Information processing system, image forming apparatus and program

Abstract

To make an image processing device installed in a common space and shared by a plurality of users who do not belong to the same organization execute a job accompanied by image processing stored on the organization side without holding information on the organization and the job.SOLUTION: An information processing system includes an image processing device 110 installed in a shared office, and a management server 310 that retains and manages information for accessing a VPN server 210 and an authentication server 220 of a company to which the user of the shared office belongs, and an image processing device 230 that serves as a parent device in an on-demand print service. The image processing device 110, which is a slave unit in the on-demand print service, makes a VPN connection to the VPN server 210 on the basis of information obtained from the management server 310 in response to an instruction from the user, accesses the authentication server 220, and authenticates the user. A print job stored in the image processing device 230 by the user is acquired via VPN and executed.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to an information processing system, an image forming apparatus, and a program. [Background technology]

[0002] For example, when connecting a computer installed in the head office to a computer installed at another base such as a branch office or a mobile terminal taken outside the company, it is preferable from the viewpoint of security to establish a virtual dedicated line, a so-called VPN (Virtual Private Network), and to transmit and receive information via the VPN. In order to establish a VPN, each computer that connects to the VPN stores the information required for VPN establishment, and when connecting to the VPN, it refers to that information to connect to the VPN.

[0003] In recent years, with the spread of work style reform and remote work, the number of workplaces such as coworking spaces and shared offices used by cross-company workers, freelancers, students, etc. is expanding. Workplace managers install multifunction devices with printing and faxing functions in the workplace and provide services to workplace users.

[0004] To prevent information leaks due to theft, etc., PCs brought into the workplace by workplace users are designed not to store company information or the data to be printed. When a job is to be executed on a multifunction printer installed in the workplace, the job on the company's internal system is transferred to the multifunction printer for execution. In this case, from a security standpoint, it is preferable to connect the multifunction printer installed in the workplace to the company's VPN server via VPN. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] JP 2013-260459 A [Patent Document 2] Patent No. 6047480 Specification Summary of the Invention [Problem to be solved by the invention]

[0006] An information processing device installed in a shared space is shared by multiple users who do not belong to the same organization. For example, in order to connect an information processing device to a server installed in an organization to which the user belongs via a virtual private line, it is necessary to make the information processing device use information required to establish a virtual private line with the server. However, the information required to establish a virtual private line with a server installed in the organization is information about the organization, and can be said to be confidential information. Furthermore, jobs to be executed by the information processing device may also be confidential information, similar to information about the organization. Nevertheless, if information about the organization and jobs is stored in an information processing device shared with users belonging to other organizations, it may become a security problem.

[0007] The present invention aims to enable an image processing device installed in a shared space and shared by multiple users who do not belong to the same organization to execute jobs involving image processing stored on the organization side without retaining information regarding the organization and the job. [Means for solving the problem]

[0008] The image processing system according to the present invention includes a first processor installed in a first image processing device installed in a shared space and shared by a plurality of users who do not belong to the same organization, a second processor installed in a connection server installed outside the shared space and connected to local area networks of organizations to which the plurality of users respectively belong, the connection server having a virtual private line connection function, a third processor installed in a second image processing device connected to the local area network of each organization, and a third processor installed outside the shared space and the local area network of each organization, the connection server connection information required for establishing a virtual private line with the connection server of each organization and access information required for accessing the second image processing device of each organization. and storing access information of the second image processing device which becomes a master device when providing an on-demand print service by transmitting a print job stored in the second image processing device to the first image processing device for execution. and a fourth processor installed in a management server that manages the second image processing device, the third processor being configured to transmit to the second image processing device one or more images generated by a user belonging to the organization. printing the fourth processor, in response to a connection information acquisition request in which identification information of an organization is specified and transmitted from the image processing device, returns connection server connection information corresponding to the organization specified in the connection information acquisition request; the first processor, by transmitting a connection information acquisition request including identification information of the organization specified by a user to the management server, uses the connection server connection information corresponding to the organization acquired by the first processor to connect a virtual private line with the connection server of the organization; a request for obtaining access information, the request including identification information of an organization designated by a user of the first image processing device, is transmitted to the management server, the access information corresponding to the organization is obtained, and a request is made to the second image processing device of the organization to register the first image processing device as a slave device of the second image processing device, the first image processing device is registered in response to the registration request; Including identification information of an organization designated by a user of the first image processing device printing In response to a job acquisition instruction, the second image processing device of the organization that has become accessible using the access information of the organization transmits the job to the second image processing device via the virtual private line. printing Got a job and got it printing The job is executed by the first image processing device.

[0013] The fourth processor is further characterized in that it uses the connection server connection information to connect a virtual dedicated line to the connection server, searches for a local network having the connected connection server, thereby identifying the second image processing device that will be the parent device, obtains access information of the identified second image processing device, and stores it in the management server.

[0014] The image processing system according to the present invention comprises: a first processor mounted on a first image processing device installed in a shared space and shared by a plurality of users not belonging to the same organization; a second processor mounted on a connection server installed outside the shared space and connected to local area networks of organizations to which the plurality of users respectively belong, the connection server having a virtual private line connection function; a third processor mounted on a second image processing device connected to the local area network of each organization; and a fourth processor mounted on a management server installed outside the shared space and the local area network of each organization, for storing and managing connection server connection information required for establishing a virtual private line with the connection server of each organization and access information required for accessing the second image processing device of each organization, the access information being the ... accessing the second image processing device of each organization, the access information being the connection server connection information required for establishing a virtual private line with the connection server of each organization and access information required for accessing the second image processing device of each organization, the access information being the connection server connection information required for accessing the second image processing device of each organization, the access information being the connection server connection information required for accessing the second image processing device of each organization, the access information being the connection server connection information required for accessing the second image processing device of each organization, the access information being the connection server connection information required for accessing the second image processing device of each organization, the access information being the connection server connection information required for accessing the second image processing device of each organization, the access information being the connection server connection information required for accessing the second image processing device of each organization, The third processor causing the second image processing device to hold one or more print jobs generated by users belonging to the organization; The management server is registered in the second image processing apparatus as a slave device for providing an on-demand print service, and the fourth processor ,before The access information of the second image processing device which is a master device in the on-demand print service is stored in the management server. in response to a connection information acquisition request in which identification information of an organization is specified and transmitted from the image processing device, the first processor returns connection server connection information corresponding to the organization specified in the connection information acquisition request, the first processor connects a virtual private line with the connection server of the organization using the connection server connection information corresponding to the organization acquired by transmitting the connection information acquisition request including the identification information of the organization specified by the user to the management server, and in response to a print job acquisition instruction including the identification information of the organization specified by the user of the first image processing device, acquires a print job via the virtual private line from the second image processing device of the organization that has become accessible using the access information of the organization, and causes the first image processing device to execute the acquired print job. It is characterized by:

[0015] The fourth processor is further characterized in that it treats the second image processing device corresponding to an organization specified by a user of the first image processing device as a parent device, links the first image processing device as a child device of the second image processing device, and relays information exchange between the first image processing device and the second image processing device.

