Information processing device, information processing method, and program

Abstract

To provide processing for a user to reduce the time and effort in checking a screen when the user uses a service through authentication performed by a server.SOLUTION: An information processing apparatus manages information on a user, and has: receiving means that receives a request to execute first processing involving authentication of the user from a server that provides a service to the user; verification means that performs verification as to whether the execution request is valid; and message transmission means that, based on a result of the verification, transmits a message including a link to access the server to a terminal operated by the user. The message is a message for the server to provide the terminal with a screen for performing second processing according to a result of the first processing.SELECTED DRAWING: Figure 5

Description

[Technical field]

[0001] The present invention relates to a technique for authenticating a user who uses a service. [Background technology]

[0002] In recent years, services that allow users to use various functions of a server via a network have been widely provided. A server usually provides a service to a user in a state where an authenticated user is logged in. Patent Document 1 discloses a method in which an authentication server authenticates the user by sending the user a confirmation email including a one-time URL and permits the user to log in. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2004-192193 A Summary of the Invention [Problem to be solved by the invention]

[0004] In Patent Document 1, a screen corresponding to the processing by the server that provides the service and a screen corresponding to the processing by the server that manages user registration, updates, etc. are provided separately. This causes a problem that it takes time for the user to check the screen before using the service.

[0005] The present invention has been made to solve the above-mentioned problems, and aims to provide a process for reducing the effort required for checking a screen when a user uses a service via authentication by a server. [Means for solving the problem]

[0006] In order to solve the above problems, an information processing device according to the present invention is an information processing device that manages information about a user, and includes a first authentication means that performs a first authentication of the user, and information for performing a second authentication of the user that is different from the first authentication after the first authentication is performed by the first authentication means. The information on the model of the user's device and a control means for displaying on the user's terminal a screen including an area for inputting a user ID and an area for inputting information for providing a service to the user's terminal. Effect of the Invention

[0007] According to the present invention, when a user uses a service via authentication by a server, the time and effort required for checking a screen can be reduced. [Brief description of the drawings]

[0008] [Figure 1] A block diagram showing an example of a system configuration of an information processing system. [Diagram 2] FIG. 1 is a block diagram showing an example of a hardware configuration of an information processing device. [Diagram 3] A block diagram showing an example of a functional configuration of an information processing system. [Figure 4] FIG. 13 is a diagram showing an example of information stored in a storage unit; [Diagram 5] 1 is a flowchart showing a process in an information processing system. [Figure 6] FIG. 13 is a diagram showing an example of a message for requesting execution of a user process. [Figure 7] A diagram showing an example of a confirmation message [Figure 8] An example of an integrated services screen [Figure 9] Flowchart showing verification processing of user processing execution request A [Figure 10] Flowchart showing verification processing of user processing execution request B [Figure 11] Flowchart showing verification processing of user processing execution request A [Figure 12] A block diagram showing an example of a functional configuration of an information processing system. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] Hereinafter, the present embodiment will be described with reference to the drawings. Note that the following embodiment does not necessarily limit the present invention. Furthermore, not all of the combinations of features described in the present embodiment are necessarily essential to the solution of the present invention.

[0010] [First embodiment] In a system consisting of multiple service providing servers, a user management server often manages users collectively. The user management server has functions to perform various user processes such as registering, updating, and deleting users, and to authenticate registered users. The service providing server allows users authenticated by the user management server to log in and provides services to each user.

[0011] When using a service involving user authentication, there are cases where the service providing server needs to perform service processing depending on the result of user processing by the user management server. For example, when the user management server performs an initial activation process, the service providing server provides a screen corresponding to the initial use. Another example is when the service providing server performs an extended attribute update process when the user management server performs a user attribute update process. For example, when the service providing server provides an image management service, the extended attribute is updated by updating information such as the camera model. Also, when the service providing server provides a print service, the extended attribute is updated by updating information such as the printer model.

[0012] Therefore, in this embodiment, the user management server that receives a user processing execution request from a service providing server judges whether the service providing server is a legitimate client. If the service providing server is a legitimate client, the user management server transmits a confirmation message including a link to the service providing server to the user terminal. In response to the user accessing the link to the service providing server, the service providing server provides a screen for the user to input information required for the user processing and information required for the service processing. The user input via this screen allows the service processing to be performed according to the result of the user processing. In addition, since the screen provision performed by the user management server and the screen provision performed by the service providing server are integrated, the effort required for the user to check the screen is reduced compared to the case where the user processing and the service processing are performed independently. Hereinafter, the information processing system including the user management server, the service providing server, and the user terminal in this embodiment will be described in detail.

