JP2014021688A - Security management system, server, image forming device, security management program, and security management method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a security management system which can secure user's convenience without degrading a level of security.SOLUTION: In a security management system comprising a plurality of authentication devices, when a second authentication device receives authentication request from a user, an authentication method to be applied to user authentication in the second authentication device is determined on the basis of an authentication method which is applied to user authentication in a first authentication device and has already succeeded in the user authentication of the user (S4 and S5). The second authentication device performs the user authentication by reading out user information required for the determined authentication method (S6). When the user authentication in the second authentication device is successful, the authentication method applied to the user authentication is stored in a server (S7 and S8).

Description

  The present invention relates to a security management system, a server, an image forming apparatus, a security management program, and a security management method, and in particular, a security management system, a server, an image forming apparatus, a security management program for performing user authentication using a plurality of authentication methods, And a security management method.

  As an example of security management, Japanese Patent Laying-Open No. 2005-100219 (hereinafter referred to as Patent Document 1) discloses that authentication processing is duplicated by confirming completion of authentication processing and operating the gate when the vehicle passes through the gate. And a system that reliably passes a vehicle that has been authenticated is disclosed.

  As an example of security management in a general office environment, Japanese Patent Laid-Open No. 5-231054 (hereinafter, Patent Document 2) discloses a management method in which a plurality of doors can be sequentially passed by user authentication with one door. doing. Thereby, the user can reduce the trouble of performing the authentication multiple times.

  In addition, as security management when using devices in an area, Japanese Patent Application Laid-Open No. 2011-146061 (hereinafter referred to as Patent Document 3) assigns a management code every time user authentication is performed when entering an area. A management method is disclosed in which a device can be used using a management code. As a result, it is possible to reduce the trouble of performing user authentication every time the user uses the apparatus.

  On the other hand, in these management methods, since all devices (doors) can be used by a single user authentication, the security level is not necessarily high.

  In order to improve the security level, Japanese Patent Laid-Open No. 2006-343886 (hereinafter referred to as Patent Document 4) discloses a management system that performs user authentication using different authentication information between an entrance / exit management device and an indoor device. Disclosure.

JP 2005-100219 A JP-A-5-231054 JP 2011-146061 A JP 2006-343886 A

  However, when a security management method using a plurality of types of authentication methods as disclosed in Patent Document 4 is adopted, there is a problem that an authentication method is defined for each authentication device, and user authentication work becomes complicated.

  The present invention has been made in view of such problems, and a security management system, a server, an image forming apparatus, a security management program, and the like that can ensure user convenience without lowering the level of security. And to provide a security management method.

  In order to achieve the above object, according to an aspect of the present invention, a security management system includes a plurality of authentication devices that are installed in the same area and can perform user authentication using the same plurality of authentication methods. Each of the plurality of authentication devices includes a receiving means for receiving an authentication request from a user, and a user in another authentication device among the plurality of authentication devices that has already been successfully authenticated after entering the area. Based on the authentication method in authentication, a determination unit for determining an authentication method for user authentication performed in response to an authentication request received by the reception unit, and reading user information necessary for the authentication method determined by the determination unit A reading means for authentication, an authentication means for performing user authentication with the authentication method determined by the determination means using the user information, and an authentication method in the authentication means when the user authentication in the authentication means is successful. Storage means for storing in the storage device.

  Preferably, the determination unit determines an authentication method for user authentication to be performed in response to the authentication request from authentication methods other than the authentication method in the user authentication in another authentication device among the plurality of authentication methods.

  More preferably, when all of the plurality of authentication methods have been successfully authenticated in user authentication with another authentication device, the determination unit uses the authentication method designated by the user among the plurality of authentication methods as an authentication request. An authentication method for user authentication is performed accordingly.

  Preferably, the first authentication device of the plurality of authentication devices is included in the area entrance / exit management system, and the second authentication device of the plurality of authentication devices is included in the image forming apparatus installed in the area. It is.

  More preferably, when the plurality of authentication methods are the first authentication method and the second authentication method, when the user enters the area in the first authentication device, the authentication by the first authentication method is successful. In this case, the second authentication device performs user authentication of the user using the second authentication method, and the authentication method used by the first authentication device when the user leaves the area thereafter is the first authentication method. The authentication method is determined by the user's selection between the authentication method and the second authentication method.