[0016] The first processor is further characterized in that when the first image processing device and the management server, and the management server and the connection server of the organization corresponding to the identification information included in the job acquisition instruction are both connected by virtual private lines, the first processor acquires a job from the second image processing device via the management server.

[0017] The image forming apparatus according to the present invention is an image forming apparatus equipped with a processor, installed in a shared space, and shared by a plurality of users who do not belong to the same organization, comprising: a connection server installed outside the shared space and connected to a local area network of each organization to which the plurality of users respectively belong, the connection server having a virtual private line connection function; an image processing apparatus connected to each of the local area networks of each organization; and connection server connection information installed outside the shared space and the local area networks of each organization, which is necessary for establishing a virtual private line with the connection server of each organization, and access information necessary for accessing the image processing apparatus of each organization. and storing access information of the image processing apparatus which becomes a master machine when providing an on-demand print service by transmitting a print job stored in the image processing apparatus to the image forming apparatus for execution. In an image forming apparatus included in an information processing system together with a management server that it manages, the processor connects a virtual private line to a connection server of the organization using connection server connection information corresponding to the organization acquired by transmitting a connection information acquisition request including identification information of the organization designated by a user to the management server; a request for obtaining access information, the request including identification information of an organization designated by a user of the image forming apparatus, is transmitted to the management server, and the access information corresponding to the organization is obtained, and a request is made to the image processing apparatus of the organization to register the image forming apparatus as a slave of the image processing apparatus, the image forming apparatus is registered in response to the registration request; Contains the organization identification information specified by the user printing In response to a job acquisition instruction, the image processing device of the organization that has become accessible using the access information of the organization transmits the job to the image processing device via the virtual private line. printing Got a job and got it printing The present invention is characterized by executing a job.

[0018] The program according to the present invention includes a first image processing device installed in a shared space and shared by a plurality of users who do not belong to the same organization, a connection server installed outside the shared space and connected to a local area network of each organization to which the plurality of users belong, the connection server having a virtual private line connection function, a second image processing device connected to each of the local area networks of each organization, and a connection server connection information installed outside the shared space and the local area networks of each organization, the connection server connection information being required for establishing a virtual private line with the connection server of each organization and access information being required for accessing the second image processing device of each organization. and storing access information of the second image processing device which becomes a master device when providing an on-demand print service by transmitting a print job stored in the second image processing device to the first image processing device for execution.and a management server that manages the second image processing device in the image processing system. printing a function of realizing a function of holding a job, and realizing a function of returning connection server connection information corresponding to an organization specified in a connection information acquisition request sent from the image processing device in response to the connection information acquisition request in which identification information of the organization is specified, in a computer forming the management server, and a function of connecting a virtual private line between the computer forming the first image processing device and the connection server of the organization using the connection server connection information corresponding to the organization acquired by transmitting a connection information acquisition request including identification information of the organization specified by a user to the management server; a request for obtaining access information, the request including identification information of an organization designated by a user of the first image processing device, is transmitted to the management server, the access information corresponding to the organization is obtained, and a request is made to the second image processing device of the organization to register the first image processing device as a slave device of the second image processing device, the first image processing device is registered in response to the registration request; In response to a job acquisition instruction including identification information of an organization designated by a user of the first image processing apparatus, the second image processing apparatus of the organization that has become accessible using access information of the organization transmits the job to the user via the virtual private line. printing Ability to get jobs, acquired printing The function of executing a job is realized. The program according to the present invention provides a program for storing, in an image processing system, a first image processing device installed in a shared space and shared by a plurality of users who do not belong to the same organization; a connection server installed outside the shared space and connected to a local area network of an organization to which each of the plurality of users belongs, the connection server having a virtual private line connection function; a second image processing device connected to the local area network of each organization; and a management server installed outside the shared space and the local area network of each organization, the management server storing and managing connection server connection information required for establishing a virtual private line with the connection server of each organization and access information required for accessing the second image processing device of each organization, the access information being the connection server connection information required for establishing a virtual private line with the connection server of each organization and the access information required for accessing the second image processing device of each organization, the access information being the connection server connection information required for establishing a virtual private line with the connection server of each organization and the access information required for accessing the second image processing device of each organization, the access information being the connection server connection information required for establishing a virtual private line with the connection server of each organization, the access information being the connection server connection ... and a function of registering the management server in the second image processing device as a child device when providing an on-demand print service, and a function of causing a computer forming the management server to retain access information of the second image processing device which is a parent device in the on-demand print service in the management server, and a function of returning connection server connection information corresponding to an organization specified in a connection information acquisition request sent from the image processing device in response to a connection information acquisition request in which identification information of an organization is specified, and a function of connecting a virtual private line with a connection server of the organization using connection server connection information corresponding to the organization acquired by transmitting a connection information acquisition request including identification information of the organization specified by a user to the management server, a function of acquiring a print job via the virtual private line from the second image processing device of the organization which has become accessible using the access information of the organization in response to a job acquisition instruction including identification information of the organization specified by a user of the first image processing device, and a function of executing the acquired print job. Effect of the Invention

[0019] According to the invention described in claim 1, an image processing device installed in a shared space and shared by multiple users who do not belong to the same organization can execute jobs involving image processing stored on the organization side without retaining information regarding the organization and the job. In addition, the first image processing device can be linked to the second image processing device to provide an on-demand print service, and a job stored in the second image processing device can be directly acquired by the first image processing device and executed.

[0024] Claim 2 According to the invention described in the above, it is possible to obtain access information for the second image processing apparatus, which is to be the parent apparatus, by making the management server operate independently.

[0025] Claim 3 According to the invention described in The image processing device installed in a shared space and shared by a plurality of users who do not belong to the same organization can execute a job involving image processing stored on the organization side without retaining information about the organization and the job. The second image processing device can be caused to provide an on-demand print service via the management server.

