JP2016122883A - Image processing apparatus, image processing system, control method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an image processing apparatus capable of saving the labor of authentication required when a plurality of users use a service that operates on a multifunction machine concentrically, in an environment where login is required, respectively, for the multifunction machine and the services operating thereon, and to provide a control method and a program.SOLUTION: After accepting input of novel user information in a state where Web services operating on a multifunction machine are displayed, a determination is made whether or not a button 704 has depressed to the next person by logging out a Web service screen 700. A user currently logged in is logged out, and login of a user registered to be logged in next in advance is started, when a determination is made that the button has depressed, otherwise advanced registration of a user is performed so as to be logged in, next to the user currently logged in.SELECTED DRAWING: Figure 15

Description

  The present invention relates to a technique related to an application used in an image processing apparatus, and more particularly to an authentication technique related to the use of an application.

  In recent years, many multifunction devices have a web browser (hereinafter referred to as the browser), and the multifunction device displays the operation screen provided by the web server on the browser of the multifunction device and uses the web service. Is also possible.

  When using the Web service as described above, authentication information must be entered to use the Web service, and the MFP itself must be authenticated to operate the MFP separately from the above. Therefore, the user must input both authentication information.

  Therefore, a system that can authenticate the MFP main body and the Web service at once is disclosed (for example, see Patent Document 1).

  In addition, the Web service as described above is often operated as an in-house system. For example, there are services that manage employee attendance, salary details, and the like.

  Since these in-house systems are expected to be used in a concentrated manner at a specific date and time, there is a possibility that the waiting time for use of the multifunction device will be longer than during normal operation of the multifunction device. There was a problem that the time required to operate the browser was the same as the number of users.

  Therefore, by enabling preceding authentication, when user authentication is performed as preceding authentication, job setting information executed by the user is held in the multifunction peripheral, and when the user becomes available, it is held. A system is disclosed that reduces the time until job execution is enabled by reflecting the acquired information in job setting information (see, for example, Patent Document 2).

JP 2014-112371 A JP 2011-198166 A

  However, according to the specifications of the conventional multifunction device, if another user is authenticated while the user is using the multifunction device, the currently used user is automatically logged out.

  In the system of Patent Document 1, the authentication information input time can be shortened by executing the authentication of the Web service and the multifunction device at the same time, but it solves the problem that the use of the multifunction device of many users concentrates on a specific date and time. I can't do it.

  Further, in the system of Patent Document 2, by providing a means for performing prior authentication, the prior authentication information is stored in the multifunction peripheral together with the job setting information set by the user, and is stored when the user uses it. By acquiring the job setting information, it can be immediately reflected in the job.

  As a result, it is possible to reduce the user operation time when the use of multifunction peripherals is concentrated, but since there is no mention of means for determining whether pre-authentication is possible for a service that is running, The user must manage the authentication information of the Web service and the multifunction peripheral, and there is a problem that the input time of the authentication information cannot be shortened.

  Therefore, in the present invention, it is possible to save the time and effort required for authentication when a plurality of users intensively use a service operating on the multifunction peripheral in an environment where login is required for the multifunction peripheral and the service operating on the multifunction peripheral. An object of the present invention is to provide an image processing apparatus, a control method, and a program.

  According to a first aspect of the present invention, there is provided an image processing system for providing a service operating in an image processing apparatus, an image processing authentication unit for performing user authentication for the image processing apparatus, and the service. Service authenticating means for performing user authentication with respect to a second user different from the first user when the first user authenticated by the service authenticating means uses the service. Storage means for storing user information for performing user authentication in the image processing authentication means.

  A second invention for solving the above-described problem is a control method of an image processing system that provides a service that operates in the image processing apparatus, and the image processing system performs user authentication for the image processing apparatus. An image processing authentication step to be performed; a service authentication step to perform user authentication for the service; and the first user who has been authenticated by the service authentication step is using the service. And a storage step of storing user information for performing user authentication in the image processing authentication step for a second user different from the first user.

  According to a third aspect of the present invention, there is provided a program that can be read and executed by an image processing system that provides a service that operates in the image processing apparatus, and the image processing system is a user for the image processing apparatus. Image processing authentication means for performing authentication, service authentication means for performing user authentication for the service, and the first user authenticated by the service authentication means when the service is used by the first user It is made to function as a memory | storage means to memorize | store the user information for performing the user authentication in the said image process authentication means with respect to the 2nd user different from this user.

  According to the present invention, in an environment where login is required for each of the MFP and a service in which the MFP is operating, a plurality of users are logged in continuously to the MFP before using the service for the MFP. The effect that it becomes possible to save the trouble of the user's authentication because each user does not repeat the login each time for the multifunction device and the service in which the multifunction device is operating by setting the standby state. Play.