  According to another aspect of the present invention, the server is a server for managing user authentication in a plurality of authentication devices, each of which is installed in the same area and can perform user authentication using the same plurality of authentication methods. A storage means for storing an authentication method for user authentication when a user who has entered the area has succeeded in user authentication in the authentication device, and a user who has received an authentication request from a user among a plurality of authentication devices. Determination means for determining an authentication method for one authentication device based on an authentication method in user authentication in another authentication device of the first authentication device that has already been successfully authenticated after the user enters the area With.

  Preferably, the determination unit determines an authentication method for user authentication to be performed in response to the authentication request from authentication methods other than the authentication method in the user authentication in another authentication device among the plurality of authentication methods.

  More preferably, when all of the plurality of authentication methods have been successfully authenticated in user authentication with another authentication device, the determination unit uses the authentication method designated by the user among the plurality of authentication methods as an authentication request. An authentication method for user authentication is performed accordingly.

  According to still another aspect of the present invention, the image forming apparatus is an image forming apparatus that is installed in the same area as the authentication apparatus and can perform user authentication using the same plurality of authentication methods as the authentication apparatus, and authentication from a user User authentication to be performed in response to the authentication request received by the receiving means based on the receiving means for receiving the request and the authentication method in the user authentication in the authentication device that has already succeeded in user authentication since the user entered the area. A determination means for determining an authentication method for the user, a reading means for reading user information required by the authentication method determined by the determination means, and a user using the authentication method determined by the determination means using the user information When the authentication means for performing authentication and user authentication by the authentication means are successful, the authentication method by the authentication means is stored in the storage device. And a order storage means.

  Preferably, the determination unit determines an authentication method for user authentication performed in response to the authentication request from authentication methods other than the authentication method in the user authentication in the authentication device among the plurality of authentication methods.

  More preferably, when all of the plurality of authentication methods are successfully authenticated in the user authentication in the authentication device, the determining unit determines the authentication method designated by the user among the plurality of authentication methods in response to the authentication request. It is an authentication method for performing user authentication.

  Preferably, the image forming apparatus includes the storage device, and further includes an acquisition unit configured to acquire, from the authentication apparatus, information specifying an authentication method for user authentication as authentication information.

  According to still another aspect of the present invention, the security management program is a program for causing an authentication device capable of user authentication by a plurality of authentication methods to execute user authentication, the step of receiving an authentication request from a user, and authentication. Another authentication device that is installed in the same area as the device and can perform user authentication using the same multiple authentication methods as the authentication device, and has already been successfully authenticated after the user enters the area. A step of determining an authentication method for user authentication performed in response to an authentication request, a step of reading user information necessary for the determined authentication method, and a determination using the user information The steps to perform user authentication with the specified authentication method and if the user authentication is successful And a step of storing the system in the storage device in the authentication apparatus.

  According to still another aspect of the present invention, a security management method is a security management method in a security management system including a plurality of authentication devices that are installed in the same area and can perform user authentication using the same plurality of authentication methods. In the first authentication device of the plurality of authentication devices, the step of accepting the authentication request from the user, and among the plurality of authentication devices, the user authentication has already been successful after the user enters the area. A step of determining an authentication method for user authentication in the first authentication device based on an authentication method in user authentication in another authentication device of the first authentication device, and a user required in the determined authentication method A step of reading information by the first authentication device, and an authentication method determined by using the user information by the first authentication device. Performing a Za authentication, if the user authentication is successful in the first authentication device, and a step of storing the authentication method in the user authentication storage device.

  According to the present invention, in the security management system, user convenience can be ensured without lowering the security level.

It is a figure which shows the specific example of a structure of the security management system (henceforth a system) concerning embodiment. It is a block diagram which shows the specific example of the apparatus structure of MFP (Multi-Functional Peripheral) contained in a system. It is a block diagram which shows the specific example of the apparatus structure of the authentication apparatus and server which are included in a system. It is a figure for demonstrating the security management in a system. It is a figure showing the flow of security management in a system. It is a figure showing the specific example of the authentication information memorize | stored in a server. 2 is a block diagram illustrating a specific example of a functional configuration of an MFP. FIG. 6 is a flowchart showing an operation flow in the MFP when the MFP functions as an authentication apparatus.

  Embodiments of the present invention will be described below with reference to the drawings. In the following description, the same parts and components are denoted by the same reference numerals. Their names and functions are also the same.

