Information processing device, information processing system, and information processing program

Abstract

To provide an information processing apparatus, an information processing system, and an information processing program that can output processing-target data pertaining to an instruction in a method corresponding to a route to receive the instruction.SOLUTION: An information processing apparatus includes a processor, and the processor is configured to: receive, from a terminal, an instruction to output processing-target data to the terminal, the terminal being not managed by a manager who manages the information processing apparatus; and, when the instruction is received via a management apparatus managed by the manager, output the processing-target data without limitation, and, when the instruction is received without going through the management apparatus, output the processing-target data with limitation.SELECTED DRAWING: Figure 6

Description

[[Technical Field]]

[0001] The present disclosure relates to an information processing apparatus, an information processing system, and an information processing program. [[Background Art]]

[0002] Patent Document 1 discloses a scanner. The scanner comprises: management means for managing predetermined account information registered in a policy server that is shared by a plurality of users; and reception means for receiving readable identification information from a portable device held by a user. The scanner further comprises: access means for accessing the policy server using the predetermined account information; registration means for registering a policy in the policy server based on the received identification information; and control means for controlling storage of an encrypted file including image data obtained by scanning. The scanner is also characterized in that the encrypted file is associated with a security setting that complies with a policy based on the identification information, and restriction of at least part of operations on the file can be implemented in accordance with the security setting that complies with the policy.

[0003] Patent Document 2 discloses a device managed in accordance with a security policy in a network-connected environment. This device includes a policy setting means for setting operational settings corresponding to the functions of the installed software and access control information that controls whether or not the user is allowed to change said operational settings, according to policy data that includes the content of a security policy and information indicating whether or not it is applied. This device also includes an update processing means for performing software updates. The update processing means further includes a determination means for determining whether or not there is a contradiction between information indicating whether or not it is applied and access control information related to the added operational settings when an addition of operational settings affected by the security policy occurs as a result of the update. Furthermore, if the determination means determines that there is a contradiction, the update processing means aligns the information indicating whether or not it is applied and the access control information related to the added operational settings through settings made by the policy setting means.

[0004] Patent Document 3 discloses a data provision system that provides document data stored in a storage means. This data provision system has an analysis means for analyzing the content or attributes of a document related to data when access rights to the data have not yet been set when the data is requested by a user. This data provision system also has a setting means for setting access rights to the data based on the content or attributes analyzed by the analysis means. Furthermore, after the data is requested by a user and access rights are set by the setting means, this data provision system has a provision means for providing the data to the user in accordance with those access rights. [Prior art documents] [Patent Documents]

[0005] [Patent Document 1] Japanese Patent Publication No. 2021-145181 [Patent Document 2] Japanese Patent Publication No. 2017-138883 [Patent Document 3] Japanese Patent Publication No. 2017-182122 [Overview of the project] [Problems that the invention aims to solve]

[0006] An information processing device may receive an instruction from a terminal that is not under the control of the administrator managing the authentication system to which the information processing device belongs, to output the data to be processed to that terminal. In this case, the information processing device had the problem of outputting the data in the same way regardless of the receiving path of the instruction.

[0007] This disclosure aims to provide an information processing device, an information processing system, and an information processing program that can output the data to be processed in a manner corresponding to the receiving path of the above instructions. [Means for solving the problem]

[0008] To achieve the above objective, the information processing device according to the first embodiment includes a processor, which receives an instruction from a terminal not under the control of the administrator managing the authentication system to which the information processing device belongs to output data to be processed to the terminal, and if the instruction is received via a management device under the control of the administrator, outputs the data to be processed without restriction, and if the instruction is received without going through the management device, outputs the data to be processed with restriction.

[0009] Furthermore, in the information processing apparatus according to the second embodiment, the processing target data includes confidential information, and when the processor receives the instruction via the management device, it outputs the processing target data without restricting the confidential information, and when the processor receives the instruction without going through the management device, it outputs the processing target data in a manner that prevents the confidential information from being leaked to anyone other than users under the management of the administrator.

[0010] Furthermore, in the information processing apparatus according to the third embodiment, in the information processing apparatus according to the second embodiment, if the processor receives the instruction via the management device, it outputs the data to be processed without encrypting the confidential information, and if the instruction is received without going through the management device, it encrypts the confidential information and outputs the data to be processed.

[0011] Furthermore, in the information processing apparatus according to the fourth embodiment, the information processing apparatus according to the second embodiment is configured such that the secret information is pre-encrypted information, and when the processor receives the instruction via the management device, it causes the management device to decrypt the secret information, but when the processor receives the instruction without going through the management device, it does not decrypt the secret information.

[0012] Furthermore, in the information processing apparatus according to the fifth embodiment, even if the processor receives the instruction without going through the management device, if it has already received the instruction via the management device, it outputs the data to be processed without restriction.

[0013] Furthermore, in the information processing apparatus according to the sixth embodiment, even if the processor receives the instruction without going through the management device, if it has already received the instruction via the management device within a predetermined period, it outputs the data to be processed without restriction.

[0014] Furthermore, in the information processing apparatus according to the seventh embodiment, even if the processor receives the instruction without going through the management device, if the usage period of the terminal that sent the instruction is the first period or longer, and the terminal has already received the instruction via the management device, the processor outputs the data to be processed without restriction.

[0015] Furthermore, the information processing system according to the eighth embodiment comprises an information processing device according to the first embodiment, the terminal, and the management device, wherein the terminal transmits the instruction to the management device or the information processing device, the management device transmits the instruction received from the terminal to the information processing device, and if the information processing device receives the instruction via the management device, it outputs the processing target data associated with the instruction without restriction, and if the instruction is received without going through the management device, it outputs the processing target data with restriction.

