Image forming apparatus, image forming system, and method and program for controlling image forming apparatus

Abstract

To provide an image forming apparatus, an image forming system, and a control method and program for the image forming apparatus, which achieve function restrictions for each user with a simple configuration.SOLUTION: An image forming apparatus restricts operation on an operation panel, thereby disabling operation on the image forming apparatus. The image forming apparatus receives function restriction information from an external management device that can be specified on a per-function basis and temporarily lifts the operation restrictions on the operation panel while allowing operation on the operation panel only for the specified function.SELECTED DRAWING: Figure 9

Description

[Technical field]

[0001] The present invention relates to an image forming apparatus, an image forming system, and a control method and program for an image forming apparatus. [Background technology]

[0002] Image forming devices are equipped with an authentication function using an ID card or the like, and a function is known that changes the functional restriction items for each user so that the authenticated user can use only the functions that are permitted. For example, in Patent Document 1, usage restriction information corresponding to the network-compatible device to be set is created based on specific usage restriction information and user registration information. In Patent Document 2, the user ID and password entered when sending a scanned image are associated with usage restriction information stored in a server, and usage permission and usage restrictions are performed based on the contents of the comparison. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent Application No. 2005-313083 [Patent Document 2] JP 2006-222636 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, in conventional technology, user authentication is performed using an authentication function such as an ID card, and functions that the user is permitted to use are available according to user information stored inside the image forming device or in an external user management server. In this case, it is necessary to have a user management function inside the image forming device, or the image forming device needs to receive and control user information authenticated externally, which poses the problem of requiring hardware resources and development costs for the image forming device.

[0005] The present invention has been made in consideration of the above-mentioned conventional examples, and has as its object to realize the management of functions for each user with a simple configuration. [Means for solving the problem]

[0006] In order to achieve the above object, the present invention has the following functions. That is, according to one aspect of the present invention, there is provided an image forming apparatus that provides at least one function, an operation means for receiving an operation by a user via the displayed user interface; and a control means, The control means displays, on the operation means, a user interface that accepts an instruction to use a function whose use is permitted and does not accept an instruction to use a function whose use is restricted, based on function restriction information indicating whether or not each of the at least one function can be used. death, When authentication by the external device is successful, the control means transmits an identifier of the image forming apparatus to the external device, receives the function restriction information together with the identifier from the external device, and when the transmitted identifier matches the received identifier, displays the user interface corresponding to the function restriction information on the operation means. do An image forming apparatus characterized in that

[0007] According to another aspect, the image forming apparatus, an external device that transmits the function restriction information corresponding to an authenticated user to the image forming device; An imaging system is provided that includes: Effect of the Invention

[0008] According to the present invention, it is possible to realize the management of functions for each user with a simple configuration. [Brief description of the drawings]

[0009] [Figure 1] FIG. 1 is a diagram showing the appearance of an image forming apparatus 100. [Diagram 2] FIG. 1 shows the configuration of an apparatus according to a first embodiment. [Diagram 3] FIG. 1 is a block diagram showing a configuration of a control system of an image forming apparatus. [Figure 4] A block diagram showing the configuration of a control system of the management device 200. [Diagram 5] FIG. 1 shows a user management table according to the first embodiment. [Figure 6] FIG. 2 is a block diagram showing the configuration of a control system of the authentication device 300. [Figure 7] Flowchart of releasing function restrictions shown in the first embodiment [Figure 8] FIG. 13 is a diagram showing an example of a screen when restricting operation of the operation panel shown in the first embodiment. [Figure 9] 1 is a flowchart showing the control of the operation panel display process shown in the first embodiment. [Figure 10] FIG. 13 is a diagram showing an example of a display on an operation panel indicating a function restriction shown in the first embodiment. [Figure 11] FIG. 11 is a diagram showing an example of an operation restriction release operation using administrator authentication according to the second embodiment. [Figure 12] FIG. 13 is a diagram showing an example of a display for realizing re-restriction of an operation by a user operation according to the third embodiment. [Figure 13] FIG. 13 is a diagram showing an example of a sequence for performing printing according to the fourth embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] Hereinafter, the embodiments will be described in detail with reference to the attached drawings. Note that the following embodiments do not limit the invention according to the claims. Although the embodiments describe a number of features, not all of these features are essential to the invention, and the features may be combined in any manner. Furthermore, in the attached drawings, the same reference numbers are used for the same or similar configurations, and duplicated descriptions are omitted.