<System configuration>
FIG. 1 is a diagram showing a specific example of the configuration of a security management system (hereinafter abbreviated as system) according to the present embodiment.

  Referring to the drawing, a system according to the present embodiment includes MFP 100 as an example of an image forming apparatus, an entrance / exit management system 300 disposed at an entrance of an area where MFP 100 is installed, and server 500.

  The apparatus installed in the area is not limited to the image forming apparatus, and may be a PC (personal computer) or the like. Further, the image forming apparatus is not limited to the MFP, and may be a printer, a copier, or the like.

  The entrance / exit management system 300 includes an authentication device 301 for performing user authentication, and an opening / closing control device 30 for controlling the unlocking / locking of the door lock installed at the area entrance according to the result.

  These devices are connected to a network such as a LAN (Local Area Network) and can communicate with each other.

  The system may further include an entrance / exit management system 300 installed at an entrance of another area, or may include a plurality of MFPs. Moreover, when an exit and an entrance differ, the entrance / exit management system is installed in each, and all of these may be included in this system. Therefore, both MFP 100 and entrance / exit management system 300 may be a plurality of apparatuses. When a plurality of these devices are included, MFPs 100A, 100B,... And entrance / exit management systems 300A, 300B,.

<Device configuration>
FIG. 2 is a block diagram showing a specific example of the device configuration of MFP 100.

  Referring to the figure, MFP 100 includes a CPU (Central Processing Unit) 10 that is an arithmetic device for overall control, a ROM (Read Only Memory) 11 for storing programs executed by CPU 10, and CPU 10. A RAM (Random Access Memory) 12 for functioning as a work area when executing the program, a scanner 13 for optically reading a document placed on a document table (not shown), and obtaining image data, and an image A printer 14 for fixing data on printing paper, an operation panel 15 including a touch panel for displaying information and receiving operation inputs to the MFP 100, and a memory 16 for storing image data and the like , Communication for controlling communication with the entrance / exit management system 300 and the server 500 through the network. It includes a controller 17, a reading device 18 for reading the user information used for user authentication.

  As will be described later, the MFP 100 can use a plurality of types of authentication methods, and the reading device 18 includes respective reading devices for reading user information used in each authentication method. For example, when the first authentication method is a card method in which user authentication is performed using user information stored in a security card, the reading device 18 includes a reading device that accesses the security card and reads the user information. When the second authentication method is a vein authentication method that performs user authentication using the vein pattern of the palm or fingertip as user information, the reading device 18 includes a reading device that scans the vein pattern.

  Both the authentication device 301 and the server 500 included in the entrance / exit management system 300 may be configured by a general PC. However, the authentication device 301 includes a reading device for reading user information used for user authentication.

  FIG. 3 is a block diagram showing a specific example of the device configuration of the authentication device 301 and the server 500, and shows the configuration of a general PC. In the figure, the configuration with the reference number is a configuration common to the authentication apparatus 301 and the server 500.

  That is, referring to the drawing, the authentication device 301 includes a CPU 30 that is an arithmetic device for overall control, a ROM 31 for storing a program executed by the CPU 30, and work when the CPU 30 executes the program. A RAM 32 for functioning as an area, a memory 33 for storing various information, a communication unit 34 for controlling communication with the MFP 100 and the server 500 via the network, and user information used for user authentication are read. And a reading device 35.

  The server 500 includes a CPU 50 that is an arithmetic device for overall control, a ROM 51 for storing programs executed by the CPU 50, and a RAM 52 for functioning as a work area when the CPU 50 executes programs. A memory 53 for storing information representing an authentication state for each user, which will be described later, and a communication unit 54 for controlling communication with the MFP 100 and the entrance / exit management system 300 via the network.

<Overview of operation>
In the system according to the present embodiment, MFP 100 has an authentication function, and a plurality of authentication methods can be used for both authentication device 301 and MFP 100 of entrance / exit management system 300. As an example, in the following description, it is assumed that two types of authentication methods, a first authentication method and a second authentication method, can be used. Of course, three or more types of authentication methods can be used.

  Furthermore, in the following description, as described above, the first authentication method is a card method for performing user authentication using user information stored in the security card, and the second authentication method is a palm or fingertip vein pattern. A vein authentication method for performing user authentication using user information as user information. Of course, the authentication method is not limited to these methods.