[0016] The information processing program according to the ninth aspect causes a computer to perform the following processing: receive an instruction from a terminal not under the control of the administrator managing the authentication system to which the information processing device belongs, to output data to be processed to the terminal; if the instruction is received via a management device under the control of the administrator, output the data to be processed without restriction; if the instruction is received without going through the management device, output the data to be processed with restriction. [Effects of the Invention]

[0017] According to the first, eighth, and ninth embodiments, the processing target data related to the instruction can be output in a manner corresponding to the instruction reception path.

[0018] According to the second embodiment, compared to the case where the data to be processed is output without restricting the confidential information, the possibility of the confidential information being leaked to users other than those under the administrator's control can be reduced.

[0019] According to the third embodiment, compared to the case where the data to be processed is output without encrypting the confidential information, the possibility of the confidential information being leaked to users other than those under the administrator's control can be reduced.

[0020] According to the fourth aspect, the management device can be made to decrypt the confidential information.

[0021] According to the fifth aspect, a user who has already transmitted an instruction via the management apparatus can transmit an instruction without going through the management apparatus, so that unrestricted processing target data can be obtained while reducing the waiting time until the processing target data related to the instruction is output.

[0022] According to the sixth aspect, even when an instruction is received without going through the management apparatus, terminals that output processing target data related to the instruction without restriction can be limited to terminals that have transmitted an instruction via the management apparatus within a predetermined period.

[0023] According to the seventh aspect, even when an instruction is received without going through the management apparatus, terminals that output processing target data related to the instruction without restriction can be limited to terminals whose usage period is equal to or longer than a first period. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] [Figure 1] FIG. 1 is a schematic diagram showing an example of the hardware configuration of an information processing system according to an embodiment. [Figure 2] FIG. 2 is a block diagram showing an example of the hardware configuration of a terminal according to an embodiment. [Figure 3] FIG. 3 is a schematic diagram showing an example of the configuration of a terminal database according to an embodiment. [Figure 4] FIG. 4 is a block diagram showing an example of the hardware configuration of a management apparatus according to an embodiment. [Figure 5] FIG. 5 is a block diagram showing an example of the hardware configuration of an information processing apparatus according to an embodiment. [Figure 6] FIG. 6 is a sequence diagram showing an example of the flow of information processing in the information processing system according to the first embodiment. [Figure 7] FIG. 7 is a schematic diagram showing an example of a list screen according to an embodiment. [Figure 8] FIG. 8 is a sequence diagram showing an example of the flow of route information issuing processing in the information processing system according to the first embodiment. [Figure 9]This is a sequence diagram showing an example of the information processing flow in the information processing system according to the second embodiment. [Figure 10] This is a sequence diagram showing an example of the flow of route information issuance processing in the information processing system according to the second embodiment. [Modes for carrying out the invention]

[0025] [First Embodiment] Hereinafter, an example of an embodiment of this disclosure will be described with reference to the drawings. In each drawing, identical or equivalent components and parts are given the same reference numerals. Also, the dimensional ratios in the drawings are exaggerated for illustrative purposes and may differ from the actual ratios.

[0026] As shown in Figure 1, the information processing system 10 according to this embodiment includes a terminal 20, a management device 30, and an information processing device 40. Note that the number of terminals 20 and management devices 30 is not limited to the number shown in Figure 1.

[0027] Terminal 20, management device 30, and information processing device 40 are able to communicate with each other via communication means N1. In this embodiment, communication means N1 is a public communication line such as the Internet or a telephone line. However, it is not limited to this example. For example, communication means N1 may be an in-house communication line such as a LAN (Local Area Network) or WAN (Wide Area Network), or a combination of in-house communication lines and public communication lines may be used. Also, in this embodiment, communication means N1 is a wireless communication line. However, communication means N1 may be a wired communication line, or a combination of wired and wireless communication lines may be used.

[0028] Terminal 20 is a terminal that is not under the control of the administrator (hereinafter simply referred to as "administrator") who manages the authentication system to which the information processing device 40 belongs, and is used by a user (hereinafter simply referred to as "user") who is under the administrator's control. In this embodiment, as terminal 20, for example, an image forming apparatus installed in the user's home, which is not under the control of the company network operating under the authentication system to which the administrator belongs, and is outside the aforementioned company network. However, this is not the only example. Any device can be used as a terminal that sends an instruction (hereinafter simply referred to as "output instruction") to the management device 30 or the information processing device 40 to output the data to be processed to terminal 20, and receives the data to be processed. The data to be processed will be described later. For example, as terminal 20, a personal computer, tablet terminal, or smartphone may be used by a user, even though it is not under the administrator's control.

[0029] As shown in Figure 2, the terminal 20 has the following components: a CPU (Central Processing Unit) 21, a ROM (Read Only Memory) 22, a RAM (Random Access Memory) 23, a non-volatile memory 24, an input unit 25, a display unit 26, and a communication interface (I / F) 27. Each component is connected to the others via a bus 29 so that they can communicate with each other.

[0030] The CPU 21 is a central processing unit that executes various programs and controls various components. Specifically, the CPU 21 reads a program from the ROM 22 or non-volatile memory 24 and executes the program using the RAM 23 as a working area. The CPU 21 controls each of the above components and performs various calculations according to the program stored in the ROM 22. The non-volatile memory 24 is an example of a storage device that retains stored information even when the supplied power is cut off, and may be a semiconductor memory such as an SSD (Solid State Drive) or a hard disk. In this embodiment, the non-volatile memory 24 stores the terminal program 22A.