[0011] [Embodiment 1] ● System and device configuration FIG. 1 is a diagram showing the appearance of an image forming apparatus 100. In this embodiment, a multi-function printer (MFP: also called a multi-function printer or a multifunction machine) is taken as an example of the image forming apparatus 100. In FIG. 1, a manuscript table 101 is a glass-like transparent table that is used when a manuscript is placed on it and read by a scanner. A manuscript cover 102 is a cover for preventing reading light from leaking to the outside when reading by the scanner. A paper feed cassette 103 is an insertion port for setting papers of various sizes. Paper sheets set in the paper feed cassette 103 are transported one by one to a printing section, and printed papers are discharged from a paper discharge tray 104. Note that, although FIG. 1 shows an example of an apparatus equipped with one paper feed cassette, any number of paper feed cassettes may be used as long as they are one or more.

[0012] Next, the configuration of the image forming apparatus 100 and its peripheral devices in this embodiment will be described. Fig. 2 shows the configuration of a management system (or image forming system) for the image forming apparatus 100 in this embodiment. In this management system, the image forming apparatus 100 and external devices, for example, a management device 200, an authentication device 300, and an information processing device 400, are connected via a communication network.

[0013] FIG. 3 is a block diagram showing the configuration of the control system of the image forming apparatus 100 in this embodiment. The CPU 111 in the form of a microprocessor operates according to the contents of a program memory 113 in the form of a ROM and a data memory 114 in the form of a RAM, which are connected via an internal bus. The data memory 114 is used as a work memory used by the CPU 111 when executing a control program, and an image memory 116 for storing image data to be formed on a recording sheet. The CPU 111 controls a wireless LAN control circuit 118 and a short-distance wireless communication control circuit 119, and can communicate with other devices connected via an external interface (communication network). This allows the CPU 111 to receive job data to be printed from the management device 200 and to notify the management device 200 of the status of the image forming apparatus 100. The CPU 111 controls an operation panel 125 provided on the outer surface of the recording apparatus 100 via an operation unit control circuit 121. The operation panel 125 provides a user interface that accepts operations by an operator and presents information to the operator.

[0014] FIG. 4 is a block diagram showing the configuration of the control system of the management device 200 in this embodiment. The CPU 201 in the form of a microprocessor operates according to the contents of a program memory 202 in the form of a ROM and a data memory 203 in the form of a RAM, which are connected via an internal bus. The data memory 203 is a work memory used by the CPU 201 when executing a control program. The data memory 203 is used to store a user management table 204 (also called user management information) that manages the correspondence between user information and function restriction information as shown in FIG. 5, and a job storage area 205 that temporarily stores print data. The user management table 204 and the job storage area 205 may be stored in a non-volatile semiconductor memory or a hard disk. The CPU 201 controls the network control unit 206 and can communicate with other devices connected via a communication network. As a result, the management device 200 can receive user information from the authentication device 300, receive job data from the information processing device 400, and send job data to the image forming device 100. Of course, data can also be sent or received in the opposite direction.

[0015] 5 shows an example of the user management table 204. In this example, function restriction information indicating whether or not each of the print, copy, and scan functions can be used is registered in the user management table 204 in association with the identification information of two users, user A and user B. For example, user A is permitted to use all functions, but user B is permitted only to copy and is not permitted to use other functions. The functions subject to restriction are not limited to the three functions shown as an example, and may include other functions such as saving and deleting print data and facsimile transmission functions, or may be limited to one or two of them.

[0016] FIG. 6 is a block diagram showing the configuration of a control system of the authentication device 300 in this embodiment. A microprocessor-type CPU 301 operates according to the contents of a ROM-type program memory 302 and a RAM-type data memory 303 connected via an internal bus. The CPU 301 controls an ID card reader 304, and reads user information recorded on the ID card when the ID card is held over the ID card reader 304. User information including, for example, identification information unique to each user is recorded on the ID card. The CPU 301 also controls a network control unit 305, and can communicate with other devices connected via a communication network. This allows the authentication device 300 to send the user information read by the ID card reader 304 to the management device 200 via the network.

[0017] ● Procedures for managing the use of image forming devices FIG. 7 is a flow chart relating to the control of the image forming apparatus 100 and its peripheral devices according to this embodiment.