  In this example, the reading device 18 of the MFP 100 and the reading device 35 of the authentication device 301 each include a reading device that accesses the security card to read user information and a reading device that scans the vein pattern.

  FIG. 4 is a diagram for explaining security management in the system according to the present embodiment.

  Referring to the figure, a user who intends to enter the first area where MFP 100 is installed performs user authentication with entrance / exit management system 300A installed at the entrance / exit. Here, it is assumed that the first authentication method is selected from the first authentication method and the second authentication method.

  A user who succeeds in user authentication in the entrance / exit management system 300A and enters the first area, the second area set in the first area without using the MFP 100 in the first area. And a route (route # 2) for entering the second area after using the MFP 100. Instead of the operation of entering the second area, an operation of exiting the first area may be used.

  In the case of the route # 1, the authentication device 301 of the entrance / exit management system 300A installed at the entrance / exit of the first area becomes the first authentication device, and the authentication of the entrance / exit management system 300B installed at the entrance / exit of the second area The device 301 becomes the second authentication device. That is, the user authenticates the user with the entrance / exit management system 300B after the user authentication with the entrance / exit management system 300A.

  In the entrance / exit management system 300B as the second authentication device, user authentication is performed by an authentication method not selected by the user authentication in the entrance / exit management system 300A which is the first authentication device earlier than the second authentication device. As a result, the user who enters the second area (or leaves the first area) has succeeded in user authentication in all the authentication methods of the first authentication method and the second authentication method, and has a high security level. Become.

  On the other hand, in the case of the route # 2, the authentication device 301 of the entrance / exit management system 300A installed at the entrance / exit of the first area is the first authentication device, the MFP 100 in the first area is the second authentication device, The authentication device 301 of the entrance / exit management system 300B installed at the entrance / exit of the area 2 is the third authentication device. That is, the user performs user authentication with MFP 100 after user authentication with entry / exit management system 300A, and further performs user authentication with entry / exit management system 300B.

  In MFP 100 as the second authentication device, user authentication is performed by an authentication method not selected by user authentication in entrance / exit management system 300A which is the first authentication device earlier than that. That is, user authentication is performed by the second authentication method.

  If user authentication is successful in MFP 100 as the second authentication device, the user is successfully authenticated by all authentication methods of the first authentication method and the second authentication method, and enters a high security state. Therefore, it is assumed that the user authentication may be performed by any authentication method in the entrance / exit management system 300B as the third authentication device.

  This is the same when a plurality of apparatuses (MFPs 100A, 100B,...) In the first area are used in order. That is, when user authentication is performed in order of MFP 100B as the third authentication device, MFP 100C as the fourth authentication device,..., The user authentication is already successful in all authentication methods in the authentication devices after the third authentication device. Therefore, user authentication may be performed by any authentication method.

  As a result, it is possible to freely select an authentication method in the authentication devices after the third authentication device while ensuring a security level, thereby improving user operability. For example, since the user can perform user authentication with an authentication device after the third authentication device by fixing to one authentication method such as a card method, the user can check the authentication method for each authentication device and read the user information. There is no need to perform the operation.

FIG. 5 is a diagram showing the flow of security management in this system.
Referring to the figure, when a user performs an authentication operation at first authentication device which is entrance / exit management system 300A, user authentication is performed using a predetermined authentication method or a selected authentication method (step S1). ).

  In the case of successful authentication, information for identifying a user such as a user ID and information for identifying an authentication method that has been successfully authenticated are sent to the server as authentication information (step S2) and stored in the server (step S3).

  Thereafter, when the user performs an authentication operation using a second authentication device such as MFP 100, the second authentication device reads the authentication information of the server (step S4), and specifies an authentication method that has already been successfully authenticated for the user. Thus, an authentication method used for user authentication is determined (step S5). When the first authentication apparatus has succeeded in the authentication using the first authentication method, the second authentication apparatus uses one of the other authentication methods (in this example, the second authentication method) as the user. The authentication method used for authentication is determined. Then, user authentication is performed by the authentication method (step S6).

  If the authentication is successful, authentication information is sent to the server (step S7) and stored in the server (step S8), as with the first authentication device.

