JP2009130435A - Image forming apparatus and computer readable recording medium - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To limit functions permitted to a user for each of a plurality of kinds of recording media different in communication system. <P>SOLUTION: The type of a communication system of an IC card 7 is determined on the basis of type information read from the IC card 7 by an IC card R/W 5 for reading information from a plurality of kinds of IC cards 7 different in communication system.Authentication is performed to determine whether the user is permitted to use an image forming apparatus or not on the basis of authentication information read from the IC card 7 by the IC card R/W 5. When the user is authenticated as a user permitted to use the apparatus, processing contents which can be executed in respective processing means including a facsimile, a plotter 13, a scanner 14, and other hardware resources 15 are limited on the basis of the determined type. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a facsimile machine, a printer, a copier, and an image forming apparatus including a multi-function machine and a computer-readable recording medium.

In recent years, recording media including IC cards have become widespread, and for example, IC cards have been introduced as ID cards for identifying individuals such as employee ID cards and student ID cards.
The user restriction function for devices using this IC card has been realized on PCs, but not only for PCs but also for office devices with multiple copy and facsimile functions, security is taken into account and the user's personal It has been proposed to perform authentication using an IC card.
IC cards are broadly classified according to the communication method, and the communication path is largely classified into a contact type (specified in “ISO7816”) and a non-contact type (specified in “ISO14443” and “ISO18092”) by radio communication. ISO 14443 further defines the classification of Type A and Type B.

And what can respond to these several types of IC cards with one IC card reader is already provided.
In an image forming apparatus including a facsimile apparatus, a printer, a copier, and a complex machine that supports a personal authentication function using an IC card, each IC card type corresponds individually.
2. Description of the Related Art Conventionally, there has been an apparatus (for example, refer to Patent Document 1) in which an access right for an accumulated document in a device is authenticated by an IC card and set for each group to which a user specified by the authentication belongs.
JP 2003-67249 A

However, the conventional technique has a problem that the operation method for each IC card type cannot be changed in an environment where a plurality of IC card types are operated in one office.
For example, if there are multiple companies coexisting in the office and the communication method of the installed ID card is different for each company, individual authentication using each ID card is performed, and the user restriction function is provided. Effectively, the image forming apparatus cannot be shared.
The present invention has been made in view of the above points, and an object of the present invention is to be able to limit functions available to the user for each of a plurality of types of recording media having different communication methods.

In order to achieve the above object, the present invention provides the following image forming apparatus and computer-readable recording medium.
(1) Processing means for performing various processes including image reading, image printing, and image transmission / reception, reading means for reading information from a plurality of types of recording media having different communication methods, and reading means from the recording medium Type determination means for determining the type of the communication method of the recording medium based on the read type information, and whether the user is permitted to use the own apparatus based on the authentication information read from the recording medium by the reading means. An authenticating means for authenticating the above, and a restricting means for restricting the processing content executable by the processing means based on the type determined by the type determining means when authenticated by the authenticating means An image forming apparatus.
(2) In the image forming apparatus as described above, an authentication information acquisition method preset for the type determined by the type determination unit is determined, and the above-described authentication information acquisition method is determined by the reading unit. An image forming apparatus provided with means for reading authentication information from a recording medium.

(3) In the image forming apparatus as described above, an authentication method set in advance for the type determined by the type determination unit is determined, and based on the authentication information by the authentication method determined by the authentication unit. An image forming apparatus provided with means for authenticating whether or not the user is permitted to use the apparatus.
(4) In the image forming apparatus as described above, the processing contents that can be executed by the processing means set in advance for the type determined by the type determination means are determined, and the processing means is determined by the restriction means. An image forming apparatus provided with means for controlling to execute only the processing of the determined processing content.
(5) In the image forming apparatus as described above, a user logout condition set in advance for the type determined by the type determination unit is determined, and after the user has logged in, the above determination is made. An image forming apparatus provided with means for logging out a user when a condition is satisfied.

(6) In the image forming apparatus as described above, the logout condition is set so that a communication method of the recording medium is different between a contact type and a non-contact type using radio waves.
(7) In the image forming apparatus as described above, whether or not the authentication unit is a user who is permitted to use the device by sending authentication information read from the recording medium by the reading unit to an external authentication server. If the authentication server manages users in groups, the authenticated user group information is acquired from the authentication server, the acquired group information, and the type determination The processing content that can be executed by the processing means set in advance for the type determined by the means is determined, and only the processing of the determined processing content is executed for the processing means by the restriction means. An image forming apparatus provided with a control means.