1 is a system configuration diagram illustrating an example of a schematic configuration of an image processing system according to an embodiment of the present invention. It is a block diagram which shows the hardware constitutions of the subsynchronization which concerns on embodiment of this invention. It is a block diagram which shows the hardware constitutions of the Web application server and user authentication management server which concern on embodiment of this invention. It is a flowchart which shows the flow of the authentication process which concerns on embodiment of this invention. It is a flowchart which shows the flow of the authentication switching process which concerns on embodiment of this invention. It is a flowchart which shows the flow of the pre-authentication data registration process which concerns on embodiment of this invention. It is a flowchart which shows the flow of this authentication determination process which concerns on embodiment of this invention. It is a flowchart which shows the flow of this authentication process which concerns on embodiment of this invention. It is a flowchart which shows the flow of the normal authentication process which concerns on embodiment of this invention. It is a flowchart which shows the flow of the pre-authentication data registration process using the authentication tab function which concerns on embodiment of this invention. It is a flowchart which shows the flow of the pre-authentication data registration process using the tab function which concerns on embodiment of this invention. It is a block diagram which shows the structure of prior authentication management DB in embodiment of this invention. It is a block diagram which shows the structure of Web page cache DB in embodiment of this invention. It is a block diagram which shows the structure of pre-authentication object service DB in embodiment of this invention. It is a block diagram which shows the structure of a web service screen in embodiment of this invention. It is a block diagram which shows the structure of an authentication screen in embodiment of this invention. It is a block diagram which shows the structure of the deletion confirmation screen in embodiment of this invention.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.
[First Embodiment]
FIG. 1 is a configuration diagram showing a schematic configuration of an image processing system.

  FIG. 1 shows a multifunction machine 101, a Web application server 102, and a user authentication management server 103.

  The multifunction machine 101 is a form of an image processing apparatus, and is also an information processing apparatus that realizes a plurality of functions such as a print function and a scanner function. The multifunction machine 101 starts to be used after logging in by a plurality of users.

  The web application server 102 is a server computer that provides a web service using a browser installed in the multi-function peripheral 101 for each user to use.

  The user authentication management server 103 is a server computer that manages information related to users who use the system, and the user authentication management server 103 also functions as a user authentication server that authenticates users who use the multifunction machine 101.

Although it is assumed that the MFP 101, the Web application server 102, and the user authentication management server 103 are connected by the same local area network 104 (LAN 104), the Web application server 102 includes the MFP 101, The user authentication management server 103 only needs to be connected to the multi-function peripheral 101 in a state where mutual data communication is possible.
FIG. 2 is a configuration diagram illustrating a schematic configuration of hardware of the multifunction peripheral 101.

  In FIG. 2, reference numeral 216 denotes a controller unit which is connected to a scanner unit 214 functioning as an image input device and a printer unit 212 functioning as an image output device, while being connected to a LAN (for example, the LAN 104 shown in FIG. 1) or a public line ( (WAN) (for example, PSTN or ISDN) to input / output image data and device information.

  In the controller unit 216, 201 is a CPU, which is a processor for controlling the entire system. A RAM 202 is a system work memory for the CPU 201 to operate, and is also a program memory for recording a program and an image memory for temporarily recording image data.

  A ROM 203 stores a system boot program and various control programs. A hard disk drive (HDD) 204 stores various programs for controlling the system, image data, and the like.

  An operation unit interface (operation unit I / F) 207 is an interface unit with the operation unit (keyboard) 208. Further, the operation unit I / F 207 serves to transmit the key information (for example, pressing of the start button) input from the operation unit 208 to the CPU 201.

  Reference numeral 205 denotes a network interface (Network I / F), which is connected to the network (LAN 104). In addition, wireless communication is also possible, and connection is made with other devices by communication using infrared rays, Bluetooth (registered trademark), or Wi-Fi (registered trademark). Input and output data. Reference numeral 206 denotes a modem (MODEM) which is connected to a public line and inputs / outputs data such as FAX transmission / reception.

  An external interface (external I / F) 218 is an I / F unit that accepts external inputs such as USB, IEEE 1394, printer port, RS-232C, etc. In this embodiment, an IC card for a portable terminal required for authentication A card reader 219 for reading (storage medium) is connected to the external I / F unit 218.

  The CPU 201 can control reading of information from the IC card of the mobile terminal by the card reader 219 via the external I / F 218, and can acquire information read from the IC card of the mobile terminal. The above devices are arranged on the system bus 209.

  An image bus interface (IMAGE BUS I / F) 220 is a bus bridge that connects the system bus 209 and an image bus 215 that transfers image data at high speed and converts the data structure.

  The image bus 215 is configured by a PCI bus or IEEE1394. The following devices are arranged on the image bus 215.

  A raster image processor (RIP) 210 expands vector data such as a PDL code into a bitmap image. A printer interface (printer I / F) 211 connects the printer unit 212 and the controller unit 216, and performs synchronous / asynchronous conversion of image data. A scanner interface (scanner I / F) 213 connects the scanner 214 and the controller unit 216, and performs synchronous / asynchronous conversion of image data.

  An image processing unit 217 corrects, processes, and edits input image data, and performs printer correction, resolution conversion, and the like on print output image data. In addition to this, the image processing unit 217 performs rotation of image data and compression / decompression processing such as JPEG for binary image data and JBIG, MMR, MH for binary image data.