[0018] In step S101, the user holds the ID card over ID card reader 304 of authentication device 300 to cause authentication device 300 to read the user information recorded thereon. This operation causes authentication device 300 to transmit the user information read from the ID card to management device 200 in step S102. Authentication device 300 may obtain user information for uniquely identifying a user not limited to the user information recorded on the ID card, but also using biometric authentication such as face authentication or fingerprint authentication, or other methods or means for identifying a user, and transmit this to management device 200.

[0019] In step S103, the management device 200 verifies whether the user information sent from the authentication device 300 is registered in the user management table 204. If the user information is registered, in step S104, function restriction information corresponding to the user information is obtained from the user management table 204. If the user information is not registered, the user does not have the authority to operate the image forming device 100, and the processing ends. Note that function restriction information may be registered for each image forming device. In that case, the management device 200 may receive identification information of the selected image forming device along with the user information from the authentication device 300, and obtain function restriction information associated with the user information for the corresponding image forming device.

[0020] In step S105, authentication is performed to confirm that the image forming apparatus 100 and the management apparatus 200 are genuine. In this embodiment, challenge-response authentication is used, but other means may be used.

[0021] If the authentication is accepted, i.e., if the authentication is successful, in step S106, the management device 200 requests an identifier from the image forming device 100. In step S107, the management device 200 generates an identifier and stores it in the data memory 114. Although a randomly generated value is used as the identifier, other methods may be used, such as generating the identifier using a hash function based on a unique value of the image forming device 100, for example.

[0022] In step S108, the generated identifier is encrypted and then transmitted from the image forming apparatus 100 to the management apparatus 200. As the encryption method, a common key cipher is used, which encrypts the identifier using an encryption key shared in advance between the image forming apparatus 100 and the management apparatus 200, but other encryption methods may also be used.

[0023] The management device 200 decrypts the received encrypted identifier, and in step S109, transmits a request to remove the operation restriction together with the decrypted identifier and the function restriction information to the image forming device 100. The function restriction information uses a format previously agreed upon between the image forming device 100 and the management device 200. For example, if copying and scanning are permitted, a format listing the function names as "copy, scan" may be used.

[0024] In step S110, the image forming apparatus 100 judges whether the received identifier matches the identifier stored in the data memory 114. If they match, the image forming apparatus 100 discards (or erases) the identifier stored in the data memory 114 in step S111, and temporarily releases the operation restriction according to the function restriction information received together with the identifier in step S112. If they do not match, the image forming apparatus 100 may transmit to the management apparatus 200 a denial of the operation restriction release request, or may terminate the process. In addition, if the operation restriction has already been released by any user, the image forming apparatus 100 may respond in the same way to the operation restriction release request. In these cases, the identifier stored in the data memory 114 is also erased by the image forming apparatus 100. The identifier stored in the data memory 114 is also discarded by the image forming apparatus 100 if a certain time has passed since it was generated. In this example, the operation restriction may be a state in which a lock screen is displayed on the operation panel 125 and the operation is not possible. That is, in S112, the image forming apparatus 100 transitions from a state in which no operation is possible (a state in which the lock screen is displayed) to a state in which functions permitted by the function restriction information are available.

[0025] ● Control by image forming device Next, a description will be given of the control when image forming apparatus 100 receives function restriction information and restricts the corresponding function. First, an operation restriction instruction is executed by a user to restrict the operation of operation panel 125 used to operate image forming apparatus 100. This instruction may be issued, for example, by an administrator user who manages image forming apparatus 100 when image forming apparatus 100 is installed.

[0026] FIG. 8 shows an example of an operation for restricting the operation of the operation panel 125 of the image forming apparatus 100. The user can touch either a button 801 or a button 802 on a screen 800 for selecting whether to lock the operation panel shown in FIG. 8(a). When the user touches the YES button 801, the display content of the operation panel 125 is fixed to a lock screen 810 shown in FIG. 8(b), and the operation panel 125 is switched to an inoperable state. Note that, in this example, the operation restriction of the operation panel 125 is realized by enabling the corresponding setting of the image forming apparatus 100 (i.e., locking the operation panel), but other methods may be adopted. For example, the setting may be made from a computer connected via a communication network. On the other hand, when the NO button 802 is touched on the screen 800, the operation of the operation panel 125 is not restricted, and for example, a user interface that allows operation without restriction, such as the screen 1120 shown in FIG. 11(c), may be displayed on the operation panel 125.

[0027] 9 is a flowchart showing an outline of the operation panel display process in this embodiment. At the start of this procedure, the image forming apparatus 100 is in an operation restricted state. This procedure is executed by the CPU 111 of the image forming apparatus 100.

