Processing device with user authentication function and user authentication reception method

Abstract

To reduce an incorrect operation of an accidental login as another user in a quick login.SOLUTION: A processing device with a user authentication function, comprises: a user registration part that receives registration of terminal recognition information on a portable communication terminal as one individual information to be associated with a user; a storage device that stores individual information for each user; a user authentication part that performs authentication of a user in accordance with a selection by allowing a choice according to a registered user on a user authentication screen; a terminal information acquisition part that acquires the terminal recognition information on the portable communication terminal by performing a radio communication with the portable communication terminal carried by an approached user; and an approaching terminal determination part that determines whether or not the acquired terminal recognition information matches the terminal recognition information contained in the individual information on the approached user. The user authentication part allows a user choice of the approached user to be displayed on the user authentication screen in an aspect of a priority higher than the user choice of the other user in the case where the acquired terminal recognition information and the terminal recognition information on the approached user match each other.SELECTED DRAWING: Figure 10

Description

[Technical Field]

[0001] The present invention relates to a processing device with a user authentication function and a user authentication reception method that displays options related to registered users on a user authentication screen, receives a selection operation, and authenticates the selected registered user. [Background technology]

[0002] Some image processing devices operated by users, such as multifunction peripherals (also known as MFPs), have a user authentication function that sets available functions and preference adjustments for each registered user (also known as registered user or registered user), and manages usage history and charges. The same applies to processing devices that process not only images but also information, money, etc. When using a processing device for which user authentication has been set by an administrator, the user must log in and be authenticated when using the device. There are various methods of user authentication.

[0003] For example, methods that require users to enter a unique number assigned by an administrator, methods that require users to use a unique login name and password, and methods that require users to use IC cards have been well known. In recent years, biometric authentication methods using fingerprints, irises, or faces have also become available. However, for example, there are cases where image processing devices are installed in environments where strict security checks are required even to enter the room or building where they are installed. Or, there are cases where image processing devices are installed in small offices shared by a limited number of people who know each other. Users of such image processing devices, in particular, tend to want user authentication to be as simple as possible. There is also a user need for frequently used functions and preferred adjustments to be switchable for each user, but for this to be done with simple operations.

[0004] One method that meets such user needs is a method in which user authentication is performed by tapping an icon that is set in advance for each user. This method of user authentication by selecting an icon is referred to as quick login in this specification. To perform user authentication using quick login, user information is associated with and registered as an icon to be displayed as an operation target on the user authentication screen. Users who feel uneasy about security by simply selecting an icon may associate a password or the like with their icon and be prompted to enter the password after selecting the icon. On the other hand, users who do not need to enter a password can complete login by selecting an icon, and become able to use the image processing device.

[0005] Meanwhile, a method of storing and printing, such as that disclosed in Patent Document 1, is widely known for the purpose of preventing information leakage due to mishandling or leaving printed materials unattended. With storing and printing, a quick login user authentication screen is displayed on the operation unit of the image processing device when starting printing. This is also true for copy jobs and scan jobs. Patent Document 1 proposes the following technology for a simple user authentication method in which a list of registered user identification information is displayed on a user authentication screen, and the user selects one of the registered user identification information to log in. This technology relates to stored printing, in which documents sent from an external device such as a PC are not printed immediately upon reception, but are temporarily stored on a hard disk inside the MFP, and the user logs in via the MFP's touch panel to start printing. The user identification information of the user who instructed the PC to input a document is displayed on the user authentication screen in priority over other users (see, for example, Patent Document 1). [Prior art documents] [Patent documents]

[0006] [Patent Document 1] Japanese Patent Application Publication No. 2017-019197 Summary of the Invention [Problem to be solved by the invention]

[0007] While quick login simplifies user authentication, it also necessitates the risk of accidentally selecting a different user if no password is required. For example, if a user who is set to use color scanning accidentally selects and logs in as a user who is set to use black-and-white scanning, a black-and-white scan may actually be performed when intended to perform a color scan. Furthermore, when sending a command to store and print document data from an external device such as a PC to an image processing device, if the command includes user identification information and the user accidentally selects and logs in as a different user to start printing on the image processing device, the document data that was supposed to be sent to the image processing device may be lost, resulting in a complaint that the PC or image processing device has lost the data. The present invention has been made in consideration of the above circumstances, and provides a method for reducing the number of erroneous operations that result in unintentional logging in as another user during quick login. [Means for solving the problem]

[0008] The present invention provides a processing device with user authentication function, comprising: a user registration unit that accepts registration of terminal identification information of a mobile communication terminal as one of the personal information linked to a user and the user; a storage device that stores the personal information for each user; a user authentication unit that displays options related to registered users on a user authentication screen and authenticates the registered user in accordance with a selection operation; a terminal information acquisition unit that wirelessly communicates with a mobile communication terminal carried by a nearby user to acquire the terminal identification information of the mobile communication terminal; and a nearby terminal determination unit that determines whether the terminal identification information acquired by the terminal information acquisition unit matches the terminal identification information included in the personal information of the nearby user, wherein if the terminal identification information acquired by the terminal information acquisition unit matches the terminal identification information included in the personal information of the nearby user, the user authentication unit displays the user options of the nearby user on the user authentication screen with a higher priority than the user options of other users.