[0031] The non-volatile memory 24 stores various programs and data. The RAM 23 temporarily stores programs or data as a working area.

[0032] Furthermore, the non-volatile memory 24 stores the terminal database 22B. As shown in Figure 3, the terminal database 22B stores the data to be processed, route attributes, and transmission date and time in association with each other.

[0033] The data attribute to be processed is a string used to identify the data to be processed. In this embodiment, the data attribute to be processed is represented by a URL (Uniform Resource Locator). Specifically, the data attribute to be processed is a string formed by combining a data ID (Identification) for identifying the data to be processed, such as the name of the data to be processed, and the URL of the information processing device 40 that holds the data to be processed, or a URL indicating the storage location of the data to be processed in the information processing device 40. However, this is not the only example. Only the data ID to be processed may be applied as the data attribute to be processed.

[0034] Route attributes indicate whether terminal 20 transmitted an output instruction for data to be processed, identified by the associated and stored data processing attribute, via the management device 30. Specifically, if terminal 20 transmitted the output instruction to the information processing device 40 via the management device 30, it is stored as "via management device". On the other hand, if terminal 20 transmitted the output instruction to the information processing device 40 without going through the management device 30, it is stored as "none".

[0035] The transmission date and time is the date and time when terminal 20 sent an output instruction for the data to be processed, which is identified by the associated data attributes stored, to the management device 30 or the information processing device 40. In other words, the transmission date and time is the date and time when the management device 30 or the information processing device 40 received the output instruction for the data to be processed, which is identified by the associated data attributes stored, from terminal 20.

[0036] For example, in the example shown in Figure 3, terminal 20 transmits an output instruction for the data to be processed, which is identified by the data attributes of the data to be processed A, to the information processing device 40 via the management device 30 at 12:40 on February 9, 2021.

[0037] Furthermore, the non-volatile memory 24 stores user information for identifying the user using the terminal 20. In this embodiment, the user information uses an ID determined by the administrator to identify the user. This ID is an account that identifies the user in the authentication system of the network managed by the information processing device 40. However, this is not the only example. For example, if the user is an employee, the employee number of that user may be used as the user information, or if the user is a student, the student ID number of that user may be used. Alternatively, the email address or telephone number of the terminal 20 may be used as the user information.

[0038] Furthermore, the non-volatile memory 24 stores terminal information for identifying the terminal 20. In this embodiment, the MAC address (Media Access Control address) of the terminal 20 is used as the terminal information. However, this is not the only example. For example, the terminal information could be a number assigned by the manufacturer of the terminal 20 to identify the terminal 20, or a number stored by an application program installed on the terminal 20 to identify the terminal 20.

[0039] Furthermore, the non-volatile memory 24 stores the start date and time of use, which is the date and time when the terminal 20 began to be used.

[0040] The input unit 25 includes a pointing device such as a mouse and a keyboard, and is used for various types of input.

[0041] The display unit 26 is, for example, a liquid crystal display and displays various information. The display unit 26 may also function as an input unit 25 by employing a touch panel system.

[0042] Communication I / F27 is an interface for communicating with other devices such as the management device 30 and the information processing device 40, and standards such as Ethernet®, FDDI, and Wi-Fi® are used.

[0043] The management device 30 is a device under the control of the administrator. In this embodiment, a server is used as the management device 30. However, this is not the only example. Any device that can receive output instructions from the terminal 20 and transmit those output instructions to the information processing device 40 may be used as the management device 30. For example, a personal computer under the control of the administrator may be used as the management device 30.

[0044] As shown in Figure 4, the management device 30 has a CPU 31, ROM 32, RAM 33, non-volatile memory 34, and communication interface 37. Each component is connected to the others via a bus 39 so that they can communicate with each other. The functions of the CPU 31, ROM 32, RAM 33, non-volatile memory 34, and communication interface 37 are the same as those of the CPU 21, ROM 22, RAM 23, non-volatile memory 24, and communication interface 27 of the terminal 20 described above.

[0045] The non-volatile memory 34 stores the management program 32A. The CPU 31 reads the program from the non-volatile memory 34 and executes it using RAM 33 as the working area.

[0046] Furthermore, the non-volatile memory 34 stores an administrator database 32B that contains all user information of users under the administrator's control.

[0047] Furthermore, the non-volatile memory 34 stores management device information for identifying the management device 30. In this embodiment, the URL of the management device 30 is used as the management device information. However, this is not the only example. For example, the product name of the management device 30, or the name of the company operating the management device 30, may be used as the management device information.

[0048] The information processing device 40 is a device that holds data to be processed and has the function of outputting it in response to output instructions from other devices. In this embodiment, a server is used as the information processing device 40. However, it is not limited to this example. Any device that can receive output instructions from the terminal 20 or management device 30 and output the data to be processed associated with said output instructions may be used as the information processing device 40. For example, a personal computer may be used as the information processing device 40.

[0049] As shown in Figure 5, the information processing device 40 has a CPU 41, ROM 42, RAM 43, non-volatile memory 44, and communication I / F 47. Each component is connected to the others via a bus 49 so that they can communicate with each other. The functions of the CPU 41, ROM 42, RAM 43, non-volatile memory 44, and communication I / F 47 are the same as those of the CPU 21, ROM 22, RAM 23, non-volatile memory 24, and communication I / F 27 of the terminal 20 described above.

[0050] The non-volatile memory 44 stores the information processing program. The CPU 41 reads the program from the non-volatile memory 44 and executes the program using RAM 43 as the working area.