  Thereafter, when the user performs an authentication operation with the third authentication device such as the entrance / exit management system 300B or the MFP 100B, the third authentication device reads the authentication information of the server (step S9), and the user has already been successfully authenticated. Identify the authentication method. In this example, since the two types of authentication methods of the first authentication method and the second authentication method are used in the system, at this point, the user has already been successfully authenticated by both authentication methods. Yes. Therefore, the third authentication device can use any authentication method and accepts the selection of the authentication method from the user. Then, the selected user authentication is performed (step S10).

  If the authentication is successful, the authentication information may be sent to the server (step S11) and stored in the server (step S12) as in the case of the first authentication device. The authentication information in subsequent authentication devices may not be stored.

FIG. 6 is a diagram showing a specific example of authentication information stored in server 500.
Referring to the figure, server 500 stores authentication success in each authentication method for each piece of information (user ID) that identifies a user.

<Functional configuration>
FIG. 7 is a block diagram showing a specific example of a functional configuration for causing MFP 100 to function as an authentication apparatus. Each function shown in the figure is mainly formed on the CPU 10 by executing the program stored in the ROM 11 on the RAM 12 by the CPU 10 of the MFP 100. At least a part of the functions shown in FIG. May be realized by the hardware configuration shown in FIG.

  Referring to the figure, CPU 10 accesses server 500 via communication controller 17, and authentication information reading unit 101 for reading authentication information about a user who has performed an authentication operation, and authentication stored in server 500. An authentication method determining unit 102 for determining an authentication method for the user based on the information, an authentication processing unit 103 for performing user authentication with the determined authentication method, and information for identifying a user when authentication is successful And the authentication information storage unit 104 for storing the authentication information in the server 500 by outputting the authentication information including the information specifying the authentication method to the server 500 via the communication controller 17, and the determined authentication User information input unit 1 for receiving input of user information used in the method from the reading device 18 5 and a.

  There are various methods for inputting user information. That is, as an example, all of the plurality of reading devices included in the reading device 18 may perform a reading operation, and the read user information may be input to the CPU 10, or the CPU 10 has a function of controlling the reading device 18. Of the plurality of reading devices included in the reading device 18, a reading device for reading user information necessary for the determined authentication method may be activated to read the user information.

  If there is an authentication method that has not been successfully authenticated for the user based on the authentication information stored in the server 500, the authentication method determination unit 102 selects one authentication method from among the authentication methods in the MFP 100. Determine as. The determined authentication method may be notified by being displayed on the operation panel 15 or the like.

  If there are three or more authentication methods and there are a plurality of authentication methods that have not been successfully authenticated, the authentication method determination unit 102 may determine one of these authentication methods. These authentication methods may be presented to be selectable, and one authentication method may be determined based on the user operation.

  If all authentication methods are successful, the authentication method determination unit 102 determines that one authentication method can be selected without determining one authentication method. In this case, notification to that effect may be provided on the operation panel 15.

  FIG. 7 shows the functional configuration of the CPU 10 of the MFP 100, but the CPU 30 of the authentication device 301 of the entry / exit management system 300 also has the same function.

<Operation flow>
FIG. 8 is a flowchart showing an operation flow in MFP 100 when MFP 100 functions as an authentication apparatus. The operation shown in the flowchart is realized by causing the CPU 10 of the MFP 100 to execute a program stored in the ROM 11 while expanding the program in the RAM 12 to exhibit the functions shown in FIG.

  Although FIG. 8 shows the operation in MFP 100, the same operation is performed in authentication device 301 of entry / exit management system 300 having the functions shown in FIG.

  Referring to the figure, when receiving a user authentication request from the user (YES in step S101), the CPU 10 accesses the server 500 and reads authentication information about the user (step S103). Based on the read authentication information, CPU 10 identifies an authentication method that has already been successfully authenticated for the user, and determines an authentication method to be performed by MFP 100. That is, when there is an authentication method in which user authentication has not been successful for the user (YES in step S105), CPU 10 determines one of the authentication methods as an authentication method to be used for user authentication in MFP 100. (Step S107). In this example, since there are two types of authentication methods, the authentication method with which user authentication is not successful is determined.