[0009] From a different perspective, the present invention provides a user authentication reception method comprising the steps of: a processor accepting registration of a user and terminal identification information of a mobile communication terminal as one piece of personal information linked to that user, and storing the registration in a storage device; a step of displaying options related to the registered user on a user authentication screen and authenticating the registered user in response to a selection operation; a step of wirelessly communicating with a mobile communication terminal carried by a nearby user to acquire terminal identification information of the mobile communication terminal; a step of determining whether the terminal identification information acquired by the terminal information acquisition unit matches the terminal identification information included in the personal information of the nearby user; and a step of, if the terminal identification information acquired by the terminal information acquisition unit matches the terminal identification information included in the personal information of the nearby user, displaying the user options of the nearby user in a manner with a higher priority than user options of other users. [Effects of the Invention]

[0010] In the processing device of this invention, if the terminal identification information acquired by the terminal information acquisition unit matches the terminal identification information included in the individual information of a nearby user, the user authentication unit displays the nearby user's user options on the user authentication screen with a higher priority than the user options of other users, thereby reducing the chance of unintentionally logging in as another user. The user authentication reception method according to the present invention also achieves the same effects. [Brief explanation of the drawings]

[0011] [Figure 1] 1 is an explanatory diagram showing a configuration example of a multifunction peripheral that is one aspect of a processing device in a first embodiment. [Figure 2] 2 is an external perspective view showing a portion of the multifunction peripheral shown in FIG. 1 that is involved in user authentication operations. [Figure 3] 10 is an explanatory diagram showing an example of a user authentication screen that the control unit causes the display device to display when a nearby mobile terminal is not detected in this embodiment. FIG. [Figure 4] 10A and 10B are explanatory diagrams showing different examples of a user authentication screen that the control unit causes the display device to display when a nearby portable terminal is not detected in this embodiment. [Figure 5] 10 is an explanatory diagram showing an example of a dialog box that the control unit displays on the display device during user registration in this embodiment. FIG. [Figure 6] 1 is a first flowchart showing the procedure of a process relating to user authentication executed by a control unit in this embodiment. [Figure 7] 10 is a second flowchart showing the procedure of the process relating to user authentication executed by the control unit in this embodiment. [Figure 8] 10 is an explanatory diagram showing an example of a message dialog that the control unit displays on the display device when no nearby mobile terminal is detected in this embodiment. FIG. [Figure 9]10A and 10B are explanatory diagrams showing different examples of a message dialog that the control unit causes the display device to display when no nearby mobile terminal is detected in this embodiment. [Figure 10] 10 is an explanatory diagram showing an example of a user authentication screen that the control unit causes the display device to display when a nearby portable terminal is detected in this embodiment. FIG. [Figure 11] 12 is an explanatory diagram showing an example of a message dialog that is displayed by the control unit when an icon that is not displayed with priority is selected on the user authentication screen of FIG. 11. FIG. [Figure 12] FIG. 11 is an explanatory diagram showing an example of a user authentication screen that the control unit causes the display device to display when a nearby portable terminal is detected in the second embodiment. [Figure 13] FIG. 11 is an explanatory diagram showing another example of a user authentication screen that the control unit causes the display device to display when a nearby portable terminal is detected in the second embodiment. [Figure 14] FIG. 11 is an explanatory diagram showing an example of a user authentication screen that the control unit causes the display device to display when a nearby portable terminal is detected in the third embodiment. [Figure 15] 10 is a flowchart corresponding to FIG. 6, showing the procedure of a process relating to user authentication executed by a control unit in the fourth embodiment. [Figure 16] FIG. 13 is an explanatory diagram showing an example of a message dialog that is displayed by the control unit when an unregistered mobile terminal is detected in the fourth embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0012] The present invention will be described in more detail below with reference to the accompanying drawings. Note that the following description is given by way of example only in all respects and should not be construed as limiting the present invention. (Embodiment 1) <<Example of a multifunction device configuration>> 1 is an explanatory diagram showing an example of the configuration of a multifunction peripheral, which is one aspect of the processing device of the present invention, in this embodiment. As shown in Fig. 1, a multifunction peripheral 10 according to this embodiment includes an image processing device 13, a document transport device 15 that transports documents, a document reading device 17 that reads documents, and a printing device 19. It also includes a storage device 32 and a communication circuit 34.

[0013] The image processing device 13 includes a display device 30D such as a liquid crystal display device or an OLED (Organic Light Emitting Display), and an input detection device 30I such as a touch panel. The display device 30D presents information related to the status of the multifunction peripheral 10 and the processes being executed to the user of the multifunction peripheral 10. A user authentication screen for quick login, which will be described later, is one example of the information presented. The input detection device 30I accepts user operations. Document transport device 15 transports a document to document reading device 17. Document reading device 17 reads the document and generates image data. Printing device 19 performs printing based on the image data. In FIG. 1, document transport device 15, document reading device 17, and printing device 19 are considered to belong to image processing device 13 because they are all related to image processing.