[0051] Furthermore, the non-volatile memory 44 stores the data to be processed. In this embodiment, document information printed on terminal 20 is used as the data to be processed. However, this is not the only example. For example, if terminal 20 is a smartphone, video information played on terminal 20 or image information displayed on terminal 20 may be used as the data to be processed. Also, in this embodiment, confidential information that the administrator has set in advance as information that they do not want anyone other than the user to know is included in the data to be processed. For example, the confidential information is text information that the administrator has set in advance.

[0052] Next, with reference to Figures 6 to 8, the information processing flow in the information processing system 10 of this embodiment will be described.

[0053] The processing in terminal 20 is performed by the CPU 21 reading terminal program 22A from non-volatile memory 24, loading it into RAM 23, and executing it. The processing in management device 30 is performed by the CPU 31 reading management program 32A from non-volatile memory 34, loading it into RAM 33, and executing it. The processing in information processing device 40 is performed by the CPU 41 reading information processing program from non-volatile memory 44, loading it into RAM 43, and executing it.

[0054] In step S100 of Figure 6, the CPU 21 of terminal 20 displays a list screen on the display unit 26 according to a predetermined format.

[0055] As shown in Figure 7, the list screen according to this embodiment displays a list of information indicating the data to be processed, and a message prompting the user to select the data to be processed from the list to which an output instruction should be sent to the information processing device 40. The list screen according to this embodiment also displays a message prompting the user to choose whether or not to send an output instruction to the information processing device 40 via the management device 30. The list of data to be processed is requested in advance by the CPU 21 of the terminal 20 from the information processing device 40, and the information processing device 40 extracts the data to be processed that the user who made the request can process, and the CPU 21 of the terminal 20 receives this extracted information from the information processing device 40. When the list screen is displayed on the display unit 26, the user selects the data to be processed that they want to process on the terminal 20 from the list via the input unit 25. If the user wants to send an output instruction to the information processing device 40 via the management device 30, they select the button 26A labeled "Send output instruction via management device" via the input unit 25. On the other hand, if the user wants to send an output instruction to the information processing device 40 without going through the management device 30, they select the button 26B labeled "Send output instruction without going through the management device" via the input unit 25.

[0056] In step S102, the CPU 21 waits via the input unit 25 until it selects from the list screen whether or not to send an output instruction via the management device 30. Once it selects from the list screen whether or not to send an output instruction via the management device 30 via the input unit 25 (step S102: YES), the CPU 21 proceeds to step S104.

[0057] In step S104, the CPU 21 retrieves the latest transmission date and time and the latest route attributes from the terminal database 22B. Specifically, the CPU 21 retrieves the transmission date and time closest to the execution date and time of step S104 from the terminal database 22B, among the transmission dates and times associated with the processing target data attributes identified by the processing target data selected on the list screen, as the latest transmission date and time. The CPU 21 also retrieves the route attributes associated with the latest transmission date and time from the terminal database 22B as the latest route attributes.

[0058] In step S106, the CPU 21 calculates the usage period of terminal 20. Specifically, the CPU 21 obtains the start date and time of use from the non-volatile memory 24 and calculates the usage period of terminal 20 by calculating the difference between the execution date and time of step S106 and the said start date and time of use.

[0059] In step S108, the CPU 21 determines whether it has been selected to send an output instruction to the information processing device 40 via the management device 30 on the list screen. If it has been selected to send an output instruction to the information processing device 40 via the management device 30 on the list screen (step S108: YES), the CPU 21 proceeds to step S112. On the other hand, if it has been selected to send an output instruction to the information processing device 40 without going through the management device 30 on the list screen (step S108: NO), the CPU 21 proceeds to step S110.

[0060] In step S110, the CPU 21 transmits an output instruction, user information, terminal information, usage period, latest transmission date and time, and latest route attributes to the information processing device 40. Specifically, the CPU 21 transmits to the information processing device 40 an instruction to output the data to be processed selected on the list screen to the terminal 20, user information, terminal information, usage period, latest transmission date and time, and latest route attributes. The CPU 41 of the information processing device 40, having received the output instruction, user information, terminal information, usage period, latest transmission date and time, and latest route attributes from the CPU 21, then proceeds to step S118.

[0061] If the CPU 21 fails to obtain the latest transmission date and time and the latest route attributes in step S104, it will not send the latest transmission date and time and the latest route attributes to the information processing device 40 in step S110. Also, if the CPU 21 fails to calculate the usage period in step S106, it will not send the usage period to the information processing device 40 in step S110. In this case, the CPU 41 of the information processing device 40 will proceed to step S118 even if it does not receive this information.

[0062] In step S112, the CPU 21 transmits an output instruction, user information, and terminal information to the management device 30. Specifically, the CPU 21 transmits to the management device 30 an instruction to output the data to be processed selected on the list screen to the terminal 20, user information, and terminal information.

[0063] In step S114, the CPU 21 of terminal 20, the CPU 31 of management device 30, and the CPU 41 of information processing device 40 execute route information issuance processing. Details of route information issuance processing will be described later with reference to Figure 8. After executing route information issuance processing, the CPU 41 of information processing device 40 proceeds to step S118.

[0064] In step S118, the CPU 41 determines whether or not it has received an output instruction via the management device 30. Specifically, the CPU 41 determines whether or not it has received the route information issued in the route information issuance process along with the output instruction. If the CPU 41 has received an output instruction via the management device 30 (step S118: YES), it proceeds to step S138. On the other hand, if the CPU 41 has not received an output instruction via the management device 30 (step S118: NO), it proceeds to step S120.