(8) A processing procedure for performing various processes including image reading, image printing, and image transmission / reception on a computer, a reading procedure for reading information from a plurality of types of recording media with different communication methods, and the above reading procedure A type determination procedure for determining the type of the communication method of the recording medium based on the type information read from the recording medium, and a use permitted to use the own device based on the authentication information read from the recording medium by the reading procedure Authentication procedure for authenticating whether or not the user is authorized, and when the user authorized by the authentication procedure is authenticated, the processing contents executable by the processing procedure are limited based on the type determined by the type determining procedure. And a computer-readable recording medium on which a program for executing the restriction procedure is recorded.

The image forming apparatus according to the present invention can limit functions available to the user for each of a plurality of types of recording media having different communication methods.
Further, the computer-readable recording medium of the present invention can easily execute a program for realizing a function for allowing a user to restrict a function that can be used by a plurality of types of recording media having different communication methods. Can be introduced.

Hereinafter, the best mode for carrying out the present invention will be specifically described with reference to the drawings.
〔Example〕
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing a configuration of a network system using an image forming apparatus according to an embodiment of the present invention.
In this network system, an image forming apparatus 1 including a facsimile machine, a printer, a copier, and a multifunction machine thereof, a network terminal apparatus 2 including a plurality of personal computers, and an external authentication server 3 are connected via a network 4. It is connected so that it can communicate.
The image forming apparatus 1 includes an IC card reader corresponding to a reading unit that reads and writes various data with respect to an IC card 7 that is a recording medium for user authentication given to a user (user) of the image forming apparatus 1. A writer device (hereinafter referred to as “IC card R / W”) 5 is connected.

Further, the network terminal device 2 has an IC card R / C corresponding to a reading means for reading / writing various data with respect to the IC card 7 which is a recording medium for user authentication given to the user of the network terminal device 2. W6 is connected.
The user possesses the IC card 7 in which the authentication information issued in advance from the system administrator and the identification information indicating the type of the communication method of the IC card are recorded. When the operation of the image forming apparatus 1 starts, the IC card 7 is attached to or held over the IC card R / W5, the user authentication process is performed, and when the authentication is successful (authenticated as a user permitted to use the image forming apparatus 1), the image forming apparatus You can start using one.

When the network terminal apparatus 2 accesses the image forming apparatus 1 via the network 4, for example, when a document print instruction is given, the IC card R / W 6 connected to the network terminal apparatus 2 is connected. By mounting or holding the user's IC card 7, authentication information is acquired from the IC card 7, and print data to which the user's authentication information is added is transmitted to the image forming apparatus 1 via the network 4.
Based on the authentication information added to the print data received from the network terminal device 2, the image forming apparatus 1 makes an authentication or makes an inquiry to the external authentication server 3 via the network 4 for authentication. The printing process is performed only when the authentication is successful, that is, when the user is authenticated as an authorized user of the image forming apparatus 1.

FIG. 2 is a block diagram showing a hardware configuration of the image forming apparatus 1 shown in FIG.
The image forming apparatus 1 includes a controller 10 that controls the entire apparatus.
The controller 10 includes a CPU 21 that controls the entire apparatus via the north bridge (NB) 20, a ROM 22 that is a computer-readable recording medium storing a program for the CPU 21 to execute various processes, and an operation display. An ASIC 23 for a controller including an interface (I / F), a CPU I / F, a PCI bus I / F, and a memory controller, and a PCI bus (BUS) 24 are connected.
The ASIC 23 includes a RAM 25 serving as a work area when the CPU 21 executes various processes, a hard disk device (HDD) 26 that stores image data, and an operation panel that performs processing and operation settings by various applications in the apparatus. And an operation display unit 11 including a display panel for displaying information on various operations and operations, and a PCI bus (BUS) 18 are connected.