[0014] The control unit 20 is mainly composed of a processor and memory as hardware resources, and the processor executes a processing program stored in the memory to control the above-mentioned elements that make up the multifunction device 10. The control unit 20 includes a user registration unit 20R, a user authentication unit 20A, a process execution unit 20P, a terminal information acquisition unit 20T, and a nearby terminal determination unit 20N. The user registration unit 20R performs a process of accepting and managing the registration of users who are authorized to use the multifunction device 10.

[0015] The user authentication unit 20A performs a process of user authentication when using the multifunction device 10. In this embodiment, user authentication using a quick log-in method will be described. The processing execution unit 20P controls the image processing device 13, the storage device 32, and the communication circuit 34 to execute processing related to user operations accepted via the input detection device 30I of the operation unit 30. The processing execution unit 20P executes image-related processing such as a scanner job for reading an original and outputting image data, a printer job for printing, or a copy job.

[0016] The terminal information acquisition unit 20T acquires terminal identification information unique to a mobile terminal by communicating with a mobile communication terminal (hereinafter simply referred to as a mobile terminal) located in the vicinity of the multifunction device 10. In this embodiment, communication with the nearby mobile terminal is performed using Bluetooth (registered trademark). The nearby terminal determination unit 20N determines whether the terminal identification information acquired from a nearby mobile terminal through Bluetooth communication matches the terminal identification information stored as individual information of a registered user in the storage device 32 described later.

[0017] The storage device 32 stores image data of the scanned document, data relating to the user registered by the user registration unit 20R (individual information 32U), and data relating to the processing of the control unit 20. The communication circuit 34 is a circuit that communicates with an external device such as a PC (Personal Computer) that provides print data related to a print job. The communication circuit 34 in this embodiment includes Bluetooth communication for communicating with a nearby mobile terminal.

[0018] <Quick login and advance user registration> The basis of user authentication according to this embodiment and the registered users that are the prerequisites for it will first be described. In this embodiment, the multifunction device 10 is used by a registered user. To determine whether or not a user is authorized to use the multifunction device 10, the user authentication unit 20A performs user authentication using a quick login method. As a prerequisite for using the multifunction device 10 that performs user authentication by quick login, each user must register themselves in the multifunction device 10. This is so that they can be displayed as an option on the screen (user authentication screen) on which the quick login operation is performed.

[0019] FIG. 3 is an explanatory diagram showing an example of a user authentication screen that the user authentication unit 20A displays on the display device 30D. In the example of FIG. 3, the user authentication unit 20A displays user icons corresponding to each registered user in a vertical and horizontal matrix on the user authentication screen 54 as options for the registered users. For example, when the user icon 56 corresponding to registered user AAA is touched, the user authentication unit 20A performs a process to authenticate the registered user AAA in response to the touch. Note that if there are too many registered users to fit all the user icons on one screen, the user authentication unit 20A displays arrow keys 57 as shown in FIG. 3. When the arrow keys 57 are touched, the user authentication unit 20A switches the user icon displayed on the user authentication screen 54 to another user icon that does not fit on the screen in response to the touch. After that, until a logout operation is performed, the control unit 20 causes the display device 30D to display a screen based on the individual information 32U associated with the registered user AAA. In addition, the operation unit 30 accepts the operation received as an operation by the registered user AAA and executes processing.

[0020] FIG. 4 shows an example of a user authentication screen in a different manner from that shown in FIG. 3. In FIG. 3, a list of user icons is used as a selection option for accepting selections related to registered users. In contrast, the user authentication screen 58 shown in FIG. 4 shows a selection option for accepting selections related to registered users, in place of user icons, as a list of registered user names. The user names (AAA, BBB, CCC, ...) displayed in the user list 60 shown in FIG. 4 correspond to the user names displayed below the user icons shown in FIG. 3. The following description will be continued using the mode in which user icons are selected as an option as a representative example, but the same applies to other modes.

[0021] The user registration unit 20R accepts operations related to user registration and performs registration processing. The user performing registration, while carrying his / her mobile terminal 40, performs a predetermined operation on the operation unit 30 of the multifunction peripheral 10, causing a user registration screen (not shown) to be displayed on the display device 30D. The information required for registration is entered as individual information on the user registration screen. Furthermore, pairing processing related to Bluetooth communication is performed. Figure 5 shows an example of a dialog that the user registration unit 20R displays on the display device 30D during pairing. As shown in FIG. 5, the user registration unit 20R displays a user registration dialog 50 showing the user's individual information entered on the user registration screen (in the example shown in FIG. 5, a user icon 55, a login name, and an email address). Furthermore, the user registration dialog 52 displays the contents of the terminal identification information related to the mobile terminal 40 to be registered as the individual information, and requests confirmation. In the example shown in FIG. 5, the brand name, model name, and MAC address of the mobile terminal 40 are used as the terminal identification information. This information is acquired from the mobile terminal 40 via Bluetooth communication.