[0065] In step S120, the CPU 41 determines whether it has received an output instruction via the management device 30 from the same terminal 20 that sent the output instruction in step S110 within a predetermined period. Specifically, the CPU 41 determines whether the latest transmission date and time received from terminal 20 in step S110 is within a predetermined period (for example, 30 days) from the execution date and time of step S120, and whether the latest route attribute is information indicating that it went through the management device 30. If the CPU 41 has received an output instruction via the management device 30 from the same terminal 20 within a predetermined period (step S120: YES), it proceeds to step S122. On the other hand, if the CPU 41 has not received an output instruction via the management device 30 from the same terminal 20 within a predetermined period (step S120: NO), it proceeds to step S136.

[0066] In step S122, the CPU 41 determines whether the usage period received from the terminal 20 in step S110 is equal to or greater than a predetermined first period (for example, 3 months). If the usage period is equal to or greater than the predetermined first period (step S122: YES), the CPU 41 proceeds to step S138. On the other hand, if the usage period is less than the predetermined first period (step S122: NO), the CPU 41 proceeds to step S136.

[0067] In step S136, the CPU 41 reads the data to be processed related to the output instruction received from the terminal 20 or the management device 30 from the non-volatile memory 44, performs a process to encrypt the secret information contained in the data to be processed, and then outputs the data to the terminal 20. That is, the CPU 41 performs a restricted process on the data to be processed and outputs it to the terminal 20. Here, examples of the process that restricts the data to be processed may be an encryption process for the entire data to be processed, or a process that prohibits the receiving terminal from copying or editing the data to be processed.

[0068] In this embodiment, the CPU 41 extracts all character information pre-configured by the administrator from the data to be processed in order to encrypt the confidential information, and then encrypts the extracted character information. However, this is not the only example. For example, the CPU 41 may extract all character information contained in the portion pre-configured by the administrator from the data to be processed in order to encrypt the confidential information, and then encrypt the extracted character information. Alternatively, the CPU 41 may generate data to be processed by replacing the extracted character information with invisible information and output it to the terminal 20.

[0069] In step S138, the CPU 41 reads the data to be processed related to the output instruction received from the terminal 20 or the management device 30 from the non-volatile memory 44 and outputs the data to be processed to the terminal 20 without restriction. Outputting the data to be processed without restriction means outputting the data to the terminal 20 without performing any processing on the data to be processed, such as encryption processing or processing to make confidential information invisible, or processing to make it impossible to copy or modify.

[0070] In step S140, the CPU 21 of terminal 20 prints the data to be processed received from the information processing device 40 and terminates this information processing.

[0071] In this embodiment, even when the CPU 41 of the information processing device 40 receives an output instruction without going through the management device 30, if it has already received an output instruction via the management device 30 within a predetermined period and the usage period of the terminal 20 is equal to or greater than the first period, it outputs the data to be processed without restriction. However, this is not the only example. For example, if the CPU 41 has already received an output instruction via the management device 30 within a predetermined period, it may output the data to be processed without restriction regardless of the usage period of the terminal 20. Furthermore, the above predetermined period and the first period may be defined for each user information or for each terminal information. In addition, even when the CPU 41 receives an output instruction without going through the management device 30, it may define an upper limit or period for the number of times it will output the data to be processed without restriction, for each user information or for each terminal information.

[0072] Furthermore, if a user uses multiple terminals 20, and the total period of time the terminals 20 have been used is longer than the second period, the CPU 41 may output the data to be processed without restriction if it receives an output instruction directly via a terminal 20 owned by that user. Also, if the CPU 41 receives an output instruction directly via a terminal 20 not owned by a user whose total period of use is longer than the second period (a third period or longer), the CPU 41 may output the data to be processed without restriction.

[0073] Next, the routing information issuance process will be explained with reference to Figure 8.

[0074] In step S200 of Figure 8, the CPU 31 of the management device 30 determines whether it has received output instructions, user information, and terminal information from a user under the administrator's management in step S112 of the information processing. Specifically, the CPU 31 determines whether the user information received in step S112 of the information processing is stored in the administrator database 32B. This administrator database 32B may be a database that records authentication information for authenticating users in the authentication system managed by the administrator. If the CPU 31 has received output instructions, user information, and terminal information from a user under the administrator's management (step S200: YES), it proceeds to step S204. On the other hand, if the CPU 31 has received output instructions, user information, and terminal information from a user not under the administrator's management (step S200: NO), it proceeds to step S202.

[0075] In step S202, the CPU 31 notifies the terminal 20, which sent the output instruction, user information, and terminal information, that it cannot output the data to be processed related to the output instruction. Then, the CPU 21 of terminal 20 terminates this information processing.

[0076] In step S204, the CPU 31 issues routing information indicating that the management device 30 has received an output instruction from the terminal 20. Specifically, the CPU 31 reads management device information, which is information identifying the management device 30 itself, from the non-volatile memory 34, and issues information (for example, information represented as a string) that combines the user information and terminal information received in step S112 of the information processing with the read management device information, as routing information. Note that the routing information is not limited to the information described above. For example, information that combines only the user information and management device information received in step S112 of the information processing may be applied as routing information.

[0077] In step S206, the CPU 31 stores the user information received in step S112 of the information processing in association with the issued route information.

[0078] In step S208, the CPU 31 transmits the route information issued in step S204 to the terminal 20 that sent the output instruction, user information, and terminal information.

[0079] In step S210, the CPU 21 of terminal 20 transmits the route information received from the management device 30 to the information processing device 40.

[0080] In step S212, the CPU 41 of the information processing device 40 queries the management device 30 to determine whether the route information received from the terminal 20 in step S210 is route information issued by the management device 30. Specifically, the CPU 41 transmits the route information received from the terminal 20 to the management device 30.

