Service providing system, recording device, control program, and method

Abstract

To provide a service provision system capable of preventing an inputting error and an unauthorized use with respect to purchase information.SOLUTION: A terminal 20 transmits a one-time key to a server when purchase information is purchased from the server. In the server 30, when determined that the one-time key includes identification information, a token including the purchase information and the identification information included in the one-time key is transmitted to the terminal 20. In an MFP 10, when determined that the identification information is included in the token, a use quota is added according to the purchase information included in the token.SELECTED DRAWING: Figure 5

Description

[Technical field]

[0001] The present invention relates to technology used in prepaid services. [Background technology]

[0002] Patent Document 1 describes a service providing system that provides a prepaid service. Specifically, the service providing system includes a server and a recording device that is not connected to the server via a network. When the recording device provides a service, the administrator first completes payment to the server and obtains purchase information from the server. The administrator then inputs the purchase information into the recording device, which allows the recording unit to start providing the service. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2015-232814 A Summary of the Invention [Problem to be solved by the invention]

[0004] In the service provision system described in Patent Document 1, the administrator of the recording device must directly input the purchase information issued by the server into the recording device via a user interface. This raises concerns that input errors may occur when inputting the purchase information. There is also a concern that inputting the purchase information issued by the server into multiple recording devices may allow unauthorized access to services.

[0005] The present invention has been made in consideration of the above-mentioned problems, and has an object to provide a service providing system that can prevent input errors and unauthorized use of purchase information. [Means for solving the problem]

[0006] In order to solve the above problem, the service providing system according to the present invention includes a recording device, a terminal, and a server. The recording device has a device-side controller, a user interface, and a recording engine. The recording device is not connected to the server via a network, and the terminal is connected to the server via a network. The device-side controller executes a recording process that allows the recording engine to record an image on a recording medium up to a usage limit according to the purchase information, and an output process that outputs first encrypted information that includes at least identification information of the device. When purchasing purchase information from the server, the terminal accepts an input operation of the first encrypted information and transmits the input first encrypted information to the server. When receiving the first encrypted information from the terminal, the server-side controller of the server executes a server-side determination process that determines whether or not the first encrypted information includes identification information, and when it is determined that the identification information is included, a transmission process that transmits second encrypted information including the purchase information and the identification information included in the first encrypted information to the terminal. When the device controller receives input of the second encrypted information via the user interface, the device controller executes a device-side determination process for determining whether or not the second encrypted information includes identification information, and an additional process for adding a usage limit for recording processing according to the purchase information included in the second encrypted information when it is determined that the identification information is included. The usage limit is information that determines an upper limit for recording processing that can be performed by the recording device. For example, the usage limit is a concept that includes the number of sheets of recording media, the recordable length of the recording media when the recording media is roll paper, the amount of recording media such as ink and toner, and even the amount of recording media to be printed (duty).

[0007] In the above configuration, when purchasing purchase information from the server, the administrator of the recording device operates the terminal to transmit the first encrypted information output by the recording device from the terminal to the server. When the server-side controller determines that the first encrypted information contains identification information, the server transmits second encrypted information including the purchase information and the identification information contained in the first encrypted information to the terminal. The administrator operates the terminal to input the second encrypted information received from the server to the recording device via the user interface of the recording device. When the device-side controller determines that the input second encrypted information contains identification information, the recording device adds a usage limit according to the purchase information contained in the second encrypted information. In this way, when the administrator of the recording device prepays the usage limit, the recording device and the server can determine the authenticity of the information transmitted from each other depending on the presence or absence of identification information that identifies the recording device. In addition, the purchase information issued by the server to the recording device is input to the recording device via the terminal together with the identification information, so that it is possible to prevent the purchase information from being used illegally against other recording devices.

[0008] The present invention can be realized in various forms, and can also be realized as a recording device constituting a service providing system, or as a control program or method executed by a server-side controller of a server. Effect of the Invention

[0009] According to the present invention, it is possible to provide a prepaid service that can prevent input errors in purchase information and unauthorized use. [Brief description of the drawings]

[0010] [Figure 1] FIG. 1 is a configuration diagram of a service providing system. [Diagram 2] FIG. [Diagram 3] 4 is a timing chart illustrating an activation process. [Figure 4] 11 is a timing chart illustrating a process for purchasing a ticket. [Diagram 5] FIG. 13 is a diagram for explaining the flow of data when purchasing a purchase ticket. [Figure 6] 5 is a flowchart for explaining the process executed in S38 of FIG. 4. [Figure 7] 7 is a flowchart illustrating the process executed in S31 of FIG. 4 in the second embodiment. [Figure 8] 5 is a flowchart for explaining the process executed in S36 of FIG. 4. [Figure 9] 13 is a flowchart illustrating a process performed when purchasing a purchase ticket according to the third embodiment. [Figure 10] 13 is a timing chart illustrating a process performed when purchasing a purchase ticket according to the fourth embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] (First embodiment) The service providing system according to the present embodiment will be described with reference to the drawings. The service providing system 100 shown in FIG. 1 includes an MFP (abbreviation of Multifunction Peripheral / Printer / Product) 10, a terminal 20, and a server 30. The server 30 and the terminal 20 are connected to a network 200. In this embodiment, the network 200 may be the Internet, a local area network (LAN), or a combination of a LAN and the Internet. The network 200 may be wired, wireless, or a combination of wired and wireless. Specifically, the server 30 and the MFP 10 are wirelessly connected to a router (not shown) that constitutes a part of the network. In this embodiment, the MFP 10 is an example of a recording device.