The PCI bus 18 includes a fax control unit 12 that controls facsimile communication (transmission / reception of images) via a communication line, a plotter 13 that is a printing device that prints an image on recording paper, and an image described in an original. A scanner 14 of the image reading apparatus to be read and other hardware resources 15 are connected.
The fax control unit 12 includes a G3 control unit 16 that performs G3 facsimile communication via a communication line, and a G4 control unit 17 that performs G4 facsimile communication via a communication line.

  On the other hand, the PCI bus 24 includes a serial bus I / F 27 that manages data communication with serially connected devices, a network interface card (hereinafter referred to as “NIC”) 28 having a function of connecting to a network, and a keyboard, for example. A USB I / F 29 for connecting peripheral devices including a mouse, a USB host 30 for connecting to the IC card R / W 5 via the UBS cable 19, and a memory for mounting a memory card to control reading and writing of information A card I / F 31 is connected.

FIG. 3 is a functional configuration diagram of the image forming apparatus 1 shown in FIG.
In this image forming apparatus 1, a copy application software program (abbreviated as “copy application”) 40 having a procedure for the CPU 21 to execute a copy process, and a fax application software having a procedure for the CPU 21 to execute a facsimile communication process. A program (abbreviated as “fax application”) 41, a printer application software program (abbreviated as “printer application”) 42 having a procedure for the CPU 21 to execute a printing process, and a procedure for the CPU 21 to execute a web access process Various application programs including a web application software program (abbreviated as “web application”) 43 consisting of

  Further, as an application programming interface (API) for the CPU 21 to control each unit in the apparatus when the application program is executed, a system control service program (abbreviated as “system control service”) including a procedure for controlling the entire system. 44), a fax control service program (abbreviated as "fax control service") 45 comprising a procedure for controlling facsimile communication, and an engine control service comprising a procedure for controlling the engine control board 53 of the engine I / F. A memory control service program (“memory control service”) comprising a program (abbreviated as “engine control service”) 46, a procedure for controlling reading and writing to the general memory pan including the ROM 22, RAM 25, and HDD 26. It referred to as the scan ") with a 47.

  Further, an operation display unit control service program (abbreviated as “operation display unit control service”) 48 including a procedure for controlling display output to the operation display unit 11 and information input by input operation, access to the network and data communication are performed. Network control service program (abbreviated as “network control service”) 49 consisting of a procedure for controlling, USB control service program (abbreviated as “USB control service”) consisting of a procedure for controlling IC card R / W5 50. Various service programs including an authentication control service program (abbreviated as “authentication control service”) 51 including a procedure for controlling user authentication for the image forming apparatus 1 are provided. Operating system to control (OS) 52 there is.

Further, the engine I / F includes a plotter engine 54 that is an engine of the plotter 13, a scanner engine 55 that is an engine of the scanner 14, an engine 56 of other hardware resources, and an engine control board 53 that controls these engines. .
In this image forming apparatus 1, personal authentication for using each application program including the above-described copy, fax, printer, and Web is performed by the authentication control service 51, and the above-described application program is used only after successful authentication. Is possible.
In addition, it is possible to select an application that can be used for each user who is registered as a user who is permitted to use in advance, and functions that can be used for each type of IC card 7 are registered in the image forming apparatus 1 in advance. Thus, the function restriction for each type of the IC card 7 can be performed for each user who has been authenticated.

FIG. 4 is an example of a software program module configuration diagram focusing on the authentication control service 51 shown in FIG.
In the processing of the authentication control service 51 executed by the CPU 21, when an authentication request is received from any one of the application programs 60 including copy, fax, printer, and Web, the drawing processing module is processed by the operation display unit control service. Display processing related to authentication is performed on the operation display unit 11 through the processing of 61 and the graphic driver 62.

  Then, the authentication information is acquired from the IC card through the processing of the IC card resource manager 63, the IC card R / W device driver 64, and the USB host device driver 65 by the processing of the USB control service, and the processing of the memory control service Then, the address book database (DB) module 66, the file system module 67, and the HDD driver 68 are used to inquire and verify the authentication information acquired from the IC card with respect to the authentication address book DB provided in the HDD. Thus, user authentication is performed, and use of a predetermined service can be executed for a user who is permitted to use the image forming apparatus 1 by the user authentication.