  The scanner unit 214 illuminates an image on paper as a document and scans it with a CCD line sensor, thereby converting it into an electrical signal as raster image data. The original paper is set on the tray of the original feeder, and when the apparatus user gives a reading start instruction from the operation unit 208, the CPU 201 gives an instruction to the scanner 214, and the feeder feeds the original paper one by one to read the original image. I do.

  The printer unit 212 is a part that converts raster image data into an image on paper. The method is an electrophotographic method using a photosensitive drum or a photosensitive belt, and ink is ejected from a micro nozzle array directly on the paper. There is an inkjet method for printing an image, but any method may be used. Activation of the printing operation is started by an instruction from the CPU 201. Note that the printer unit 212 has a plurality of paper feed stages so that different paper sizes or different paper orientations can be selected, and there is a paper cassette corresponding thereto.

  The operation unit 208 includes an LCD display unit, and a touch panel sheet is pasted on the LCD. The operation unit 208 displays an operation screen of the system, and when a displayed key is pressed, the position information is displayed on the operation unit I / F 207. To the CPU 201. The operation unit 208 includes, for example, a start key, a stop key, an ID key, a reset key, and the like as various operation keys.

  Note that the display unit has different display performance depending on the multifunction device. The multifunction device can be operated via a touch panel, or a printer that simply has a liquid crystal display and displays a character string (displays the print status and the name of the document being printed). The present invention is structured.

  Here, the start key of the operation unit 208 is used when starting a document image reading operation. At the center of the start key, there are two color LEDs, green and red, which indicate whether or not the start key can be used.

  Further, the stop key of the operation unit 208 serves to stop the operation in operation. The ID key of the operation unit 208 is used when inputting the user ID of the user. The reset key is used when initializing settings from the operation unit.

  The card reader 219 reads information stored in an IC card (which may be provided in the portable terminal as an IC chip) under the control of the CPU 201, and reads the read information via the external I / F 218 to the CPU 201. To notify. Further, the card reader 219 corresponds to the NFC communication standard and is configured to be able to read and write to an IC card or an IC chip of a portable terminal.

  When a portable terminal compatible with the NFC standard is held over a card reader compatible with the NFC standard, authentication is performed and the portable terminal and the multifunction device are paired. Then, it is possible to establish communication (P2P) between the held portable terminal and the multifunction device to perform data communication.

  In addition, it is also possible to take over communication (handover) to Bluetooth (registered trademark) or Wi-Fi (registered trademark), which are high-speed communication standards, and to perform communication between the portable terminal and the multifunction peripheral. For example, by holding the portable terminal over a card reader, an image stored in the portable terminal can be transmitted to the multifunction peripheral. The details of the NFC communication standard are conventional techniques, and thus the description thereof will be omitted.

  In the multifunction machine 101 described above, a platform for controlling the multifunction machine 101 exists, and an authentication application for communicating with the user authentication management server 103 is operating on this platform.

  The authentication application is stored in the HDD 204. An area on the HDD 204 is reserved for the login context that is managed by the platform and stores user information at the time of login, and various setting information.

  On the platform, an application in which the main body function of the multifunction machine 101 is extended is installed and operating. These applications are executed using the platform API.

  Through this platform, each function of the multifunction peripheral can be controlled.

  The multifunction machine 101 also stores a browser, and can also cooperate with the Web system. In this case, the screen received from the Web application server 102 is displayed using a browser.

  The command instructed on the browser is requested to the Web application server 102, and by receiving the command from the Web application server 102, the MFP 101 can execute an operation (scanning or print processing).

  With the configuration described above, the multi-function peripheral 101 can transmit the image data read from the scanner 214 to the LAN 104 and print out the print data received from the LAN 104 by the printer unit 312.

  Further, the image data read from the scanner unit 214 can be faxed to the public line by the modem 206, and the image data received by fax from the public line can be output by the printer unit 212.

  FIG. 3 is a configuration diagram illustrating a schematic configuration of hardware of the Web application server 102 and the user authentication management server 103.

  In FIG. 3, reference numeral 301 denotes a CPU that comprehensively controls each device and controller connected to the system bus 304. Further, the ROM 302 or the external memory 311 is necessary to realize a BIOS (Basic Input / Output System) or an operating system program (hereinafter referred to as OS) that is a control program of the CPU 301, or a function executed by each server or each PC. Various programs to be described later are stored.

  A RAM 303 functions as a main memory, work area, and the like for the CPU 301. The CPU 301 implements various operations by loading a program or the like necessary for execution of processing from the ROM 302 or the external memory 311 to the RAM 303 and executing the loaded program.

  An input controller 305 controls input from a keyboard (KB) 309 or a pointing device such as a mouse (not shown). A video controller 306 controls display on a display device such as a CRT display (CRT) 310.

  In FIG. 3, although described as CRT 310, the display device may be not only a CRT but also other display devices such as a liquid crystal display. These are used by the administrator as needed.

  A memory controller 307 is connected via an adapter to a hard disk (HD), flexible disk (FD), or PCMCIA card slot for storing a boot program, various applications, font data, user files, editing files, various data, and the like. The access to the external memory 311 such as a compact flash (registered trademark) memory is controlled.

