Communication system, computer program for authentication server, computer program for printer, printer, and method

Abstract

To provide a technology for allowing a printer to execute printing when a management server is disconnected due to a failure of the management server.SOLUTION: A management server may receive usage information from a printer and manages the usage information. An authentication server transmits first authentication information to an external device when a communication state between the authentication server and a management server is a communication-disabled state. The printer shifts, when a communication state between the printer and the management server changes from a communication-enabled state to a communication-disabled state, a state of the printer from a first permission state to a first prohibition state, receives input of second authentication information from a user while the state of the printer is the first prohibition state, and shifts the state of the printer from the first prohibition state to a second permission state when the input of the second authentication information is received and the second authentication information matches the first authentication information.SELECTED DRAWING: Figure 5

Description

Technical Field

[0001] This specification discloses a technology for causing a printer to execute printing when a management server becomes incommunicable due to a malfunction of the management server.

Background Art

[0002] Patent Document 1 discloses a communication system including a printer, a PC, and an information management server. Each time a fixed-price printing process is executed, the printer stores printing information regarding the number of printed sheets and transmits the printing information to the information management server. When the information management server receives the printing information from the printer, the information management server manages the printing information. The information management server provides a service for the fixed-price printing process by using the printing information received from the printer.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] In the communication system as described above, for example, there is no disclosure regarding the information management server becoming incommunicable due to the information management server going down.

[0005] This specification provides a technology that can cause a printer to execute printing when a management server becomes incommunicable due to a malfunction of the management server.

Means for Solving the Problems

[0006] This specification discloses a communication system including a printer, a management server, and an authentication server. The management server includes a management unit that receives usage information regarding the usage amount of the printer from the printer and manages the usage information. The authentication server includes a first authentication information transmission unit that transmits first authentication information to an external device when the communication state between the authentication server and the management server is a non-communication state. The printer includes a first transition control unit that, when the communication state between the printer and the management server changes from a communicable state to a non-communicable state, changes the state of the printer from a first allowable state in which printing execution is permitted to a first prohibited state in which printing execution is prohibited; a first reception unit that receives an input of second authentication information from a user while the state of the printer is the first prohibited state; and a second transition control unit that, when the input of the second authentication information is received and the second authentication information matches the first authentication information, changes the state of the printer from the first prohibited state to a second allowable state in which printing execution is permitted.

[0007] Furthermore, this specification discloses a computer program for the authentication server used in a communication system including a printer, a management server, and an authentication server. The computer program causes the computer of the authentication server to function as a first authentication information transmission unit that transmits first authentication information to an external device when the communication state between the authentication server and the management server is a non-communication state. The management server receives usage information regarding the usage amount of the printer from the printer and manages the usage information. The printer, when the communication state between the printer and the management server changes from a communicable state to a non-communicable state, changes the state of the printer from a first allowable state in which printing execution is permitted to a first prohibited state in which printing execution is prohibited, receives an input of second authentication information from a user while the state of the printer is the first prohibited state, and when the input of the second authentication information is received and the second authentication information matches the first authentication information, may change the state of the printer from the first prohibited state to a second allowable state in which printing execution is permitted.

[0008] Also, this specification discloses a computer program for the printer used in a communication system including a printer, a management server, and an authentication server. The computer program causes a computer of the printer to change a state of the printer from a first allowable state where execution of printing is allowed to a first prohibited state where execution of printing is prohibited when a communication state between the printer and the management server changes from a communicable state to a non-communicable state. The management server receives usage information regarding the usage amount of the printer from the printer and manages the usage information. The authentication server transmits first authentication information to an external device when a communication state between the management server and the authentication server is a non-communicable state. The computer program may function as the first transition control unit, a first reception unit that receives an input of second authentication information from a user while the state of the printer is in the first prohibited state, and a second transition control unit that changes the state of the printer from the first prohibited state to a second allowable state where execution of printing is allowed when the input of the second authentication information is received and the second authentication information matches the first authentication information.

[0009] According to the above configuration, when the authentication server becomes unable to communicate with the management server due to a problem with the management server, the authentication server transmits the first authentication information to an external device. When the printer becomes unable to communicate with the management server due to a problem with the management server, the printer changes the state of the printer from the first allowable state to the first prohibited state. When the input of the second authentication information is received and the second authentication information matches the first authentication information while the state of the printer is in the first prohibited state, the printer changes the state of the printer from the first prohibited state to the second allowable state. Therefore, when the management server becomes unable to communicate due to a problem with the management server, printing can be executed on the printer.

[0010] In addition, the method disclosed in this specification includes a management step of receiving usage information regarding the usage amount of the printer from the printer and managing the usage information, a first authentication information transmission step of transmitting first authentication information to an external device when the communication state between the authentication server and the management server changes from a communicable state to a non-communicable state, a first transition control step of changing the state of the printer from a first allowable state in which printing execution is permitted to a first prohibited state in which printing execution is prohibited when the communication state between the printer and the management server changes from a communicable state to a non-communicable state, a first reception step of receiving an input of second authentication information from a user while the state of the printer is the first prohibited state, and a second transition control step of changing the state of the printer from the first prohibited state to a second allowable state in which printing execution is permitted when the input of the second authentication information is received and the second authentication information matches the first authentication information.

[0011] According to the above configuration, when the management server becomes incommunicable due to a malfunction of the management server, the printer can be made to execute printing.

[0012] The authentication server realized by the computer program for the above authentication server and the computer-readable recording medium storing the computer program are also novel and useful. The printer realized by the computer program for the above printer and the computer-readable recording medium storing the computer program are also novel and useful.

Brief Description of the Drawings

[0013]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Mode for Carrying Out the Invention

[0014] (First Embodiment) (Configuration of Communication System 2; FIG. 1) As shown in FIG. 1, the communication system 2 includes a printer 10, a terminal device 100, a management server 200, and an authentication server 300. The printer 10 and the terminal device 100 are connected to a LAN (abbreviation for Local Area Network) 4. The LAN 4 is connected to the Internet 6. The printer 10 and the terminal device 100 can communicate via the LAN 4. The management server 200 and the authentication server 300 are connected to the Internet 6. The printer 10, the terminal device 100, the management server 200, and the authentication server 300 can communicate via the Internet 6. The management server 200 provides a charging service that is charged according to the number of printed sheets of the printer 10.

[0015] (Configuration of Printer 10) The printer 10 is a peripheral device (i.e., a peripheral device such as a PC) capable of executing a printing function. The printer 10 may be a multifunctional device capable of executing a scan function, a FAX function, etc. in addition to the printing function. The printer 10 includes an operation unit 12, a display unit 14, a print execution unit 16, a communication interface 20, and a control unit 30. A device ID "dv1" for identifying the printer 10 is assigned to the printer 10. Hereinafter, the interface is described as "I / F".

[0016] The operation unit 12 is provided with a plurality of keys. The user can input various instructions to the printer 10 by operating the operation unit 12. The display unit 14 is a display for displaying various information.

[0017] The printing execution unit 16 is an inkjet printing mechanism. A cartridge for storing ink is mounted on the printing execution unit 16. The printing execution unit 16 executes printing using the ink in the cartridge. A cartridge number for identifying the cartridge is assigned to the cartridge. The cartridge number is a unique character string assigned to each cartridge when a plurality of cartridges are manufactured. Note that there are dedicated cartridges that can be used only when receiving a charging service, and general cartridges that can be used when not receiving a charging service. Note that the printer 10 operates in any one of a normal state, a printing permission state, and a printing prohibition state when a dedicated cartridge is mounted on the printing execution unit 16. The normal state is a state in which execution of printing is permitted. The printing permission state is a state in which execution of printing is permitted, but execution of printing of a predetermined number of sheets or more is restricted. The printing prohibition state is a state in which execution of printing is prohibited.

[0018] The communication I / F 20 is connected to the LAN 4. The communication I / F 20 may be a wireless I / F or a wired I / F.

[0019] The control unit 30 includes a CPU 32 and a memory 34. The CPU 32 executes various processes according to a program 36 stored in the memory 34. The memory 34 is composed of a volatile memory, a non-volatile memory, etc. The memory 34 further stores a printing table 38.

[0020] (Configuration of the management server 200) The management server 200 is installed on the Internet 6 by the vendor of the printer 10. In a modified example, the management server 200 may be installed on the Internet 6 by an operator different from the vendor. In another modified example, the vendor of the printer 10 may utilize an environment provided by an external cloud computing service without preparing the hardware of the management server 200 by itself. In this case, the vendor of the printer 10 may prepare the program (i.e., software) of the management server 200 and introduce it into the above environment to realize the management server 200. The management server 200 provides a flat-rate charging service (hereinafter referred to as the "flat-rate service") and an automatic ordering service. The flat-rate service is a service that pays a predetermined amount when the number of printed sheets in a predetermined period (e.g., one month) is less than or equal to the contract printed sheet number (e.g., 1000 sheets). The automatic ordering service is a service that automatically orders a new dedicated cartridge when the remaining amount of ink in the dedicated cartridge installed in the print execution unit 16 of the printer 10 becomes less than or equal to a predetermined remaining amount. In a modified example, the management server 200 may provide a metered charging service, which is a service that pays an amount according to the number of printed sheets in a predetermined period (e.g., one month), instead of the flat-rate service.