[0081] Furthermore, the management device 30 may determine whether the route information received from the information processing device 40 was issued by the management device 30 by checking whether the string of the route information received matches the string of the route information that the management device 30 has issued and stored. Alternatively, when the management device 30 issues route information, it may issue and store a hash value generated from the route information string using a hash function, and then determine whether it matches the hash value of the route information received from the information processing device 40.

[0082] In step S214, the CPU 31 of the management device 30 determines whether the route information received from the information processing device 40 in step S212 is route information issued by the management device 30. If the route information received from the information processing device is route information issued by the management device 30 (step S214: YES), the CPU 31 proceeds to step S220. On the other hand, if the route information received from the information processing device is not route information issued by the management device 30 (step S214: NO), the CPU 31 proceeds to step S216.

[0083] In step S216, the CPU 31 sends a message to the information processing device 40 indicating that the route information received by the information processing device 40 from the terminal 20 is not the route information issued by the management device 30. Then, the CPU 41 of the information processing device 40 terminates this information processing.

[0084] In step S220, the CPU 31 transmits to the information processing device 40 that the route information received by the information processing device 40 from the terminal 20 is route information issued by the management device 30.

[0085] In step S222, the CPU 31 transmits to the information processing device 40 the output instruction, user information, and terminal information received in step S112 of the information processing, as well as the route information received in step S212. Then, the CPU 21 of the terminal 20, the CPU 31 of the management device 30, and the CPU 41 of the information processing device 40 complete the route information issuance process and proceed to step S118 of the information processing.

[0086] In step S222, the device that transmits the output instruction, user information, terminal information, and route information to the information processing device 40 may be the terminal 20 instead of the management device 30. In this case, the CPU 21 of the terminal 20 transmits to the information processing device 40 the output instruction, user information, and terminal information transmitted in step S112 of the information processing, and the route information received in step S208.

[0087] Furthermore, in this embodiment, when the CPU 41 of the information processing device 40 directly receives an output instruction from the terminal 20, it encrypts the confidential information contained in the data to be processed and outputs it, thereby outputting the data to be processed in a way that prevents the confidential information from being leaked to anyone other than users under the administrator's control. However, this is not the only example. If the CPU 41 directly receives an output instruction from the terminal 20 without going through the management device 30, it may process the data to be processed in a way that makes the confidential information contained in it invisible, such as by blacking it out, and output it. Also, if the CPU 41 directly receives an output instruction from the terminal 20 without going through the management device 30, it may output only the information other than the confidential information contained in the data to be processed. Also, if the CPU 41 directly receives an output instruction from the terminal 20 without going through the management device 30, it may output the data to be processed with a mark indicating that copying and editing are prohibited.

[0088] Furthermore, if the terminal 20 is a printer equipped with a printing function, the CPU 41 may output the data to be processed to the terminal 20 in such a way that when it receives an output instruction via the management device 30, it can print the data to be processed, but if it receives an output instruction without going through the management device 30, it cannot print the data to be processed and displays a preview image of the data to be processed on the display unit 26. Also, if the terminal 20 is a personal computer, the CPU 41 may output the data to be processed to the terminal 20 in such a way that when it receives an output instruction via the management device 30, it can store the data to be processed so that it can be copied to the terminal 20, but if it receives an output instruction without going through the management device 30, it can store the data so that it cannot be copied. Furthermore, the CPU 41 may output the data to be processed to the terminal 20 in such a way that when it receives an output instruction via the management device 30, it can modify the data to be processed, but if it receives an output instruction without going through the management device 30, it can output the data to be processed to the terminal 20 so that it cannot modify the data to be processed. In addition, the CPU 41 may define a method for restricting the data to be processed for each combination of data to be processed attributes, user information, terminal information, and route attributes.

[0089] [Second Embodiment] In the first embodiment, confidential information contained in the data to be processed was stored in the non-volatile memory 44 without being encrypted beforehand. When the CPU 41 received an output instruction via the management device 30, it output the data to be processed without encrypting the confidential information. When the output instruction was received without going through the management device 30, the CPU 41 encrypted the confidential information before outputting the data to be processed. In this embodiment, the confidential information is stored in the non-volatile memory 44 with the confidential information already encrypted. The CPU 41 outputs the data to be processed with the confidential information encrypted, regardless of whether or not it received an output instruction via the management device 30. When the CPU 41 receives an output instruction via the management device 30, it has the management device 30 decrypt the encrypted confidential information. When the CPU 41 receives an output instruction without going through the management device 30, it does not have the management device 30 decrypt the confidential information. The differences from the first embodiment will be explained below. Note that the hardware configuration is the same as in the first embodiment, so the explanation will be omitted.

[0090] The information processing flow in the information processing system 10 of this embodiment will be described with reference to Figures 9 and 10.

[0091] The information processing flow shown in Figure 9 differs from the first embodiment in that step S116 is executed between steps S114 and S118 of the information processing shown in Figure 6, and steps S124 to S134 are executed instead of steps S136 to S140. Furthermore, the information processing flow shown in Figure 9 differs from the first embodiment in that the information processing is terminated if the result is negative in step S120 and in step S122 of the information processing shown in Figure 6.

[0092] In step S116 of Figure 9, the CPU 41 of the information processing device 40 reads the data to be processed related to the output instruction received from the terminal 20 or the management device 30 from the non-volatile memory 44, and transmits the data to be processed to the terminal 20 without decrypting the encrypted secret information contained in the data to be processed.

[0093] In step S124, the CPU 41 sends a decryption instruction to the terminal 20, which is an instruction to decrypt the encrypted secret information contained in the data to be processed that was sent to the terminal 20 in step S116.