[0012] In the service providing system 100 having the above configuration, the MFP10 and the terminal 20 are located in a store that provides a recording service, and the server 30 is located in a main store or the like that manages each store. A user who receives the recording service can use the MFP10 to receive the recording service by paying a fee to a store manager at the store. The usage limit of the MFP10 is managed by the server 30 in a prepaid manner, and when the usage of the MFP10 reaches the upper limit of the usage limit, the store manager operates the terminal 20 to purchase a purchase ticket from the server 30. The purchase ticket is information that adds to the usage limit, and in this embodiment, it is the number of recordable recording media. For example, a purchase ticket can be purchased from the server 30 with a usage limit of 100 sheets.

[0013] The following describes the hardware configuration of the MFP 10. The MFP 10 includes a bus 11, a recording engine 12, a reading unit 13, a user interface 14, a controller 17, and a memory 18. The components constituting the MFP 10 are connected to each other so as to be able to communicate with each other via the bus 11. Hereinafter, the interface is also simply referred to as IF (Interface).

[0014] The user IF 14 is an interface between the user who operates the MFP 10 and the controller 17. Specifically, the user IF 14 includes a touch panel 15 and operation keys 16. The touch panel 15 displays operation icons for receiving operations by the user, and outputs a signal corresponding to the operation received by the operation icon to the controller 17. The operation keys receive operations by the user, and output a signal corresponding to the received operation to the controller 17. Note that the user IF 14 may be an external device that can be connected to the bus 11 via an input / output IF (not shown), other than one that is directly connected to the bus 11. Even in this case, the user IF 14 may include a touch panel or operation keys that receive operations by the user.

[0015] The recording engine 12 executes a print operation to print an image on a recording medium such as a sheet or a disk. Specifically, the controller 17 analyzes a print job and prints an image by discharging the recording medium onto the recording medium. The recording engine 12 may employ a recording method such as an inkjet method that discharges ink as a recording medium, or an electrophotographic method that forms a toner image on a photoreceptor and transfers the formed toner image onto the recording medium. The reading unit 13 executes a scan operation to read an image recorded on a document and generate an image file. The controller 17 causes the reading unit 13 to read a document set on an ADF (Auto Document Feeder) or a reading table, thereby creating an image file, and causes the recording engine 12 to print the created image file as a print job. The MFP 10 may also be capable of executing a composite operation that combines a plurality of operations. A copy operation that combines a print operation by the recording engine 12 and a scan operation by the reading unit 13 is an example of a composite operation. The MFP 10 may also include a FAX unit that transmits and receives image data in a method that complies with the FAX protocol.

[0016] The controller 17 is configured with a CPU, an ASIC (an abbreviation for Application Specific Integrated Circuit), etc., and controls each part that constitutes the MFP 10. The memory 18 is configured by combining a RAM, a ROM, and a flash memory, and stores various programs executed by the controller 17. In this embodiment, the controller 17 is an example of an apparatus-side controller.

[0017] Next, a description will be given of the configuration of the server 30. The server 30 includes a bus 31, a controller 32, a user IF 33, a communication IF 34, and a memory 35. These components are capable of communicating with each other via the bus 31.

[0018] The user IF 33 is an interface between the user and the server, and includes operation keys for accepting operations by the user. The communication IF 34 connects the server 30 to the network 200. The communication IF 34 may perform wireless communication with the terminal 20 using a mobile communication system via a base station.

[0019] The controller 32 includes a CPU and controls each part of the server 30 by executing a program stored in the memory 35. The memory 35 is configured, for example, by combining a RAM, a ROM, and a flash memory. The memory 35 may also be a storage medium readable by the controller 32, which is a computer. Storage media readable by the controller 32 also include recording media such as CD-ROMs and DVD-ROMs. In this embodiment, the controller 32 is an example of a server-side controller.

[0020] Memory 35 stores OS (abbreviation for Operating System) 40, email application 41, and control program 42. Below, controller 32 that executes the programs may be referred to simply as the program name. For example, "the control program 42" may mean "the controller 32 that executes the control program 42." Note that the functions of email application 41 and control program 42 include those that are realized by using functions of OS 40.

[0021] In this embodiment, the controller mainly performs processing according to instructions written in a program. In other words, the processes of "judging," "extracting," "selecting," "calculating," "deciding," "identifying," "obtaining," "receiving," and "controlling" in the following description represent the controller's processing. The processing by the controller 32 also includes hardware control via the OS 40. Note that "obtaining" is used as a concept that does not require a request. In other words, the process of the controller 32 receiving data without a request is also included in the concept of "the CPU obtains data." In addition, "data" in this specification is expressed in a computer-readable format. Data with the same substantial meaning but different formats are treated as the same data. The same applies to "information" in this specification.

[0022] The OS 40 has an API (Application Programming Interface) that enables the email application 41 and the control program 42 to use functions of the OS 40 and to communicate between the email application 41 and the control program 42. The email application 41 is an application program that can send and receive emails with the terminal 20. The email application 41 may be an application that sends email addressed to an email address, or an SMS (short message service) that sends email addressed to a phone number. The control program 42 is a program that performs processing to manage the MFP 10 installed in each store. Specific processing by the control program will be described later.

[0023] The memory 35 has a data storage area for storing data. In the data storage area, management information AC and a common key KEY are stored. The management information AC is information for managing the MFP 10 arranged in each store. In the management information AC shown in FIG. 2, an account name, email information, a serial number, a consumables ID, and an address are recorded. The account name is information requested when the terminal 20 accesses the server 30, and is information uniquely determined for each terminal 20. The email information is an email address or a telephone number of the terminal 20. The serial number is identification information for uniquely identifying the MFP 10. The consumables ID is information indicating consumables of the MFP 10, and includes, for example, model numbers of the recording medium, ink, photoconductor, transport roller, etc. The address is the address of each store.