  A communication I / F controller 308 is connected to and communicates with an external device via a network (for example, the LAN 104 shown in FIG. 1), and executes communication control processing on the network. For example, communication using TCP / IP is possible.

  Note that the CPU 301 enables display on the CRT 310 by executing, for example, outline font development (rasterization) processing on a display information area in the RAM 303. Further, the CPU 301 enables a user instruction with a mouse cursor (not shown) on the CRT 310.

  Various programs to be described later for realizing the present invention are recorded in the external memory 311 and are executed by the CPU 301 by being loaded into the RAM 303 as necessary. Furthermore, definition files and various information tables used when executing the program are also stored in the external memory 311, and detailed descriptions thereof will be described later.

  Hereinafter, with reference to FIG. 4, an overall flow regarding the authentication processing in the present embodiment will be described. Note that this processing is executed under the control of the CPU of the multifunction machine 101.

  In step S101, first, it is determined whether or not the authentication status of the multi-function peripheral 101 is valid. If it is determined that it is valid, the process proceeds to step S102. If it is not determined that it is valid, step S110 is performed. Proceed to the process.

  In step S102, it is determined whether or not the browser is activated. If it is determined that the browser is activated, the process proceeds to step S103. If it is not determined that the browser is activated, the process proceeds to step S110. Proceed.

  In step S103, the pre-authentication target service DB 600 (see FIG. 14) is accessed, and a specific service list is acquired. In step S104, the currently activated Web service is included in the specific service list acquired in step S103. Determine if it exists.

  If it is determined that there is a service activated in the specific service list, the process proceeds to step S105. If it is not determined that the service is present, the process proceeds to step S110.

  The pre-authentication target service DB 600 shown in FIG. 14 has information related to the time zone during which the Web service is provided, a service name 601 indicating the name of the Web service, and a service providing URL 602 indicating the URL that provides the Web service. And a service providing time 603 indicating a time zone in which the Web service is provided.

  In step S105, it is determined whether or not there is paper in the paper discharge tray. If it is determined that there is paper in the paper discharge tray, the process proceeds to step S104. If not, the process proceeds to step S107. Proceed.

  In step S106, input of authentication information of a new user is accepted by a method such as detecting that an IC card in which information related to the user owned by the user is recorded is inserted into the multi-function peripheral 101. In step S107, Disable the authentication switching function and end the whole process.

  The authentication switching function here refers to a function provided on the Web service screen 700, which is displayed on the Web service screen 700 shown in FIG.

  For example, in the case of a Web service capable of viewing a salary statement, the web service screen 700 is a button 701 for viewing a statement for pressing when referring to the salary statement, and a statement for pressing when printing the statement. A button 702, a logout button 703 to be pressed when logging out from the Web service, and a logout to the next person for logging out and logging in the next user The button 704 is provided, and the authentication switching function indicates the button 704 to the next person after logging out.

  Note that it is also possible to validate the authentication switching function by eliminating the processing of step S105, step S107, and step S108.

  In addition, regarding the button 704 for logging out to the next person, the log-out and the next button 704 may be performed in a manner that takes a configuration that is already incorporated when the web service is provided in advance or when a Web page to be described later is cached. A mode in which a button 704 for a person is incorporated into a Web page may be adopted.

  In step S108, the authentication switching function is validated. Then, in step S109, it is determined whether or not an authentication switching instruction has been issued. If it is determined that an instruction has been issued, the process proceeds to step S111. A process (detailed later) is executed, and the entire process is completed.

  Regarding step S109, specifically, when the user logs out and the button 704 is pressed to the next person, it is determined that an instruction to switch authentication is given.

  On the other hand, if it is determined in step S109 that authentication switching has not been instructed, the process proceeds to step S112. In step S112, a pre-authentication data registration process (described later in detail) is executed, and the entire process ends. .

  In step S110, a normal authentication process (details will be described later) is executed, and the entire process ends.

  Hereinafter, the flow of the authentication switching process according to the present embodiment will be described with reference to FIG. Note that this processing is executed under the control of the CPU of the multifunction machine 101.

  In step S201, an instruction to switch to the next user is accepted. In step S202, the user currently logged in to the web service is logged out, and the web service is not authenticated (unusable state).

  In step S203, a pre-authenticated user list is acquired from the pre-authentication management DB 400 (details will be described later) shown in FIG. 12, and in step S204, it is determined whether or not the user list exists in step S203. The process proceeds to step S205, and if it is not determined that it exists, the process proceeds to step S213.

  In step S205, the user ID with the earliest pre-authentication time is acquired from the user list acquired in step S203. In step S206, the authentication screen (see FIG. 16) is displayed on the browser, and the user acquired in step S205 is displayed. The user name specified from the ID is displayed on the authentication screen (see FIG. 16, login name 801). The user name can be acquired from the user authentication management server 103.

  In step S207, it is determined whether there is an authentication end request. If it is not determined that there is an authentication end request, the process proceeds to step S208. If it is determined that there is a request, the process proceeds to step S213. Proceed.

  As a method for determining whether or not there is a request for termination of authentication, for example, when the button 802 for normal authentication provided on the authentication screen 800 is pressed, it is determined that a request for termination of authentication has been made.