[0013] <System configuration of information processing system> First, an example of the system configuration of the information processing system according to this embodiment will be described with reference to the block diagram of Fig. 1. The information processing system is composed of a user management server 101, a service providing server 102, and a user terminal 103. The user management server 101, the service providing server 102, and the user terminal 103 can communicate with each other via a network 104. The network 104 is connected as an external network such as the Internet. Note that the network 104 may be connected as the same network such as a LAN, or may be a mixture of the Internet, LAN, and the like.

[0014] The user management server 101 is an information processing device that manages and authenticates users, and performs user processing involving identity verification using a confirmation message. The service providing server 102 is an information processing device that provides services to users, and performs service processing in response to user requests. The user terminal 103 is a terminal that the user operates to use the services provided by the service providing server 102, and is a personal computer (PC) or a mobile terminal. In this embodiment, for simplicity of explanation, there is only one of each device, but the user management server 101, the service providing server 102, and the user terminal 103 may each be composed of multiple devices.

[0015] <Hardware configuration of information processing device> Next, an example of the hardware configuration of the information processing device constituting the information processing system according to this embodiment will be described below.

[0016] The user management server 101 has a CPU 201, a RAM 202, a ROM 203, and a network interface 204. The CPU 201 controls the operation of each part constituting the user management server 101, and executes various processes to be described later as those performed by the user management server 101. The RAM 202 is a memory for temporarily storing data and control information, and serves as a work area used when the CPU 201 executes various processes. The ROM 203 stores fixed operating parameters and operating programs of the user management server 101. The network interface 204 is an interface that provides a function for connecting to the network 104 and communicating. The user management server 101 can transmit and receive data to and from an external device via the network interface 204. The external storage device 205 connected to the user management server 101 is a device for storing data, and has an interface for receiving I / O commands for reading and writing data. The external storage device 205 stores computer programs and data for causing the CPU 201 to execute various processes to be described later as those performed by the user management server 101. The external storage device 205 in this embodiment is a hard disk drive (HDD), but may be other storage devices such as a solid state drive (SSD), an optical disk drive, or a semiconductor storage device. The display device 206 connected to the user management server 101 is a display device that displays necessary information to the user. The display device 206 in this embodiment is an LCD (Liquid Crystal Display), but may be other display devices such as a CRT display. The input device 207 is a keyboard, a mouse, or the like, and receives necessary input from the user. It is also possible to use a touch panel display in which the display device 206 and the input device 207 are integrated.

[0017] The service providing server 102 and the user terminal 103 have the same hardware configuration as the user management server 101. The user terminal 103 is assumed to have a display unit instead of being connected to the display device 206.

[0018] <Functional configuration of information processing system> Next, an example of the functional configuration of the information processing system according to this embodiment will be described with reference to the block diagram of FIG.

[0019] The user management server 101 includes an information storage unit 301, a user processing request receiving unit 302, a verification unit 303, a message transmission unit 304, a user processing execution unit 305, and a user processing result transmission unit 306. The information storage unit 301 includes a user information storage unit 3011, a client information storage unit 3012, and a confirmation code information storage unit 3013. The user information storage unit 3011 stores user information. FIG. 4(a) shows an example of user information stored in the user information storage unit 3011. User attributes such as a password 402 and an email address 403 are stored in association with a user ID 401. The user ID 401 is an ID that uniquely identifies a user. The password 402 is a character string for authenticating a user. Here, a password is used as information for authenticating a user, but other authentication information such as information related to biometric authentication may be used. The email address 403 is an email address for notifying the user of a confirmation message. Here, email is used as a means for notifying the user of the confirmation message, but other notification means may be used.