[0024] The terminal 20 is a smartphone or a mobile phone, and includes a controller, a memory, a user IF, and a communication IF, similar to the server 30. An email application is stored in the memory of the terminal 20, and this email application enables communication with the server 30 via email.

[0025] Next, a process for managing the MFP 10 in each store, which is executed among the MFP 10, the terminal 20, and the server 30, will be described. Fig. 3 shows the process for transitioning the MFP 10 from an invalid state to an valid state when the MFP 10 is introduced to each store. Note that the invalid state is a state in which the MFP 10 does not accept an operation to execute a recording process, and the valid state is a state in which an operation to execute a recording process can be accepted.

[0026] When MFP 10 is introduced in a store, first, the store manager operates terminal 20 to register an account. Specifically, the store manager operates terminal 20 to display an account registration screen. Then, the store manager operates on the account registration screen to input the account name and the store address. The account registration screen may be provided as a browser screen by server 30, or may be displayed by an application program downloaded to terminal 20. In this embodiment, it is assumed that a browser screen is provided.

[0027] In step 10 (hereinafter simply referred to as S10), the terminal 20 transmits an account registration request to the server 30 in response to the operation accepted by the store manager. In this embodiment, the terminal 20 creates an account registration request including an account name, password, email information, address, etc., and transmits the created account registration request to the server 30. Note that the terminal 20 may also make the account registration request by creating email data using an email application that includes the account name and address required for account registration in the body area, and transmitting the created email data to the address of the server 30 as the destination.

[0028] In S11, when the control program 42 of the server 30 receives an account registration request, it performs an account registration process. In the account registration process, items such as the account name, password, email information, and address are registered in the management information AC for the terminal 20 that sent the account registration request. The control program 42 may transmit a registration completion notice to the terminal 20 indicating that the account has been registered.

[0029] Next, the store manager turns on the power of the MFP 10. When the MFP 10 is turned on, the controller 17 starts up, and in S12, the serial number is displayed on the touch panel 15. Note that the serial number may be displayed on the touch panel 15 only when the MFP 10 is turned on for the first time. When the store manager checks the serial number displayed on the touch panel 15, the store manager displays a login screen for logging in to the server 30 on the browser screen of the terminal 20. Then, the store manager enters an account name and a password on the login screen to log in to the server 30. The server 30 displays a product registration screen on the browser screen of the terminal 20. The store manager inputs the serial number and the model number of the consumables of the MFP 10 on the product registration screen. When the terminal 20 receives the input of the serial number, the terminal 20 transmits the received serial number and the model number of the consumables of the MFP 10 to the server 30 in S13.

[0030] In the server 30, in S14, the control program 42 registers the serial number and the model number of the consumables transmitted from the terminal 20 in management information AC in association with the account name. In S15, the control program 42 creates an activation key. The control program 42 creates the activation key by encrypting the serial number registered in the management information AC in S14. Specifically, the control program 42 encrypts the serial number using a common key.

[0031] In S16, the control program 42 transmits the activation key created in S15 to the terminal 20. In this embodiment, the control program 42 reads out the telephone number, which is the mail information of the destination terminal 20, from the management information AC, and transmits the activation key to the terminal 20 by SMS addressed to the read telephone number.

[0032] In S17, the terminal 20 displays the activation key received from the server 30 via the network 200. Specifically, the store manager operates the terminal to cause the terminal 20 to display the activation key included in the body area of ​​the email.

[0033] The store manager operates the user IF 14 of the MFP 10 to input the activation key received by the terminal 20 into the MFP 10. In S18, the controller 17 decrypts the activation key input via the user IF 14 using the common key to extract the serial number. The common key used in the decryption in S18 is a common key that forms a pair with the common key used in the encryption in S15.

[0034] In S19, controller 17 judges whether the serial number extracted in S18 matches the serial number set for its own device. If controller 17 judges that they match (YES in S19), it performs activation processing in S20. Through the activation processing, MFP 10 changes from an invalid state to an valid state in which recording services can be provided. On the other hand, if controller 17 judges that they do not match (NO in S19), it performs notification processing in S21. Specifically, controller 17 causes touch panel 15 to display an image that prompts the user to retry inputting the serial number.

[0035] When the notification process is performed in S21, the store manager operates the terminal 20 to input the serial number again by checking the screen displayed on the touch panel 15. Then, after the processes of S13 to S18, the controller 17 performs the activation process of S20 if the serial numbers match in S19.

[0036] Next, among the processes that are performed after the MFP 10 has been switched to the valid state, a prepaid process for increasing the usage limit will be described with reference to FIGS.

[0037] In S30 of Fig. 4, the controller 17 judges whether the number of recorded sheets in the MFP 10 has reached the upper limit of the usage limit. The upper limit of the usage limit is recorded in the controller 17, and the count is subtracted each time a recording process is executed. In this embodiment, as described above, the upper limit of the usage limit is the number of recording media purchased with one purchase ticket. If a negative judgment is made in S30, the controller 17 waits. On the other hand, if a positive judgment is made in S30, the controller 17 proceeds to S31 and creates a one-time key.

[0038] As shown in Fig. 5, the controller 17 creates a one-time key N3 by encrypting a serial number N1, a random number N2, and consumable information defined for the controller 17. The random number N2 is a value generated by the controller 17 each time the controller 17 executes the process in S31. The encryption in S31 is performed using a common key KEY1 (Fig. 5). In this embodiment, the one-time key is an example of first encryption information.