As for the user authentication, the network control service process causes the external authentication server to authenticate the authentication information acquired from the IC card via the process of the network library 69 and the NIC device driver 70, and the authentication result is displayed. As a result, the use of a predetermined service can be executed for a user who is permitted to use the image forming apparatus 1.
Further, as a result of inquiring the user authentication and the external authentication server in the own apparatus and performing the user authentication, the success or failure of the authentication is output to the application 60 that has requested the authentication, and the result display is displayed on the operation display unit. Do.

FIG. 5 is a diagram illustrating an initial screen example of the operation display unit 11 when the image forming apparatus 1 illustrated in FIG. 1 is activated.
The CPU 21 displays this initial screen on the operation display unit 11 by enabling the personal authentication function using the IC card.
In this initial screen, the login user name and login password name input fields are displayed along with the message “Please set the authentication card. Or enter the login user name and login password and press the login key”. Prompts for user authentication.

The user sets the IC card 7 of the employee ID or student ID distributed by the administrator to or holds the IC card R / W 5 connected to the image forming apparatus 1, whereby the IC card 7 is detected and an authentication operation is performed. .
In addition, the user can receive user authentication by directly inputting the login user name and the login password name in the input fields for the login user name and the login password name.
The CPU 21 performs authentication based on the user authentication information read from the IC card 7 and the authentication information registered in advance in the image forming apparatus. Alternatively, the external authentication server is inquired for authentication.

FIG. 6 is a display example of a copy operation screen displayed after successful authentication in the image forming apparatus 1 shown in FIG.
When the CPU 21 authenticates that the user is authorized by the user authentication, as a function that can be used in the type of the IC card 7 of the user, for example, when the processing of the copy application program is possible, the operation display unit 11 Display the copy operation screen.

FIG. 7 is a diagram showing an example of a display screen when authentication fails in the image forming apparatus 1 shown in FIG.
When the authentication fails, the CPU 21 displays a screen for notifying the user of the authentication failure on the operation display unit 11 as shown in FIG.

FIG. 8 is a diagram showing an example of a display screen displayed subsequent to the display screen of FIG.
After the CPU 21 displays the screen for notifying the authentication failure shown in FIG. 7 and detects that the confirmation key in the screen is pressed by the user, the CPU 21 sets the authentication card shown in FIG. Display a screen prompting This screen may be displayed as the initial screen.

Next, an authentication process in the image forming apparatus 1 will be described.
FIG. 9 is a flowchart showing an IC card authentication process in the image forming apparatus 1 shown in FIG.
When the setting is made to authenticate with the IC card 7, the CPU 21 displays an authentication request screen as an initial screen in step (indicated by “S” in the drawing) 1 after the system is activated. For example, the authentication request screen shown in FIG. 5 or 8 is displayed.
Here, the user sets or holds his or her IC card over the IC card R / W.
When it is detected in step 2 that the IC card is set or held over the IC card R / W, the authentication operation is started.
In step 3, the type information is acquired from the detected IC card by the IC card R / W, and the type of the IC card is determined based on the type information.

In step 4, an authentication information acquisition method preset in the apparatus is determined for each type of IC card based on the determination result.
In step 5, the authentication information acquisition operation is performed from the detected IC card by the IC card R / W by the determined authentication information acquisition method.
In step 6, it is determined whether or not the authentication information can be acquired from the IC card (acquired normally). If OK (acquired normally), the process proceeds to step 7. If NO (acquired normally), Returning to the process of the first step 1, the above process is repeated.
In step 7, an authentication screen is displayed on the operation display unit.
In step 8, the acquired authentication information is compared with the authentication information registered in the address book DB in the own apparatus to perform authentication processing, or the acquired authentication information is sent to an external authentication server to request authentication processing. , Get the authentication result.

Here, it is possible to determine the authentication destination for performing the authentication process based on the detected type of the IC card. As the authentication destination, an address book DB in the own apparatus or an external authentication server (Windows authentication, various authentication methods including LDAP authentication, Windows and LDAP are registered trademarks) may be associated with an IC card type in advance.
In step 9, it is determined whether or not the result of the authentication process is authentication success (confirmed that the user is permitted to use the image forming apparatus). If authentication is successful, the process proceeds to step 10 and authentication failure ( If it cannot be confirmed that the user is permitted to use the image forming apparatus), the process proceeds to step 11.