[0020] The user management server 101 manages the service providing server 102 as a client, and the client information storage unit 3012 stores information about the service providing server 102 as client information. FIG. 4B shows an example of the client information stored in the client information storage unit 3012. A client secret 405, a client URL 406, and a processing scope 407 are stored in association with a client ID 404. The client ID 404 is an ID that uniquely identifies the service providing server 102 as a client of the user management server 101. The client secret 405 is a character string for authenticating the client. Here, a secret is used as information for authenticating the client, but other authentication information may be used. The client URL 406 represents a URL when the user accesses the client. That is, it is a URL for the user terminal 103 to transmit a service processing execution request to the service providing server 102. The processing scope 407 represents the range of user processing that the client is permitted to perform with respect to the user management server 101. The confirmation code information storage unit 3013 will be described later.

[0021] The user processing request receiving unit 302 receives a user processing execution request from the service providing server 102. The verification unit 303 judges whether the user processing execution request is valid or not. Specifically, the verification unit 303 verifies the service providing server 102, which is the requester of the user processing, by using the client information in the client information storage unit 3012. If the user processing execution request is valid, the message sending unit 304 sends a confirmation message to the user terminal 103 to perform user processing involving identity verification (user authentication). At this time, the message sending unit 304 includes a link to the client URL 406 of the verified service providing server 102 in the confirmation message as an access destination for the user processing. As a result, when the user accesses the link in the confirmation message, the user processing and the service processing are performed after inputting information on the screen displayed on the user terminal 103. In addition, the message sending unit 304 issues a confirmation code and includes it in the confirmation message. The confirmation code is a one-time password that can be used only once for the requested user processing. The issued confirmation code is stored in the confirmation code information storage unit 3013. The email address 403 obtained from the user information storage unit 301 is used as the destination of the confirmation message.

[0022] An example of the confirmation code information stored in the confirmation code information storage unit 3013 is shown in FIG. 4(c). A user ID 410, a client ID 411, a client URL 412, a processing scope 413, and an expiration date 414 are stored in association with a confirmation code ID 409. The confirmation code ID 409 is an ID that uniquely identifies the confirmation code. The user ID 410 indicates the user who is the target of the user processing. The client ID 411 indicates the service providing server 102 that performs the service processing. The client URL 412 is the URL of the service providing server 102 that is the access destination for the service processing. The processing scope 413 indicates the content of the user processing to which the confirmation code applies. The expiration date 414 is the expiration date of the confirmation code, and the confirmation code becomes invalid after the expiration date.

[0023] User process execution unit 305 executes the user process when verification unit 303 determines that the confirmation code is valid. Specifically, verification unit 303 verifies the confirmation code attached to the user process execution request by using the confirmation code information stored in confirmation code information storage unit 3013. If it is determined as a result of the verification that the confirmation code is valid, user process execution unit 305 assumes that user authentication required for the user process has been performed, and executes the user process.

[0024] The service providing server 102 includes a service processing request receiving unit 307, a user processing request transmitting unit 308, a screen providing unit 309, a user processing result receiving unit 310, a service processing execution unit 311, and a service processing result transmitting unit 312. The service processing request receiving unit 307 receives a service processing execution request from the user terminal 103. The user processing request transmitting unit 308 transmits a user processing execution request to the user management server 101. The screen providing unit 309 displays a screen (hereinafter referred to as an integrated service screen) on the user terminal 103 for allowing the user to input information required for the user processing and information required for the service processing, and accepts input information (parameters). The user processing result receiving unit 310 receives the result of the user processing executed by the user management server 101. The service processing execution unit 311 executes the service processing. The service processing result transmitting unit 312 transmits the result of the service processing executed by the service providing server 102.

[0025] The user terminal 103 has a user agent 313 and a message receiving unit 314. The user agent 313 provides a function such as a web browser for the user to access a website. The user can transmit a service processing execution request to the service providing server 102 via the user agent 308. The message receiving unit 314 receives a confirmation message such as an email from the user management server 101. When the user accesses a link included in the received confirmation message, the user agent 313 is started and a service processing execution request is transmitted to the service providing server 102.

[0026] <Processing in information processing systems> Next, the flow of processing in the information processing system according to this embodiment will be described with reference to the flowchart in Fig. 5. Hereinafter, each step (process) will be represented by adding an S before the reference number.

[0027] In S501, the user agent 313 transmits a service processing execution request A to the service providing server 102. In S502, the service processing request receiving unit 307 receives the service processing execution request A from the user terminal 103. In S503, the user processing request transmitting unit 308 transmits the user processing execution request A to the user management server 101. The user processing execution request A contains at least information indicating the content of the user processing, the target user, and the client that has requested the user processing, i.e., the service providing server 102.