[0021] The management server 200 includes a communication I / F 220 and a control unit 230. The communication I / F 220 is connected to the Internet 6. The control unit 230 includes a CPU 232 and a memory 234. The CPU 232 executes various processes according to the program 236 stored in the memory 234. The memory 234 is composed of a volatile memory, a non-volatile memory, etc. The memory 234 further stores a management table 238.

[0022] (Configuration of the authentication server 300) The authentication server 300 is installed on the Internet 6 by the vendor of the printer 10. In a variant, the authentication server 300 may be installed on the Internet 6 by an operator different from the vendor. In another variant, the vendor of the printer 10 may use the environment provided by an external cloud computing service without preparing the hardware of the authentication server 300 by itself. In this case, the vendor of the printer 10 may prepare the program (i.e., software) of the authentication server 300 and introduce it into the above environment to realize the authentication server 300. The authentication server 300 generates a one-time code for continuously using the flat-rate service when the management server 200 becomes incommunicable due to a malfunction of the management server 200. The one-time code is a valid password for a predetermined time after the one-time code is issued and is a password that can be used only once.

[0023] The authentication server 300 includes a communication I / F 320 and a control unit 330. The communication I / F 320 is connected to the Internet 6. The control unit 330 includes a CPU 332 and a memory 334. The CPU 332 executes various processes according to the program 336 stored in the memory 334. The memory 334 is composed of a volatile memory, a non-volatile memory, etc. The memory 334 further stores an authentication table 338.

[0024] (Configuration of each table; Figure 2) Subsequently, with reference to Figure 2, the contents of the print table 38 in the printer 10, the management table 238 in the management server 200, and the authentication table 338 in the authentication server 300 will be described.

[0025] In the print table 38 of the printer 10, the number of prints when ON, the number of prints when OFF, and the restricted number of prints are stored in association with each other. Each piece of information in the print table 38 is information used in a state where a dedicated cartridge is attached to the print execution unit 16, that is, a state of receiving a flat-rate service (hereinafter sometimes referred to as the "service state"). The number of prints when ON is information indicating the number of sheets of printing paper printed by the print execution unit 16 in a service state and when the communication state between the printer 10 and the management server 200 is in a communicable state (hereinafter sometimes referred to as the "first communicable state"). The number of prints when OFF is information indicating the number of sheets of printing paper printed by the print execution unit 16 in a service state and when the communication state between the printer 10 and the management server 200 is in a non-communicable state (hereinafter sometimes referred to as the "first non-communicable state"). The restricted number of prints is information indicating the number of sheets of printing paper that can be printed using the print execution unit 16 in a service state and in a first non-communicable state.

[0026] In the management table 238 of the management server 200, a user ID for identifying a user, a device ID, the user's email address, payment information, the number of prints, and the contract number of prints are stored in association with each other. The payment information is information regarding the payment source of the fee (for example, the number of a credit card). The number of prints is information indicating the number of sheets of printing paper printed within a predetermined period (for example, one month). The contract number of prints is information indicating the number of sheets of printing paper that can be used by paying a predetermined amount.

[0027] In the authentication table 338 of the authentication server 300, a user ID, a device ID, an email address, and a one-time code are stored in association with each other.

[0028] (Process when the management server 200 is normal; Fig. 3) Next, with reference to FIG. 3, a process executed among the printer 10, the management server 200, and the authentication server 300 in a state where the management server 200 is normal will be described. The initial state of FIG. 3 is a state immediately after the registration process for using the flat-rate service provided by the management server 200 is completed. For this reason, in the management table 238 of the management server 200, the user ID "U1", the device ID "dv1", the email address AD1, the payment information PI1, the printed page count "0", and the contract printed page count "1000" are stored in association with each other. Also, in the authentication table 338 of the authentication server 300, the user ID "U1", the device ID "dv1", and the email address AD1 are stored in association with each other. The one-time code in the authentication table 338 is in an empty state. Also, in the print table 38 of the printer 10, the print page count when ON "0" and the print page count when OFF "0" are stored in association with each other. The restricted print page count in the print table 38 is in an empty state. Also, in the registration process, an XMPP connection is established between the printer 10 and the management server 200. The XMPP connection is a so-called always-on connection and is a connection that continues to be established until the power of the printer 10 is turned off. If the management server 200 uses the XMPP connection, it can send a request to the printer 10 across the firewall of the LAN 4 to which the printer 10 belongs without receiving a request from the printer 10. Note that the mechanism for sending a request from the management server 200 to the printer 10 may be another method instead of the XMPP connection. For example, an HTTPS (Hypertext Transfer Protocol Secure) connection may be established between the printer 10 and the management server 200. In the registration process, an XMPP connection is also established between the printer 10 and the authentication server 300. Also, a dedicated cartridge is installed in the print execution unit 16 of the printer 10. Also, the state of the printer 10 is a normal state in which printing is allowed. In the following, each device (for example, the printer 10) will be described mainly instead of the CPU of each device (for example, the CPU 32 of the printer 10).In addition, the communication executed by each device is executed via the communication I / F of each device (for example, the communication I / F 20 of the printer 10). Therefore, hereinafter, when explaining the processing related to the communication via the communication I / F, the description of "via the communication I / F" will be omitted.

[0029] At T10, the printer 10 transmits a survival confirmation signal to the management server 200, and at T12, receives a response signal from the management server 200. The survival confirmation signal is a signal for confirming whether communication with the device that is the destination of the survival confirmation signal is possible. In particular, the survival confirmation signal at T10 is a signal that is periodically transmitted to maintain the XMPP connection between the printer 10 and the management server 200. When the printer 10 receives a response signal to the survival confirmation signal from the management server 200, it determines that the XMPP connection with the management server 200 is maintained, that is, it is in the first communicable state. Note that when the printer 10 does not receive a response signal from the management server 200, it determines that the XMPP connection with the management server 200 is not maintained, that is, it is in the first incommunicable state. After T12, the printer 10 also periodically transmits a survival confirmation signal to the management server 200.

[0030] At T20, the authentication server 300 transmits a survival confirmation signal to the management server 200, and at T22, receives a response signal from the management server 200. In order for the authentication server 300 to receive a response signal from the management server 200, it determines that the communication state between the authentication server 300 and the management server 200 is a communicable state (hereinafter, may be described as the "second communicable state"). Note that when the authentication server 300 does not receive a response signal from the management server 200, it determines that the communication state between the authentication server 300 and the management server 200 is an incommunicable state (hereinafter, may be described as the "second incommunicable state"). After T22, the authentication server 300 also periodically transmits a survival confirmation signal to the management server 200.

[0031] When the printer 10 executes printing at T40, it calculates the number of sheets of printing paper "10" used in the printing, and updates the number of printed sheets when ON in the print table 38 from "0" to "10".

[0032] When the notification time (for example, 12 hours) has elapsed since the XMPP connection with the printer 10 was established, the management server 200 sends a notification information request to the printer 10 at T50. The notification information request is a signal for requesting the transmission of notification information (that is, device ID, number of printed sheets, remaining ink amount) necessary for the management server 200 to provide a flat-rate service. Note that the description regarding the remaining ink amount in the notification information is omitted below.

[0033] When the printer 10 receives a notification information request from the management server 200 at T50, it identifies the number of printed sheets "10" when ON in the print table 38, and at T52, it sends notification information including the device ID "dv1" and the identified number of printed sheets "10" when ON to the management server 200. Then, the printer 10 updates the number of printed sheets when ON in the print table 38 from "10" to "0" (that is, resets it) at T54.

[0034] When the management server 200 receives notification information from the printer 10 at T52, it identifies the device ID "dv1" in the notification information, and in the management table 238, it identifies the number of printed sheets "0" associated with the identified device ID "dv1". Then, the management server 200 adds the number of printed sheets when ON "10" in the notification information to the identified number of printed sheets "0" at T56. As a result, the number of printed sheets in the management table 238 is updated from "0" to "10".

[0035] T60 is the same as T50 except that the number of sheets of printing paper used in the printing is "100". When the notification time (for example, 12 hours) has elapsed since the notification information request was sent, the management server 200 sends a notification information request to the printer 10 at T70. T72 is the same as T52 except that the number of printed sheets when ON in the notification information is "100". T74 is the same as T54.

[0036] When the management server 200 receives notification information from the printer 10 at T72, it identifies the device ID "dv1" in the notification information, and in the management table 238, it identifies the number of printed sheets "10" associated with the identified device ID "dv1". Next, at T76, the management server 200 adds the number of printed sheets "100" in the notification information to the identified number of printed sheets "10". As a result, the number of printed sheets in the management table 238 is updated from "10" to "110". After that, every time the notification time elapses, the management server 200 sends the notification information to the printer 10 and receives the notification information from the printer 10. Then, when a predetermined period (for example, one month) elapses, the management server 200 identifies the number of printed sheets in the management table 238 and determines whether the identified number of printed sheets is less than or equal to the contract number of printed sheets in the management table 238. When the identified number of printed sheets is less than or equal to the contract number of printed sheets, the management server 200 uses the payment information PI1 in the management table 238 to bill the user of the printer 10 for a predetermined amount. Also, when the identified number of printed sheets exceeds the contract number of printed sheets, the management server 200 identifies the additional amount corresponding to the number of sheets exceeding the contract number of printed sheets, and uses the payment information PI1 in the management table 238 to bill the user of the printer 10 for the total amount of the predetermined amount and the additional amount.