In step 10, the processing screen of the application program that has been successfully authenticated and is set to be usable for the type information, for example, the copy operation screen shown in FIG. 6 is displayed, and the authentication processing ends. .
On the other hand, if the authentication fails, an authentication failure screen such as the screen shown in FIG. 7 is displayed in step 11, and a screen prompting the authentication operation again in step 12 such as the screen shown in FIG. Returning to the process, the above process is repeated.

FIG. 10 is a flowchart showing processing regarding the user's use authority in the IC card authentication processing of the image forming apparatus 1 shown in FIG.
In step 21, the CPU 21 determines whether or not the authenticated user has used the device for the first time. If the user has not used it for the first time, the process proceeds to step 22. If not, the process proceeds to step 26.
In this determination, if the user information of the authenticated user exists in the address book DB, it is determined that the use is not the first, and if the user information does not exist, it is determined that the use is the first.
When it is determined that the user is the first user to use the own device, in step 22, usage authority information (a list of application programs that can be used) set for each IC card type is acquired. For example, it is obtained from an IC card.
In step 23, the use authority information is added to the user information and registered in the address book DB held by the device, and the process proceeds to step 24.

On the other hand, if the authenticated user information exists in the address book DB, it is not the first time that the device itself is used. Therefore, in step 26, use authority information corresponding to the user information is acquired from the address book DB, and the process goes to step 24. move on.
In step 24, it is determined from the use authority information whether or not the application program that requested the authentication is usable. If it can be used, the process proceeds to step 25, and if not usable, the process proceeds to step 27.

If it is determined that the user has authority to use, an initial screen for processing of the application program requested for authentication is displayed on the operation display unit in step 25, and this processing is terminated.
On the other hand, if it is determined that there is no usage authority, in step 27, an error message indicating that there is no usage authority for the requested application program is displayed on the operation display unit, and in step 28, an authentication request screen is displayed. The process ends.
In this way, control is performed so that only the processing content set in advance for each IC card type is executed in response to the authentication request of each application program.

  Here, when the authentication method is authentication that can manage users in groups, such as the authentication method in the Windows (registered trademark) domain server, for example, the use authority of the application program is initialized for each group. When it is determined that the user is the first user to use the device in the determination process, the usage authority information set for the group to which the user belongs and the usage authority information set for each type of IC card are used together. If the authority information is registered in the address book DB, if the external authentication server manages users as a group, the authenticated user group information is acquired from the external authentication server, and the acquired information is acquired. Control is performed so that only the executable processing contents set in advance for group information and IC card type are executed. Can.

FIG. 11 is a diagram illustrating an example of usage authority information.
As shown in the figure, the usage authority information is, for example, the usage authority information of the group to which the user belongs, and can use the copy function and the printer function (indicated by a circle in the figure), the fax function and the scanner. The use of the function is restricted (indicated by a cross in the figure), and the copy function, the fax function, and the printer function can be used as the use authority information set in the IC card type (in the figure). If the scanner function is not allowed to be used (indicated by a cross in the figure), the usage rights determined by combining the above usage rights are the copy function, fax function, and so on. The printer function can be used (indicated by a circle in the figure) and the scanner function cannot be used (indicated by an x in the figure).

In the example of the usage authority information, usage of the web application and other hardware resources is not included, but the usage can be set to be permitted or not permitted in the same manner as described above.
Moreover, although the case where the OR operation is used as the method of combining the usage authority information of the group to which the user belongs and the usage authority information set by the IC card type is shown, an AND operation may be performed.

Next, logout processing in the image forming apparatus will be described.
FIG. 12 is a diagram illustrating an example of logout condition setting preset for each IC card type.
For example, for the IC card type A, when the user uses the image forming apparatus, when the user holds the IC card over the IC card R / W, the CPU 21 detects the IC card and logs in. When the IC card is held over the IC card R / W, logout is performed when the IC card is detected again.
In the case of IC card type B, logout is performed when an IC card is detected twice consecutively within a certain time after login.
Furthermore, in the case of IC card type C, after detecting the IC card at the time of login, the IC card is fixed on the IC card R / W, and the IC card is removed after the same IC card is detected for a predetermined time or more. Log out when detected.