[0028] In step S901, communication is performed with external management device 200 via a network, and function restriction information that can be specified for each function of image forming device 100 is received. In step S902, the operation restriction on operation panel 125 is temporarily lifted. "Temporarily" may mean until the execution of the function used after the operation restriction is lifted is stopped or completed. After that, in step S903, the display content on operation panel 125 is changed so that only the functions specified in the function restriction information can be operated on operation panel 125, and in step S904 the changed display content is displayed as the top screen. Note that from S902 to S904, the operation panel 125 may be in a state in which it does not accept operations.

[0029] In this way, for functions that are triggered by input from image forming apparatus 100, function restriction can be realized by locking operation panel 125 or changing the user interface. On the other hand, for functions that are instructed from an external device and are not triggered by an operation on operation panel 125, the use or execution of the function may be permitted or prohibited according to the function restriction information. For example, a print function that receives and executes a print job from a connected information processing device does not involve an operation on operation panel 125. For such functions, if the function is restricted or if the image forming apparatus is locked, even if a print job is received, the print job may be discarded and a response indicating this may be returned to the sender of the print job.

[0030] Alternatively, when the operation panel 125 of the image forming apparatus 100 is locked, for example, a message indicating that the print function cannot be used may be broadcast to the network directly or via the management device 200. In this case, devices on the network do not send print jobs to the image forming apparatus 100 until a message permitting the use of the print function by the logged-in user is received from the image forming apparatus 100. If the use of the print function by the logged-in user is permitted by the function restriction information of the user, the image forming apparatus 100 or the management device 200 may transmit a message permitting the use of the print function to the information processing apparatus to which the user is logged in. Alternatively, the use of functions from an external device, for example, the use of the print function, may not be restricted regardless of the setting in the user management table. In that case, the functions to be restricted are limited to those activated from the operation panel, so that the function restriction can be realized simply by locking the operation panel or changing the user interface.

[0031] Furthermore, even if the operation restriction of the operation panel, i.e., the locked state, is released and the top screen is displayed, if a certain period of time has passed without a job (e.g., scanning or copying) being executed, the lock screen may be displayed again to restrict operation. In this case, the certain period of time may be a predetermined fixed period of time or may be a period of time separately specified by the user.

[0032] FIG. 10 is an example of a display of the operation panel 125 indicating the restriction of functions. FIG. 10(a) is an example of a top screen 1000 when copying is permitted and scanning is prohibited. A function icon 1001 of a permitted copy function remains unchanged from normal, and a function icon 1002 of a prohibited scan function is grayed out. When copying is selected, the copy function can be used as usual. On the other hand, even when the icon 1002 is touched to select scanning, the touch on the grayed out icon is ignored and the corresponding scan function cannot be used, and a warning screen 1010 shown in FIG. 10(b) is displayed. The warning screen 1010 displays a message indicating that the selected function is restricted and cannot be used. That is, the top screen 1000 can be said to be a function instruction user interface for instructing the function to be used by the user, or a user interface with function restriction.

[0033] FIG. 10(c) is an example of a case where a different pattern of function restriction information is received. The screen in this example shows an example where copying is prohibited and scanning is permitted. As in the previous example, the function icon 1001 of the prohibited copy function is grayed out, and even if it is selected, a warning screen is displayed and it cannot be used. Here, in this embodiment, measures are taken to let the user know that the use of the function is prohibited. That is, the function icon is grayed out, and a warning screen is displayed when it is selected, but other methods of expression are also possible, or the device may not operate even if it is selected without notifying the user.

[0034] By implementing the above configuration, it is possible to restrict functions according to the received function restriction information, and therefore it is possible to control permission to use the image forming apparatus functions for each user without having a user management function within the main unit or relying on an external authentication device.

[0035] [Modification of the first embodiment] The pull print function, which allows print data stored in image forming apparatus 100 or a server connected via a network to be specified and printed on operation panel 125, can be restricted by a user interface. For example, a print icon can be added to screen 1000, and when that icon is selected, image forming apparatus 100 displays a user interface for specifying print data to be printed. In such a configuration, if the print function is restricted in the received function restriction information in step S112 of FIG. 7, the print icon can be displayed grayed out. In this way, the print function can also be restricted by a user interface in accordance with the function restriction information.

[0036] [Embodiment 2] In the first embodiment, communication was performed with an external management device 200 via a network to receive functional restriction information that can be specified for each function of the image forming device 100, but the operation restriction state can also be lifted using administrator privileges in a local environment to enable use.