  When the authentication information of FIG. 6 is stored in the server 500, if the user who requested the user authentication in step S101 is the user A or the user D, these users have been successfully authenticated by the first authentication method. In the second authentication method, authentication is not yet successful. Therefore, in this case, in step S107, the CPU 10 determines that the authentication method used for user authentication is the second authentication method, assuming that it functions as the second authentication device. When the user who has requested user authentication in step S101 is the user B or the user C, these users have been successfully authenticated by the second authentication method and have not yet been successfully authenticated by the first authentication method. Therefore, in this case, in step S107, the CPU 10 determines that the authentication method used for user authentication is the first authentication method, assuming that it functions as the second authentication device.

  If all authentication methods have already been successfully authenticated (NO in step S105), the CPU 10 determines that any authentication method may be used and determines that the authentication method can be selected (step S109). In this case, an available authentication method may be presented to be selectable, and a user's selection may be accepted from the available authentication methods, or a preset authentication method may be selected.

<Effect of Embodiment>
By performing the above operation in each authentication device included in the system according to the present embodiment, when each authentication device can use a plurality of types of authentication methods, each authentication device has the same number of authentication methods. In the authentication devices after the user authentication in order, the security level for the number of types of the user is maintained, so that the authentication method can be freely selected.

  As a result, the degree of freedom in selecting the authentication method can be given without lowering the security level, and the operability for the user can be improved.

<Modification>
In the above example, each authentication device reads the authentication information stored in the server 500 and determines the authentication method. However, the server 500 that has acquired the authentication information from each authentication device uses the next authentication device. The authentication method in the authentication apparatus may be determined and notified by receiving a notification that there has been an authentication request from. That is, the CPU 50 of the server 500 may include the functions illustrated in FIG.

  Further, server 500 may be included in MFP 100. In other words, MFP 100 installed in the area may have the function of server 500, and authentication information obtained when entry / exit management system 300 or another device functions as an authentication device may be acquired and centrally managed. Further, as described above, the MFP 100 may determine and notify the authentication method in the authentication apparatus by receiving a notification that the authentication request has been received from the next authentication apparatus.

  Further, it is possible to provide a program for causing the MFP 100, each authentication device, or the CPU of the server 500 to execute the process for determining the authentication method. Such a program is recorded on a computer-readable recording medium such as a flexible disk attached to the computer, a CD-ROM (Compact Disk-Read Only Memory), a ROM, a RAM, and a memory card, and provided as a program product. You can also. Alternatively, the program can be provided by being recorded on a recording medium such as a hard disk built in the computer. A program can also be provided by downloading via a network.

  The program according to the present invention is a program module that is provided as a part of a computer operating system (OS) and calls necessary modules in a predetermined arrangement at a predetermined timing to execute processing. Also good. In that case, the program itself does not include the module, and the process is executed in cooperation with the OS. A program that does not include such a module can also be included in the program according to the present invention.

  The program according to the present invention may be provided by being incorporated in a part of another program. Even in this case, the program itself does not include the module included in the other program, and the process is executed in cooperation with the other program. Such a program incorporated in another program can also be included in the program according to the present invention.

  The provided program product is installed in a program storage unit such as a hard disk and executed. The program product includes the program itself and a recording medium on which the program is recorded.

  The embodiment disclosed this time should be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

  10, 30, 50 CPU, 11, 31, 51 ROM, 12, 32, 52 RAM, 13 Scanner, 14 Printer, 15 Operation panel, 16, 33, 53 Memory, 17 Communication controller, 18, 35 Reader, 30 Open / close Control device, 34, 54 communication unit, 100 MFP, 101 authentication information reading unit, 102 authentication method determination unit, 103 authentication processing unit, 104 authentication information storage unit, 105 user information input unit, 300, 300A, 300B entrance / exit management system 301 Authentication device, 500 server.

Claims (14)