It is also possible to make settings for logout processing and application authority, particularly for the contact type and non-contact type of the IC card 7.
FIG. 13 is a diagram showing another example of condition setting for logout processing that is preset for each IC card type.
For example, when the type of the IC card 7 is a contact type, the CPU 21 can use a copy, a scanner, a fax, and a printer at the time of login based on the use authority information of the application program (indicated by a circle in the figure). After detecting the IC card 7 at the time of login, the IC card 7 is fixed on the IC card R / W 5 and the IC card 7 is removed after detecting the same IC card 7 for a certain time or more. If detected, log out.

In addition, when the type of the IC card 7 is a non-contact communication type, at the time of login, the copy and the scanner can be used based on the use authority information of the application program (indicated by a circle in the figure). The printer cannot be used (indicated by a cross in the figure), and when the IC card 7 is detected again after login, the user logs out.
In the example of the usage authority information, usage of the web application and other hardware resources is not included, but the usage can be set to be permitted or not permitted in the same manner as described above.

In this way, since the setting of the image forming apparatus can be changed for each IC card type, the operation related to the use of the image forming apparatus for each IC card type is changed for each company that introduces the IC card. Although the image forming apparatus is shared by the user, even if different operation and operation methods are introduced for each company, the user will be comfortable with the operation and operation method of the company to which he belongs. Can be used.
In addition, since authentication information for performing personal authentication can be set for each IC card type, and an authentication server that handles each authentication information can be set, even in an environment where image forming apparatuses are shared by a plurality of companies, Since it is possible to correspond to the already introduced authentication scheme, the authentication function can be smoothly introduced and the introduction cost is reduced.

Furthermore, authentication information for performing personal authentication can be set for each IC card type, and an authentication server for handling each authentication information can be set. Therefore, even in an environment in which an image forming apparatus is shared by a plurality of companies, Since it is possible to correspond to the already introduced authentication scheme, the authentication function can be smoothly introduced and the introduction cost is reduced.
In addition, since it is possible to restrict usage for each function of the image forming apparatus for each IC card type, setting work for each individual is not required. Also, the contact type and non-contact type are said to have higher security strength than the contact type, and the use environment that considers security such as permitting access to confidential documents in the image forming apparatus is limited to the contact type. It can be provided and the defense against security threats such as information leakage can be strengthened.

Furthermore, by combining the usage authority setting for each user group and the usage authority depending on the IC card type, the user group of the personal computer is the same as the login management, but the usage authority of the image forming apparatus is different. It is valid.
Therefore, the use authority can be differentiated depending on the IC card type, and can be separated from the use authority of the PC environment.
In addition, since the conditions for login and logout can be changed depending on the type of IC card, it becomes possible to set each operation method in an environment in which an image forming apparatus is shared by a plurality of companies, and operations can be performed without feeling uncomfortable for each company.

Further, by changing the operation conditions for logout between the contact type and the non-contact type, it is possible to unify the logout method by the same operation if it is a non-contact type. In general, the contact type is evaluated to have a higher security level, so it is possible to set the permission to use the application in the case of the contact type. Usage rights can also be set.
As described above, this image forming apparatus pays attention to the type of the IC card and can provide a suitable personal authentication function for each IC card type.

  The image forming apparatus and computer-readable recording medium according to the present invention can be applied to all image forming apparatuses including a facsimile machine, a printer, a copying machine, and a complex machine thereof.

1 is a block diagram showing a configuration of a network system using an image forming apparatus according to an embodiment of the present invention. FIG. 2 is a block diagram illustrating a hardware configuration of the image forming apparatus illustrated in FIG. 1. FIG. 2 is a functional configuration diagram of the image forming apparatus illustrated in FIG. 1. It is an example of the software program module block diagram which paid its attention to the authentication control service shown in FIG.

FIG. 2 is a diagram illustrating an example of an initial screen of an operation display unit during activation of the image forming apparatus illustrated in FIG. 1. 3 is a display example of a copy operation screen displayed after successful authentication by the image forming apparatus shown in FIG. 1. FIG. 3 is a diagram illustrating an example of a display screen when authentication fails in the image forming apparatus illustrated in FIG. 1. It is a figure which shows the example of a display screen displayed following the display screen of FIG. FIG. 2 is a flowchart showing an IC card authentication process in the image forming apparatus shown in FIG. 1.