[0037] Fig. 11 shows the operation of releasing the operation restriction using administrator authentication. A function button 1101 for executing administrator authentication is provided on a display screen 1100 in a state in which the operation of the operation panel 125 is restricted as shown in Fig. 11(a). When this function button 1101 is touched, a screen 1110 is displayed in Fig. 11(b) for the user to enter a corresponding password. On this screen, a password is entered in an input field 1111 and an OK button 1112 is touched to authenticate the entered password, and if successful, the operation restriction is temporarily released. In this case, the administrator's password is registered in advance in the image forming apparatus 100.

[0038] When the operation restriction is lifted by the administrator, the available functions are not restricted, and as shown in FIG. 11(c), a screen 1120, which is a user interface in which all functions are available, is displayed on the operation panel 125. In addition, while the operation restriction is being lifted by the administrator, a request to lift the function restriction from the network is rejected. For example, even if there is a lift request from the management device 200, a rejection response is returned. The lift request may include, for example, the identifier request in S106 and the request to lift the operation restriction in S109. As a result, all use by users other than the administrator is restricted (or prohibited). Note that "temporarily" may mean until the execution of the function used after the operation restriction is lifted is stopped or completed.

[0039] This allows the administrator to use the functions unlimitedly through a simple procedure of directly operating the operation panel 125 of the image forming apparatus 100, improving convenience. On the other hand, for users other than the administrator, the functions can be used according to the function restrictions set for each user, as described in the first embodiment.

[0040] [Embodiment 3] In the second embodiment, the operation for temporarily releasing the operation restriction of the operation panel 125 has been described, but a function for restricting the operation again after that may be provided. FIG. 12 is an example of a display for realizing re-restriction by a user operation. Here, by selecting a function button 1201 for re-restriction provided on a screen 1200 of the operation panel 125, the operation of the operation panel 125 can be restricted again, for example, as shown in FIG. 11(a). This re-restriction of the operation may be performed automatically after a predetermined time has elapsed, even if the user does not touch the function button 1201. For example, if a predetermined time has elapsed without the user operating the operation panel 125 and an operation such as printing has not been performed, the operation of the operation panel 125 is automatically restricted. The time until re-restriction may be arbitrarily set by the user. The re-restriction process may be performed in response to an instruction (lock instruction) from the management device 200.

[0041] In this way, an image forming apparatus that has been used by an administrator and is now in an unlimited use state can be returned to an operation-restricted state again, making it possible to manage the functions permitted for each user even after the administrator has used the apparatus.

[0042] [Embodiment 4] In the first embodiment, the change of the function restriction of the operation panel 125 is the subject, but it can also be used to restrict printing by a user. In the first embodiment, the restriction of the print function was briefly explained, but in this embodiment, another method will be explained in more detail.

[0043] FIG. 13 shows an example of a sequence when printing is performed by the image forming apparatus 100 from the information processing apparatus 400. In FIG.

[0044] In step S201, when a user inputs a print instruction to the information processing device 400 for data created by, for example, an application, the information processing device 400 generates print data. Then, in step S202, the information processing device 400 transmits user information and print data to the management device 200. The transmitted user information includes user identification information. The management device 200 stores the received print data in association with the user information.

[0045] In step S101, the user has the user information read by, for example, holding an ID card over authentication device 300. This operation triggers authentication device 300 to transmit the user information read from the ID card to management device 200 in step S102.

[0046] In step S203, the management device 200 acquires print data corresponding to the authenticated user. The print data is acquired from the print data received from the information processing device as in step S202 and stored in association with user information. If multiple print data associated with the same user are stored, all of them may be acquired. Alternatively, the oldest data or data designated for priority processing may be acquired. If no corresponding print data exists, the process is interrupted. Also, before step S203, a process may be performed to confirm that the user authenticated in S101 is a user registered in the management device 200.

[0047] In step S105, authentication is performed to confirm that the image forming apparatus 100 and the management apparatus 200 are genuine, and if the authentication is accepted, in step S106, the management apparatus 200 requests an identifier from the image forming apparatus 100. In step S107, the image forming apparatus 100 generates an identifier and stores it in the data memory 114.

[0048] The image forming apparatus 100 encrypts the generated identifier and transmits it to the management apparatus 200 in step S108.

[0049] The management device 200 decrypts the received encrypted identifier, and transmits the decrypted identifier and the print data acquired in step S203 to the image forming device 100 in step S204.