  The authentication screen 800 shown in FIG. 16 also includes a login name 801 for displaying the name of the user who has logged into the multifunction machine 101.

  In step S208, the authentication information input in step S106 is accepted, and in step S209, the authentication determination process (details will be described later) is performed.

  In step S210, it is determined whether or not the main authentication determination process in step S209 is successful. If it is not determined that the authentication is successful, the process proceeds to step S211 and an authentication error screen (not shown) is displayed, and it is determined that the authentication is successful. If so, the process proceeds to step S212. In step S212, the main authentication process (details will be described later) is performed, and the authentication switching process is terminated. In step S213, the normal authentication process (details will be described later) is executed. Exit.

  Hereinafter, the flow of the pre-authentication data registration process in the present embodiment will be described with reference to FIG. Note that this processing is executed under the control of the CPU of the multifunction machine 101.

  In step S301, the ID of the new user is registered in the pre-authentication management DB 400 (see FIG. 12), and in step S302, the page content of the web page is registered in the web page cache DB 500 (FIG. 13).

  The pre-authentication management DB 400 shown in FIG. 12 is a table for registering information related to each user who has been authenticated in advance so that a plurality of users can use the Web service together, and uniquely identifies the user. A user ID 401, a Web page cache ID 402 for uniquely identifying a cached Web page, and a print job ID 403 for uniquely identifying a print job for which the user has instructed printing.

  A web page cache DB 500 shown in FIG. 13 is a table for registering information related to a web page related to a dedicated web service for each user. A web page cache ID 501 for uniquely identifying a cached web page, a web page Is provided with data 502 indicating various data necessary for creating the file.

  In step S303, a web page cache ID associated with the cached web page is generated. In step S304, the web page cache ID generated in step S303 is registered in the pre-authentication management DB 400 (web page cache ID 402).

  In step S305, the past print history of the authenticated user is referred to, and in step S306, it is determined whether or not there is a record printed using the web service in the print history referred to in step S305.

  As for the print history, a print job ID for specifying a print job is stored corresponding to the Web service as a result of printing using any Web service.

  In addition, about the process which concerns on step S305 from step S305, it is also possible to take the aspect which is not performed.

  If it is determined that it exists, the process proceeds to step S307, and if it is not determined that it exists, this process ends.

  In step S307, a print job is generated based on the print history. In step S308, the pre-authentication data registration process is completed by registering an ID for uniquely identifying the print job in the print job ID 403 of the pre-authentication management DB 400. To do.

  Hereinafter, with reference to FIG. 7, the flow of the authentication determination process in the present embodiment will be described. Note that this processing is executed under the control of the CPU of the multifunction machine 101.

  In step S401, a user ID is acquired from the authentication information input by the user in step S208, and in step S402, a pre-authenticated user list is acquired by accessing the pre-authentication management DB 400.

  In step S403, the user ID with the earliest registration time is acquired from the user list acquired in step S402.

  In step S404, the user ID acquired in step S401 is compared with the user ID acquired in step S403. In step S405, it is determined whether or not the compared user IDs match.

  If it is not determined that they match, the process proceeds to step S406. If it is determined that they match, the process proceeds to step S411.

  In step S406, the preset valid time of the user whose registration time is the earliest is acquired. In step S407, it is determined whether or not the valid time acquired in step S406 has expired. The process proceeds to step S408. In step S408, it is determined that the authentication has failed, and the process is terminated. If it is determined that the process has expired, the process proceeds to step S409.

  In step S409, the user list is searched to determine whether the user ID acquired in step S401 exists in the user list acquired in step S402.

  In step S410, based on the search result in step S409, it is determined whether or not the acquired user ID exists in the user list. If it is determined that the user ID is present, the process proceeds to step S411. Then, the process proceeds to step S412.

  In step S411, it is determined that the authentication has succeeded. In step S412, it is determined that the authentication has failed. In step S413, it is determined that the authentication has succeeded.

  Hereinafter, with reference to FIG. 8, the flow of the authentication process in the present embodiment will be described. Note that this processing is executed under the control of the CPU of the multifunction machine 101.

  In step S501, upon receiving an authentication switching instruction from the user (by logging out and pressing the next person button 704), the MFP 101 logs out the authenticated user before the authentication switching instruction, The multi-function peripheral 101 is set to an unauthenticated state.

  In step S502, the user who has been instructed to switch authentication performs login to the MFP 101 through authentication by the user authentication management server 103. In step S503, it is determined whether or not the login in step S502 has been successful. If it is determined, the process proceeds to step S504. If it is not determined that the process is successful, the process ends.

  In step S504, the web page cache ID 402 corresponding to the user is acquired from the pre-authentication management DB 400 in order to generate a web page related to the user. In step S505, the web page corresponding to the web page cache ID 402 acquired in step S504 is acquired. Data 502 corresponding to the Web page cache ID 501 of the cache DB 500 is acquired.

  In step S506, a web page is created using the data 502 acquired in step S505, and in step S507, the user logs in to the web service provided by the web application server 102 used by the user who logged in in step S502.