[0039] The consumable information is information indicating the remaining amount of consumables used by MFP 10, and specifically, is created for each consumable indicated by the consumable ID registered in management information AC. Each time a recording process is executed, controller 17 counts the remaining amount of each consumable, and records the amount of the consumable after counting as the remaining amount of the consumable. For example, if the consumable ID is the model number of the "recording medium", the number of recording media is subtracted each time a recording process is executed. If the consumable ID is the model number of the "ink", the remaining amount of ink is subtracted each time a recording process is executed.

[0040] In S32, the controller 17 causes the user IF 14 to display the one-time key N3 created in S31. When the store manager checks the one-time key displayed on the touch panel 15 of the MFP 10, the store manager operates the terminal 20 to input the one-time key N3 on the charge input screen in order to increase the usage limit of the MFP 10. The charge input screen is a form screen for accepting a charge operation by the store manager, and is stored in the terminal as image data. Alternatively, the control program 42 may provide the charge input screen to the terminal 20 as a browser screen.

[0041] In S33, the terminal 20 transmits the one-time key N3 entered by the store manager on the charge entry screen to the server 30 by email.

[0042] When the server 30 receives the one-time key N3, in S34 the control program 42 decrypts the one-time key N3 to extract the serial number N1, the random number N2, and the consumables information. The decryption in S34 is performed using the common key KEY2 that is paired with the common key KEY1 used in S31 (FIG. 5).

[0043] In S35, the control program 42 performs a server-side determination process to determine whether the serial number N1 extracted in S34 matches the serial number recorded in the management information AC. If the control program 42 determines in S35 that the serial numbers match (YES in S35), it proceeds to S36.

[0044] In S36, the control program 42 creates a token N4 by encrypting the serial number N1, random number N2, and purchase ticket extracted from the one-time key (FIG. 5). The purchase ticket is information for adding to the usage limit in the recording service, and is issued by the control program 42 on the condition that the judgment process in S35 is judged to be positive. For example, the purchase ticket makes it possible to provide a recording service for 100 sheets of print media. In this embodiment, the token N4 is an example of second encryption information, and the purchase ticket is an example of purchase information.

[0045] In S37, the control program 42 causes the email application 41 to transmit the token N4 created in S36. The email application 41 creates email data including the token N4 in the body area, and transmits the email data addressed to the terminal 20. In this embodiment, the process executed by the control program 42 in S37 is an example of a transmission process.

[0046] In S38, it is determined whether there is a shortage of consumables from the consumable information decrypted in S34. In the process of S38, it is determined whether there is a shortage of consumables for MFP 10, and consumables that are in short supply are mailed to the store. Figure 6 is a flowchart explaining the procedure of the process executed in S38 by control program 42.

[0047] In S50, the control program 42 sets the consumables to be judged for shortage. In this embodiment, the control program 42 judges for shortage for all consumables specified by the consumable IDs recorded in association with the serial numbers in the management information AC.

[0048] In S51, the consumables set in S50 are used to determine whether there is a shortage using the consumables information decoded in S34. In this embodiment, it is determined whether the number or amount of consumables indicated by the consumables information reaches a judgment value set for each consumable. For example, if the consumable set to be judged in S50 is a "printing medium," the judgment value indicates the remaining number set as a shortage of the recording medium. Therefore, in S51, if the number of sheets of the printing medium indicated by the consumables information is equal to or less than the judgment value, i.e., if it has reached the judgment value, it is determined that there is a shortage of the printing medium, and if the number of sheets of the printing medium indicated by the consumables information is greater than the judgment value, it is determined that there is an adequate amount of the printing medium.

[0049] If the control program 42 determines in S51 that there is an adequate supply of consumables, the process proceeds to S53. In S53, the process judges whether or not there is a shortage for all consumables recorded in the management information AC. If the judgment in S53 is negative, the process proceeds to S54, where the consumables for which there is a shortage are changed. Then, the process proceeds to S51, where the control program 42 determines whether or not there is a shortage for the changed consumables.

[0050] On the other hand, if it is determined that there is a shortage of consumables, an affirmative judgment is made in S51 and the process proceeds to S52. In S52, the consumables determined to be in short supply are set as the notification target. When S52 ends, the process proceeds to S53, and if it has not been judged whether there is a shortage for all consumables recorded in the management information AC, the process returns to S51. If an affirmative judgment is made in S53, the process proceeds to S55 and it is judged whether there are any consumables that are the notification target. If a consumable that is the notification target has been set in S52, an affirmative judgment is made in S55 and the process proceeds to S56.

[0051] In S56, notification processing is performed for the consumables set as the notification target in S52. In this embodiment, in the notification processing, an order for the consumables is placed with the store as the destination to a consumables management server that manages the consumables. When the consumables management server receives the order for the consumables via network 200, it performs processing to mail the consumables to the specified store. When S56 is completed, the process proceeds to S40 in FIG. 4. Note that, if it is determined in S55 that there are no consumables to be notified, the process proceeds to S40 in FIG. 4.

[0052] 4, if the control program 42 determines that the serial numbers do not match (NO in S35), the process proceeds to S39, where it notifies the terminal 20 that the serial number N1 sent from the terminal 20 is incorrect. Specifically, the control program 42 causes the mail application 41 to create mail data including an image indicating that the serial number is incorrect in the body area, and causes the mail data to be sent to the terminal 20. That is, the token N4 is not sent to the terminal 20.

[0053] When the terminal 20 receives the token N4 from the server 30 by email, the terminal 20 displays the received token in S40. For example, the store manager operates the terminal to display the body of the received email to display the token N4. The store manager operates the user IF 14 of the MFP 10 to input the token N4 to the MFP 10.

[0054] In S41, the controller 17 decrypts the token N4 input by the store manager, and extracts the serial number N1, the random number N2, and the purchase ticket. The common key KEY3 used for the decryption in S41 is a common key that forms a pair with the common key KEY4 used in S36 (FIG. 5).