[0050] In step S110, the image forming apparatus 100 determines whether the received identifier matches the identifier stored in the data memory 114. If they match, in step S111 the identifier stored in the data memory 114 is discarded, and in step S205 printing is performed.

[0051] In the above procedure, for example, before acquiring the print data in step S203, the management data 200 may acquire function restriction information of the logged-in user from the user management table. Then, if the print function of the image forming device 100 for the logged-in user is restricted by referring to the authority of the logged-in user, for example, a response to that effect may be returned to the authentication device 200, and the process may end without transmitting the print data to the image forming device 100. On the other hand, if the print function is permitted, the corresponding print data may be acquired, and the process from S105 onwards may be executed.

[0052] In this way, even when the print function of the image forming apparatus 100 is used from an external device, function restriction can be performed according to the function restriction information.

[0053] [Embodiment 5] If complex user management is not required, the authentication device 300 may be directly connected to the image forming device 100. In this case, the authentication device 300 is assumed to be configured to transmit function restriction information permitting copying to the image forming device 100 when the user deposits a predetermined fee, for example.

[0054] [Other Examples] The present invention can also be realized by a process in which a program for implementing one or more of the functions of the above-described embodiments is supplied to a system or device via a network or a storage medium, and one or more processors in a computer of the system or device read and execute the program. The present invention can also be realized by a circuit (e.g., ASIC) that implements one or more of the functions.

[0055] The invention is not limited to the above-described embodiments, and various modifications and variations are possible without departing from the spirit and scope of the invention. Accordingly, the following claims are appended to apprise the public of the scope of the invention. [Explanation of symbols]

[0056] 100 Image forming apparatus, 200 Management apparatus, 204 User management table

Claims

1. An image forming apparatus that provides at least one function, an operation means for receiving an operation by a user via the displayed user interface; and a control means, the control means displays, on the operation means, a user interface which accepts an instruction to use a function whose use is permitted based on function restriction information indicating whether or not each of the at least one function is usable, and which does not accept an instruction to use a function whose use is restricted based on function restriction information indicating whether or not each of the at least one function is usable; When authentication by the external device is successful, the control unit transmits an identifier of the image forming apparatus to the external device, receives the function restriction information together with the identifier from the external device, and when the transmitted identifier matches the received identifier, displays the user interface corresponding to the function restriction information on the operation unit.

1. An image forming apparatus comprising:

2. 2. The image forming apparatus according to claim 1, The control means displays, on the operation means, a lock screen that does not accept an instruction to use any function in response to an operation by a user, and displays the user interface on the operation means in response to receiving the function restriction information from an external device.

1. An image forming apparatus comprising:

3. 3. The image forming apparatus according to claim 2, The control means receives authentication of an administrator on the lock screen, and when the authentication of the administrator is successful, displays the user interface assuming that use of all of the at least one function is permitted.

1. An image forming apparatus comprising:

4. 4. The image forming apparatus according to claim 2, The control means displays the lock screen again when a certain period of time has elapsed without a job being executed after the user interface is displayed.

1. An image forming apparatus comprising:

5. 5. The image forming apparatus according to claim 4, The certain period of time is set by the user.

1. An image forming apparatus comprising:

6. 6. The image forming apparatus according to claim 2, The control means displays the lock screen in response to receiving a lock instruction from the external device.

1. An image forming apparatus comprising:

7. 7. The image forming apparatus according to claim 1, The function restriction information includes information indicating whether or not at least one of a copy function, a scan function, a facsimile transmission function, and a print function is available.

1. An image forming apparatus comprising:

8. A program for causing a computer to function as the image forming apparatus according to claim 1 .

9. The image forming apparatus according to claim 1 , an external device that transmits the function restriction information corresponding to an authenticated user to the image forming device; An image forming system comprising:

10. An image forming apparatus having an operation unit that provides at least one function and receives an operation by a user through a displayed user interface, displaying, on the operation means, a user interface that accepts an instruction to use a function that is permitted to be used and does not accept an instruction to use a function that is restricted to be used based on function restriction information indicating whether or not each of the at least one function is usable; If the authentication by the external device is successful, an identifier of the image forming apparatus is transmitted to the external device, and the function restriction information is received together with the identifier from the external device. If the transmitted identifier and the received identifier match, the user interface corresponding to the function restriction information is displayed on the operation unit. 2 is a control method for an image forming apparatus according to claim 1 .

Images