  The login to the Web service may be performed by logging in using the same information as the user information used when logging in to the MFP 101. However, the login to the Web service in advance corresponds to the user information related to the IC card. User information to be used may be stored in association with each other, and when an IC card is inserted, the user information used to log in to the associated Web service may be used to log in to the Web service. The user information can be stored in the user authentication management server 103.

  In step S508, the Web page (Web service screen 700) created in step S506 is displayed on the browser. In step S509, it is determined whether the print button 702 has been pressed for the details of the Web service screen 700. If it is determined, the process proceeds to step S510. If it is not determined that the button has been pressed, the process proceeds to step S511.

  In step S510, a print job is generated, and a print job ID that uniquely identifies the print job is generated. Using this print job ID, the print job ID 403 associated with the logged-in user is updated in step S507.

  In step S511, the print job ID 403 associated with the user who has logged in in step S507 is acquired from the pre-authentication management DB 400.

  In step S512, it is determined whether or not the print job ID 403 has been acquired in step S511. If it is determined that the print job ID 403 has been acquired, the process proceeds to step S513. If it is not determined that the print job ID 403 has been acquired, the process proceeds to step S514.

  In step S513, the already generated print job specified from the print job ID 403 acquired in step S511 is executed. In step S512, since no print job has been generated, a record relating to the user is obtained from the pre-authentication management DB 400. delete.

  Hereinafter, the flow of the normal authentication process in the present embodiment will be described with reference to FIG. Note that this processing is executed under the control of the CPU of the multifunction machine 101.

  In step S601, the authentication of the user who has been authenticated by the multi-function peripheral 101 is canceled to make the multi-function peripheral 101 unauthenticated. In step S602, the user authentication management server for the multi-function peripheral 101 as a new user. This process is completed by logging in after authentication in 103 and making the MFP 101 authenticated by a new user.

[Second Embodiment]
Next, a second embodiment will be described. In the first embodiment, a web page corresponding to the web service is created for each user. In the second embodiment, a web page corresponding to the user is created in a tab format.

  Note that the description of the same configuration and processing as in the first embodiment will be omitted, and different parts will be mainly described below.

  Hereinafter, with reference to FIG. 10, the flow of the pre-authentication data registration process using the tab function in the present embodiment (process improved from FIG. 6) will be described. Note that this processing is executed under the control of the CPU of the multifunction machine 101.

  In step S701, it is determined whether or not the number of tabs already generated in the browser does not exceed the specified value. If it is determined that the number of tabs exceeds the specified value, the process proceeds to step S702. If it is not determined that the number of tabs exceeds the specified value, the process proceeds to step S703. In step S703, a pre-authentication data registration process (see FIG. 7) is executed, and this process ends.

  In step S704, a new tab is generated without displaying on the browser, and in step S705, a Web page is created for the user registered in advance in the tab generated in step S702.

  In step S706, the Web page cache ID 402 associated with the tab generated in step S705 is registered in the pre-authentication management DB 400.

  In step S707, the past print history of the authenticated user is referred to, and in step S708, it is determined whether there is a record printed using the Web service in the print history referred to in step S707.

  If it is determined that there is a record, the process proceeds to step S709. In step S709, a print job is generated. In step S710, the print job ID 403 associated with the print job generated in step S709 is registered in the pre-authentication management DB 400. Then, this process ends.

  Hereinafter, with reference to FIG. 11, the flow of the authentication process (process improved from FIG. 8) when the authentication switching process is performed with the tab function in the present embodiment will be described. Note that this processing is executed under the control of the CPU of the multifunction machine 101.

  In step S801, upon receiving an authentication switching instruction from the user, the user before the authentication switching instruction is logged out from the multifunction machine 101, and the multifunction machine 101 is not authenticated.

  In step S802, the user who has been instructed to switch authentication logs in to the multifunction peripheral 101 through authentication of the user authentication management server 103. In step S803, it is determined whether or not the multifunction peripheral 101 has been successfully logged in in step S802. If it is determined that the process has succeeded, the process proceeds to step S804; otherwise, the process proceeds to step S825.

  In step S804, the state of the tab, such as whether the tab of the browser is a user-specific tab associated with the authenticated user or a tab normally provided by other web services, is confirmed. In step S805, step S804 is performed. From the tab state confirmed in step 1, the tab information existing in the browser is acquired to identify the type of the tab.

  The tab types here are assumed to be two types: a user-dedicated tab associated with a pre-authenticated user and a tab normally provided by other Web services.

  In this step, it is determined whether or not a user-specific tab has been generated on the browser. If it is determined that a user-specific tab has been generated, the process proceeds to step S806, and pre-authentication is performed thereafter. If a tab is generated for each user and it is not determined that a user-specific tab has been generated, the process proceeds to step S815. Thereafter, the pre-authentication management DB 400 does not generate a tab for each pre-authenticated user. A web page related to the user is created based on the information stored in.

  In step S806, the tab associated with the user before the authentication switching instruction in step S801 logged out from the MFP 101 is deleted from the browser. In step S807, the web application server 102 used by the user who logged in in step S802 provides Log in to the web service you are using.