[0037] (Process when the management server 200 is down; FIGS. 4 to 6) Next, with reference to FIGS. 4 to 6, the processes executed among the printer 10, the management server 200, and the authentication server 300 in a state where the management server 200 is down due to a malfunction of the management server 200 will be described. FIG. 4 shows a state where the management server 200 is down after FIG. 3. For this reason, "110" is stored in the print count of the authentication table 338 of the authentication server 300. In a state where the management server 200 is down, the communication state between the printer 10 and the management server 200 is a first non-communication state, the communication state between the authentication server 300 and the management server 200 is a second non-communication state, and the communication state between the printer 10 and the authentication server 300 is a communicable state.

[0038] At T110, the authentication server 300 transmits a survival confirmation signal to the management server 200. In this case, since the management server 200 is down, the authentication server 300 does not receive a response signal. Since the authentication server 300 does not receive a response signal from the survival confirmation signal, at T112, the authentication server 300 determines that the management server 200 is down.

[0039] At T120, the printer 10 transmits a survival confirmation signal to the management server 200. Since the printer 10 does not receive a response signal from the management server 200, at T122, the printer 10 determines that the management server 200 is down. In a modified example, even if the XMPP connection between the printer 10 and the authentication server 300 is maintained, when the printer 10 and the authentication server 300 do not receive a response signal from the management server 200, they may determine that the management server 200 is down.

[0040] When the authentication server 300 determines at T112 that the management server 200 is down, it generates a one-time code OC1 at T130 and stores the generated one-time code OC1 in the authentication table 338 in association with the device ID "dv1". Next, the authentication server 300 identifies the email address AD1 associated with the device ID "dv1" in the authentication table 338, generates an email ML1 including the device ID "dv1" and the one-time code OC1, and transmits the email ML1 with the identified email address AD1 as the destination address at T132. Also, the authentication server 300 transmits the one-time code OC1 to the printer 10 at T134.

[0041] When the printer 10 receives the one-time code OC1 from the authentication server 300 at T134, it stores the one-time code OC1 in the memory 34 at T136.

[0042] When the terminal device 100 receives the email ML1 from the authentication server 300 at T132 and accepts an operation to display the email ML1, it displays the email ML1 at T138. In the body field of the email ML1, there is a message indicating that the management server 200 is down and a message indicating that the printing prohibition state of the printer 10 can be released using the one-time code OC1. Thus, the user of the terminal device 100 (i.e., the user of the printer 10) can know that the printing prohibition state of the printer 10 can be released by using the one-time code OC1.

[0043] Also, when the printer 10 determines that the management server 200 is down, at T140, the printer 10 changes the state of the printer 10 from the normal state to the first print-permitted state. The first print-permitted state is a state in which printing execution is permitted, but printing execution exceeding a first predetermined number of sheets (for example, 100 sheets) is restricted. The first predetermined number of sheets is a value smaller than the contract printing number of sheets. The printer 10 stores "100" in the restricted printing number in the print table 38. Thereby, the execution of printing using the dedicated cartridge is restricted. When the communication state between the printer 10 and the management server 200 changes from the first communication state to the first communication impossible state, one of the reasons for changing the state of the printer 10 from the normal state to the first print-permitted state is as follows. When the communication state between the printer 10 and the management server 200 is in the first communication impossible state, notification information is not transmitted from the printer 10 to the management server 200. That is, the number of printed sheets necessary for the management server 200 to provide the flat-rate service is not transmitted from the printer 10 to the management server 200. In this case, the management server 200 cannot appropriately provide the flat-rate service. To avoid such a situation, when the communication state between the printer 10 and the management server 200 changes from the first communication state to the first communication impossible state, the state of the printer 10 changes from the normal state to the first print-permitted state.

[0044] When the printer 10 executes printing at T142, it calculates the number of sheets of printing paper "100" used in the printing and updates the number of printed sheets when off in the print table 38 from "0" to "100". Next, at T144, the printer 10 determines that the number of printed sheets when off "100" in the print table matches the restricted number of printed sheets "100", that is, it determines that the number of printed sheets when off has reached the restricted number of printed sheets. At T146, the printer 10 changes the state of the printer 10 from the first print-permitted state to the print-prohibited state. In this way, when the communication state between the printer 10 and the management server 200 changes from the first communicable state to the first non-communicable state, the printer 10 changes the state of the printer 10 to the print-prohibited state after passing through the first print-permitted state. According to such a configuration, the convenience for the user can be improved as compared with the case where the state of the printer 10 shifts to the print-prohibited state without passing through the first print-permitted state.

[0045] Next, in T150 of FIG. 5, the printer 10 receives the input of the one-time code OC1 to the operation unit 12. As described above, the user of the printer 10 has been notified of information (i.e., the one-time code OC1) for releasing the print prohibition state of the printer 10 (see T132 and T138). Therefore, the user of the printer 10 inputs the one-time code OC1 to release the print prohibition state of the printer 10. In T152, the printer 10 determines that the input one-time code OC1 matches the one-time code OC1 stored in the memory 34 (see T136 in FIG. 4), and in T154, the printer 10 changes the state of the printer 10 from the print prohibition state to the second print permission state. The second print permission state is a state in which printing is permitted, but printing beyond a second predetermined number of sheets (for example, 100 sheets) is restricted. The second predetermined number of sheets is a value smaller than the contract print number. The second predetermined number of sheets may be the same as or different from the first predetermined number of sheets. The printer 10 identifies the restricted print number "100" in the print table 38, adds the second predetermined number of sheets "100" to the identified restricted print number "100", and stores the new restricted print number "200" in the print table 38. In this way, in order for the printer 10 to execute authentication using the one-time code, compared with a configuration in which the printer 10 transmits the one-time code to another device and the other device executes authentication using the one-time code, the time required for authentication can be shortened. Also, since the printer 10 receives the input of the one-time code OC1 to the operation unit 12, it is possible to prevent the one-time code from being used by a third party. Therefore, security can be improved.

[0046] When the printer 10 executes printing at T160, it calculates the number of sheets of printing paper "100" used in the printing and updates the number of sheets printed when off in the print table 38 from "100" to "200". Next, at T162, the printer 10 determines that the number of sheets printed when off "200" in the print table matches the restricted number of printed sheets "200", that is, it determines that the number of sheets printed when off has reached the restricted number of printed sheets. At T164, the printer 10 shifts the state of the printer 10 from the second print-permitted state to the print-prohibited state. According to such a configuration, in a state where the communication state between the printer 10 and the management server 200 is in the first communication-impossible state, after the state of the printer 10 has shifted to the second print-permitted state, it is possible to suppress unlimited printing permission. Next, at T166, the printer 10 transmits a one-time code transmission request including the device ID "dv1" to the authentication server 300. The one-time code transmission request is a signal for requesting the transmission of a new one-time code. In this way, in order for the printer 10 to transmit a one-time code transmission request to the authentication server 300, the user of the printer 10 does not need to access the authentication server 300 and execute an operation for causing the authentication server 300 to transmit a new one-time code. Therefore, the convenience of the user of the printer 10 can be improved.

[0047] Note that while the state of the printer 10 is in the second print-permitted state, if the communication state between the printer 10 and the management server 200 changes from the first communication-impossible state to the first communication-possible state before the number of sheets printed when off reaches the restricted number of printed sheets, the printer 10 shifts the state of the printer 10 from the second print-permitted state to the normal state. In this case, the printer 10 does not transmit an authentication information transmission request to the authentication server 300. According to such a configuration, it is possible to suppress unnecessary communication between the printer 10 and the authentication server 300.

[0048] When the authentication server 300 receives a one-time code transmission request from the printer 10 at T166, it identifies the device ID "dv1" within the request. At T170, it generates a new one-time code OC2 and, in the authentication table 338, associates and stores the generated one-time code OC2 with the identified device ID "dv1". T172 to T178 are the same as T132 to T138 in FIG. 4, except that the one-time code OC2 is used and the email ML2 includes the one-time code OC2. Since the email ML2 is sent to the terminal device 100, the user of the printer 10 can use the new one-time code OC2.

[0049] T180 and T182 are the same as T150 and T152, except that the one-time code OC2 is used. At T184, the printer 10 changes the state of the printer 10 from a print prohibition state to a third print permission state. The third print permission state is a state where printing is permitted, but printing beyond a third predetermined number of sheets (for example, 100 sheets) is restricted. The third predetermined number of sheets is a value smaller than the contract printing number of sheets. The third predetermined number of sheets may be the same as or different from the second predetermined number of sheets. The printer 10 identifies the restricted printing number of sheets "200" in the print table 38, adds the third predetermined number of sheets "100" to the identified restricted printing number of sheets "200", and stores the new restricted printing number of sheets "300" in the print table 38.