[0055] In S42, the controller 17 performs device-side determination processing to determine whether the serial number decrypted in S41 matches the serial number defined for the device itself, and whether the random number read out in S41 matches the random number generated in S31.

[0056] If the controller 17 determines in S42 that both the serial number and the random number match (YES in S42), it determines that the purchase ticket decrypted from the token N4 is valid, and proceeds to S43 to perform an addition process to add a usage limit to the purchase ticket. The addition process adds a usage limit to the MFP 10, making it possible to continue using the recording service using the MFP 10.

[0057] On the other hand, if the controller 17 determines in S42 that the serial number N1 or the random number N2 do not match (NO in S42), it determines that the purchase ticket decrypted from the token N4 is not valid, and proceeds to S44. In S44, the controller 17 issues an abnormality notification to the user IF 14, which displays that the token N4 was not input properly. For example, the touch panel 15 displays a screen that prompts the store manager to re-input the token N4 because the token N4 was input improperly. Also, if the determination in S42 is negative for the re-input token N4, the controller 17 may issue an abnormality notification to prompt the store manager to re-input the one-time key. When the store manager recognizes the abnormality notification, he or she operates the terminal 20 to input the one-time key again.

[0058] The present embodiment described above can provide the following advantages. The controller 17 of the MFP 10 outputs a one-time key including at least a serial number for identifying the MFP 10. When a store manager who manages the MFP 10 purchases a purchase ticket from the server 30, the store manager operates the terminal 20 to transmit the one-time key output by the MFP 10 from the terminal 20 to the server 30. When the control program 42 of the server 30 determines that the serial number is included in the one-time key, the control program 42 transmits a token including the purchase ticket and the serial number included in the one-time key to the terminal 20. When the controller 17 determines that the token inputted through the user IF 14 includes a serial number, the controller 17 adds a usage limit according to the purchase ticket. In this way, when the store manager purchases a purchase ticket, the MFP 10 and the server 30 can determine the authenticity of information transmitted from each other depending on the presence or absence of a serial number that identifies the MFP 10. In addition, the purchase ticket issued by the server 30 to the MFP 10 is inputted to the MFP 10 through the terminal 20 together with the serial number, so that it is possible to prevent the purchase ticket from being used fraudulently for another MFP 10.

[0059] The purchase ticket has a usage limit set, and the controller 17 outputs a one-time key when the usage limit set in the purchase ticket is reached by executing a recording process. As a result, the one-time key is automatically output from the MFP 10 every time the usage limit is reached, so that the store manager can be notified of the purchase of a purchase ticket at an appropriate time.

[0060] When it is determined that the one-time key contains a serial number, the control program 42 transmits to the terminal 20 a token including the random number contained in the one-time key in addition to the purchase ticket and the serial number. The controller 17 determines whether the random number included in the token transmitted from the terminal 20 matches the random number included in the one-time key and whether the token contains a serial number, and when it determines that the random numbers match and that the token contains a serial number, it adds a usage limit according to the purchase ticket. As a result, it is determined between the MFP 10 and the server 30 whether the serial numbers match and whether the random numbers match, so that the accuracy of determining the reliability of the purchase ticket can be further improved.

[0061] Controller 17 includes the consumables information in the one-time key, and control program 42 executes processing for sending the consumables to MFP 10 when it is determined that the one-time key includes a serial number and the consumables information included in the one-time key is below a predetermined remaining amount judgment value. This allows the presence or absence of a shortage of consumables to be determined when purchasing a purchase ticket from server 30, further improving the convenience of managing MFP 10.

[0062] When the MFP 10 is in the disabled state, the control program 42 transmits an activation key including a serial number to the terminal. The controller 17 determines whether or not the activation key inputted via the user IF 14 includes a serial number, and when it determines that the activation key includes a serial number, transitions the MFP 10 from the disabled state to the enabled state. This makes it possible to determine whether or not the serial number held by the server matches the serial number held by the MFP 10 before the recording process of the MFP 10 is enabled.

[0063] (Modification of the first embodiment) The usage limit purchased with the purchase ticket is not limited to the number of sheets that can be recorded on the recording medium. For example, if the recording medium is roll paper, the usage limit may be the length of the roll paper used for recording. In addition, the usage limit may be the amount of ink or toner consumed by the recording engine 12, or even the amount of ink ejected.

[0064] The process in S38 in which the control program 42 of the server 30 determines whether or not the consumable is insufficient is not limited to a determination based on the remaining amount of the consumable, but may be performed based on the amount of use of the consumable. In this case, the MFP 10 notifies the server 30 of the amount of use of the consumable instead of the remaining amount of the consumable, and the server 30 determines that the consumable is insufficient if the amount of use notified by the MFP 10 exceeds a predetermined judgment value. The amount of use of the consumable may be the number of pages printed on the recording medium, or the dot count value of the consumable used in printing.

[0065] The process performed by the control program 42 of the server 30 in S56 to have the store ship the consumable is not limited to sending a notification to the consumables management server to ship the consumable. For example, the control program 42 may create a token including information notifying the purchase of the consumable and send it to the terminal 20, or may send information notifying the purchase of the consumable together with the token to the terminal 20. In this case, when the store manager checks the information notifying the purchase of the consumable displayed by the terminal 20, he or she may place an order for the purchase of the consumable with the consumables management server.

[0066] Second embodiment In the second embodiment, the configuration different from the first embodiment will be mainly described. Note that in the second embodiment, the same components as in the first embodiment are denoted by the same reference characters, and the description thereof will not be repeated.