[0022] When it recognizes that the [OK] key on the user registration dialog 52 has been touched, the user registration unit 20R stores the terminal identification information in the storage device 32 as individual information 32U relating to the registered user, together with other information entered on the user registration screen. After user registration is completed as described above, when the mobile terminal 40 of the registered user approaches the multifunction device 10, the terminal information acquisition unit 20T recognizes the proximity of the mobile terminal 40 and acquires the terminal identification information. The nearby terminal determination unit 20N determines that the terminal identification information acquired from the mobile terminal 40 relates to the registered user. Based on this determination, the user authentication unit 20A preferentially displays options related to the registered user on the user authentication screen.

[0023] <User authentication by quick login> Assuming that the user has been registered as described above, the process of user authentication by quick login executed by the control unit 20 in this embodiment will be described with reference to a flowchart. 6 and 7 are flowcharts showing the procedure of the process relating to user authentication executed by the control unit 20 in this embodiment.

[0024] 6, the control unit 20, functioning as the terminal information acquisition unit 20T, searches for a nearby mobile terminal emitting radio waves via Bluetooth communication (step S11). If a nearby mobile terminal emitting radio waves is found (Yes in step S13), the control unit 20 performs Bluetooth communication with the mobile terminal to acquire terminal identification information. Then, the control unit 20, functioning as the nearby terminal determination unit 20N, checks whether matching terminal identification information is registered in the individual information 32U of registered users stored in the storage device 32 (step S15).

[0025] If the terminal identification information acquired through Bluetooth communication matches any of the terminal identification information stored as individual information 32U (Yes in step S17), the control unit 20 as the proximity terminal determination unit 20N identifies a registered user associated with the matching terminal identification information (step S19), and stores information indicating that the identified registered user should be displayed preferentially on a user authentication screen displayed in step S41 of Fig. 7 (to be described later) (step S21). If it is determined in step S13 that there is no mobile terminal emitting radio waves (No in step S13), the control unit 20 as the user authentication unit 20A determines whether or not the setting allows quick login when no mobile terminal related to a registered user is detected (step S25).

[0026] If it is determined in step S17 that the terminal identification information acquired through Bluetooth communication does not match any of the terminal identification information of registered users (No in step S17), it is also determined whether or not the setting allows quick login when a mobile terminal of a registered user is not detected (step S25). It is assumed that the setting is configured in advance by the administrator of the multifunction device 10. If the setting is such that quick login is permitted when a mobile device related to a registered user is not detected (Yes in step S25), the control unit 20 as the user authentication unit 20A proceeds to step S27. In step S27, the control unit 20 inquires of the user whether or not quick login is permitted when a mobile device related to a registered user is not detected.

[0027] 8 shows an example of a message dialog 62 that asks the user whether to allow quick login when a mobile device related to a registered user is not detected. When the [Continue] key is operated in the message dialog 62, the control unit 20, functioning as the user authentication unit 20A, continues user authentication. Then, when displaying a user authentication screen in step S41 of FIG. 7 (described later), the control unit 20 stores the fact that there are no registered users to be displayed preferentially (step S29). Thereafter, the control unit 20 proceeds to the process of step S41 of FIG. 7 and displays the user authentication screen on the display device 30D. When the [Retry] key is operated in the message dialog 62 of FIG. 8, the control unit 20 functioning as the user authentication unit 20A returns the process to step S11 and starts the user authentication procedure over again from the beginning.

[0028] If the determination in step S25 above indicates that quick login is not permitted when a mobile device related to a registered user is not detected (No in step S25), the control unit 20 functioning as the user authentication unit 20A proceeds to step S31. In step S31, the control unit 20 displays a message on the display device 30D instructing the user to redo the quick login operation with a registered mobile device, prompting the user to confirm. Figure 9 shows an example of a message dialog that the control unit functioning as the user authentication unit 20A displays in step S31.

[0029] Assume that the user brings the mobile terminal close to the multifunction device 10 so that the mobile terminal is detected via Bluetooth communication, and then operates the [Continue] key in the message dialog 64 shown in Fig. 9. In this case, the control unit 20 functioning as the user authentication unit 20A advances the process to step S41 in Fig. 7, and displays a user authentication screen on the display device 30D. If the [Retry] key is operated in the message dialog 64 of FIG. 9, the control unit 20 functioning as the user authentication unit 20A returns the process to step S11 and starts the user authentication procedure over again from the beginning.

[0030] In step S41 shown in FIG. 7, the control unit functioning as the user authentication unit 20A causes the display device 30D to display a user authentication screen for quick login. 10 shows an example of a user authentication screen when a portable terminal 40 related to a registered user is detected in a position close to the multifunction device 10. The user authentication screen 66 shown in Fig. 10 displays user icons in two rows, an upper row and a lower row. The two user icons 68 in the upper row are related to registered users GGG and AAA, and show a state in which portable terminals matching the terminal identification information registered as the individual information of these users are located in a position close to the multifunction device 10.