[0028] An example of a user processing execution request A is shown in Fig. 6(a). In Fig. 6(a), a message is formed using a syntax conforming to HTTP (Hypertext Transfer Protocol). The contents of the user processing are specified in a URL (Uniform Resource Locator) section 601. The authentication information of the client requesting the user processing is specified in a header section 602. The user ID is specified in a body section 603 as information indicating the user who is the target of the user processing.

[0029] In S504, the user processing request receiving unit 302 receives the user processing execution request A from the service providing server 102. In S505, the verification unit 303 performs a verification process of the received user processing execution request A. The verification process of the user processing execution request A will be described later with reference to FIG. 9. In S506, when the verification unit 303 determines that the user processing execution request A is valid, the message sending unit 304 transmits a confirmation message to the user terminal 103 for performing the user processing after user authentication. The confirmation message includes a link for transmitting the service processing execution request B to the service providing server 102. The link is assigned with a confirmation code issued for executing the user processing. The issued confirmation code is stored in the confirmation code information storage unit 3013. An example of the confirmation message is shown in FIG. 7. The confirmation message includes a link 701 for transmitting the service processing execution request B to the service providing server 102 in the form of a URL. The link 701 is assigned with a confirmation code for executing the user processing in the user management server 101 as a URL parameter. In this embodiment, the confirmation message is sent by email, but other notification means may be used.

[0030] In S507, the message receiving unit 314 receives a confirmation message from the user management server 101. In S508, the user agent 313 transmits a service processing execution request B to the service providing server 102 in response to the user accessing the link included in the confirmation message. In S509, the service processing request receiving unit 307 receives the service processing execution request B from the user terminal 103. In S510, the screen providing unit 309 displays an integrated service screen on the user terminal 103 and accepts parameters input in the user terminal 103. An example of the displayed integrated service screen is shown in FIG. 8. The integrated service screen 801 includes an area 802 for inputting parameters required for user processing of the user management server 101 and an area 803 for inputting parameters required for service processing of the service providing server 102. The integrated service screen 801 also includes a button 804 for confirming the input parameters and transmitting them to the service providing server 102.

[0031] In S511, the user processing request sending unit 308 sends a user processing execution request B to the user management server 101. The user processing execution request B includes at least the content and parameters of the user processing, information indicating the client that has requested the user processing, i.e., the service providing server 102, and information indicating a confirmation code. An example of a user processing execution request is shown in FIG. 6(b). In FIG. 6(b), a message is formed using a syntax that complies with HTTP. The content of the user processing is specified in a URL section 604. The authentication information of the client that has requested the user processing is specified in a header section 605. The confirmation code and parameters required for the user processing are specified in a body section 606.

[0032] In S512, the user processing request receiving unit 302 receives the user processing execution request B from the service providing server 102. In S513, the verification unit 303 performs a verification process of the received user processing execution request B. The verification process of the user processing execution request B will be described later with reference to FIG. 10. In S514, the user processing execution unit 305 executes the user processing when the verification unit 303 determines that the user processing execution request B is valid. The user processing executed here is, for example, initial activation, updating of a password or an email address, etc. In S515, the user processing result sending unit 306 sends the result of the user processing to the service providing server 102. In S516, the user processing result receiving unit 310 receives the result of the user processing from the user management server 101. In S517, the service processing execution unit 311 executes the service processing based on the result of the user processing. In S518, the service processing result sending unit 312 sends the result of the service processing to the user terminal 103. In S519, the user agent 313 receives the result of the service processing from the service providing server 102.

[0033] <Verification process of user process execution request A (S505)> Next, the verification process of the user process execution request A in S505 will be described with reference to FIG. 9. In S901, the verification unit 303 verifies whether the client specified by the user process execution request A is valid. If the client ID 404 and the client secret 405 in the client information storage unit 3012 match those specified by the user process execution request A, the verification unit 303 determines that the client is valid and proceeds to S902. If the client ID 404 and the client secret 405 in the client information storage unit 3012 do not match those specified by the user process execution request A, the verification unit 303 determines that the client is not valid and proceeds to S903. In S902, in response to determining that the client is valid, the verification unit 303 determines that the user process execution request A is valid and proceeds to S506. In S903, in response to determining that the client is not legitimate, the verification unit 303 determines that the user process execution request A is invalid, and proceeds to the process at S904. In S904, the verification unit 303 outputs information indicating that the user process execution request A is invalid (error notification) to the service providing server 102 or the user terminal 103, and ends the process.