[0050] When the printer 10 executes printing at T190 in FIG. 6, it calculates the number of sheets of printing paper "50" used in the printing and updates the number of sheets printed when off in the print table 38 from "200" to "250". Next, at T192, the printer 10 determines that the number of sheets printed when off "250" in the print table is less than the restricted printing number of sheets "300", that is, the number of sheets printed when off has not reached the restricted printing number of sheets, and maintains the third print permission state.

[0051] In this case, at time T200, the problem of the management server 200 is resolved, and the management server 200 returns to the normal state. In response to the management server 200 returning to the normal state, at T202, the XMPP connection between the printer 10 and the management server 200 is re-established. That is, the communication state between the printer 10 and the management server 200 changes from the first communication impossible state to the first communication possible state. Also, the communication state between the authentication server 300 and the management server 200 changes from the second communication impossible state to the second communication possible state.

[0052] When the printer 10 transmits a survival confirmation signal to the management server 200 at T210, it receives a response signal from the management server 200 at T212. In this case, the printer 10 determines at T214 that the management server 200 has returned to the normal state, and at T216, the printer 10 shifts the state of the printer 10 from the third print permission state to the normal state. Next, the printer 10 identifies the number of printed sheets when ON "0" and the number of printed sheets when OFF "250" in the print table 38, and at T220, it transmits notification information including the device ID "dv1", the identified number of printed sheets when ON "0", and the identified number of printed sheets when OFF "250" to the management server 200. Thus, the notification information transmitted first after the management server 200 returns to the normal state includes the number of printed sheets when OFF. Next, the printer 10 resets the number of printed sheets when ON, the number of printed sheets when OFF, and the restricted number of printed sheets in the print table 38 at T222.

[0053] When the management server 200 receives the notification information from the printer 10 at T220, it identifies the device ID "dv1" in the notification information, and in the management table 238, it identifies the number of printed sheets "110" associated with the identified device ID "dv1". Next, the management server 200 adds the number of printed sheets when OFF "250" in the notification information to the identified number of printed sheets "110" at T224. As a result, the number of printed sheets in the management table 238 is updated from "110" to "360".

[0054] In T230, the authentication server 300 transmits a liveness confirmation signal to the management server 200, and in T232, receives a response signal from the management server 200. In this case, the authentication server 300 determines in T234 that the management server 200 has returned to the normal state.

[0055] (Effect of this embodiment) According to the above configuration, when the authentication server 300 becomes unable to communicate with the management server 200 due to a problem with the management server 200 (Figure 4), the authentication server 300 transmits a one-time code OC1 to the terminal device 100 (T132 in Figure 4). When the printer 10 becomes unable to communicate with the management server 200 due to a problem with the management server 200 (Figure 4), the printer 10 changes the state of the printer 10 from the normal state to the print prohibition state (T146 in Figure 4). While the state of the printer 10 is in the print prohibition state, when the input of the one-time code OC1 is received and the authentication using the one-time code OC1 is successful (T152 in Figure 5), the printer 10 changes the state of the printer 10 from the print prohibition state to the second print permission state (T154 in Figure 5). Therefore, when the management server 200 becomes unable to communicate due to a problem with the management server 200, the printer 10 can be made to execute printing.

[0056] (Corresponding relationship) The number of printed sheets included in the notification information is an example of "usage information". The one-time codes OC1 of T132 and T134 in FIG. 4 are examples of "first authentication information". The normal state is an example of "first allowable state". The print prohibition state of T146 in FIG. 4 is an example of "first prohibited state". The one-time code OC1 of T150 in FIG. 5 is an example of "second authentication information". The second print allowable state of T154 in FIG. 5 is an example of "second allowable state". The first print allowable state of T140 in FIG. 4 is an example of "third allowable state". The fact that the number of printed sheets when OFF of T144 in FIG. 4 reaches the first predetermined number is an example of "first predetermined condition". The first predetermined number is an example of "first predetermined quantity". The fact that the number of printed sheets when OFF of T162 in FIG. 5 reaches the second predetermined number is an example of "second predetermined condition". The second predetermined number is an example of "second predetermined quantity". The print prohibition state of T164 in FIG. 5 is an example of "second prohibited state". The one-time code transmission request is an example of "authentication information transmission request". The one-time codes OC2 of T172 and T174 in FIG. 5 are examples of "third authentication information". The one-time code OC2 of T180 in FIG. 5 is an example of "fourth authentication information". The third print allowable state of T184 in FIG. 5 is an example of "fourth allowable state".

[0057] T56 and T76 in FIG. 3 are examples of processes executed by the "management unit". T132 in FIG. 4 is an example of a process executed by the "first authentication information transmission unit". T146 in FIG. 4 is an example of a process executed by the "first transition control unit". T150 in FIG. 5 is an example of a process executed by the "first reception unit". T154 in FIG. 5 is an example of a process executed by the "second transition control unit".

[0058] (Second Embodiment) Subsequently, the communication system 2 of the second embodiment will be described. As shown in FIG. 2, the authentication table 338 of the authentication server 300 further stores the number of printed sheets when ON, the number of printed sheets when OFF, and the restricted number of printed sheets.

[0059] (Process when the management server 200 is down; FIGS. 7 to 9) Next, with reference to FIGS. 7 to 9, a process executed among the printer 10, the management server 200, and the authentication server 300 in a state where the management server 200 is down due to a malfunction of the management server 200 will be described. FIG. 7 shows a state where the management server 200 is down after FIG. 3.

[0060] First, the same processing as T11 to T122 in FIG. 4 is executed among the printer 10, the management server 200, and the authentication server 300. T330, T332, and T338 are the same as T130, T132, and T138 in FIG. 4, respectively. The authentication server 300 in this embodiment does not send the one-time code OC1 to the printer 10.

[0061] T340 to T346 and T350 are the same as T140 to T146 in FIG. 4 and T150 in FIG. 5, respectively. When the printer 10 receives the input of the one-time code OC1 in T350, the printer 10 sends an authentication request including the device ID "dv1" and the input one-time code OC1 to the authentication server 300 in T352.

[0062] When the authentication server 300 receives the authentication request from the printer 10 in T352, the authentication server 300 identifies the device ID "dv1" in the authentication request and identifies the one-time code OC1 associated with the identified device ID "dv1" in the authentication table 338. Next, in T354, the authentication server 300 determines that the one-time code OC1 in the authentication request matches the identified one-time code OC1, and in T356, the authentication server 300 sends success information indicating that the authentication using the one-time code has succeeded to the printer 10. In this way, compared with a configuration in which the authentication server 300 sends a one-time code to other devices in order to execute authentication using the one-time code, leakage of the one-time code can be suppressed. Therefore, the security can be improved.

[0063] When the printer 10 receives success information from the authentication server 300 at T356, at T358, it changes the state of the printer 10 from the print prohibition state to the second print permission state, specifies the number of printed sheets when ON "0" and the number of printed sheets when OFF "100" in the print table 38, and at T360, it transmits to the authentication server 300 the off-time print information including the device ID "dv1", the specified number of printed sheets when ON "0", and the specified number of printed sheets when OFF "100". At T362, it resets the number of printed sheets when ON and the number of printed sheets when OFF in the print table 38.

[0064] When the authentication server 300 receives the off-time print information from the printer 10 at T360, it specifies the device ID "dv1" in the information, and at T364, it updates the number of printed sheets when ON and the number of printed sheets when OFF associated with the device ID "dv1" in the authentication table 338 to the number of printed sheets when ON "0" and the number of printed sheets when OFF "100" in the off-time print information, respectively. Then, the authentication server 300 stores in the authentication table 338 the restricted number of printed sheets "200" obtained by adding the fourth predetermined number of sheets "100" to the number of printed sheets when OFF "100" in the off-time print information. The fourth predetermined number of sheets may be the same as or different from the first predetermined number of sheets.

[0065] T370 in FIG. 8 is the same as T342 in FIG. 7. T372 is the same as T360 except that the off-time print information does not include the number of printed sheets when ON. The printer 10 resets the number of printed sheets when OFF in the print table 38 at T374.

[0066] When the authentication server 300 receives the off - time printing information from the printer 10 at T372, it identifies the device ID "dv1" in the said information. At T376, it adds the off - time printing count "100" in the off - time printing information to the off - time printing count "100" associated with the device ID "dv1" in the authentication table 338. As a result, the off - time printing count in the authentication table 338 is updated to "200". Next, at T378, the authentication server 300 determines that the off - time printing count "200" in the authentication table 338 is equal to or more than the restricted printing count "200", that is, it determines that the off - time printing count has reached the restricted printing count. At T380, it sends a transition request to the printer 10. The transition request is a signal requesting to transition the state of the printer 10 to the print - prohibited state. T382 is the same as T164 in FIG. 5. T390, T392, T398, and T400 are the same as T170, T172, T178, and T180 in FIG. 5 respectively. With such a configuration, in a state where the communication state between the printer 10 and the management server 200 is the first communication - impossible state, after the state of the printer 10 has transitioned to the second print - permitted state, it is possible to suppress unrestricted printing.