FIG. 10 is a flowchart illustrating a process regarding a user's use authority in the IC card authentication process of the image forming apparatus illustrated in FIG. 9. FIG. 3 is a diagram illustrating an example of usage authority information registered in the image forming apparatus illustrated in FIG. 1. FIG. 3 is a diagram illustrating logout condition setting examples that are set in advance for each IC card type in the image forming apparatus illustrated in FIG. 1. FIG. 7 is a diagram illustrating another example of logout condition setting that is preset for each IC card type in the image forming apparatus illustrated in FIG. 1.

Explanation of symbols

1: Image forming device 2: Network terminal device 3: External authentication server 4: Network 5, 6: IC card R / W 7: IC card 10: Controller 11: Operation display unit 12: Fax control unit 13: Plotter 14: Scanner 15: Other hardware resources 16: G3 control unit 17: G4 control unit 18: PCI bus 19: UBS cable 20: NB 21: CPU 22: ROM 23: ASIC 24: PCI bus 25: RAM 26: HDD 27: Serial Bus I / F 28: NIC 29: USB I / F 30: USB host 31: Memory card I / F 40: Copy application software program 41: Fax application software Air program 42: Printer application software program 43: Web application software program 44: System control service program 45: Fax control service program 46: Engine control service program 47: Memory control service program 48: Operation display unit control service program 49: Network Control service program 50: USB control service program 51: Authentication control service program 52: OS 53: Engine control board 54: Plotter engine 55: Scanner engine 56: Engine of other hardware resources 60: Application 61: Drawing processing module 62: Graphic driver 63: IC card Source Manager 64: IC card R / W device driver 65: USB host device driver 66: Address Book DB module 67: file system module 68: HDD driver 69: Network Library 70: NIC Device Driver

Claims (8)

Processing means for performing various processes including image reading, image printing, and image transmission / reception;
Reading means for reading information from a plurality of types of recording media having different communication methods;
Type determining means for determining the type of the communication method of the recording medium based on the type information read from the recording medium by the reading means;
Authentication means for authenticating whether the user is permitted to use the device based on authentication information read from the recording medium by the reading means;
And a restricting means for restricting the processing contents executable by the processing means based on the type determined by the type determining means when authenticated by the authentication means. Image forming apparatus.   A means for determining an authentication information acquisition method set in advance for the type determined by the type determination means, and a means for reading the authentication information from the recording medium by the authentication information acquisition method determined by the reading means; The image forming apparatus according to claim 1.   Whether or not the user is permitted to use the own apparatus based on the authentication information in the authentication method determined by the authentication unit determined in advance for the type determined by the type determination unit. 3. An image forming apparatus according to claim 1, further comprising means for authenticating the above.   The processing content that can be executed by the processing means preset for the type determined by the type determination means is determined, and only the processing of the determined processing content is performed on the processing means by the restriction means. The image forming apparatus according to claim 1, further comprising a control unit configured to perform the control.   A user logout condition set in advance for the type determined by the type determination unit is determined, and the user is logged out when the determined condition is satisfied after logging in by the user. The image forming apparatus according to claim 1, further comprising a unit that performs the operation.   6. The image forming apparatus according to claim 5, wherein the logout condition is made different between a contact method and a non-contact method using radio waves. The authentication unit is a unit that sends authentication information read from the recording medium by the reading unit to an external authentication server to authenticate whether or not the user is permitted to use the device.
When the authentication server manages users in groups, the group information of the authenticated users is acquired from the authentication server, the acquired group information, and the type determined by the type determination unit Provided with means for determining processing contents executable by the processing means set in advance and controlling the processing means to execute only the processing of the determined processing contents by the limiting means. The image forming apparatus according to claim 1, wherein the image forming apparatus is an image forming apparatus.   A processing procedure for performing various processes including image reading, image printing, and image transmission / reception on a computer, a reading procedure for reading information from a plurality of types of recording media having different communication methods, and a reading procedure from the recording medium. A type determination procedure for determining the type of the communication method of the recording medium based on the read type information, and whether the user is permitted to use the device based on the authentication information read from the recording medium by the reading procedure And a restriction procedure for restricting processing contents that can be executed in the processing procedure based on the type determined by the type determination procedure when the user is authenticated by the authentication procedure. A computer-readable recording medium on which a program for executing the above is recorded.

Images