[0031] In contrast, the five user icons 70 in the bottom row all relate to registered users, but no mobile devices matching the device identification information associated with those users have been detected. That is, the control unit 20, functioning as the user authentication unit 20A, displays user icons relating to registered users whose nearby mobile devices have been detected in the top row, and user icons relating to registered users whose mobile devices have not been detected in the bottom row. The user icons displayed in the top row are the user icons displayed with priority. If no mobile terminals related to registered users are detected, the user icons of registered users are displayed in a vertical and horizontal matrix, without being separated into upper and lower rows, as in the user authentication screen 54 shown in Fig. 3, instead of the user authentication screen 66 shown in Fig. 10. In other words, the user icons are displayed in a manner that does not prioritize display. In Fig. 10, the user icons are displayed in a horizontal row in the lower row, rather than vertically and horizontally, but they may also be displayed in a matrix, as in Fig. 3. Furthermore, the user icons in the upper row may be displayed in a size, density, color, etc. different from the user icons in the lower row, and the size, density, color, etc. may be changed over time. 10, the icons of registered users GGG and AAA, whose mobile terminals corresponding to the registered terminal identification information are located close to each other, are displayed in the upper row at the same size. Alternatively, the icon of the registered user whose mobile terminal is located closer to the registered user may be displayed larger than the icons in the upper row.

[0032] The user authentication screen is displayed, and user authentication unit 20A waits for a user icon to be selected (step S43). When a user icon is selected, a process for authenticating the selected registered user is performed (step S45), and the process relating to user authentication is terminated. 10, even if there is a user icon 68 that is displayed with priority, it is possible that one of the non-priority user icons 70 is selected. In this case, the control unit 20 as the user authentication unit 20A may request confirmation from the user to ensure that the selection is correct. FIG. 11 shows an example of a dialog message that requests confirmation from the user when a user icon that is not displayed with priority is selected.

[0033] 11 shows a message dialog 72 that appears when the user icon of registered user HHH, who is not being displayed preferentially, is selected even though the user icon of registered user AAA associated with a nearby mobile terminal is being displayed preferentially. When the [Continue] key in the message dialog 72 is operated, the control unit 20, functioning as the user authentication unit 20A, determines that the selection of registered user HHH was made at the user's discretion and authenticates the selected user HHH. On the other hand, if the [Retry] key on the message dialog 72 is operated, the control unit 20 as the user authentication unit 20A returns the display to the original user authentication screen, assuming that no selection was made by the user HHH, and accepts a new selection.

[0034] (Embodiment 2) The user authentication screen 66 shown in Fig. 10 displays the prioritized user icon in the upper row and the other user icons in the lower row. It can be said that the arrangement of the user icons indicates the difference in priority. The priority display mode is not limited to this mode. Fig. 12 shows different priority display modes on the user authentication screen. On the user authentication screen 74 shown in Fig. 12, the user authentication unit 20A displays user icons 76 relating to registered users AAA through KKK arranged vertically and horizontally in a matrix. At the same time, the user icon 76 of registered user AAA, which has the highest priority, is displayed to the right of the user icons arranged in the matrix.

[0035] The user icon for the highest priority registered user AAA is displayed in a different position from the user icons arranged in the matrix, overlapping them. Furthermore, the size of the highest priority user icon 76 is displayed larger than the user icons arranged in the matrix. Among the user icons arranged in the matrix, there is one that is displayed larger than the other user icons. This is the user icon 78 for registered user GGG. The large user icon 78 indicates that registered user GGG has the second highest priority after registered user AAA.

[0036] As in the user authentication screen 74, a mode in which priority display is indicated by different sizes of user icons is also possible. The example shown in FIG. 12 corresponds to a state in which nearby mobile devices associated with registered users AAA and GGG have been detected. This corresponds to a case in which the nearby device determination unit 20N determines that the strength of the radio waves received from the mobile device associated with registered user AAA is stronger than the strength of the radio waves received from the mobile device associated with registered user GGG. The control unit 20, functioning as the user authentication unit 20A, determines that the mobile device with the stronger received radio waves is in a closer location, and displays the user icon 76 associated with registered user AAA with the highest priority, and the user icon 78 associated with registered user GGG with the next highest priority. As shown in FIG. 12, by displaying the user icon to be displayed with priority and the other user icons in different sizes, the user icon to be displayed with priority is presented to the user in a manner that makes it easier for the user to select it. Furthermore, there may be an embodiment in which the size of a user icon varies depending on the priority. For example, the control unit 20 as the user authentication unit 20A displays the user icon 76 for registered user AAA at a larger size than the user icon 78 for registered user GGG. Furthermore, the control unit 20 displays the user icon 78 for registered user GGG at a larger size than a user icon displayed at a normal size. That is, not only are the user icons 76 and 78 for registered users AAA and GGG both displayed at a larger size than the normal size, but the user icon 76 for registered user AAA is also displayed at a larger size than the user icon 78 for registered user GGG. This allows the user icons to be displayed preferentially to be presented to the user in a manner that makes them even easier to select in order of priority.

[0037] Figure 13 shows yet another mode of priority display on the user authentication screen. The arrangement of user icons on the user authentication screen 80 shown in Figure 13 is the same as that shown in Figure 12. What differs from Figure 12 is that the density of user icons that are not displayed as a priority is displayed lighter than that of user icons that are displayed as a priority. As shown in Figure 13, by displaying the priority display and other user icons with a difference in density, the user icon that is displayed as a priority is presented to the user in a mode that makes it easier for the user to select it. FIG. 13 shows an example in which the priority display and other user icons are displayed with different densities, but a mode in which the icons are displayed with different colors instead of different densities is also possible. Furthermore, instead of just keeping the user icon at a fixed position, size, density, and color, at least one of these may be changed over time, making the priority display more noticeable.