[0026] Claim 4 According to the invention described in the above, information exchange between the first image processing device and the second image processing device can be performed via the management server.

[0027] Claim 5 According to the invention described in the item 2, the first image processing apparatus can obtain a job via the management server.

[0028] Claim 6 According to the invention described in the above, an image processing device installed in a shared space and shared by multiple users who do not belong to the same organization can execute jobs involving image processing stored on the organization side without retaining information regarding the organization and the job. In addition, the first image processing device can be linked to the second image processing device to provide an on-demand print service, and a job stored in the second image processing device can be directly acquired by the first image processing device and executed.

[0029] Claim 7 According to the invention described in the above, an image processing device installed in a shared space and shared by multiple users who do not belong to the same organization can execute jobs involving image processing stored on the organization side without retaining information regarding the organization and the job. In addition, the first image processing device can be linked to the second image processing device to provide an on-demand print service, and a job stored in the second image processing device can be directly acquired by the first image processing device and executed. According to the invention described in claim 8, an image processing device installed in a shared space and shared by multiple users who do not belong to the same organization can execute a job involving image processing stored on the organization side without retaining information about the organization and the job. Also, a second image processing device can be caused to provide an on-demand print service via a management server. [Brief description of the drawings]

[0030] [Figure 1] 1 is a block diagram showing an information processing system according to a first embodiment. [Diagram 2] 4 is a diagram showing an example of a data configuration of management server information stored in a management server information storage unit in the first embodiment. FIG. [Diagram 3] 4 is a diagram showing an example of a data configuration of company information stored in a company information storage unit in the first embodiment. FIG. [Figure 4A] FIG. 4 is a sequence diagram showing a process for causing the image processing device to execute a print job in the first embodiment. [Figure 4B] FIG. 4B is a sequence diagram continuing from FIG. 4A. [Diagram 5]FIG. 11 is a block diagram showing an information processing system according to a second embodiment. [Figure 6] FIG. 11 is a diagram showing an example of a data configuration of company information stored in a company information storage unit in the second embodiment. [Figure 7A] FIG. 11 is a sequence diagram showing a process for causing an image processing device to execute printing in the second embodiment. [Figure 7B] FIG. 7B is a sequence diagram continuing from FIG. 7A. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0031] Hereinafter, preferred embodiments of the present invention will be described with reference to the drawings.

[0032] Embodiment 1 Fig. 1 is a block diagram showing an embodiment of an information processing system according to the present invention. Fig. 1 shows a configuration in which a shared office LAN (Local Area Network) system 100, a company LAN system 200, and a management server 310 installed in a cloud 300 are connected by a network 1 consisting of the Internet or the like. The information processing system in this embodiment can be realized as hardware by combining existing computers and the like, and as described later, the characteristic information processing control in this embodiment is realized by software running on each computer.

[0033] The information processing system may include a shared office LAN system 100 for multiple shared offices and a company LAN system 200 for multiple companies, but since each of them only needs to have the configuration described below, Fig. 1 illustrates one LAN system each 100, 200. Only one management server 310 is provided in the information processing system. In this embodiment, the management server 310 is provided in the cloud 300, but it does not have to be limited to the cloud 300 as long as it is accessible from each LAN system 100, 200.

[0034] The shared office LAN system 100 is a LAN system installed in a shared office. In this embodiment, a "shared space" is a space in which multiple users who do not belong to the same organization coexist. In this embodiment, a shared office is used as an example of a shared space.

[0035] Incidentally, an "organization" refers to a group formed to achieve a specific purpose. If a user who does not belong to any organization uses a shared office, the shared office can be said to be a space shared by multiple users who do not belong to the same organization, rather than multiple users who belong to different organizations. In this embodiment, for the sake of convenience, it is assumed that the users of the shared office belong to some organization. In addition, if there is a user who does not belong to any organization, it is treated as if there is an organization to which only that user belongs. In this embodiment, a company is used as an example of an organization. Therefore, in the following description, "organization" and "company" are used synonymously. In addition, other organizations include, for example, educational institutions such as universities.

[0036] The company LAN system 200 is a LAN system installed within a company and constructed outside the shared office. Since the shared office LAN system 100 is used by users belonging to multiple companies, a company LAN system 200 exists for each company to which each user belongs, and is connected to the network 1.

[0037] The image processing device 110 is installed in a shared office and is used only by users of the shared office. More specifically, the image processing device 110 is available to users belonging to an organization that has a contract with the manager of the shared office. The image processing device 110 is shared by users belonging to each of multiple organizations, in other words, by multiple users who do not belong to the same organization. The image processing device 110 in this embodiment is used as a slave device by setting in an on-demand print service.

[0038] The image processing device 110 is also called an image forming device, and is a multifunction device equipped with various functions involving image processing such as a printing function, a copying function, and a scanner function, and functions as a first information processing device with a built-in computer. The image processing device 110 includes a CPU as a first processor, a ROM, a RAM, a HDD, a scanner as an image reading device for reading an image on a medium such as paper, a print engine as an image forming device for forming an image on the medium, an operation panel for receiving instructions from a user and displaying information, and a network interface for connecting communication lines such as the network 1 and the LAN 120. The image processing device 110 in this embodiment also includes a card reader. It may further include an external media interface for connecting an external memory device such as a USB memory or a flash memory, and a wireless communication means for performing short-distance wireless communication with the user PC 130.

[0039] The image processing device 110 has an image processing unit 111, a VPN connection processing unit 112, an authentication processing unit 113, and a management server information storage unit 114. The image processing unit 111 executes image processing in response to a request from a user. When providing an on-demand print service, the image processing device 110 in this embodiment operates as a slave device by registration, and executes a print job involving image processing as image processing. The image processing unit 111 provides various image processing functions according to the hardware and software included in the image processing device 110. However, each user who is permitted to use the shared office is not necessarily able to use all the functions provided by the image processing device 110, and can use the functions within the scope specified in the contract information regarding the use of the shared office.

[0040] In response to a request from a user, the VPN connection processing unit 112 establishes a VPN connection with the VPN server 210 of the company LAN system 200 of the company to which the user belongs. In this embodiment, a connection between two parties, for example, the shared office LAN system 100 and the company LAN system 200, that allows communication via VPN is called a "VPN connection." In addition, the VPN connection processing unit 112 disconnects the connected VPN in response to a release request. The authentication processing unit 113 authenticates whether the user of the image processing device 110 is a user who belongs to the company to which the VPN connection is established.