[0034] <Verification process of user process execution request B (S513)> Next, the verification process of the user process execution request B in S513 will be described with reference to Fig. 10. In S1001, the verification unit 303 verifies whether or not the client specified by the user process execution request B is legitimate. If the client ID 404 and client secret 405 in the client information storage unit 3012 match those specified by the user process execution request B, the verification unit 303 determines that the client is legitimate and proceeds to S1002. If the client ID 404 and client secret 405 in the client information storage unit 3012 do not match those specified by the user process execution request B, the verification unit 303 determines that the client is not legitimate and proceeds to S1005.

[0035] In S1002, the verification unit 303 verifies whether the confirmation code specified by the user process execution request B is valid. If the confirmation code is within the expiration date 414 of the confirmation code information storage unit 3013 and the client ID 411 matches the client verified in S1001, the verification unit 303 determines that the confirmation code is valid and proceeds to S1003. If the confirmation code is not within the expiration date 414 of the confirmation code information storage unit 3013 or the client ID 411 does not match the client verified in S1001, the verification unit 303 determines that the confirmation code is invalid and proceeds to S1005.

[0036] In S1003, the verification unit 303 verifies whether or not the user process specified by the user process execution request B is within the processing scope of the confirmation code. In S1004, in response to determining that the user process is within the processing scope, the verification unit 303 determines that the user process execution request B is valid, and proceeds with the process to S514. In S1005, in response to determining that the user process is not within the processing scope, the verification unit 303 determines that the user process execution request B is invalid, and proceeds with the process to S1006. In S1006, the verification unit 303 outputs information indicating that the user process execution request B is invalid (error notification) to the service providing server 102 or the user terminal 103, and ends the process.

[0037] <Advantages of the First Embodiment> As described above, the information processing device according to the present embodiment receives a request for execution of a user process accompanied by authentication of the user from a server that provides a service to the user. It verifies whether the execution request is valid, and based on the result of the verification, it transmits a message including a link for accessing the server to a terminal operated by the user. The message is a message for the server to provide the terminal with a screen for performing service processing according to the result of the user process. This makes it possible to perform service processing according to the result of the user process. In addition, it is possible to reduce the effort required for the user to check the screen compared to when the user process and the service process are performed independently.

[0038] [Second embodiment] In the first embodiment, the user management server 101 performs verification processing of a user process execution request based on whether the client is legitimate. In this embodiment, the verification processing is further performed based on the authority held by the client. Note that the configuration of the information processing system in this embodiment is similar to that of the first embodiment, so a description thereof will be omitted. The following mainly describes the parts that differ between this embodiment and the first embodiment. Note that the same components are described with the same reference numerals.

[0039] <Verification process of user process execution request A (S505)> The verification process of the user process execution request A in S505 will be described with reference to Fig. 11. In S901, the verification unit 303 verifies whether or not the client specified by the user process execution request A is legitimate. If the verification unit 303 determines that the client is legitimate, it proceeds to S1101. If the verification unit 303 determines that the client is not legitimate, it proceeds to S903.

[0040] In S1101, the verification unit 303 verifies whether the content of the user process specified by the user process execution request A is within the range of the processing scope of the client. If the processing scope 408 of the client information storage unit 3012 matches that specified by the user process execution request A, the verification unit 303 determines that the content of the user process is within the range of the processing scope, and proceeds to S902. If the processing scope 408 of the client information storage unit 3012 does not match that specified by the user process execution request A, the verification unit 303 determines that the content of the user process is not within the range of the processing scope, and proceeds to S903. In S902, the verification unit 303 determines that the user process execution request A is valid, and proceeds to S506. In S903, the verification unit 303 determines that the user process execution request A is invalid, and proceeds to S904. In S904, the verification unit 303 outputs information (error notification) indicating that the user process execution request A is invalid to the service providing server 102 or the user terminal 103, and ends the process.