[0067] In the first embodiment, the usage limit that can be purchased with a purchase ticket is fixed (100 tickets). Instead, in the present embodiment, the usage limit that can be purchased with a purchase ticket can be set according to an operation on the terminal 20.

[0068] FIG. 7 is a flowchart showing the procedure of the process executed by the controller 17 in S31 of FIG. 4 in this embodiment. In S60, it is determined whether or not a purchase ticket has been purchased last time. If a purchase ticket has not been purchased last time, a negative determination is made in S60, and the process proceeds to S62, where an input of a purchase to be made this time with the purchase ticket is accepted. In this case, the store manager operates the user IF 14 of the MFP 10 to input the number of recording media as the usage limit to be purchased this time with the purchase ticket. Note that the determination of whether or not a purchase ticket has been purchased last time may be made based on whether or not a purchase ticket has been purchased within a predetermined period of time from the present. For example, if a purchase ticket has been purchased from the server within the past one year from the present, it may be determined that a purchase ticket has been purchased last time.

[0069] On the other hand, if a purchase ticket has already been purchased, an affirmative judgment is made in S60, and the process proceeds to S61. In S61, the usage limit purchased with the previously purchased ticket is set as the usage limit to be purchased with the currently purchased ticket. The controller 17 stores the usage limit configured with the previously purchased ticket in the memory 18. For example, if the usage limit purchased with the previously purchased ticket is a recording medium of "50 sheets," the usage limit to be purchased with the currently purchased ticket is set to "50 sheets."

[0070] Note that the execution or non-execution of the process of S62 may be changed depending on the setting of the MFP 10. Specifically, when the MFP 10 is set not to apply the process of setting the usage limit previously purchased as the usage limit to be purchased this time, a negative judgment is made in S60 and the process proceeds to S61.

[0071] In S63, the controller 17 creates a one-time key by encrypting the usage limit, the serial number, and the random number. Then, the process proceeds to S32 in FIG.

[0072] 4, if the server 30 determines that the serial numbers match, then in S36 it issues a purchase ticket according to the usage limit decrypted from the one-time key.Then it creates a token by encrypting the issued purchase ticket, the serial number, and a random number.The MFP 10 adds the current usage limit according to the purchase ticket decrypted from the token in S43.

[0073] In the embodiment described above, the controller 17 outputs a one-time key including information indicating the usage limit of the purchase ticket to be purchased this time. If there is a previously purchased purchase ticket, the controller 17 includes in the one-time key the usage limit indicated by the previously purchased purchase ticket. This allows the store manager to purchase a purchase ticket from the server 30 without having to input the usage limit by operating the terminal 20 each time a purchase ticket is purchased.

[0074] (Modification of the second embodiment) The usage limit in the purchase ticket may be set by the server 30. Fig. 8 is a flowchart explaining the process executed by the control program 42 in S36 of Fig. 4 in this embodiment. In this embodiment as well, the one-time key includes the current usage limit (i.e., the remaining number of recording media).

[0075] The control program 42 acquires the current usage limit in S70. In this embodiment as well, the MFP 10 includes the current usage limit in the one-time key, and can read out the current usage limit by decrypting the one-time key.

[0076] In S71, the usage limit of the ticket to be purchased this time is set. Specifically, the usage limit of the ticket to be purchased this time is set according to the value obtained by subtracting the current usage limit acquired in S70 from the upper limit of the usage limit of the ticket to be purchased this time. In this embodiment, since the number of recordable recording media is used as the usage limit, the value obtained by subtracting the current usage limit from the upper limit of the usage limit is the number of recording media.

[0077] In S72, a token is created by encrypting the purchase ticket according to the usage limit set in S71, the serial number, and the random number. The process proceeds to S37 in Fig. 4, and the email application 41 sends an email including the token created in S36 to the terminal 20 as the destination.

[0078] In the embodiment described above, a usage limit is set for the one-time key, and the controller 32 calculates the current usage limit from the usage limit limit as the usage limit for the purchase ticket to be purchased this time. This allows the store manager to purchase the required number of usage limits with the purchase ticket without having to input the purchase ticket each time the purchase ticket is purchased.

[0079] Third embodiment In the third embodiment, the configuration different from the first embodiment will be mainly described. Note that in the third embodiment, the same components as those in the first embodiment are denoted by the same reference characters, and the description thereof will not be repeated.

[0080] In this embodiment, the presence or absence of a shortage of consumables is determined based on a comparison result between the usage limit of the currently purchased ticket and the usage limit according to the current remaining amount of the consumables. Fig. 9 is a flowchart for explaining the procedure of the process executed in S38 by the control program 42.

[0081] In S50, the control program 42 sets the consumables to be judged for shortage. In the present embodiment, the control program 42 judges for shortage for the consumables specified by the consumables IDs recorded in association with the serial numbers in the management information AC.

[0082] In S80, an evaluation value for determining whether or not there is a shortage of consumables is calculated using the current remaining amount of consumables and the usage limit of the purchase ticket included in the token. In this embodiment, the evaluation value is calculated by subtracting the recordable number determined according to the upper limit of the usage limit in the purchase ticket from the recordable number determined according to the current remaining amount of consumables. Note that if the usage limit of the purchase ticket is input by the store manager, the usage limit used to calculate the evaluation value is the value input by the store manager.