[0094] In step S126, the CPU 21 of terminal 20 transmits to the management device 30 the data to be processed received in step S116, and the route information received from the management device 30 in the route information issuance process.

[0095] In step S128, the CPU 31 of the management device 30 decrypts the secret information contained in the data to be processed received in step S126 using the decryption information issued in the route information issuance process to decrypt the data to be processed.

[0096] In step S130, the CPU 31 stores the user information and terminal information received from the terminal 20, the data attributes of the data to be processed received in step S126, the preview image of the data to be processed, and the execution date and time of step S130 in association with each other.

[0097] In step S132, if terminal 20 is a printer equipped with a printing function, CPU 31 sends to terminal 20 the data to be processed, which includes the secret information decrypted in step S128, and an instruction to print the data to be processed. Specifically, CPU 31 sends an instruction to terminal 20's printer to print the data to be processed using a protocol such as IPP (Internet Printing Protocol), SOAP (Simple Object Access Protocol), or REST API (Representational State Transfer Application Programming Interface) provided by terminal 20.

[0098] In step S134, the CPU 21 of terminal 20 prints the data to be processed received from the management device 30 and terminates this information processing.

[0099] Next, the routing information issuance process will be explained with reference to Figure 10.

[0100] The flow of the route information issuance process shown in Figure 10 differs from the first embodiment in that step S218 is executed between steps S216 and S220 of the route information issuance process shown in Figure 8.

[0101] In step S218 of Figure 10, the CPU 31 of the management device 30 issues decryption information for decrypting the data to be processed, and stores the decryption information in association with the route information issued in step S204.

[0102] Although embodiments have been described above, the technical scope of this disclosure is not limited to the embodiments described above. Various modifications or improvements can be made to the embodiments without departing from the spirit of the invention, and such modified or improved forms are also included in the technical scope of this disclosure.

[0103] Furthermore, the above embodiments do not limit the claimed invention, and not all combinations of features described in the embodiments are necessarily essential to the solution of the invention. The embodiments described above include inventions at various stages, and various inventions can be extracted by combinations of the multiple constituent elements disclosed. Even if some constituent elements are deleted from all the constituent elements shown in the embodiments, the configuration with these deleted elements can be extracted as an invention, as long as the effect is obtained.

[0104] For example, in each of the above embodiments, the CPU 41 of the information processing device 40 output the data to be processed without restriction when it received an output instruction via the management device 30. However, it is not limited to this example. For example, if the terminal 20 has not been authenticated by any device other than the terminal 20 and the management device 30 before the terminal 20 sends the data to be processed to the management device 30, the CPU 41 may output the data to be processed with restrictions. Also, if the CPU 41 has not received an output instruction directly from the management device 30, it may output the data to be processed with restrictions.

[0105] Furthermore, even if the CPU 41 of the information processing device 40 has not received an output instruction via the management device 30, if it receives an output instruction from the terminal 20 via a communication means managed by an administrator, such as a VPN (Virtual Private Network), it may output the data to be processed without restriction.

[0106] Furthermore, in each of the above embodiments, the term "processor" refers to a processor in a broad sense, and includes general-purpose processors (e.g., CPU: Central Processing Unit, etc.) and dedicated processors (e.g., GPU: Graphics Processing Unit, ASIC: Application Specific Integrated Circuit, FPGA: Field Programmable Gate Array, programmable logic device, etc.).

[0107] Furthermore, the processor operations in each of the above embodiments may not be performed by a single processor, but may also be performed by multiple processors located in physically separate locations working together. Also, the order of the processor operations is not limited to the order described in each of the above embodiments, and may be changed as appropriate.

[0108] In the embodiments described above, the program is installed in ROM, but the invention is not limited to this. The program according to each embodiment may be provided in a form recorded on a computer-readable storage medium. For example, the program according to each embodiment may be provided in a form recorded on an optical disc such as a CD (Compact Disc)-ROM or DVD (Digital Versatile Disc)-ROM, or on a semiconductor memory such as a USB (Universal Serial Bus) memory or memory card. Furthermore, the program according to each embodiment may be acquired from an external device via a communication interface.

[0109] Furthermore, while the above embodiments describe cases in which the processing in the information processing system 10 is realized by a software configuration using a computer by executing a program, this disclosure is not limited thereto. For example, the processing in the information processing system 10 may also be realized by a hardware configuration or a combination of a hardware configuration and a software configuration.

[0110] Furthermore, the configurations of the terminal 20, management device 30, and information processing device 40 described in each of the above embodiments are merely examples, and it goes without saying that unnecessary parts may be deleted or new parts added without departing from the spirit of this disclosure.

[0111] Furthermore, the processing flow in the information processing system 10 described in each of the above embodiments (see Figures 6, 8, 9, and 10) is just one example, and it goes without saying that unnecessary steps may be deleted, new steps added, or the processing order rearranged, as long as it does not deviate from the spirit of this disclosure.

[0112] The following additional information is disclosed regarding the embodiments described above.

[0113] (((1))) Equipped with a processor, The aforementioned processor, The information processing device receives an instruction from a terminal not under the control of the administrator managing the authentication system to which the device belongs to output the data to be processed to the terminal. If the instruction is received via a management device under the control of the aforementioned administrator, the data to be processed is output without restriction; if the instruction is received without going through the management device, the data to be processed is output with restriction. Information processing device.

[0114] (((2))) The data to be processed includes confidential information, The aforementioned processor, If the instruction is received via the management device, the data to be processed is output without restricting the confidential information; if the instruction is received without going through the management device, the data to be processed is output in a manner that prevents the confidential information from being leaked to users other than those under the administrator's control. The information processing device described in (((1))).