[0038] (Embodiment 3) In this embodiment, a preferred display mode on the user authentication screen will be described, assuming that not only the distance to the mobile terminal but also the approximate direction can be detected by Bluetooth communication with the mobile terminal. Figure 14 shows different modes of priority display on the user authentication screen. On the user authentication screen 82 shown in Figure 14, the control unit 20, functioning as the user authentication unit 20A, displays user icons 76 for registered users AAA through KKK in a vertical and horizontal matrix. At the same time, the user icon 84 for registered user GGG, whose mobile terminal has been detected, and the user icon 86 for AAA are displayed as priority icons superimposed on the user icons arranged in the matrix. The user icons 84 and 86 that are displayed as priority icons are displayed in a layout that corresponds to the approximate direction and distance of each mobile terminal.

[0039] For example, Bluetooth 5.1 provides a direction detection function that makes it possible to detect the direction of a communication device. By applying this direction detection function, a user authentication screen 82 shown in FIG. 14 can be realized. In this way, when a plurality of nearby portable communication terminals are detected, user icons are arranged according to their respective distances and directions, thereby reducing the erroneous operation of selecting another user icon that is preferentially displayed.

[0040] (Fourth embodiment) In this embodiment, when a mobile terminal that does not belong to a registered user is detected at the stage where the user authentication screen is displayed and a selection is awaited, the user is provided with the option of inquiring as to whether or not to update the terminal identification information of one of the registered users using the terminal identification information of the detected mobile terminal. Fig. 15 is a flowchart showing the flow of processing in this embodiment, replacing Fig. 7. The same processes as in Fig. 7 are denoted by the same reference numerals. The control unit 20 functioning as the user authentication unit 20A displays, for example, a user authentication screen shown in FIG. 10 on the display device 30D (step S41 shown in FIG. 15), and waits for a selection of any user icon (step S43).

[0041] If any user icon is selected (Yes in step S43), the process is the same as that described in FIG. 7, and the control unit 20 authenticates the selected registered user (step S45) and ends the process. On the other hand, while waiting for the selection of a user icon in step S43, if the terminal information acquisition unit 20T detects a nearby mobile terminal and the nearby terminal determination unit 20N determines that the mobile terminal is not related to a registered user, the control unit 20 performs the following processing. The control unit 20 functioning as the user authentication unit 20A displays a message dialog 88 shown in FIG. 16 on the display device 30D, and asks whether or not to update the terminal identification information of any registered user (step S47 after No in step S43).

[0042] If the [No] key is pressed in response to the inquiry in the message dialog 88, "An unregistered mobile device has been detected. Do you want to update the terminal identification information?" (No in step S47), the control unit 20 returns the processing to step S43 and waits for the selection of a user icon. On the other hand, if the [Yes] key is pressed in response to the inquiry in the message dialog 88 (Yes in step S47), the control unit 20 as the user authentication unit 20A accepts the selection of the registered user whose terminal identification information is to be updated. The selection of the registered user whose terminal identification information is to be updated is performed by user authentication that is stricter than quick login (step S49). For example, the user authentication is performed using the login name or email address shown in the user registration dialog 50 in FIG. 5 and a password (not shown) unique to the registered user.

[0043] If the user authentication is successful (Yes in step S51), the control unit 20 functioning as the user authentication unit 20A displays a screen on the display device 30D to confirm the contents of the terminal identification information to be updated and the updated terminal identification information (step S53). The contents are similar to the user registration dialog 52 shown in FIG. 5. When the [OK] key is pressed in the dialog box to continue the update process (Yes in step S55), the control unit 20 as the user registration unit 20R updates the terminal identification information of the registered user (step S57), and then authenticates the registered user (step S45), terminating the process. If user authentication fails when updating the terminal identification information (No in step S51) or if the Cancel key is pressed in the update confirmation dialog (No in step S55), the control unit 20 returns the process to step S43 and waits for the selection of a user icon.

[0044] As mentioned above, (i) A processing device according to the present invention comprises a user registration unit that accepts registration of a user and terminal identification information of a mobile communication terminal as one piece of personal information linked to that user; a storage device that stores the personal information for each user; a user authentication unit that displays options related to registered users on a user authentication screen and authenticates the registered user in accordance with a selection operation; a terminal information acquisition unit that wirelessly communicates with a mobile communication terminal carried by a nearby user to acquire terminal identification information of the mobile communication terminal; and a nearby terminal determination unit that determines whether the terminal identification information acquired by the terminal information acquisition unit matches the terminal identification information included in the personal information of the nearby user, wherein, when the terminal identification information acquired by the terminal information acquisition unit matches the terminal identification information included in the personal information of the nearby user, the user authentication unit displays the user options of the nearby user on the user authentication screen with a higher priority than the user options of other users.