  In step S808, the user-dedicated tab created for the user who logged in in step S802 is displayed on the browser. In step S809, the pre-authentication management DB 400 is referenced. In step S810, a user-specific tab is created on the browser. This is a process for determining whether or not it is possible.

  Note that the criteria for determining whether or not it can be created is determined by whether or not the number of records registered in the pre-authentication management DB 400 exceeds the upper limit of tabs that the browser can hold, and exceeds the upper limit of tabs that the browser can hold. If it is determined that it has been exceeded, the process proceeds to step S811, and if it is not determined that it has exceeded, the process proceeds to step S814.

  In step S811, information related to the user is registered in the pre-authentication management DB 400, and the user having the highest priority is identified by referring to the pre-authentication management DB storing the information related to the user.

  A user having a high priority corresponds to a user who has performed pre-authentication earliest among users having a tab dedicated to the user, that is, a user who has performed pre-authentication registration earliest.

  In step S812, the Web page cache ID 402 related to the user with the highest priority corresponding to step S811 is specified, and Web page data 502 associated therewith is acquired from the Web page cache DB 500.

  In step S813, the user-specific tab with the highest priority specified in step S811 is generated using the Web page data 502 acquired in step S812.

  In step S814, a tab dedicated to the user is generated. In the case of this process, since the information related to the user is registered on the tab without registering the information related to the user in the pre-authentication management DB 400, the performance is improved compared to the process in which the user-specific tab cannot be generated.

  Thereafter, in this step, the print job ID 403 associated with the logged-in user in step S807 is acquired from the pre-authentication management DB 400.

  In step S815, the Web page cache ID 402 corresponding to the user ID 401 registered in the pre-authentication management DB 400 corresponding to the user ID logged in in step S802 is acquired.

  In step S816, data 502 corresponding to the web page cache ID 501 of the web page cache DB 500 corresponding to the web page cache ID 402 obtained in step S815 is obtained.

  In step S817, a web page is created using the web page data 502 acquired in step S816. In step S818, the user logs in to the web service provided by the web application server 102 used by the user who logged in in step S802. I do.

  In step S 819, the Web page (Web service screen 700) created in step S 818 is displayed on the browser. If it is determined, the process proceeds to step S821; otherwise, the process proceeds to step S822.

  In step S821, a print job is generated, a print job ID that uniquely identifies the print job is generated, and the print job ID 403 associated with the logged-in user is updated using the print job ID in step S818.

  In step S822, the print job ID 403 associated with the user who has logged in in step S818 is acquired from the pre-authentication management DB 400.

  In step S823, it is determined whether the print job ID 403 has been acquired in step S814 or step 822. If it is determined that the print job ID 403 has been acquired, the process proceeds to step S824. If it is not determined that the print job ID 403 has been acquired, the process proceeds to step S825. To proceed.

  In step S824, the print job corresponding to the print job ID 403 is executed. In step S825, no print job is generated, and thus the record related to the user is deleted from the pre-authentication management DB 400.

[Third Embodiment]
Next, a third embodiment will be described. In the second embodiment, the web page is created with the tabs hidden, but in the third embodiment, a web page displaying the tabs is created.

  In addition, description is abbreviate | omitted about the structure and process which are the same as 1st Embodiment and 2nd Embodiment, Suppose that it mainly demonstrates a different part hereafter.

  First, in step S109, it is determined whether or not an authentication switching instruction has been issued. In this embodiment, another tab is selected from the tabs on which the contents of the web page are currently displayed. Therefore, it is determined that the authentication switching instruction has been issued.

  Therefore, in the process in step S201, it is accepted that another tab is selected from the tabs on which the contents of the web page are currently displayed.

  In step S704, a web page is created in a format that allows a new tab to be displayed on the browser. In step S714, the new tab created in step S704 is added to the currently displayed web page. Web page display.

  When receiving an instruction to delete the displayed tab, for example, when it is determined that the x mark provided on the tab has been pressed, the user specified from the tab confirms whether or not to delete. Therefore, the deletion confirmation screen 900 shown in FIG. 17 is displayed.

  Then, when the user holds the IC card owned by the MFP 101, if the information related to the user specified from the IC card matches the information related to the user specified from the tab, the tab is deleted. At the same time, the record related to the user is deleted from the pre-authentication management DB 400.

  According to this embodiment, in an environment where login is required for each of the multifunction peripheral and the service in which the multifunction peripheral is operating, a plurality of users are continuously assigned to the multifunction peripheral before using the service for the multifunction peripheral. By setting the login standby state, each user does not have to repeatedly log in to the multifunction peripheral and the service in which the multifunction peripheral operates, so that it is possible to save time and effort for user authentication.

  The program according to the present invention is a program that allows a computer to execute (read) each processing method, and the storage medium according to the present invention stores a program that allows the computer to execute each processing method.

  The program in the present invention may be a program for each processing method of each device.

  As described above, a recording medium that records a program that implements the functions of the above-described embodiments is supplied to a system or apparatus, and a computer (or CPU or MPU) of the system or apparatus stores the program stored in the recording medium. It goes without saying that the object of the present invention can also be achieved by performing reading.

