range. An image management device according to any one of configurations 1 to 3, characterized by the above.

[0140] (Composition 5) The notification means is, If the authorization information associated with the linked resource server is the authorization information issued when the application linked with the linked resource server before the application was updated, the user shall receive the predetermined notification. The image management device according to configuration 4, characterized in that it is a picture management device.

[0141] (Composition 6) The resource server further has a policy management means for managing policies when granting additional permissions to the aforementioned application. An image management device according to any one of configurations 1 to 5, characterized in that it is an image management device.

[0142] (Composition 7) The aforementioned policy includes re-integration, which grants additional permissions to the application by disconnecting and then re-integrating it, and additional authorization, which grants additional permissions to the application without disconnecting it. The image management device according to configuration 6, characterized in that it is a picture management device.

[0143] (Composition 8) The notification means is, If the policy of the previously linked resource server is the re-linking policy, a message will be sent indicating that the link with the previously linked resource server will be terminated. The image management device according to configuration 7, characterized by the features described above.

[0144] (Composition 9) A means for disconnecting the connection with the linked resource server after the aforementioned message has been notified, The system further includes a means for reconnecting with a resource server that has been disconnected from the linked resource server, so that the necessary permissions for using the added function are granted after the connection with the previously linked resource server has been terminated. The image management device according to configuration 8, characterized by the above.

[0145] (Composition 10) If the policy of the linked resource server is the additional authorization, the system further includes an additional authorization means for requesting the linked resource server to add the necessary permissions to use the added functionality. The image management device according to configuration 7 or 8, characterized by the above.

[0146] (Composition 11) The notification means provides the predetermined notification by displaying a message on the user's terminal. An image management device according to any one of configurations 1 to 10, characterized by the above.

[0147] (Composition 12) The system further includes message management means for managing messages generated in accordance with the policy of the resource server, The notification means retrieves messages associated with the linked resource server from among the messages managed by the message management means, and displays the retrieved messages on the user's terminal to perform the predetermined notification. The image management device according to configuration 6, characterized in that it is a picture management device.

[0148] (Composition 13) A screen presentation method that shows the user a configuration screen for linking with the resource server, The system further includes a receiving means for receiving information that the user has performed on the settings screen, The notification means will provide the predetermined notification when the user gives instructions to enable the added function via the settings screen. An image management device according to any one of configurations 1 to 12, characterized by the above.

[0149] (Composition 14) The aforementioned transfer means is If the resource server does not have the function to create albums, or if the user does not configure the system to enable the added function, the images of the specific user will be transferred to a designated location on the linked resource server. The image management device according to configuration 2, characterized in that...

[0150] (Composition 15) A method for controlling an image management device operated by an application that has been granted permission to use a linked resource server, A step of obtaining information representing the scope of the permissions granted to the application before the application was upgraded, If the user does not have the necessary permissions to use the linked resource server, which is required for the user to use the functions added as a result of the application being updated, a notification step is made to notify the user accordingly. A control method characterized by having the following features.

[0151] (Composition 16) A program for causing a computer to perform each of the means of the image management device described in any one of configurations 1 to 14. [Explanation of Symbols]

[0152] 502 Authorization Information Management Department 508 Message Display Section

Claims

1. An image management device operated by an application that has been granted permission to use a linked resource server, An acquisition means for acquiring information representing the scope of the permissions granted to the application before the application was upgraded, If the user does not have the authority to use the linked resource server necessary to use the functions added as a result of the application being upgraded, a notification means is provided to notify the user accordingly. An image management device characterized by having the following features.

2. A sorting method for sorting images from a specific user's images that meet sorting criteria, The system further includes a transfer means for transferring the image of the specific user to the linked resource server, The added function is a function that transfers images matching the sorting criteria to the corresponding album on the linked resource server using the transfer means. The permission required to use the aforementioned added functionality is the permission to create the aforementioned album on the linked resource server. The image management device according to feature 1.

3. The aforementioned album is a function for managing image files in a group. The image management device according to feature 2.

4. The application is granted the right to use the resource server, and the application further has authorization information management means for managing authorization information issued by the resource server in association with a value that indicates the resource server. The acquisition means acquires the authorization information associated with the linked resource server and transmits the acquired authorization information to the linked resource server, thereby acquiring the information representing the range. The image management device according to feature 1.

5. The notification means is, If the authorization information associated with the linked resource server is the authorization information issued when the application linked with the linked resource server before the application was updated, the user shall receive the predetermined notification. The image management device according to feature 4.

6. The resource server further has a policy management means for managing policies when granting additional permissions to the aforementioned application. The image management device according to feature 1.

7. The aforementioned policy includes re-integration, which grants additional permissions to the application by disconnecting and then re-integrating it, and additional authorization, which grants additional permissions to the application without disconnecting it. The image management device according to feature 6.

8. The notification means is, If the policy of the previously linked resource server is the re-linking policy, a message will be sent indicating that the link with the previously linked resource server will be terminated. The image management device according to feature 7.

9. A means for disconnecting the connection with the linked resource server after the aforementioned message has been notified, The system further includes a means for reconnecting with a resource server that has been disconnected from the linked resource server, so that the necessary permissions for using the added function are granted after the connection with the previously linked resource server has been terminated. The image management device according to feature 8.

10. If the policy of the linked resource server is the additional authorization, the system further includes an additional authorization means for requesting the linked resource server to add the necessary permissions to use the added functionality. The image management device according to feature 7.

11. The notification means provides the predetermined notification by displaying a message on the user's terminal. The image management device according to feature 1.

12. The system further includes message management means for managing messages generated in accordance with the policy of the resource server, The notification means retrieves messages associated with the linked resource server from among the messages managed by the message management means, and displays the retrieved messages on the user's terminal to perform the predetermined notification. The image management device according to feature 6.

13. A screen presentation method that shows the user a configuration screen for linking with the resource server, The system further includes a receiving means for receiving information that the user has performed on the settings screen, The notification means will provide the predetermined notification when the user gives instructions to enable the added function via the settings screen. The image management device according to feature 1.

14. The aforementioned transfer means is If the resource server does not have the function to create albums, or if the user does not configure the system to enable the added function, the images of the specific user will be transferred to a designated location on the linked resource server. The image management device according to feature 2.

15. A method for controlling an image management device operated by an application that has been granted permission to use a linked resource server, A step of obtaining information representing the scope of the permissions granted to the application before the application was upgraded, If the user does not have the authority to use the linked resource server necessary to use the functions added as a result of the application being updated, a notification step is made to give the user a predetermined notification. A control method characterized by having the following features.

16. A program for causing a computer to execute each means of an image management device according to any one of claims 1 to 14.

Images