[0067] Note that while the state of the printer 10 is in the second print - permitted state, if the communication state between the printer 10 and the management server 200 changes from the first communication - impossible state to the first communication - possible state before the off - time printing count reaches the restricted printing count, the printer 10 transitions its state from the second print - permitted state to the normal state. In this case, the authentication server 300 does not send the one - time code OC2 to the terminal device 100. With such a configuration, it is possible to suppress the authentication server 300 from sending unnecessary one - time codes.

[0068] After that, between the printer 10 and the authentication server 300, using the one-time code OC2, the same processing as T352 to T356 in FIG. 7 is executed. Next, at T408, the printer 10 changes the state of the printer 10 from the print prohibition state to the third print permission state. T410 is the same as T372 except that the number of prints at OFF time "0" is used. When the authentication server 300 receives the print information at OFF time from the printer 10 at T410, at T412 in FIG. 9, the number of prints at OFF time and the restricted print number associated with the device ID "dv1" in the authentication table 338 are updated. In this case, since the number of prints at OFF time in the print information at OFF time is "0", the number of prints at OFF time "200" in the authentication table 338 is not changed. The authentication server 300 stores in the authentication table 338 a restricted print number "300" obtained by adding a fifth predetermined number "100" to the restricted print number "200" in the authentication table 338. The fifth predetermined number may be the same as or different from the fourth predetermined number.

[0069] At T420, the printer 10 executes printing and updates the number of prints at OFF time in the print table 38 from "0" to "50". T422 is the same as T372 in FIG. 8 except that the number of prints at OFF time "50" is used. T424 is the same as T374.

[0070] When the authentication server 300 receives the print information at OFF time from the printer 10 at T422, at T426, the authentication server 300 updates the number of prints at OFF time associated with the device ID "dv1" in the authentication table 338. The authentication server 300 adds the number of prints at OFF time "50" in the print information at OFF time to the number of prints at OFF time "200" associated with the device ID "dv1" in the authentication table 338, and stores the new number of prints at OFF time "250" in the authentication table 338. Next, at T428, the authentication server 300 determines that the number of prints at OFF time "250" in the authentication table 338 is less than the restricted print number "300", that is, the number of prints at OFF time has not reached the restricted print number. In this case, the authentication server 300 does not generate a new one-time code.

[0071] T430 to T446 are the same as T200 to T216 in FIG. 6. T450 to T454 are the same as T230 to T234. When the authentication server 300 determines that the communication state between the authentication server 300 and the management server 200 has changed from the second communication impossible state to the second communication possible state, in the authentication table 338, it specifies the number of prints when ON "0" and the number of prints when OFF "250" associated with the device ID "dv1", and at T456, it transmits notification information including the device ID "dv1", the specified number of prints when ON "0", and the specified number of prints when OFF "250" to the management server 200. Next, at T458, the authentication server 300 resets the number of prints when ON, the number of prints when OFF, and the restricted number of prints in the authentication table 338. T460 is the same as T224.

[0072] (Effect of this embodiment) According to the above configuration, when the authentication server 300 becomes unable to communicate with the management server 200 due to a malfunction of the management server 200 (FIG. 7), it transmits the one-time code OC1 to the terminal device 100 (T332 in FIG. 7). The printer 10 shifts the state of the printer 10 from the normal state to the print prohibition state when it becomes unable to communicate with the management server 200 due to a malfunction of the management server 200 (FIG. 7) (T346 in FIG. 7). While the state of the printer 10 is in the print prohibition state, when the input of the one-time code OC1 is received (T350), and when the authentication using the one-time code OC1 is successful (T354, T356), the printer 10 shifts the state from the print prohibition state to the second print permission state (T358). Therefore, when the management server 200 becomes unable to communicate due to a malfunction of the management server 200, the printer 10 can be made to execute printing.

[0073] As described above, specific examples of the present invention have been described in detail, but these are merely examples and do not limit the scope of the claims. The technology described in the claims includes various modifications and changes of the specific examples illustrated above. Modifications of the above embodiments are listed below.

[0074] (First Modified Example) In FIG. 4, when the authentication server 300 obtains an instruction from a user who knows that the communication state between the printer 10 and the management server 200 has changed from the first communicable state to the first non-communicable state, the authentication server 300 may execute the processes after T130. For example, when the printer 10 determines that the management server 200 has gone down, the printer 10 may display down information indicating that the management server 200 has gone down on the display unit 14. Then, when the down information displayed on the display unit 14 is confirmed, the user of the printer 10 may use the terminal device 100 to send an instruction for generating a one-time code to the authentication server 300. In this case, when the authentication server 300 receives an instruction from the terminal device 100, the authentication server 300 determines that the communication state between the authentication server 300 and the management server 200 is in the second non-communicable state, and executes the processes after T130. In this modified example, the authentication server 300 does not have to periodically send a survival confirmation signal to the management server 200. In this modified example, T20 and T22 in FIG. 3, and T110 and T112 in FIG. 4 can be omitted.

[0075] (Second Modified Example) The communication system 2 may further include a monitoring device that monitors the communication state between the printer 10 and the management server 200. In this modified example, when the monitoring device detects that the communication state between the printer 10 and the management server 200 has changed from the first communicable state to the first non-communicable state, the monitoring device sends non-communication information to the printer 10. In this modified example, when the printer 10 receives the non-communication information from the monitoring device, the printer 10 executes the processes after T140 in FIG. 4 and the processes after T340 in FIG. 7.

[0076] (Third Modified Example) In T132 of FIG. 4, the authentication server 300 may use SMS (abbreviation for Short Message Service) to send the one-time code OC1 to the terminal device 100. In another modified example, in T132 of FIG. 4, the authentication server 300 may send the one-time code OC1 to the application program installed in the terminal device 100.

[0077] (Fourth Modification Example) While the communication state between the printer 10 and the management server 200 is in the first communicable state, the authentication server 300 may periodically transmit a one-time code to the terminal device 100.

[0078] (Fifth Modification Example) After T146 in FIG. 4, the terminal device 100 may be configured to transmit the one-time code OC1 to the printer 10 in response to receiving the input of the one-time code OC1. In this modification example, the printer 10 receives the input of the one-time code OC1 from the user via the terminal device 100.

[0079] (Sixth Modification Example) When the communication state between the printer 10 and the management server 200 changes from the first communicable state to the first non-communicable state, the printer 10 may shift its state from the normal state directly to the print prohibition state without passing through the first print permission state. In this modification example, T140 - 144 in FIG. 4 and T340 - T344 in FIG. 7 can be omitted.

[0080] (Seventh Modification Example) In the first and second embodiments, it is determined whether to shift the state of the printer 10 from the first print permission state, the second print permission state, and the third print permission state by using the number of sheets of printing paper used for printing. Instead of this, the number of dots of ink used for printing may be used. In another modification example, the duration of the first print permission state, the second print permission state, and the third print permission state may be used. For example, when the duration of the first print permission state elapses the first predetermined time, the printer 10 may shift its state from the first print permission state to the print prohibition state, and when the duration of the second print permission state elapses the second predetermined time, the printer 10 may shift its state from the second print permission state to the print prohibition state. The second predetermined time may be the same as or different from the first predetermined time.

[0081] (Eighth Modification Example) The printer 10 may not be able to transition to the third printable state. In the modification example of the first embodiment, T166 to T184 in FIG. 5 and T190 and T192 in FIG. 6 can be omitted. In this modification example, the "third transition control unit", "printer-side determination unit", "authentication information request transmission unit", "fourth authentication information transmission unit", "second reception unit", and "fourth transition control unit" can be omitted. In the modification example of the second embodiment, T390 to T410 in FIG. 8 and T412 to T428 in FIG. 9 can be omitted. In this modification example, the "third transition control unit", "server-side determination unit", "transition request transmission unit", "fourth authentication information transmission unit", "second reception unit", and "fourth transition control unit" can be omitted.

[0082] (Ninth Modification Example) The management server 200 may be configured by a single server or may have a plurality of servers. For example, the management server 200 may have a first server and a second server. In this modification example, the first server receives notification information from the printer 10 (T52 and T72 in FIG. 3). Further, the second server manages the notification information received by the first server (T56 and T76 in FIG. 3).

[0083] (10th Modification Example) The authentication server 300 may be composed of a single server or may have a plurality of servers. For example, in the first embodiment, the authentication server 300 may have a first server and a second server. In this modification example, the first server transmits a one-time code to the terminal device 100 (T132 in FIG. 4). Also, the second server transmits a one-time code to the printer 10 (T134 in FIG. 4). The second server further receives a one-time code transmission request from the printer 10 (T166 in FIG. 5). Also, for example, in the second embodiment, the authentication server 300 may have a first server, a second server, and a third server. In this modification example, the first server transmits a one-time code to the terminal device 100 (T332 in FIG. 7). Also, the second server receives a one-time code from the printer 10 (T352 in FIG. 7), and when authentication using the one-time code is successful (T354), transmits success information to the printer 10 (T356). Also, the third server determines whether the number of printed sheets when off has reached the limited number of printed sheets while the state of the printer is in the second print permission state (T378 in FIG. 8). The second server further transmits a transition request to the printer 10 when it is determined by the third server that the number of printed sheets when off has reached the limited number of printed sheets (T380).