Includes multiple authentication devices installed in the same area, each capable of authenticating users with the same multiple authentication methods,
Each of the plurality of authentication devices is
An accepting means for accepting an authentication request from a user;
The authentication request received by the receiving unit based on an authentication method in the user authentication in another authentication device that has already succeeded in user authentication after the user enters the area among the plurality of authentication devices. Determining means for determining an authentication method for user authentication according to
Reading means for reading user information required by the authentication method determined by the determining means;
Authentication means for performing user authentication in the authentication method determined by the determination means using the user information;
A security management system comprising: storage means for storing the authentication method in the authentication means in a storage device when user authentication in the authentication means is successful.   The determination unit determines an authentication method for user authentication performed in response to the authentication request from authentication methods other than the authentication method in the user authentication in the other authentication device among the plurality of authentication methods. The security management system according to claim 1.   When all of the plurality of authentication methods are successfully authenticated in the user authentication in the other authentication device, the determination unit determines the authentication method designated by the user among the plurality of authentication methods. The security management system according to claim 2, wherein an authentication method for user authentication is performed in response to an authentication request. A first authentication device of the plurality of authentication devices is included in the area entrance / exit management system,
The security management system according to claim 1, wherein a second authentication device of the plurality of authentication devices is included in an image forming apparatus installed in the area.   In the case where the plurality of authentication methods are a first authentication method and a second authentication method, authentication in the first authentication method is performed when the user enters the area in the first authentication device. If successful, the second authentication device performs user authentication of the user using the second authentication method, and then the first authentication device when the user leaves the area. The security management system according to claim 4, wherein the authentication method is determined to be an authentication method designated by the user's selection of the first authentication method and the second authentication method. A server for managing user authentication with a plurality of authentication devices installed in the same area and capable of user authentication with the same plurality of authentication methods.
Storage means for storing an authentication method in the user authentication when a user who has entered the area has succeeded in user authentication in the authentication device;
Other authentications of the first authentication device for which the user authentication has already been successful since the user entered the area with respect to the first authentication device that has received an authentication request from the user among the plurality of authentication devices. A determination unit configured to determine an authentication method based on an authentication method in the user authentication in the device.   The determination unit determines an authentication method for user authentication performed in response to the authentication request from authentication methods other than the authentication method in the user authentication in the other authentication device among the plurality of authentication methods. The server according to claim 6.   When all of the plurality of authentication methods are successfully authenticated in the user authentication in the other authentication device, the determination unit determines the authentication method designated by the user among the plurality of authentication methods. The server according to claim 7, which is an authentication method for user authentication performed in response to an authentication request. An image forming apparatus installed in the same area as the authentication apparatus and capable of user authentication with the same plurality of authentication methods as the authentication apparatus,
An accepting means for accepting an authentication request from a user;
Based on the authentication method in the user authentication in the authentication device that has already been successfully authenticated since the user entered the area, user authentication is performed in response to the authentication request received by the receiving unit. A determination means for determining an authentication method;
Reading means for reading user information required by the authentication method determined by the determining means;
Authentication means for performing user authentication in the authentication method determined by the determination means using the user information;
An image forming apparatus comprising: a storage unit configured to store the authentication method in the authentication unit in a storage device when the user authentication in the authentication unit is successful.   The determining means determines an authentication method for user authentication performed in response to the authentication request from authentication methods other than the authentication method in the user authentication in the authentication device among the plurality of authentication methods. Item 10. The image forming apparatus according to Item 9.   When all of the plurality of authentication methods have been successfully authenticated in the user authentication in the authentication device, the determination unit requests the authentication method designated by the user among the plurality of authentication methods. The image forming apparatus according to claim 10, wherein an authentication method for user authentication is performed according to the method. Including the storage device;
The image forming apparatus according to claim 9, further comprising an acquisition unit configured to acquire, as authentication information, information specifying an authentication method in the user authentication from the authentication apparatus. A program for causing an authentication device capable of user authentication with a plurality of authentication methods to execute user authentication,
Accepting an authentication request from a user;
Another authentication device installed in the same area as the authentication device and capable of user authentication by the same plurality of authentication methods as the authentication device, and the user authentication has already been successful after the user enters the area. Determining an authentication method for user authentication to be performed in response to the authentication request, based on an authentication method in the user authentication in another authentication device,
Reading the required user information with the determined authentication method;
Performing user authentication with an authentication method determined using the user information;
A security management program for causing the authentication device to execute a step of storing the authentication method in a storage device when the user authentication is successful. A security management method in a security management system including a plurality of authentication devices installed in the same area and capable of user authentication with the same plurality of authentication methods,
Accepting an authentication request from a user at a first authentication device of the plurality of authentication devices;
Based on the authentication method in the user authentication with the other authentication device of the first authentication device, the user authentication has already been successful since the user entered the area, among the plurality of authentication devices. Determining an authentication method for user authentication with one authentication device;
Reading the user information necessary for the determined authentication method with the first authentication device;
Performing user authentication with an authentication method determined using the user information in the first authentication device;
And storing the authentication method in the user authentication in a storage device when user authentication is successful in the first authentication device.

Images