[0045] In this invention, the user registration unit, user authentication unit, terminal information acquisition unit, and proximity terminal determination unit perform processing related to their respective functions. Specific configurations include, for example, hardware circuits centered around a processor and memory, and processing programs stored in the memory. In other words, each function is realized by the hardware resources of the processor and memory working together with the software of the processing program.

[0046] The memory may or may not be the same as the storage device described above. The storage device stores information such as the attributes of registered users and settings associated with those users. Specific examples of such a storage device include a hard disk drive (HDD) and a solid state drive (SSD). Furthermore, the user authentication screen is one of the screens displayed on a display device such as a liquid crystal display device when the processing device has a display device, and is displayed on the display device when authenticating a user who uses the processing device.

[0047] The user authentication unit displays options related to registered users on the user authentication screen. The options displayed on the user authentication screen are selected by registered users to perform authentication. Specific examples of these options include icons displayed on a dot matrix screen. When a user is authenticated by the user authentication unit, the processing device applies individual information associated with the authenticated user (authenticated user) to respond to the user's operations and perform processing. That is, from the time of user authentication (login) to logout, the processing device accepts operations and executes processing in a manner customized for the authenticated user. The content of the individual information varies depending on the processing performed by the processing device. Taking a multifunction peripheral as an example, the functions available to the authenticated user may be set by an administrator, and the authenticated user may be set to frequently used functions or easy-to-use settings as the initial state. Furthermore, a usage history including billing information may be recorded, and power-saving operations, billing processing, etc. may be performed based on the record.

[0048] A mobile communication terminal is a communication terminal carried by a user. Specific examples of such a terminal include mobile terminals such as smartphones, and wearable terminals such as smart watches and smart glasses. Furthermore, Bluetooth is a typical example of wireless communication between nearby mobile communication terminals. However, the communication method is not limited to this. For example, wireless communication methods such as NFC (Near Field Communication) and RFID (Radio Frequency Identifier) ​​can also be applied. However, if the communication range is too wide, communication may occur with mobile communication terminals that are not located close to the processing device, so it is preferable that the communication distance be limited to approximately 10 meters or less. This communication range is based on the operation unit where the processing device accepts user operations. On the other hand, if the communication distance is too short, it may be impossible to communicate with the mobile communication terminal carried by the user operating the processing device. Therefore, it is preferable that the communication distance be at least 1 meter or more.

[0049] The terminal identification information is not particularly limited as long as it can identify the mobile communication terminal. Specific examples of the terminal identification information include the MAC address and the terminal identification number (IMEI) of the mobile communication terminal. The processing device may be any device that executes processing based on user operations. Specific examples of such a device include image processing devices such as multifunction peripherals. The multifunction peripherals in the above-described embodiments correspond to the processing device of the present invention.

[0050] Further, preferred embodiments of the present invention will be described. (ii) The user authentication unit may express the difference in priority by using at least one of the layout, size, shading, color, and variations thereof of the user options displayed on the user authentication screen. In this way, the user operating the user authentication screen can easily recognize the user options with high priority and the user options with low priority.

[0051] (iii) When there are multiple users in close proximity, the user authentication unit may acquire terminal identification information from the mobile communication terminal carried by each user using the terminal information acquisition unit, and may display, on the user authentication screen, user options of a user carrying a mobile communication terminal having terminal identification information that matches any of the terminal identification information registered by the user registration unit, in a higher priority mode. In this way, when mobile communication terminals of multiple registered users are located close to the processing device, the options of the users located closer to the processing device can be displayed with higher priority, making them easier to identify. The distance (distance) from the mobile communication terminal can be determined, for example, based on the received signal strength of wireless communication with the mobile communication terminal. Since the user operating the processing device is assumed to be the user located closest, even when multiple mobile communication terminals are located close to each other, it is possible to reduce the risk of erroneous operation of logging in as another user.

[0052] (iv) The proximity terminal determination unit may be capable of detecting the distance and direction of a mobile communication terminal carried by a nearby user through wireless communication with the mobile communication terminal, and when there are multiple nearby users, the user authentication unit may acquire terminal identification information from the mobile communication terminal carried by each user using the terminal information acquisition unit, and display user options for users carrying mobile communication terminals having terminal identification information that matches any of the terminal identification information registered by the user registration unit from the acquired terminal identification information on the user authentication screen in an arrangement according to the distance and direction detected by the proximity terminal determination unit. In this way, when mobile communication terminals of multiple registered users are located close to the processing device, the mobile communication terminals can be displayed on the user authentication screen in an arrangement according to the distance and direction of each mobile communication terminal, thereby reducing the chance of logging in as another user even when multiple mobile communication terminals are located close to each other.

[0053] (v) When a user option of a user with a low priority is selected while user options of nearby users are preferentially displayed, the user authentication unit may issue a notification prompting confirmation. It is assumed that the user operating the processing device is the user located closest to the processing device. According to this aspect, by prompting the user to confirm if there is a possibility that a user option with a low priority has been mistakenly selected, it is possible to reduce the number of erroneous operations in which the user logs in as another user.

[0054] (vi) If the nearby terminal determination unit determines that the terminal identification information acquired by the terminal information acquisition unit does not match any of the terminal identification information registered by the user registration unit, the user registration unit may provide an option to start an operation to update any of the registered terminal identification information. In this way, when the mobile communication terminal of a registered user is changed due to a change in model or the like, the operation to update the registered terminal identification information can be easily initiated.