[0084] (11th Modification Example) In each of the above embodiments, each process in FIGS. 3 to 9 is realized by software (for example, programs 36, 236, 336), but at least one of these processes may be realized by hardware such as a logic circuit.

[0085] Also, the technical elements described in this specification or the drawings exhibit technical utility alone or in various combinations, and are not limited to the combinations described in the claims at the time of filing. Also, the technology exemplified in this specification or the drawings achieves a plurality of purposes simultaneously, and achieving one of these purposes itself has technical utility. The following items are elements described in the claims at the time of filing the application. (Item 1) A communication system including a printer, a management server, and an authentication server, wherein the management server comprises a management unit that receives usage information regarding the usage amount of the printer from the printer and manages the usage information, wherein the authentication server comprises a first authentication information transmission unit that transmits first authentication information to an external device when the communication state between the authentication server and the management server is in a non - communicable state, wherein the printer comprises a first transition control unit that, when the communication state between the printer and the management server changes from a communicable state to a non - communicable state, changes the state of the printer from a first allowable state in which printing execution is permitted to a first prohibited state in which printing execution is prohibited, a first reception unit that receives an input of second authentication information from a user while the state of the printer is in the first prohibited state, and a second transition control unit that, when the input of the second authentication information is received and the second authentication information matches the first authentication information, changes the state of the printer from the first prohibited state to a second allowable state in which printing execution is permitted, Communication system. (Item 2) The authentication server further comprises a second authentication information transmission unit that transmits the first authentication information to the printer when the communication state between the authentication server and the management server is in a non - communicable state, wherein the printer further comprises a first authentication information reception unit that receives the first authentication information from the authentication server, and the second transition control unit of the printer changes the state of the printer from the first prohibited state to the second allowable state when the input of the second authentication information is received and the second authentication information matches the received first authentication information, in the communication system according to Item 1. (Item 3) The printer further comprises a third authentication information transmission unit that transmits the second authentication information to the authentication server when the input of the second authentication information is received, wherein the authentication server further comprises a second authentication information reception unit that receives the second authentication information from the printer, A success information transmission unit that transmits success information indicating successful authentication to the printer when the received second authentication information matches the first authentication information. The second transition control unit of the printer shifts the state of the printer from the first prohibited state to the second permitted state when the input of the second authentication information is received and the success information is received from the authentication server. The communication system according to item 1. (Item 4) When the communication state between the printer and the management server changes from the communicable state to the incommunicable state, the first transition control unit of the printer shifts the state of the printer from the first permitted state, through a third permitted state, to the first prohibited state. The third permitted state continues until a first predetermined condition is satisfied. The first predetermined condition is satisfied when at least one of the following occurs: the usage amount of the printer in the third permitted state reaches a first predetermined amount; and the duration of the third permitted state reaches a first predetermined time. The communication system according to any one of items 1 to 3. (Item 5) The printer further includes A third transition control unit that, when a second predetermined condition is satisfied while the state of the printer is the second permitted state, shifts the state of the printer from the second permitted state to a second prohibited state in which printing execution is prohibited. The second predetermined condition is satisfied when at least one of the following occurs: the usage amount of the printer in the second permitted state reaches a second predetermined amount; and the duration of the second permitted state reaches a second predetermined time. The communication system according to any one of items 1 to 4. (Item 6) The printer further includes A printer-side determination unit that determines whether the second predetermined condition is satisfied while the state of the printer is the second permitted state. The third transition control unit of the printer shifts the state of the printer from the second permitted state to the second prohibited state when it is determined that the second predetermined condition is satisfied. The communication system according to item 5. (Item 7) The printer further includes An authentication information request transmission unit that transmits an authentication information transmission request for requesting transmission of new authentication information to the authentication server when it is determined that the second predetermined condition is satisfied. The authentication server further includes When the authentication information transmission request is received from the printer, it includes a fourth authentication information transmission unit that transmits third authentication information different from the first authentication information to the external device. The printer further includes: A second reception unit that receives an input of fourth authentication information from a user while the state of the printer is in the second prohibited state; A fourth transition control unit that, when the input of the fourth authentication information is received and the fourth authentication information matches the third authentication information, changes the state of the printer from the second prohibited state to a fourth permitted state in which printing execution is permitted. The communication system according to item 6. (Item 8) The printer further includes: A fifth transition control unit that, while the state of the printer is in the second permitted state, changes the state of the printer from the second permitted state to the first permitted state when the communication state between the printer and the management server changes from the communication impossible state to the communication possible state before the second predetermined condition is satisfied. When the communication state between the printer and the management server changes from the communication impossible state to the communication possible state before the second predetermined condition is satisfied while the state of the printer is in the second permitted state, the authentication information transmission request is not transmitted to the authentication server. The communication system according to item 7. (Item 9) The authentication server further includes: A server-side determination unit that determines whether the second predetermined condition is satisfied while the state of the printer is in the second permitted state; A transition request transmission unit that, when it is determined that the second predetermined condition is satisfied, transmits a transition request to the printer requesting to change the state of the printer from the second permitted state to the second prohibited state. When the transition request is received from the authentication server, the third transition control unit of the printer changes the state of the printer from the second permitted state to the second prohibited state. The communication system according to item 5. (Item 10) The authentication server further includes: A fourth authentication information transmission unit that transmits third authentication information different from the first authentication information to the external device when it is determined that the second predetermined condition is satisfied. The printer further includes: A second reception unit that receives an input of fourth authentication information from a user while the state of the printer is in the second prohibited state. A fourth transition control unit that, when the input of the fourth authentication information is accepted and the fourth authentication information matches the third authentication information, changes the state of the printer from the second prohibited state to a fourth permitted state in which printing is allowed, the communication system according to item 9, comprising the fourth transition control unit. (Item 11) The printer further When the communication state between the printer and the management server changes from the communication impossible state to the communication possible state before the second predetermined condition is satisfied while the state of the printer is the second permitted state, the printer includes a fifth transition control unit that changes the state of the printer from the second permitted state to the first permitted state. When the communication state between the authentication server and the management server changes from the communication impossible state to the communication possible state before the second predetermined condition is satisfied while the state of the printer is the second permitted state, the third authentication information is not transmitted to the external device, the communication system according to item 10. (Item 12) The printer further includes an operation unit. The first reception unit receives an input of the second authentication information from a user via the operation unit while the state of the printer is the first prohibited state, the communication system according to any one of items 1 to 11. (Item 13) A computer program for the authentication server used in a communication system including a printer, a management server, and an authentication server, The computer program causes a computer of the authentication server to Function as a first authentication information transmission unit that transmits first authentication information to an external device when the communication state between the authentication server and the management server is a communication impossible state. The management server receives usage information regarding the usage amount of the printer from the printer and manages the usage information. The printer When the communication state between the printer and the management server changes from the communication possible state to the communication impossible state, the state of the printer is changed from the first permitted state in which printing is allowed to the first prohibited state in which printing is prohibited. While the state of the printer is the first prohibited state, an input of second authentication information is received from a user. When the input of the second authentication information is accepted and the second authentication information matches the first authentication information, shift the state of the printer from the first prohibited state to a second permitted state in which execution of printing is permitted. A computer program. (Item 14) The computer program further causes the computer to function as a first authentication information receiving unit that receives the second authentication information from the printer, a success information transmitting unit that transmits success information indicating that authentication has succeeded to the printer when the received second authentication information matches the first authentication information, and The printer When the input of the second authentication information is accepted and the success information is received from the authentication server, shift the state of the printer from the first prohibited state to the second permitted state. The computer program according to item 13. (Item 15) The computer program further causes the computer to function as a server-side determination unit that determines whether a predetermined condition is satisfied while the state of the printer is the second permitted state, a transition request transmitting unit that transmits a transition request to the printer to request shifting the state of the printer from the second permitted state to a second prohibited state in which execution of printing is prohibited when it is determined that the predetermined condition is satisfied, and The predetermined condition is satisfied when at least one of the case where the usage amount of the printer in the second permitted state reaches a predetermined amount and the case where the duration of the second permitted state reaches a predetermined time. The computer program according to item 13 or 14. (Item 16) The computer program further causes the computer to function as a fourth authentication information transmitting unit that transmits third authentication information different from the first authentication information to the external device when it is determined that the predetermined condition is satisfied, The printer receives an input of fourth authentication information from a user while the state of the printer is the second prohibited state, When the input of the fourth authentication information is accepted and the fourth authentication information matches the third authentication information, shift the state of the printer from the second prohibited state to a fourth permitted state in which execution of printing is permitted. The computer program according to item 15. (Item 17) While the state of the printer is the second allowable state, if the communication state between the printer and the management server changes from the communication impossible state to the communication possible state before the predetermined condition is satisfied, the state of the printer is shifted from the second allowable state to the first allowable state. The computer program according to item 16, wherein when the communication state between the authentication server and the management server changes from the communication impossible state to the communication possible state before the predetermined condition is satisfied while the state of the printer is the second allowable state, the third authentication information is not transmitted to the external device. (Item 18) A computer program for the printer used in a communication system including a printer, a management server, and an authentication server, The computer program causes the computer of the printer to When the communication state between the printer and the management server changes from the communication possible state to the communication impossible state, a first transition control unit that shifts the state of the printer from a first allowable state where printing execution is allowed to a first prohibited state where printing execution is prohibited. The management server receives usage information regarding the usage amount of the printer from the printer and manages the usage information. The authentication server transmits first authentication information to an external device when the communication state between the management server and the authentication server is the communication impossible state. The first transition control unit; A first reception unit that receives an input of second authentication information from a user while the state of the printer is the first prohibited state; A second transition control unit that, when the input of the second authentication information is received and the second authentication information matches the first authentication information, shifts the state of the printer from the first prohibited state to a second allowable state where printing execution is allowed; A computer program that functions as (Item 19) The computer program further causes the computer to A first authentication information reception unit that receives the first authentication information from the authentication server. The authentication server functions as the first authentication information reception unit that transmits the first authentication information to the printer when the communication state between the authentication server and the management server is the communication impossible state. The computer program according to item 18, wherein the second transition control unit changes the state of the printer from the first prohibited state to the second permitted state when the input of the second authentication information is received and the received second authentication information matches the received first authentication information. (Item 20) The computer program further causes the computer to a printer-side determination unit that determines whether a predetermined condition is satisfied while the state of the printer is the second permitted state; a third transition control unit that, when it is determined that the predetermined condition is satisfied, changes the state of the printer from the second permitted state to a second prohibited state in which printing is prohibited; function as The computer program according to item 18 or 19, wherein the predetermined condition is satisfied when at least one of the following cases occurs: the usage amount of the printer in the second permitted state reaches a predetermined amount, and the duration of the second permitted state reaches a predetermined time. (Item 21) The computer program further causes the computer to an authentication information request transmission unit that transmits an authentication information transmission request for requesting transmission of new authentication information to the authentication server when it is determined that the predetermined condition is satisfied, and when the authentication server receives the authentication information transmission request from the printer, the authentication server transmits third authentication information different from the first authentication information to the external device; the authentication information request transmission unit; a second reception unit that receives an input of fourth authentication information from a user while the state of the printer is the second prohibited state; a fourth transition control unit that, when the input of the fourth authentication information is received and the fourth authentication information matches the third authentication information, changes the state of the printer from the second prohibited state to a fourth permitted state in which printing is permitted; function as the computer program according to item 20. (Item 22) The computer program further causes the computer to function as a fifth transition control unit that, while the state of the printer is the second permitted state and before the predetermined condition is satisfied, changes the state of the printer from the second permitted state to the first permitted state when the communication state between the printer and the management server changes from the communication impossible state to the communication possible state. While the state of the printer is the second allowable state, if the communication state between the printer and the management server changes from the non - communicable state to the communicable state before the predetermined condition is satisfied, the authentication information transmission request is not transmitted to the authentication server, the computer program according to item 21. (Item 23) The printer further includes an operation unit, The first reception unit receives an input of the second authentication information from a user via the operation unit while the state of the printer is the first prohibited state, the computer program according to any one of items 18 to 22. (Item 24) A printer comprising the computer program according to any one of items 18 to 23. (Item 25) A management step of receiving usage information regarding the usage amount of the printer from the printer and managing the usage information; A first authentication information transmission step of transmitting first authentication information to an external device when the communication state between the authentication server and the management server changes from the communicable state to the non - communicable state; A first transition control step of changing the state of the printer from the first allowable state where printing execution is allowed to the first prohibited state where printing execution is prohibited when the communication state between the printer and the management server changes from the communicable state to the non - communicable state; A first reception step of receiving an input of second authentication information from a user while the state of the printer is the first prohibited state; A second transition control step of changing the state of the printer from the first prohibited state to the second allowable state where printing execution is allowed when the input of the second authentication information is received and the second authentication information matches the first authentication information; A method comprising the above.