[0041] FIG. 2 is a diagram showing an example of the data configuration of management server information stored in management server information storage unit 114 in this embodiment. Management server information is information required when accessing management server 310. In the management server information, company authentication information and a URL (Uniform Resource Locator) are set as a set for each company to which each user of the shared office belongs. The company authentication information is authentication information required to obtain information about the company, and includes identification information (hereinafter, "company ID") and a password for the company. The URL is storage destination information that specifies the location where information about the company is stored. The company or the administrator of the shared office sets the management server information in advance in management server information storage unit 114 in accordance with a contract between the company and the shared office.

[0042] Each of the components 111 to 113 in the image processing device 110 is realized by cooperative operation between a computer installed in the image processing device 110 and a program running on a CPU as a first processor installed in the computer. The management server information storage unit 114 is realized by a HDD installed in the image processing device 110. Alternatively, a RAM or another computer included in the shared office LAN system 100 may be used via the LAN 120.

[0043] The user PC 130 is a portable PC that is brought into the shared office by an employee of each company, etc. A user may bring his / her own desk PC 240 into the shared office and use it as the user PC 130.

[0044] The company LAN system 200 is constructed outside the shared office LAN system 100. The company LAN system 200 is configured by connecting a VPN server 210, an authentication server 220, an image processing device 230, and a personal desk PC 240 via a LAN 250.

[0045] The VPN server 210 has a function, called a VPN server function or a VPN router function, for connecting a VPN in response to a VPN connection request from an external device, and establishes a VPN connection in response to a request from an external network system, in this embodiment, the image processing device 110 of the shared office LAN system 100. The VPN server 210 in this embodiment relays data exchanged between the VPN-connected image processing device 110 and computers such as the authentication server 220 connected to the LAN 250 of the company LAN system 200.

[0046] Information about the image processing device 110 that is the target of the VPN connection, specifically, identification information and authentication information of the image processing device 110, may be set in advance in the VPN server 210. The image processing device 110 that is the target of the setting can be specified by entering into a contract with a shared office, and the necessary information can be obtained. Note that instead of the identification information of the image processing device 110, the user ID of a user belonging to the company or permission information (e.g., a certificate or a password) issued by the VPN server 210 to the image processing device 110 may be used.

[0047] The processing functions of VPN server 210, which will be described later, are realized by the cooperative operation of a computer forming VPN server 210 and a program that runs on a CPU as a second processor mounted on the computer.

[0048] The authentication server 220 performs user authentication of users of the company who are in a shared office in response to a request from the image processing device 110. The authentication server 220 realizes the processing functions described below through the cooperative operation of a computer forming the VPN server 210 and a program running on a CPU as a fifth processor mounted on the computer.

[0049] The image processing device 230 is also called an image forming device, and is a multifunction device equipped with various functions involving image processing such as a printing function, a copying function, and a scanning function, and functions as a second information processing device with a built-in computer. The image processing device 230 includes a CPU as a third processor, a ROM, a RAM, a HDD, a scanner as an image reading device for reading an image on a medium such as paper, a print engine as an image forming device for forming an image on the medium, an operation panel for receiving instructions from a user and displaying information, and a network interface for connecting communication lines such as the network 1 and the LAN 250. The image processing device 230 in this embodiment may also include an external media interface for connecting an external memory device such as a USB memory or a flash memory.

[0050] The image processing device 110 in this embodiment is used as a parent device in an on-demand print service by setting it. The on-demand print service is a function that configures a group of multiple image processing devices and enables print data held by the image processing devices that make up the group to be printed from any of the image processing devices that make up the group. Here, the group of image processing devices that provide the on-demand print service will be described as being configured with one image processing device as a parent device and the remaining image processing devices as child devices, but the image processing devices that make up the group may each have equivalent functions and form a group without distinguishing between parent and child devices.

[0051] The image processing device 230 has an ODP (On Demand Print) function processing control unit 231 and a child device information storage unit 232. Note that components not used in the description of this embodiment are omitted from the figure. The ODP function processing control unit 231 causes the image processing device 230 to perform an on-demand print function. That is, the ODP function processing control unit 231 provides an on-demand print service in cooperation with a device registered as a child device, for example, the image processing device 110. The child device information storage unit 232 registers child device information related to a child device of the image processing device 230 that operates as a parent device in the on-demand print service. The child device information includes address information (for example, an IP address) of the device that operates as a child device. The ODP function processing control unit 231 is realized by the cooperative operation of a computer installed in the image processing device 230 and a program that operates on a CPU as a third processor installed in the computer. The child device information storage unit 232 is realized by an HDD installed in the image processing device 230. Alternatively, the RAM or other computers included in the company LAN system 200 may be utilized via the LAN 250 .

[0052] A plurality of PCs used by employees are connected to the LAN 250, and the desk PC 240 is an information processing device used within the company by employees who use the shared office. The desk PC 240 stores data to be printed that is created by a user. The processing performed by the desk PC 240 is realized by the cooperative operation of a computer forming the desk PC 240 and a program that runs on a CPU as a sixth processor mounted on the computer.

[0053] The VPN server 210, authentication server 220, image processing device 230 and desk PC 240 can all be realized using existing general-purpose computers, and are equipped with a CPU, ROM, RAM, HDD and other storage means, a user interface, a network interface for connecting communication lines such as network 1 and LAN 250, and the like.

[0054] The management server 310 is installed outside each of the LAN systems 100 and 200. The management server 310 is installed in the cloud 300 so as to be accessible from the image processing device 110 and the VPN server 210 as described above.

[0055] The management server 310 includes an information management unit 311 and a company information storage unit 312. The information management unit 311 manages company information, and sets and provides the company information in response to an external request.

[0056] 3 is a diagram showing an example of the data configuration of company information stored in company information storage unit 312 in this embodiment. Company information is set in advance for each company to which a user of the shared office belongs. The company information includes information required when image processing device 110 starts accessing each company's VPN server 210 and authentication server 220. The company information includes company authentication information, VPN server connection information, authentication server connection information, and parent unit connection information. The company authentication information is authentication information required when accessing information about the company, and is set to the same content as the company authentication information held by image processing device 110.

[0057] The VPN server connection information includes information necessary for the image processing device 110 to make a VPN connection with the company's VPN server 210. In the VPN server connection information, a server address is set as address information for identifying the VPN server 210 to be accessed. Basically, an IP address is set. The port number is a port number for connecting to the VPN server 210. The authentication information is information necessary for the image processing device 110 to be authenticated by the VPN server 210 to which the image processing device 110 is connected, and includes an ID, a password, a certificate issued by the VPN server 210, and VPN settings including settings related to communication via VPN, such as an encryption method and a protocol.