[0083] In S81, it is determined whether or not there is a shortage of the target consumable according to the evaluation value calculated in S80. Specifically, when the evaluation value is below the judgment value, there will be a shortage of the target consumable before the usage limit in the purchase ticket is completely consumed. Therefore, when the evaluation value is below the judgment value, there will be a shortage of the target consumable, so an affirmative judgment is made in S82 and the process proceeds to S52. In S52, the target consumable is set as a notification target in the notification process of S56. When the process of S52 is completed, the process proceeds to S53. On the other hand, when the evaluation value is equal to or greater than the judgment value, there will be no shortage of the target consumable even if the usage limit in the purchase ticket is completely consumed. Therefore, when the evaluation value is equal to or greater than the judgment value, there is sufficient supply of the target consumable, so an negative judgment is made in S82 and the process proceeds to S53.

[0084] In S53, it is determined whether or not a shortage has been determined for all consumables recorded in the management information AC. If a negative judgment is made in S53, the process proceeds to S54, where the consumables for which a shortage is to be determined are changed. Then, the process proceeds to S51, where it is determined whether or not there is a shortage for the changed consumables. On the other hand, if a positive judgment is made in S53, the process proceeds to S55, where it is determined whether or not there are any consumables that are the subject of notification. If a consumable that is the subject of notification has been set in S52, a positive judgment is made in S55, and the process proceeds to S56, where notification processing is performed for the consumables that were set as the subject of notification in S52. When S56 is ended, the process proceeds to S40 in FIG. 4. Note that if it is determined in S55 that no consumables that are the subject of notification do not exist, the process proceeds to S40 in FIG. 4.

[0085] In the embodiment described above, the controller 17 includes in the one-time key consumable information indicating the remaining amount of the consumable in the MFP 10, and the control program 42 determines whether the usage limit determined according to the consumable information is lower than the usage limit according to the purchase ticket included in the token, and if it is determined to be lower, executes processing for shipping the consumable to the MFP 10. As a result, when it is predicted that the consumable will be needed, processing for shipping the consumable to the MFP 10 is executed, and it is possible to further improve the convenience in managing the MFP 10.

[0086] (Fourth embodiment) In the fourth embodiment, the configuration different from the first embodiment will be mainly described. Note that in the fourth embodiment, the same components as those in the first embodiment are denoted by the same reference characters, and the description thereof will not be repeated.

[0087] In this embodiment, the controller 17 of the MFP 10 re-outputs the one-time key when an operation to re-output the one-time key is received before receiving the input of the token. Fig. 10 is a timing chart for explaining the processing executed by the MFP 10, the terminal 20, and the server 30 according to this embodiment.

[0088] In the MFP 10, the controller 17 creates a one-time key in S31, and in S32, the created one-time key is displayed on the touch panel 15. On the server 30 side, the control program 42 determines in S35 that the serial numbers match, and then creates a token in S36. Then, in S37, the token is sent to the terminal 20.

[0089] Thereafter, for example, the store manager operates the MFP 10 to request re-output of the one-time key due to losing the email data including the token. The controller 17 of the MFP 10 re-outputs the one-time key in S101 on the condition that the input of the token has not been accepted after output of the one-time key. The one-time key re-output in S101 has the same number as the one-time key output in S32.

[0090] The store manager operates the terminal 20 to re-enter the one-time key. When the terminal 20 accepts the input of the one-time key, it transmits the accepted one-time key to the server 30 in S102. When the server 30 receives the one-time key transmitted from the terminal 20, the control program 42 performs a charging determination to determine whether or not the charging process has been completed using the received one-time key in S103. In this embodiment, the control program 42 extracts a random number by decrypting the one-time key. The control program 42 determines that the charging process has been completed when the extracted random number matches the random number included in the one-time key (S33) previously transmitted from the terminal 20. Alternatively, it may be determined that the charging process has been completed when the one-time key currently transmitted from the terminal 20 matches the one-time key previously transmitted from the terminal 20.

[0091] When the control program 42 determines that the billing process is complete, it recreates the token in S104. The token created in S104 has the same information as the token created in S36. In S105, the control program 42 transmits the recreated token to the terminal 20 by email.

[0092] In S106, when the terminal 20 receives the email including the token, it displays the token. When the store manager checks the token displayed by the terminal 20, he operates the user IF 14 of the MFP 10 to input the token. Although not described further, the controller 17 then executes the processes of S41 to S44 shown in FIG.

[0093] The present embodiment described above can provide the following advantages. The controller 17 re-outputs the requested one-time key when an operation to request re-output of the one-time key is received via the user IF 14 before receiving input of the token via the user IF 14. This allows the MFP 10 to output the one-time key again, for example, even if a store manager operating the terminal 20 loses the one-time key.

[0094] When the control program 42 of the server 30 receives a one-time key re-output from the terminal 20, the control program 42 judges whether or not the billing process has already been completed based on the re-output one-time key, and if it is judged that the billing process has been completed, the control program 42 re-sends the token to the terminal. As a result, when a store manager requests re-output of the one-time key, if the billing to the server 30 has already been completed, the token is sent to the terminal 20 without being billed again. This can further improve the convenience of managing the MFP 10.

[0095] (Other embodiments) The technology disclosed in this specification is not limited to the above-described embodiments, and can be modified in various forms without departing from the spirit of the invention. For example, the following modifications are also possible. The recording device is not limited to the MFP 10, and may be a printer that only performs recording processing.

[0096] The first encryption information may be any information that the store manager can transmit to the server 30 by operating the terminal 20, and when the user IF 14 is capable of outputting the voice, the MFP 10 may output the one-time key by voice. In addition, the first encryption information is not limited to character information, and may be graphic information such as a barcode or a QR code (registered trademark).