Description of Symbols

[0086] 2: Communication system, 4: LAN, 6: Internet, 10: Printer, 12: Operation unit, 14: Display unit, 16: Printing execution unit, 20: Communication interface, 30: Control unit, 32: CPU, 34: Memory, 36: Program, 38: Printing table, 100: Terminal device, 200: Management server, 220: Communication I / F, 230: Control unit, 232: CPU, 234: Memory, 236: Program, 238: Management table, 300: Authentication server, 320: Communication I / F, 330: Control unit, 332: CPU, 334: Memory, 336: Program, 338: Authentication table

Claims

1. A communication system comprising a printer, a management server, and an authentication server, wherein the management server includes a management unit that receives usage information regarding the usage amount of the printer from the printer and manages the usage information, wherein the authentication server includes a first authentication information transmission unit that transmits first authentication information to an external device when the communication state between the authentication server and the management server is in a non - communicable state due to a malfunction of the management server, wherein the printer includes a first transition control unit that, when the communication state between the printer and the management server changes from a communicable state to a non - communicable state due to a malfunction of the management server, changes the state of the printer from a first allowable state in which printing is permitted to a first prohibited state in which printing is prohibited, includes a first reception unit that receives an input of second authentication information from a user while the state of the printer is in the first prohibited state, and includes a second transition control unit that, when the input of the second authentication information is received and the second authentication information matches the first authentication information, changes the state of the printer from the first prohibited state to a second allowable state in which printing is permitted. A communication system.

2. The authentication server further includes a second authentication information transmission unit that transmits the first authentication information to the printer when the communication state between the authentication server and the management server is in a non - communicable state due to a malfunction of the management server, The printer further includes a first authentication information reception unit that receives the first authentication information from the authentication server. The second transition control unit of the printer shifts the state of the printer from the first prohibited state to the second permitted state when the input of the second authentication information is received and the received second authentication information matches the first authentication information that has been received. The communication system according to claim 1.

3. A communication system including a printer, a management server, and an authentication server, The management server, includes a management unit that receives usage information regarding the usage amount of the printer from the printer and manages the usage information. The authentication server, when the communication state between the authentication server and the management server is in a communication impossible state due to a problem with the management server, includes a first authentication information transmission unit that transmits first authentication information to an external device. The printer, when the communication state between the printer and the management server changes from a communicable state to a communication impossible state due to a problem with the management server, includes a first transition control unit that shifts the state of the printer from a first permitted state in which execution of printing is permitted to a first prohibited state in which execution of printing is prohibited. includes a first reception unit that receives an input of second authentication information from a user while the state of the printer is in the first prohibited state. when the input of the second authentication information is received, includes a second authentication information transmission unit that transmits the second authentication information to the authentication server. The authentication server further, includes a first authentication information reception unit that receives the second authentication information from the printer. when the received second authentication information matches the first authentication information, includes a success information transmission unit that transmits success information indicating that authentication has succeeded to the printer. The printer further, When the input of the second authentication information is accepted and the success information is received from the authentication server, a second transition control unit is provided to transition the state of the printer from the first prohibited state to a second permitted state in which printing execution is permitted. Communication system.

4. When the communication state between the printer and the management server changes from the communicable state to the incommunicable state due to a malfunction of the management server, the first transition control unit of the printer transitions the state of the printer from the first permitted state, through a third permitted state, to the first prohibited state. The third permitted state continues until a first predetermined condition is satisfied. The first predetermined condition is satisfied when at least one of the following occurs: the usage amount of the printer in the third permitted state reaches a first predetermined amount; and the duration of the third permitted state reaches a first predetermined time. The communication system according to any one of claims 1 to 3.

5. The printer further When a second predetermined condition is satisfied while the state of the printer is in the second permitted state, a third transition control unit is provided to transition the state of the printer from the second permitted state to a second prohibited state in which printing execution is prohibited. The second predetermined condition is satisfied when at least one of the following occurs: the usage amount of the printer in the second permitted state reaches a second predetermined amount; and the duration of the second permitted state reaches a second predetermined time. The communication system according to any one of claims 1 to 4.

6. The printer further A printer-side determination unit is provided to determine whether the second predetermined condition is satisfied while the state of the printer is in the second permitted state. When it is determined that the second predetermined condition is satisfied, the third transition control unit of the printer changes the state of the printer from the second allowable state to the second prohibited state. The communication system according to claim 5.

7. The printer further includes an authentication information request transmission unit that transmits an authentication information transmission request for requesting transmission of new authentication information to the authentication server when it is determined that the second predetermined condition is satisfied. The authentication server further includes a fourth authentication information transmission unit that transmits third authentication information different from the first authentication information to the external device when the authentication information transmission request is received from the printer. The printer further includes a second reception unit that receives an input of fourth authentication information from a user while the state of the printer is in the second prohibited state, and a fourth transition control unit that changes the state of the printer from the second prohibited state to a fourth allowable state in which printing is allowed when the input of the fourth authentication information is received and the fourth authentication information matches the third authentication information. The communication system according to claim 6.