[0055] (vii) One aspect of the present invention includes a user authentication reception method comprising the steps of: a processor accepting registration of a user and terminal identification information of a mobile communication terminal as one piece of personal information linked to the user and storing the information in a storage device; a processor displaying options related to the registered user on a user authentication screen and authenticating the registered user in response to a selection operation; a processor wirelessly communicating with a mobile communication terminal carried by a nearby user to acquire terminal identification information of the mobile communication terminal; a processor determining whether the terminal identification information acquired by the terminal information acquisition unit matches the terminal identification information included in the personal information of the nearby user; and a processor displaying the user options of the nearby user in a manner with a higher priority than the user options of other users if the terminal identification information acquired by the terminal information acquisition unit matches the terminal identification information included in the personal information of the nearby user.

[0056] The aspects of the present invention also include combinations of any of the above-described aspects. In addition to the above-described embodiment, various modifications of the present invention are possible. These modifications should not be interpreted as not falling within the scope of the present invention. The present invention should include all modifications within the scope of the claims and their equivalents. [Explanation of symbols]

[0057] 10: Multifunction device, 13: Image processing device, 15: Document transport device, 17: Document reading device, 19: Printing device, 20: Control unit, 20A: User authentication unit, 20N: Proximate terminal determination unit, 20P: Processing execution unit, 20R: User registration unit, 20T: Terminal information acquisition unit, 30: Operation unit, 30D: Display device, 30I: Input detection device, 32: Storage device, 32U: Individual information, 34: Communication circuit, 40: Portable terminal 50,52: User registration dialog, 54,58,66,74,80,82: User authentication screen, 55,56,68,70,76,78,84,86: User icon, 57: Arrow keys, 60: User list, 62,64,72,88: Message dialog

Claims

1. a user registration unit that accepts input of individual information including terminal identification information of the mobile communication terminal as information unique to the user, and registers the accepted individual information in association with the user; a storage device for storing the individual information for each user; a user authentication unit that displays options related to registered users registered by the user registration unit on a user authentication screen and accepts a selection from the options or accepts input of unique information of the user to authenticate the user; a terminal information acquisition unit that acquires terminal identification information of a mobile communication terminal carried by a nearby user through wireless communication; a nearby terminal determination unit that determines whether the terminal identification information acquired by the terminal information acquisition unit matches the terminal identification information included in the individual information of the nearby user; The processing device with user authentication function, wherein the user authentication unit, when the terminal identification information acquired by the terminal information acquisition unit matches the terminal identification information included in the individual information of the nearby user, displays the user options of the nearby user on the user authentication screen in a manner that gives the user options of the nearby user a higher priority than the user options of other users.

2. 2. The processing device according to claim 1, wherein the user authentication unit indicates the difference in priority by using at least one of a layout, size, shading, color, and variations thereof of the user options displayed on the user authentication screen.

3. The processing device according to claim 1, wherein when there are multiple users in close proximity, the user authentication unit acquires terminal identification information from the mobile communication terminal carried by each user using the terminal information acquisition unit, and displays user options of a user carrying a mobile communication terminal having terminal identification information that matches any of the terminal identification information registered by the user registration unit on the user authentication screen in a higher priority mode.

4. the proximity terminal determination unit is capable of wirelessly communicating with a mobile communication terminal carried by a nearby user to detect the distance and direction of the mobile communication terminal; 2. The processing device according to claim 1, wherein, when there are multiple users in close proximity, the user authentication unit acquires terminal identification information from the mobile communication terminal carried by each user using the terminal information acquisition unit, and displays user options for a user carrying a mobile communication terminal having terminal identification information that matches any of the terminal identification information registered by the user registration unit among the acquired terminal identification information on the user authentication screen in an arrangement according to the distance and direction from the nearby terminal determination unit detected by the nearby terminal determination unit.

5. The processing device according to claim 1 , wherein the user authentication unit issues a notification prompting confirmation when a user option of another user is selected while user options of nearby users are preferentially displayed.

6. 2. The processing device according to claim 1, wherein, when the proximity terminal determination unit determines that the terminal identification information acquired by the terminal information acquisition unit does not match any of the terminal identification information registered by the user registration unit, the user registration unit provides an option to start an operation to update any of the registered terminal identification information.

7. The processor: a step of accepting input of individual information including terminal identification information of the mobile communication terminal as information unique to the user, and registering the accepted individual information in association with the user; a step of displaying options related to the registered user registered by the registration step on a user authentication screen and accepting a selection of the option or accepting input of unique information of the user to authenticate the user; A terminal of a mobile communication terminal carried by a nearby user is wirelessly communicated with the mobile communication terminal. obtaining identification information; a step of determining whether the terminal identification information acquired in the step of acquiring the terminal identification information matches the terminal identification information included in the individual information of the nearby user; and if the terminal identification information acquired by the step of acquiring the terminal identification information matches the terminal identification information included in the personal information of the nearby user, displaying the user options of the nearby user in a manner with a higher priority than the user options of other users.

Images