  In this case, the program itself read from the recording medium realizes the novel function of the present invention, and the recording medium storing the program constitutes the present invention.

  As a recording medium for supplying the program, for example, a flexible disk, hard disk, optical disk, magneto-optical disk, CD-ROM, CD-R, DVD-ROM, magnetic tape, nonvolatile memory card, ROM, EEPROM, silicon A disk or the like can be used.

  Further, by executing the program read by the computer, not only the functions of the above-described embodiments are realized, but also an OS or the like operating on the computer based on an instruction of the program is a part of the actual processing or It goes without saying that the case where the functions of the above-described embodiments are realized by performing all of the above processing is also included.

  Furthermore, after the program read from the recording medium is written to the memory provided in the function expansion board inserted into the computer or the function expansion unit connected to the computer, the function expansion board is based on the instructions of the program code. It goes without saying that the case where the CPU or the like provided in the function expansion unit performs part or all of the actual processing and the functions of the above-described embodiments are realized by the processing.

  Further, the present invention may be applied to a system composed of a plurality of devices or an apparatus composed of a single device. Needless to say, the present invention can be applied to a case where the present invention is achieved by supplying a program to a system or apparatus.

  In this case, by reading a recording medium storing a program for achieving the present invention into the system or apparatus, the system or apparatus can enjoy the effects of the present invention.

  Furthermore, by downloading and reading a program for achieving the present invention from a server, database, etc. on a network using a communication program, the system or apparatus can enjoy the effects of the present invention. In addition, all the structures which combined each embodiment mentioned above and its modification are also included in this invention.

101 MFP 102 Web Application Server 103 User Authentication Management Server 201 CPU
202 RAM
203 ROM
204 HDD (Hard Disk Drive)
205 Network I / F (network interface)
206 MODEM
207 Operation unit I / F (interface)
208 Operation unit 209 System bus 210 RIP (raster image processor)
211 Printer I / F (Printer Interface)
212 Printer Unit 213 Scanner I / F (Interface)
214 Scanner unit 215 Image bus 216 Controller unit 217 Image processing unit 218 External I / F (interface)
219 Card reader 220 IMAGE BUS I / F (image bus interface)
301 CPU
302 ROM
303 RAM
304 system bus 305 input controller 306 video controller 307 memory controller 308 communication I / F controller 309 KB / touch panel 310 display unit 311 external memory

Claims (8)

An image processing system that provides a service that operates in an image processing apparatus,
Image processing authentication means for performing user authentication for the image processing apparatus;
Service authentication means for performing user authentication for the service;
When the first user who has been authenticated by the service authenticating unit uses a service, the user authentication in the image processing authenticating unit is performed for a second user different from the first user. Storage means for storing user information;
An image processing system comprising:   The image processing authentication unit performs user authentication using user information relating to a second user stored in the storage unit when the first user logs out of the service. 2. The image processing system according to 1. When the first user logs out, the user information receiving means for receiving user information related to the second user who performs user authentication, and the image processing authentication means are the users who do not correspond to the user information stored in the storage means. 3. The image processing system according to claim 1, wherein the user authentication of the user information regarding the second user received by the information receiving unit is authentication failure. 4.   The image processing authentication unit is characterized in that the user authentication of the user information relating to the second user received by the user information receiving unit not corresponding to the user information stored in the storage unit earliest is regarded as an authentication failure. The image processing system according to claim 3. The service is a service consisting of a web page with a tab,
A tab generation unit that generates the tab for each user each time user information for user authentication is received by the image processing authentication unit;
Display means for displaying as a web page with a tab generated by the tab generation means;
Selection accepting means for accepting selection of the tab displayed by the display means;
With
The image processing authentication means is specified from the first tab when a second tab different from the first tab provided on the web page displayed on the display means is accepted by the selection accepting means. The image processing system according to claim 2, wherein a user who logs out is logged out. A delete instruction accepting means for accepting a delete instruction for a web page having the tab;
A deletion user information receiving means for receiving an input of user information relating to a user when a deletion instruction is received by the deletion instruction receiving means;
When the user information received by the deleted user information receiving means corresponds to the user information of the user specified from the web page provided with the tab, the deleting means for deleting the web page provided with the tab;
The image processing system according to claim 5, further comprising: An image processing system control method for providing a service that operates in an image processing apparatus,
The image processing system is
An image processing authentication step for performing user authentication for the image processing device;
A service authentication step for performing user authentication for the service;
For performing user authentication in the image processing authentication step for a second user different from the first user when the first user who has been authenticated by the service authentication step uses the service. A storage step for storing user information;
The control method of the image processing system characterized by performing. There is a program that can be read and executed by an image processing system that provides a service that operates in an image processing apparatus,
The image processing system;
Image processing authentication means for performing user authentication for the image processing apparatus;
Service authentication means for performing user authentication for the service;
When the first user who has been authenticated by the service authenticating unit uses a service, the user authentication in the image processing authenticating unit is performed for a second user different from the first user. Storage means for storing user information;
A program characterized by making it function.

Images