[0058] The authentication server connection information includes information necessary for the image processing device 110 to access the authentication server 220 of the company. In the authentication server connection information, a server address is set as address information for identifying the authentication server 220 to be accessed. Basically, an IP address is set. The port number is a port number for connecting to the authentication server 220. The authentication information is information necessary for the image processing device 110 to be authenticated by the authentication server 220 to which it is connected, and includes an ID, a password, a certificate, etc.

[0059] The parent machine connection information includes information required for the image processing device 110 to access the image processing device 230 of the company that operates as a parent machine when providing an on-demand print service. In the parent machine connection information, an IP address is basically set as address information for identifying the image processing device 230 to be accessed. The port number is a port number for connecting to the image processing device 230. The authentication information is information required for the image processing device 110 to be authenticated by the image processing device 230 to which it is connected, and includes an ID, a password, a certificate, etc.

[0060] The information management unit 311 in the management server 310 is realized by the cooperative operation of a computer forming the management server 310 and a program running on a CPU as a fourth processor mounted on the computer. The company information storage unit 312 is realized by a HDD mounted on the management server 310. Alternatively, a RAM or a storage means of another computer present in the cloud 300 may be used.

[0061] Furthermore, the programs used in the present embodiment can be provided not only by communication means, but also by being stored in a computer-readable recording medium such as a CD-ROM or a USB memory. The programs provided from the communication means or recording medium are installed in a computer, and various processes are realized by the computer's CPU sequentially executing the programs.

[0062] Next, the operation of this embodiment will be described.

[0063] In this embodiment, an example will be described in which a user who normally prints using the image processing device 230 within the company uses an on-demand print service to print using the image processing device 110 when using a shared office.

[0064] When a company considers using the user PC 130 in a shared office, the user PC 130 may not be allowed to save data files to be used by the image processing device 110 in order to prevent information leaks. In this case, the user PC 130 cannot directly send data to the image processing device 110 to execute printing. Therefore, the user sends a print job to the image processing device 230 from the user's desk PC 240 or the like in which the data to be actually printed is saved, and instructs the image processing device 230 to print. However, at this point, the print job is only registered without being executed by the image processing device 230. In other words, the image processing device 230 temporarily stores the print job.

[0065] Then, the user moves to the shared office and moves the print job stored in the image processing device 230 to the image processing device 110 for printing. In this case, from the viewpoint of security, the image processing device 110 and the in-house VPN server 210 are connected via VPN before the data to be printed is transmitted.

[0066] However, if the information required for a VPN connection, that is, information specific to a company, is stored and managed in the shared office LAN system 100 including the image processing device 110, information leakage may occur.

[0067] Therefore, in this embodiment, the management server 310 on the cloud 300 stores company-specific information, i.e., the company information shown in Fig. 3, instead of the image processing device 110, and the image processing device 110 acquires the information when necessary. In addition, the print job itself is not stored in the image processing device 110 on the shared office side until printing is performed.

[0068] Hereinafter, a process in which a user of a shared office causes the image processing device 110 to execute and print a print job created within the company will be described with reference to the sequence diagrams shown in Figs. 4A and 4B. As described above, before this process is performed, it is necessary to set the management server information shown in Fig. 2 based on the contract between the company and the shared office. Among the company information shown in Fig. 3, the company authentication information, VPN server connection information, and authentication server connection information are set by the company administrator by registering them in the company information storage unit 312 of the management server 310 from the VPN server 210 or an administrator's PC (not shown). Alternatively, the information may be passed to the administrator of the management server 310 to be registered. There are two ways to set the parent unit connection information.

[0069] One is set manually in the same way as VPN server connection information, etc. The other is set by the proactive operation of the management server 310. Specifically, the setting is performed by the following operation.

[0070] That is, the management server 310 refers to the VPN server connection information set in the company information and makes a VPN connection to the VPN server 210. As a result, the management server 310 is virtually connected to the LAN 250, and detects the image processing device 230 that can be set as a parent device by searching for devices connected to the LAN 250. The management server 310 then obtains information required to connect to the image processing device 230, and registers it in the company information included in the company information storage unit 312 as parent device connection information.

[0071] As described above, in a state where the necessary information has been set, the user instructs the image processing device 230 to print from his / her own desk PC 240 while in the office (step 110). At this time, the print job to be executed by the image processing device 110 is sent to the image processing device 230, but it is merely stored and not executed.

[0072] A user who has moved to the shared office issues a print job retrieval instruction to the image processing device 110 (step 120). For example, the user holds an IC card he or she carries over a card reader (not shown) of the image processing device 110. The IC card is provided by the shared office or the company, and records the identification information of the user who carries the IC card (hereinafter, "user ID") and the company ID. When the image processing device 110 acquires the user ID and the company ID from the IC card, it executes a VPN connection process as follows (step 130). More specifically, the VPN connection processing unit 112 acquires management server information corresponding to the company by searching the management server information based on the acquired company ID. Then, the VPN connection processing unit 112 specifies a URL included in the acquired management server information and transmits a request to acquire VPN server connection information including company authentication information to the management server 310 (step 131).

[0073] When the information management unit 311 in the management server 310 receives the request from the image processing device 110, it authenticates the company based on the company authentication information included in the request, and then returns the VPN server connection information of that company (step 132).

[0074] When the VPN server connection information is acquired from the management server 310, the VPN connection processing unit 112 transmits a VPN connection request including authentication information to the server address and port number included in the VPN server connection information (step 133).

[0075] When the VPN server 210 receives the VPN connection request from the image processing device 110, it authenticates the image processing device 110 based on the authentication information included in the request, and then returns a connection permission (step 134).

[0076] In this manner, the VPN connection processing unit 112 connects the image processing device 110 to the VPN server 210 owned by the company to which the user who held up the IC card belongs (step 135). Once the VPN connection is established, the image processing device 110 then executes user authentication processing (step 140). More specifically, the authentication processing unit 113 specifies the URL included in the management server information already acquired in step 131 and transmits a request to acquire authentication server connection information including company authentication information to the management server 310 (step 141).

[0077] When the information management unit 311 in the management server 310 receives the request from the image processing device 110, it authenticates the company based on the company authentication information included in the request, and then returns authentication server connection information for that company (step 142).