[0097] The second encryption information is not limited to a token as long as it is information that the store manager can input by operating the user IF 14 of the MFP 10. In addition, the second encryption information is not limited to character information, and may be graphic information such as a barcode or a QR code (registered trademark). [Explanation of symbols]

[0098] 10...MFP, 12...recording engine, 14...user IF, 17...controller, 20...terminal, 30...server, 32...controller, 35...memory, 42...control program, 100...service providing system

Claims

1. A service providing system comprising a recording device, a terminal, and a server, the recording device has an apparatus controller, a user interface, and a recording engine, and is not connected to the server via a network; the terminal is connected to the server via a network, The device side controller, a recording process capable of recording images on a recording medium by the recording engine up to a usage limit according to the purchase information purchased from the server; an output process of outputting first encrypted information including at least the identification information of the own device; when the purchase information is purchased from the server, the terminal accepts an input operation of the first encrypted information and transmits the inputted first encrypted information to the server; The server comprises a server-side controller; The server-side controller, a server-side determination process for determining whether or not the identification information is included in the first encrypted information when the first encrypted information is received from the terminal; a transmission process of transmitting, to the terminal, second encrypted information including the purchase information and the identification information included in the first encrypted information when it is determined that the identification information is included; The device side controller, a device-side determination process for determining whether or not the second encrypted information includes the identification information when the input of the second encrypted information is accepted via the user interface; an addition process of adding the usage limit according to the purchase information included in the second encrypted information when it is determined that the identification information is included; A service provision system that executes the above.

2. The purchase information specifies an upper limit of the usage quota, The service providing system according to claim 1 , wherein the device controller executes the output process when an upper limit of the usage limit is reached as a result of the execution of the recording process.

3. the device controller outputs the first encrypted information including a random number in the output process; The server-side controller, when it is determined in the transmission process that the identification information is included, the second encrypted information including the random number included in the first encrypted information is transmitted to the terminal in addition to the purchase information and the identification information; The device side controller, In the device-side determination process, a determination is made as to whether or not the random number included in the second encrypted information matches the random number included in the first encrypted information, and a determination is made as to whether or not the second encrypted information includes the identification information; A service providing system as described in claim 1 or 2, wherein the addition process adds the usage limit according to the purchasing information when it is determined that the random number matches and that the identification information is included.

4. The device controller, in the output process, outputting the first encrypted information including information indicating a usage limit in the purchase information to be purchased this time; The service providing system according to any one of claims 1 to 3, wherein, when there is purchase information of a previous purchase, the usage limit in the purchase information of the previous purchase is included in the first encryption information.

5. The purchase information specifies an upper limit of the usage limit, the device controller, in the output process, includes the current usage limit in the first encryption information; A service providing system as described in any one of claims 1 to 3, wherein the server-side controller, in the transmission process, calculates the usage limit in the purchase information to be purchased this time based on the value obtained by subtracting the current usage limit from the upper limit of the usage limit.

6. the device controller, in the output process, includes consumable information indicating a remaining amount of the consumable or a usage amount of the consumable in the recording device in the first encrypted information; A service provision system as described in any one of claims 1 to 5, wherein the server-side controller executes a process to have the recording device ship the consumable when the server-side judgment process determines that the identification information is included and the consumable information included in the first encryption information reaches a predetermined judgment value.

7. the device controller, in the output process, includes consumable information indicating a remaining amount of the consumable or a usage amount of the consumable in the recording device in the first encrypted information; A service provision system as described in any one of claims 1 to 5, wherein the server-side controller executes a process to have the consumable shipped to the recording device when it is determined in the server-side determination process that the identification information is included and the usage limit determined based on the consumable information is lower than the usage limit based on the purchase information included in the second encryption information.

8. A service providing system as described in any one of claims 1 to 7, wherein when a request for re-output of the first encrypted information is made by an operation via the user interface before accepting input of the second encrypted information via the user interface, the device-side controller re-outputs the requested first encrypted information in the output process.

9. the terminal transmits the first encrypted information to the server and executes a billing process for purchasing the purchase information; when the server-side controller receives the re-outputted first encrypted information from the terminal in the server-side determination process, the server-side controller determines whether or not the billing process has already been completed based on the re-outputted first encrypted information; 9. The service providing system according to claim 8, wherein, when it is determined that the billing process has been completed, the second encrypted information is retransmitted to the terminal.

10. the device-side controller executes an activation process in response to the input of activation information, for transitioning the recording device from a disabled state in which an execution instruction for the recording process is not accepted to an enabled state in which an execution instruction for the recording process is accepted; the server-side controller executes an activation information transmission process to transmit the activation information including the identification information to the terminal when the recording device is in the disabled state; A service providing system as described in any one of claims 1 to 9, wherein the device-side controller, during the activation process, determines whether the activation information inputted via the user interface includes the identification information, and if it determines that the identification information is included, transitions the recording device from the disabled state to the enabled state.

11. A method executed in a service providing system including a recording device, a terminal, and a server, comprising: the recording device has an apparatus controller, a user interface, and a recording engine, and is not connected to the server via a network; the terminal is connected to the server via a network, The device side controller, a recording process capable of recording images on a recording medium by the recording engine up to a usage limit according to the purchase information purchased from the server; an output process of outputting first encrypted information including at least the identification information of the own device; when the purchase information is purchased from the server, the terminal accepts an input operation of the first encrypted information and transmits the inputted first encrypted information to the server; The server comprises a server-side controller; The server-side controller, a server-side determination process for determining whether or not the identification information is included in the first encrypted information when the first encrypted information is received from the terminal; a transmission process of transmitting, to the terminal, second encrypted information including the purchase information and the identification information included in the first encrypted information when it is determined that the identification information is included; The device side controller, a device-side determination process for determining whether or not the second encrypted information includes the identification information when the input of the second encrypted information is accepted via the user interface; an addition process of adding the usage limit according to the purchase information included in the second encrypted information when it is determined that the identification information is included; How to do it.

Images