8. The printer further includes a fifth transition control unit that changes the state of the printer from the second allowable state to the first allowable state when the communication state between the printer and the management server changes from the communication impossible state to the communication possible state while the state of the printer is in the second allowable state and before the second predetermined condition is satisfied. When the communication state between the printer and the management server changes from the communication impossible state to the communication possible state while the state of the printer is in the second allowable state and before the second predetermined condition is satisfied, the authentication information transmission request is not transmitted to the authentication server. The communication system according to claim 7.

9. The authentication server further A server-side determination unit that determines whether a second predetermined condition is satisfied while the state of the printer is the second allowable state; A transition request transmission unit that, when it is determined that the second predetermined condition is satisfied, transmits a transition request to the printer requesting that the state of the printer be changed from the second allowable state to a second prohibited state in which printing is prohibited; The printer further includes: A third transition control unit that, when the transition request is received from the authentication server, changes the state of the printer from the second allowable state to the second prohibited state. The communication system according to any one of claims 1 to 4.

10. The authentication server further includes: A fourth authentication information transmission unit that, when it is determined that the second predetermined condition is satisfied, transmits third authentication information different from the first authentication information to the external device; The printer further includes: A second reception unit that receives an input of fourth authentication information from a user while the state of the printer is the second prohibited state; A fourth transition control unit that, when the input of the fourth authentication information is received and the fourth authentication information matches the third authentication information, changes the state of the printer from the second prohibited state to a fourth allowable state in which printing is allowed. The communication system according to claim 9.

11. The printer further includes: A fifth transition control unit that, while the state of the printer is the second allowable state and before the second predetermined condition is satisfied, changes the state of the printer from the second allowable state to the first allowable state when the communication state between the printer and the management server changes from the communication impossible state to the communication possible state; While the state of the printer is the second allowable state, if the communication state between the authentication server and the management server changes from the communication impossible state to the communication possible state before the second predetermined condition is satisfied, the third authentication information is not transmitted to the external device. The communication system according to claim 10.

12. The printer further includes an operation unit. The first reception unit receives an input of the second authentication information from a user via the operation unit while the state of the printer is the first prohibited state. The communication system according to any one of claims 1 to 11.

13. A computer program for the authentication server used in a communication system including a printer, a management server, and an authentication server, The computer program causes the computer of the authentication server to Function as a first authentication information transmission unit that transmits first authentication information to an external device when the communication state between the authentication server and the management server is in a communication impossible state due to a problem with the management server. The management server receives usage information regarding the usage amount of the printer from the printer and manages the usage information. The printer When the communication state between the printer and the management server changes from a communication possible state to a communication impossible state due to a problem with the management server, the state of the printer is changed from a first allowable state where printing execution is allowed to a first prohibited state where printing execution is prohibited. While the state of the printer is the first prohibited state, an input of second authentication information is received from a user. When the input of the second authentication information is received and the second authentication information matches the first authentication information, the state of the printer is changed from the first prohibited state to a second allowable state where printing execution is allowed. Computer program.

14. The computer program further causes the computer to function as a first authentication information receiving unit that receives the second authentication information from the printer, and a success information transmitting unit that transmits success information indicating that authentication has succeeded to the printer when the received second authentication information matches the first authentication information. The printer transitions the state of the printer from the first prohibited state to the second permitted state when the input of the second authentication information is received and the success information is received from the authentication server. The computer program according to claim 13. **Claim 15** The computer program further causes the computer to function as a server-side determination unit that determines whether a predetermined condition is satisfied while the state of the printer is in the second permitted state, and a transition request transmitting unit that transmits a transition request to the printer to transition the state of the printer from the second permitted state to a second prohibited state in which printing execution is prohibited when it is determined that the predetermined condition is satisfied. The predetermined condition is satisfied when at least one of the case where the usage amount of the printer in the second permitted state reaches a predetermined amount and the case where the duration of the second permitted state reaches a predetermined time. The computer program according to claim 13 or 14. **Claim 16** The computer program further causes the computer to function as a fourth authentication information transmitting unit that transmits third authentication information different from the first authentication information to the external device when it is determined that the predetermined condition is satisfied. The printer receives an input of fourth authentication information from a user while the state of the printer is in the second prohibited state, When the input of the fourth authentication information is received and the fourth authentication information matches the third authentication information, the computer program according to claim 15, which changes the state of the printer from the second prohibited state to a fourth permitted state in which printing is permitted.

17. While the state of the printer is the second permitted state, if the communication state between the printer and the management server changes from the non - communicable state to the communicable state before the predetermined condition is satisfied, the state of the printer is changed from the second permitted state to the first permitted state. While the state of the printer is the second permitted state, if the communication state between the authentication server and the management server changes from the non - communicable state to the communicable state before the predetermined condition is satisfied, the third authentication information is not transmitted to the external device. The computer program according to claim 16.

18. A computer program for a printer used in a communication system including a printer, a management server, and an authentication server, wherein the computer program causes the computer of the printer to a first transition control unit that, when the communication state between the printer and the management server changes from the communicable state to the non - communicable state due to a problem with the management server, changes the state of the printer from the first permitted state in which printing is permitted to the first prohibited state in which printing is prohibited. The management server receives usage information regarding the usage amount of the printer from the printer and manages the usage information. The authentication server transmits first authentication information to an external device when the communication state between the management server and the authentication server is in the non - communicable state due to a problem with the management server; the first transition control unit; a first reception unit that receives an input of second authentication information from a user while the state of the printer is the first prohibited state; A second transition control unit that, when the input of the second authentication information is accepted and the second authentication information matches the first authentication information, changes the state of the printer from the first prohibited state to a second permitted state in which printing is allowed. A computer program that functions as such.

19. The computer program further causes the computer to A first authentication information receiving unit that receives the first authentication information from the authentication server, wherein the authentication server transmits the first authentication information to the printer when the communication state between the authentication server and the management server is in the communication impossible state due to a malfunction of the management server, and functions as the first authentication information receiving unit. The computer program according to claim 18, wherein the second transition control unit changes the state of the printer from the first prohibited state to the second permitted state when the input of the second authentication information is accepted and the second authentication information matches the received first authentication information.

20. The computer program further causes the computer to A printer-side determination unit that determines whether a predetermined condition is satisfied while the state of the printer is in the second permitted state, A third transition control unit that, when it is determined that the predetermined condition is satisfied, changes the state of the printer from the second permitted state to a second prohibited state in which printing is prohibited, and functions as The computer program according to claim 18 or 19, wherein the predetermined condition is satisfied when at least one of the following cases occurs: the usage amount of the printer in the second permitted state reaches a predetermined amount; and the duration of the second permitted state reaches a predetermined time.

21. The computer program further causes the computer to An authentication information request transmission unit that transmits an authentication information transmission request to the authentication server, which requests the transmission of new authentication information when it is determined that the predetermined condition is satisfied. When the authentication server receives the authentication information transmission request from the printer, the authentication server transmits third authentication information different from the first authentication information to the external device. The authentication information request transmission unit. A second reception unit that receives an input of fourth authentication information from a user while the state of the printer is the second prohibited state. A fourth transition control unit that, when the input of the fourth authentication information is received and the fourth authentication information matches the third authentication information, changes the state of the printer from the second prohibited state to a fourth allowable state in which printing is allowed. A computer program according to claim 20, which functions as.

22. The computer program further causes the computer to While the state of the printer is the second allowable state, before the predetermined condition is satisfied, when the communication state between the printer and the management server changes from the communication impossible state to the communication possible state, the state of the printer is changed from the second allowable state to the first allowable state. Function as a fifth transition control unit to shift to, While the state of the printer is the second allowable state, before the predetermined condition is satisfied, when the communication state between the printer and the management server changes from the communication impossible state to the communication possible state, the authentication information transmission request is not transmitted to the authentication server. The computer program according to claim 21.

23. The printer further Is provided with an operation unit, The first reception unit receives an input of the second authentication information from a user via the operation unit while the state of the printer is the first prohibited state. The computer program according to any one of claims 18 to 22.

24. A printer comprising the computer program according to any one of claims 18 to 23.

25. A method executed by a communication system including a printer, a management server, and an authentication server, a management step in which the management server receives usage information regarding the usage amount of the printer from the printer and manages the usage information; a first authentication information transmission step in which the authentication server transmits first authentication information to an external device when a communication state between the authentication server and the management server changes from a communicable state to a non-communicable state due to a malfunction of the management server; a first transition control step in which the printer changes the state of the printer from a first allowable state in which printing is allowed to a first prohibited state in which printing is prohibited when a communication state between the printer and the management server changes from a communicable state to a non-communicable state due to a malfunction of the management server; a first reception step in which the printer receives an input of second authentication information from a user while the state of the printer is the first prohibited state; a second transition control step in which the printer changes the state of the printer from the first prohibited state to a second allowable state in which printing is allowed when the input of the second authentication information is received and the second authentication information matches the first authentication information; A method comprising the above.

Images