[0115] (((3))) If the processor receives the instruction via the management device, it outputs the data to be processed without encrypting the confidential information; if the processor receives the instruction without going through the management device, it encrypts the confidential information and outputs the data to be processed. The information processing device described in (((2))).

[0116] (((4))) The aforementioned confidential information is pre-encrypted information, If the processor receives the instruction via the management device, it causes the management device to decrypt the secret information; if the processor receives the instruction without going through the management device, it does not cause the secret information to be decrypted. The information processing device described in (((2))).

[0117] (((5))) Even if the processor receives the instruction without going through the management device, if it has already received the instruction via the management device, it will output the data to be processed without restriction. An information processing device as described in any one of items (((1))) to (((4))).

[0118] (((6))) Even if the processor receives the instruction without going through the management device, if it has already received the instruction via the management device within a predetermined period, it will output the data to be processed without restriction. The information processing device described in (((5))).

[0119] (((7))) The aforementioned processor, Even if the instruction is received without going through the management device, if the usage period of the terminal that sent the instruction is the same as or longer than the first period, and the instruction has already been received via the management device, the data to be processed will be output without restriction. The information processing device described in (((5))) or (((6))).

[0120] (((8))) The system comprises an information processing device described in any one of items (((1))) to (((7))), the terminal, and the management device, The terminal transmits the instruction to the management device or the information processing device. The management device transmits the instruction received from the terminal to the information processing device. If the information processing device receives the instruction via the management device, it outputs the processing target data associated with the instruction without restriction; if the instruction is received without going through the management device, it outputs the processing target data with restrictions. Information processing system.

[0121] According to (((1))) or (((8))), the data to be processed related to the instruction can be output in a manner corresponding to the instruction's receiving path.

[0122] According to (((2))), compared to outputting the data to be processed without restricting confidential information, the possibility of the confidential information being leaked to users other than those under the administrator's control can be reduced.

[0123] According to (((3))), compared to outputting the data to be processed without encrypting the confidential information, the possibility of the confidential information being leaked to users other than those under the administrator's control can be reduced.

[0124] According to (((4))), the management device can decrypt the confidential information.

[0125] According to (((5))), a user who has already sent an instruction via the management device can send an instruction without going through the management device, thereby shortening the waiting time until the data to be processed related to that instruction is output, and obtaining unrestricted data to be processed.

[0126] According to (((6))), even if an instruction is received without going through the management device, the terminals that output the data to be processed related to the instruction without restriction can be limited to terminals that have already sent the instruction via the management device within a predetermined period.

[0127] According to (((7))), even if an instruction is received without going through a management device, the terminals that output the data to be processed related to the instruction without restriction can be limited to terminals whose usage period is the first period or longer. [Explanation of Symbols]

[0128] 10. Information Processing Systems 20 devices 30 Management device 40 Information Processing Devices 41 CPU (Processor)

Claims

1. Equipped with a processor, The aforementioned processor, The information processing device receives an instruction from a terminal not under the control of the administrator managing the authentication system to which the device belongs to output the data to be processed to the terminal. Determine whether the instruction was received via a management device under the control of the administrator. If it is determined that the instruction was received via a management device under the control of the administrator, the data to be processed is output without restriction; if it is determined that the instruction was received without going through the management device, the data to be processed is output with restriction. Information processing device.

2. The data to be processed includes confidential information, The aforementioned processor, If the instruction is received via the management device, the data to be processed is output without restricting the confidential information; if the instruction is received without going through the management device, the data to be processed is output in a manner that prevents the confidential information from being leaked to users other than those under the administrator's control. The information processing apparatus according to claim 1.

3. If the processor receives the instruction via the management device, it outputs the data to be processed without encrypting the confidential information; if the processor receives the instruction without going through the management device, it encrypts the confidential information and outputs the data to be processed. The information processing apparatus according to claim 2.

4. The aforementioned confidential information is pre-encrypted information, If the processor receives the instruction via the management device, it causes the management device to decrypt the secret information; if the processor receives the instruction without going through the management device, it does not cause the secret information to be decrypted. The information processing apparatus according to claim 2.

5. Even if the processor receives the instruction without going through the management device, if it has already received the instruction via the management device, it will output the data to be processed without restriction. The information processing apparatus according to claim 1.

6. Even if the processor receives the instruction without going through the management device, if it has already received the instruction via the management device within a predetermined period, it will output the data to be processed without restriction. The information processing apparatus according to claim 5.

7. The aforementioned processor, Even if the instruction is received without going through the management device, if the usage period of the terminal that sent the instruction is the first period or longer, and the instruction has already been received via the management device, the data to be processed will be output without restriction. The information processing apparatus according to claim 5.

8. The information processing device according to claim 1, the terminal, and the management device are provided, The terminal transmits the instruction to the management device or the information processing device. The management device receives the instruction from the terminal and transmits the received instruction to the information processing device. The information processing device determines whether it has received the instruction via a management device under the control of the administrator. If it determines that it has received the instruction via the management device, it outputs the processing target data associated with the instruction without restriction. If it determines that it has received the instruction without going through the management device, it outputs the processing target data with restrictions. Information processing system.

9. The system receives an instruction from a terminal not under the control of the administrator managing the information processing device to output the data to be processed to the terminal. Determine whether the instruction was received via a management device under the control of the administrator. If it is determined that the instruction was received via a management device under the control of the administrator, the data to be processed is output without restriction; if it is determined that the instruction was received without going through the management device, the data to be processed is output with restriction. To have the computer perform the process. Information processing program.

Images