[0078] When the authentication server connection information is obtained from the management server 310, the authentication processing unit 113 requests authentication of the user by sending a user authentication request including the authentication information and the user ID obtained from the IC card via the VPN to the server address and port number included in the authentication server connection information (step 143).

[0079] When the authentication server 220 receives a user authentication request from the image processing device 110, it authenticates the image processing device 110 based on the authentication information included in the request, and then performs user authentication based on the user ID included in the user authentication request (step 144). Here, the explanation will be continued assuming that the user authentication is successful.

[0080] Next, the image processing unit 111 in the image processing device 110 specifies the URL included in the management server information acquired in step 131 and transmits a request to acquire parent unit connection information including company authentication information to the management server 310 (step 150).

[0081] When the information management unit 311 in the management server 310 receives the acquisition request from the image processing device 110, it authenticates the company based on the company authentication information included in the request, and then returns the parent unit connection information of that company (step 160).

[0082] When the parent unit connection information is obtained from the management server 310, the image processing unit 111 requests to register its own device as a child unit by sending a child unit registration request, including authentication information for the image processing device 230 that will be the parent unit and identification information for its own device (hereinafter, "device ID", e.g., an IP address), via the VPN to the server address and port number included in the parent unit connection information (step 170).

[0083] When the slave registration request is transmitted, the ODP function processing control unit 231 in the image processing device 230 authenticates the image processing device 110 based on the authentication information included in the request, and then registers the image processing device 110 corresponding to the device ID included in the slave registration request as a slave device in the slave device information storage unit 232. Then, the ODP function processing control unit 231 returns a registration completion notification to the image processing device 110 that sent the request via the VPN (step 180).

[0084] Once the image processing device 110 has been registered as a child device of the image processing device 230 in the manner described above, the image processing unit 111 transmits a job list retrieval request, including the user ID of the user who instructed the retrieval of the print job in step 120, to the image processing device 230 via the VPN (step 190).

[0085] In response to the job list extraction request sent from the image processing device 110, the image processing device 230 reads out, from among the stored print jobs, identification information of the print jobs of the user corresponding to the user ID included in the job list extraction request, such as job IDs and job names (hereinafter collectively referred to as "job IDs"), and creates a job list. Then, the image processing device 230 returns the created job list to the image processing device 110 that sent the request via the VPN (step 200).

[0086] Next, the image processing unit 111 displays the returned job list on the operation panel (step 210). The user, viewing the display on the operation panel, selects from the job list the job ID of the job that the user wishes the image processing device 110 to execute (step 220). Upon acquiring the job ID selected by the user, the image processing unit 111 transmits a job transmission request including the acquired job ID and the user ID of the user who selected the job ID to the image processing device 230 via the VPN (step 190).

[0087] In response to the job transmission request sent from the image processing device 110, the image processing device 230 extracts the print job corresponding to the job ID included in the job transmission request and returns it to the image processing device 110 that sent the request via the VPN (step 240).

[0088] When the image processing unit 111 acquires the print job as described above, it executes the print job to print it (step 250).

[0089] Thereafter, when printing is completed, the image processing device 110 may disconnect the VPN (step 260). When the VPN is disconnected, if the image processing device 110 subsequently retains information acquired from the user or management server 310 internally, the image processing device 110 discards the information by deleting it from the image processing device 110 (step 270). By discarding the information, users belonging to other companies are not given the opportunity to acquire information from the image processing device 110. In other words, information leakage can be prevented.

[0090] According to the present embodiment, when providing an on-demand print service, the image processing device 110 in the shared office can be used as a child device of the image processing device 230 to print. This allows the user to obtain printed materials at the shared office without carrying the user PC 130 that holds the data to be printed or the printed materials of the data. In addition, as described above, the group of image processing devices providing the on-demand print service is configured with the image processing device 230 as the parent device and other image processing devices including the image processing device 110 in the shared office as child devices, but this is not limited to this. Each image processing device may have the same function as the image processing device 230 and store device information (IP addresses, etc.) of the other image processing devices that make up the group to form a group on an equal footing. In this case, the image processing device 110 in the shared office joins the group, and obtains information of one of the image processing devices that make up the group, which corresponds to the parent device connection information, from the management server 310, and makes a request to register the image processing device itself via the management server 310, thereby making it possible to join the group.

[0091] Embodiment 2 5 is a block diagram showing an information processing system according to the present embodiment. The same components as those in the first embodiment are given the same reference numerals and will not be described. In the present embodiment, an intermediary unit 313 is provided in the management server 310 having the configuration shown in the first embodiment. The intermediary unit 313 has a function of acting as an intermediary for information exchanged between the shared office LAN system 100 and the company LAN system 200. The intermediary unit 313 is realized by the cooperative operation of a computer forming the management server 310 and a program running on a CPU as a fourth processor mounted on the computer.

[0092] 6 is a diagram showing an example of the data configuration of company information stored in company information storage unit 312 in this embodiment. In the company information in this embodiment, connected child device information is added for each company to the data configuration shown in embodiment 1. The connected child device information includes information for identifying an image processing device 110 that is a child device of image processing device 230 of the company. The information for identifying image processing device 110 is, for example, an IP address. Note that there may be a plurality of image processing devices 110 with image processing device 230 as a parent device.

[0093] The system configuration differs from that of the first embodiment in the points described above. Next, the operation of the present embodiment will be described, but it may be basically the same as that of the first embodiment. However, in the present embodiment, the intermediary unit 313 in the management server 310 mediates communication between the image processing device 110 as a child device and the image processing device 230 as a parent device. Hereinafter, a process in which a user of a shared office causes the image processing device 110 to execute a print job created in the company and print it will be described with reference to the sequence diagrams shown in Figs. 7A and 7B. Note that the same steps as those of the first embodiment described with reference to Figs. 4A and 4B will be assigned the same step numbers and explanations will be omitted as appropriate.

[0094] When the user is in the office, the user instructs the image processing device 230 to print from the user's desk PC 240, causing the image processing device 230 to accumulate a print job (step 110). Then, after moving to the shared office, the user instructs the image processing device 110 to retrieve the print job by, for example, holding an IC card that the user is carrying over a card reader of the image processing device 110 (step 120).

[0095] By this operation, the image processing device 110 establishes a VPN connection with the VPN server (step 130), but the details of this process are omitted since they have been explained in embodiment 1. After that, the image processing device 110 authenticates the user (step 140), but the details of this process are also omitted since they have been explained in embodiment 1.