[0041] <Effects of the second embodiment> As described above, the information processing device according to the present embodiment verifies the user process execution request based on the authority held by the client. This makes it possible to finely control the contents of the user process that is permitted depending on the role of the service providing server.

[0042] <Modification> In this embodiment, whether the content of the user processing falls within the range of the processing scope is determined based on whether the processing scope 408 of the client information storage unit 3012 matches that specified by the user processing execution request A, but other determination methods may be used. For example, mapping information that defines the relationship between the processing content specified by the user processing execution request A and the processing scope 408 of the client information storage unit 3012 may be stored separately, and the determination may be made based on the mapping information.

[0043] [Third embodiment] In the first embodiment, an example is shown in which the service providing server 102 performs service processing in accordance with the result of the user processing in the user management server 101. In the present embodiment, an example is shown in which an application running on the user terminal 103 performs processing in accordance with the result of the user processing in the user management server 101. The following mainly describes the differences between this embodiment and the first embodiment. Note that the same components are described with the same reference numerals.

[0044] <Functional configuration of information processing system> An example of the functional configuration of the information processing system according to this embodiment will be described with reference to the block diagram of FIG. 12. The user management server 101 has the same functional configuration as that of the first embodiment. The user terminal 103 has an application 1201 and a message receiving unit 314. When the application 1201 executes application processing in response to a user instruction, a user processing execution request A is transmitted to the user management server 101. The user processing execution request A is received by the user processing request receiving unit 302 of the user management server 101, and a confirmation message is transmitted to the user terminal 103. The confirmation message is received by the message receiving unit 314 of the user terminal 103. When the user accesses a link included in the confirmation message, the application 1201 is started, and a user processing execution request B is transmitted to the user management server 101. The user processing execution request B is received by the user processing request receiving unit 302 of the user management server 101, and the user processing is executed by the user processing execution unit 305.

[0045] <Effects of the third embodiment> As described above, the information processing device according to this embodiment transmits a confirmation message for performing application processing to a user terminal. The application on the user terminal calls the user processing together with a confirmation code indicating that the user's identity has been verified. This allows the user processing accompanied by identity verification performed by the user management server to be executed via the application on the user terminal.

[0046] [Other embodiments] The present invention can also be realized by a process in which a program for implementing one or more of the functions of the above-described embodiments is supplied to a system or device via a network or a storage medium, and one or more processors in a computer of the system or device read and execute the program. The present invention can also be realized by a circuit (e.g., ASIC) that implements one or more of the functions. [Explanation of symbols]

[0047] 101 User Management Server 302 User processing request receiving unit 303 Verification Department 304 Message sending section

Claims

1. An information processing device that manages information about a user, A first authentication means for performing a first authentication of the user; After the first authentication is performed by the first authentication means, an area for inputting information for performing a second authentication of the user, which is different from the first authentication; and a control means for displaying on the user's terminal a screen including information for providing a service to the user's terminal, and an area for inputting model information of the user's device.

2. The first authentication is performed by checking whether the client information specified by the execution request matches the client information stored in advance.

2. The information processing method according to claim 1, wherein the information processing is performed based on whether the information of the client matches the information of the client. Information processing device.

3. The first authentication is performed based on information regarding the validity period of the authentication.

2. The information processing device described in 1.

4. 2. The method according to claim 1, wherein the first authentication is based on a one-time password. The information processing device.

5. an input means for inputting information for performing a first authentication of a user; After the first authentication is performed, an area for inputting information for performing a second authentication of the user, which is different from the first authentication; and an area for inputting information for providing services to the user. A display means for displaying the An information processing terminal comprising:

6. Computer, An information processing device that manages information about a user, A first authentication means for performing a first authentication of the user; After the first authentication is performed by the first authentication means, an area for inputting information for performing a second authentication of the user, which is different from the first authentication; A computer program for causing a computer to function as an information processing device, characterized in having a control means for displaying on the user's terminal a screen including information for providing services to the user's terminal, and an area for inputting model information of the user's device.

7. Computer, an input means for inputting information for performing a first authentication of a user; After the first authentication is performed, an area for inputting information for performing a second authentication of the user, which is different from the first authentication; A computer program for causing the device to function as an information processing terminal, comprising: a display means for displaying an image including information for providing a service for the user, the information including an area for inputting model information of the user's device.

Images