[0096] Next, the image processing unit 111 in the image processing device 110 sends a job list retrieval request to the management server 310, which request includes the device ID of the image processing device 110, the user ID of the user who instructed the retrieval of the print job in step 120, and the company authentication information of the company to which the user belongs (step 310).

[0097] When the information management unit 311 in the management server 310 receives a job list retrieval request from the image processing device 110, the information management unit 311 authenticates the company based on the company authentication information included in the request, and then registers the device ID in the connected slave device information of the company information (step 320). Next, the mediation unit 313 transmits a job list retrieval request to the image processing device 230, which is to be the parent device, to the server address and port number included in the parent device connection information of the company from the company information, and the job list retrieval request includes authentication information of the image processing device 230 as the parent device, identification information of the device itself (hereinafter, "management server ID", for example, IP address), and the user ID of the user who instructed the image processing device 110 to retrieve a print job (step 330). The job list retrieval request also serves as the slave device registration request described in the first embodiment.

[0098] When a job list extraction request is transmitted, the ODP function processing control unit 231 in the image processing device 230 authenticates the management server 310 based on the authentication information included in the request, and then registers the management server 310 corresponding to the management server ID included in the job list extraction request as a slave device in the slave device information storage unit 232 (step 340). Next, in response to the job list extraction request, the image processing device 230 reads out, from among the accumulated print jobs, identification information, for example, job ID, of the print job of the user corresponding to the user ID included in the job list extraction request, and creates a job list. Then, the image processing device 230 returns the created job list to the management server 310, which is the slave device that sent the request (step 350).

[0099] The intermediary unit 313 in the management server 310 returns the job list returned from the image processing device 230 to the image processing device 110 that sent the job list retrieval request (step 360). The return destination can also be specified by referring to the child device connection information of the company.

[0100] The subsequent processing may be the same as in the first embodiment, and therefore a description thereof will be omitted.

[0101] The image processing device 110 in this embodiment is adapted to acquire the job list via the management server 310. In other words, by having the intermediation unit 313, the management server 310 becomes a virtual parent device for the image processing device 110 which is a child device in the on-demand print service, and becomes a virtual child device for the image processing device 230 which is a parent device.

[0102] In this embodiment, the image processing device 110 transmits a print job transmission request directly to the parent image processing device 230 as in the first embodiment, but may transmit the request via the management server 310 as in the case of a job list acquisition request. In this case, for security reasons, it is preferable to connect a VPN between the image processing device 110 and the management server 310, and between the management server 310 and the VPN server 210, and exchange print jobs via the VPN.

[0103] However, unlike an acquisition request, a print job has a relatively large amount of data. For this reason, if one management server 310 is made to mediate print jobs exchanged between a plurality of shared office LAN systems 100 and company LAN systems 200, the load on the management server 310 will increase. Therefore, in this embodiment, for print jobs, which have a relatively large amount of data compared to information for requests or instructions such as a job list acquisition request, the data is directly exchanged between the image processing device 230, which is the parent device, and the image processing device 110, which is the child device, in the on-demand print service, so as not to place a load on the management server 310.

[0104] The management server 310 must delete the IP address of the image processing device 110 that has disconnected the VPN from the child device connection information in the company information. The VPN may be disconnected, for example, by receiving a notification from the image processing device 110.

[0105] In the above embodiments, the term "processor" refers to a processor in a broad sense, including general-purpose processors (e.g., CPU: Central Processing Unit, etc.) and dedicated processors (e.g., GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic device, etc.).

[0106] In addition, the operations of the processor in the above embodiments may be performed not only by one processor, but also by multiple processors located at physically separate locations working together. The order of the operations of the processor is not limited to the order described in the above embodiments, and may be changed as appropriate. [Explanation of symbols]

[0107] 1 network, 100 shared office LAN system, 110 image processing device (child device), 111 image processing unit, 112 VPN connection processing unit, 113 authentication processing unit, 114 management server information storage unit, 130 user PC, 200 company LAN system, 210 VPN server, 220 authentication server, 230 image processing device (parent device), 231 ODP function processing control unit, 232 child device information storage unit, 240 personal desk PC, 300 cloud, 310 management server, 311 information management unit, 312 company information storage unit, 313 intermediation unit.

Claims

1. a first processor installed in a first image processing device that is installed in a shared space and shared by a plurality of users who do not belong to the same organization; a second processor installed in a connection server that is installed outside the shared space and is connected to a local area network of an organization to which each of the users belongs, the connection server having a virtual private line connection function; a third processor installed in a second image processing device connected to the local area network of each organization; a fourth processor installed in a management server that is installed outside the shared space and the local area network of each organization and that stores and manages connection server connection information required for establishing a virtual private line with the connection server of each organization and access information required for accessing the second image processing device of each organization, the access information being the access information of the second image processing device that becomes a parent device when providing an on-demand print service by transmitting a print job stored in the second image processing device to the first image processing device and executing the print job; having The third processor causes the second image processing device to hold one or more print jobs generated by a user belonging to the organization; the fourth processor, in response to a connection information acquisition request in which identification information of an organization is specified and transmitted from the image processing device, returns connection server connection information corresponding to the organization specified in the connection information acquisition request; The first processor, a connection server connection request including identification information of an organization designated by a user is transmitted to the management server, and the connection server connection information corresponding to the organization is acquired, and a virtual private line is connected to the connection server of the organization; sending an access information acquisition request including identification information of an organization designated by a user of the first image processing device to the management server, the access information corresponding to the organization being acquired, to the second image processing device of the organization, a request to register the first image processing device as a slave device of the second image processing device; After being registered in response to the registration request, in response to a print job acquisition instruction including identification information of an organization designated by a user of the first image processing device, a print job is acquired from the second image processing device of the organization that has become accessible using access information of the organization via the virtual private line; causing the first image processing device to execute the acquired print job; 1. An image processing system comprising:

2. The fourth processor Connecting a virtual private line to the connection server using the connection server connection information; identifying the second image processing device to be a master by searching a local network having a connected connection server; acquiring access information of the identified second image processing device and causing the management server to store the access information; 2. The image processing system according to claim 1.

3. A first processor installed in a first image processing device installed in a shared space and shared by multiple users who do not belong to the same organization; a second processor installed in a connection server that is installed outside the shared space and is connected to a local area network of an organization to which each of the users belongs, the connection server having a virtual private line connection function; a third processor installed in a second image processing device connected to the local area network of each organization; a fourth processor installed in a management server that is installed outside the shared space and the local area network of each organization and that stores and manages connection server connection information required for establishing a virtual private line with the connection server of each organization and access information required for accessing the second image processing device of each organization, the access information being the access information of the second image processing device that becomes a parent device when providing an on-demand print service by transmitting a print job stored in the second image processing device to the first image processing device and executing the print job; having The third processor, causing the second image processing device to hold one or more print jobs generated by users belonging to the organization; registering the management server in the second image processing device as a slave device for providing an on-demand print service; The fourth processor storing access information of the second image processing device, which is a master device in the on-demand print service, in the management server; responding to a connection information acquisition request in which identification information of an organization is specified and transmitted from the image processing device, to return connection server connection information corresponding to the organization specified in the connection information acquisition request; The first processor, a connection server connection request including identification information of an organization designated by a user is transmitted to the management server, and the connection server connection information corresponding to the organization is acquired, and a virtual private line is connected to the connection server of the organization; in response to a print job acquisition instruction including identification information of an organization designated by a user of the first image processing device, acquiring a print job from the second image processing device of the organization that has become accessible using access information of the organization via the virtual private line; causing the first image processing device to execute the acquired print job; 1. An image processing system comprising:

4. The fourth processor the second image processing device corresponding to an organization designated by a user of the first image processing device is set as a parent device, and the first image processing device is associated with the second image processing device as a child device; relaying information exchange between the first image processing device and the second image processing device; 4. The image processing system according to claim 3.

5. The image processing system of claim 4, characterized in that the first processor acquires a job from the second image processing device via the management server when the first image processing device and the management server, and the management server and the connection server of the organization corresponding to the identification information included in the job acquisition instruction are both connected by virtual dedicated lines.

6. an image forming apparatus including a processor, installed in a shared space, and shared by a plurality of users not belonging to the same organization, the image forming apparatus being included in an information processing system together with a connection server installed outside the shared space and connected to a local area network of each organization to which the plurality of users respectively belong, the connection server having a virtual private line connection function; an image processing apparatus connected to the local area network of each organization; and a management server installed outside the shared space and the local area network of each organization, which stores and manages connection server connection information required for establishing a virtual private line with the connection server of each organization and access information required for accessing the image processing apparatus of each organization, the connection server connection information being required for establishing a virtual private line with the connection server of each organization and access information being required for accessing the image processing apparatus of each organization, the connection server connection information being required for establishing a virtual private line with the connection server of each organization and access information being required for accessing the image processing apparatus of each organization by transmitting a print job stored in the image processing apparatus to the image forming apparatus and executing it; The processor, a connection server connection request including identification information of an organization designated by a user is transmitted to the management server, and the connection server connection information corresponding to the organization is acquired, and a virtual private line is connected to the connection server of the organization; a request for obtaining access information, the request including identification information of an organization designated by a user of the image forming apparatus, is transmitted to the management server, and the access information corresponding to the organization is obtained, and a request is made to the image processing apparatus of the organization to register the image forming apparatus as a slave of the image processing apparatus; After you have registered in response to the registration request, In response to a print job acquisition instruction including identification information of an organization designated by a user, the print job is acquired via the virtual private line from the image processing device of the organization that has become accessible using the access information of the organization; Execute the acquired print job, 1. An image forming apparatus comprising:

7. a first image processing device installed in a shared space and shared by a plurality of users who do not belong to the same organization; a connection server that is installed outside the shared space and is connected to a local area network of an organization to which each of the users belongs, the connection server having a virtual private line connection function; a second image processing device connected to the local area network of each organization; a management server that is installed outside the shared space and the local area network of each organization, and that stores and manages connection server connection information required for establishing a virtual private line with the connection server of each organization and access information required for accessing the second image processing device of each organization, the access information being the access information of the second image processing device that becomes a parent device when providing an on-demand print service by transmitting a print job stored in the second image processing device to the first image processing device and executing the print job; a computer forming the second image processing device in an image processing system having the above-mentioned function of storing one or more print jobs generated by a user belonging to the organization; a function of returning connection server connection information corresponding to an organization specified in a connection information acquisition request transmitted from the image processing device in response to the connection information acquisition request, the organization identification information being specified in the connection information acquisition request, in a computer forming the management server; A computer forming the first image processing device includes: a function of connecting a virtual private line between the connection server of an organization specified by a user and the connection server of the organization using connection server connection information corresponding to the organization acquired by transmitting a connection information acquisition request including identification information of the organization specified by the user to the management server; sending an access information acquisition request including identification information of an organization designated by a user of the first image processing device to the management server, the access information corresponding to the organization being acquired, to the second image processing device of the organization, a request to register the first image processing device as a slave device of the second image processing device; a function of acquiring a print job from the second image processing device of an organization that has become accessible using access information of the organization via the virtual private line in response to a job acquisition instruction including identification information of the organization designated by a user of the first image processing device after the first image processing device is registered in response to a registration request; A function for executing the acquired print job; A program to achieve this.

8. A first image processing device installed in a shared space and shared by multiple users who do not belong to the same organization; a connection server that is installed outside the shared space and is connected to a local area network of an organization to which each of the users belongs, the connection server having a virtual private line connection function; a second image processing device connected to the local area network of each organization; a management server that is installed outside the shared space and the local area network of each organization, and that stores and manages connection server connection information required for establishing a virtual private line with the connection server of each organization and access information required for accessing the second image processing device of each organization, the access information being the access information of the second image processing device that becomes a parent device when providing an on-demand print service by transmitting a print job stored in the second image processing device to the first image processing device and executing the print job; a function of causing a computer forming the second image processing device in an image processing system having the function of storing one or more print jobs generated by a user belonging to the organization; a function of registering the management server in the second image processing device as a slave device when providing an on-demand print service; Realize this, A computer forming the management server includes: a function of causing the management server to store access information of the second image processing device which is a parent device in the on-demand print service; a function of returning connection server connection information corresponding to an organization specified in a connection information acquisition request transmitted from the image processing device in response to the connection information acquisition request specifying identification information of the organization; Realize this, A computer forming the first image processing device includes: a function of connecting a virtual private line between the connection server of an organization specified by a user and the connection server of the organization using connection server connection information corresponding to the organization acquired by transmitting a connection information acquisition request including identification information of the organization specified by the user to the management server; a function of acquiring a print job from the second image processing device of an organization that has become accessible using access information of the organization via the virtual private line in response to a job acquisition instruction including identification information of the organization designated by a user of the first image processing device; A function for executing the acquired print job; A program to achieve this.

Images