JP5251423B2 - Image forming apparatus, printing control method, and program - Google Patents

Description

  The present invention relates to an image forming apparatus, a printing control method, and a program, and more particularly, to an image forming apparatus, a printing control method, and a program that execute printing according to user authentication.

Conventionally, print data including a user name and password is transmitted from a PC (Personal Computer) to an image forming apparatus, and a print job is executed when authentication based on the user name and password is successful in the image forming apparatus. A technique is known in which the execution of a print job is rejected if it fails (for example, Patent Document 1 and Patent Document 2). According to the technique, it is possible to improve the security of a print job executed by an image forming apparatus shared in an office or the like.
JP-A-10-207661 JP 2006-018654 A

  However, the user name and password included in the print data need to be set when a print instruction is issued on the PC. Therefore, the user is required to perform complicated operations such as inputting a user name and a password each time a print instruction is issued.

  The present invention has been made in view of the above points, and provides an image forming apparatus, a print control method, and a program capable of reducing an operation burden on a user for appropriately ensuring security for print data. With the goal. The purpose is to provide.

  In order to solve the above problems, the present invention provides a print data receiving unit that receives print data including user identification information and stores the print data in a print data storage unit, and a medium of a recording medium carried by an operator. User authentication means for receiving input of identification information and authenticating the operator using correspondence information management means for managing correspondence information between the medium identification information, user identification information, and password, and user identification information of the operator Print data selection means for acquiring print data including user identification information that matches the print data from the print data storage means and selecting print data to be printed from the acquired print data, and included in the print data A password associated with the user identification information is obtained from the correspondence information management means, and the password is associated with the print data. Password recording means for recording, print data authentication means for authenticating the print data based on user identification information and password included in the print data to be printed, and print control means for printing the authenticated print data And have.

  In such an image forming apparatus, it is possible to reduce an operation burden on the user for appropriately ensuring security for print data.

  According to the present invention, it is possible to reduce an operation burden on the user for appropriately ensuring security for print data.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a diagram illustrating a hardware configuration example of an image forming apparatus according to an embodiment of the present invention. In FIG. 1, an image forming apparatus 10 is a multifunction machine that realizes a plurality of functions such as scanning, copying, and printing in a single casing, and includes a CPU 101, a memory 102, a recording medium 103, a network I / F 104, and an image. An output unit 105, an image processing unit 106, an external device I / F 107, a display unit 108, an operation unit 109, and the like are included.

  A program that implements the functions of the image forming apparatus 10 is recorded (installed) in a non-volatile recording medium 103 such as an HDD (Hard Disk Drive). The recording medium 103 stores the installed program and stores necessary files and data. The memory 102 reads and stores the program from the recording medium 103 when there is an instruction to start the program. The CPU 101 realizes functions related to the image forming apparatus 10 in accordance with a program stored in the memory 102. The network I / F 104 is used as an interface for connecting to a network.

  The display unit 108 is configured by an LCD (Liquid Crystal Display) or the like, and displays an operation screen, a message, and the like. The operation unit 109 is configured by hardware buttons (keys) and is an input unit that receives an operation input by a user. The display unit 108 and the operation unit 109 may be integrally configured as an operation panel.

  The image processing unit 106 executes various types of image processing required when outputting (printing) image data. The image output unit 105 outputs (prints) image data.

  The external device I / F 107 is an interface for connecting to a card reader used for inputting user information for authentication, and includes, for example, a USB port (USB host interface) or a serial boat. The card reader 30 is a so-called card reader that reads information from the card 50, and includes a hardware interface (for example, a USB connector or a serial interface) that can be connected to the external device I / F 107. However, the card reader 30 may be built in the image forming apparatus 10. The card reader 30 may be either a contact type or a non-contact type. The card 50 is not limited to an IC card, and any card ID (card number) unique to at least each card 50 such as a magnetic card can be recorded. The card ID is generally referred to as a Universal ID or a Card Serial Number. Specific examples of the card 50 include a proximity card, a mifare card, a Java (registered trademark) card, and the like. The card 50 is a specific example of a recording medium carried by the operator. The card ID is a specific example of medium identification information of a recording medium carried by the operator.

  In the present embodiment, it is assumed that the card 50 is distributed to each user. However, a single card 50 may be shared by a plurality of users according to the level of security required for operation. Note that the card 50 distributed to each user may not be limited to one type. As described above, the card reader 30 can be easily connected to the image forming apparatus 10 by USB or the like. Therefore, a plurality of card readers 30 corresponding to the types of cards 50 may be simultaneously connected to the image forming apparatus 10. In this case, a plurality of types of cards 50 can be used simultaneously.

  In FIG. 1, an image forming apparatus 10 is connected to a user PC 20 via a network (whether wired or wireless). In response to the input of a print instruction by the user, the user PC 20 converts the document data that is the target of the print instruction into print data that can be interpreted by the image forming apparatus 10, and prints a print request (print job) for the print data. A PC (Personal Computer) that transmits to the forming apparatus 10.

  In the present embodiment, the user PC 20 requests the image forming apparatus 10 to execute confidential printing. FIG. 2 is a diagram for explaining an outline of confidential printing.

  When performing confidential printing, the user inputs a user name (user ID) and a password together with a print instruction to the user PC 20 (S11). The user PC 20 generates print data of document data to be printed, and transmits the print data including the user name and password to the image forming apparatus 10 (S12). Upon receiving the print data including the user name and password, the image forming apparatus 10 stores the print data in the recording medium 103 without executing printing immediately. Thereafter, when the user logs in to the image forming apparatus 10 and instructs printing of the stored print data (S13), the image forming apparatus 10 executes printing of the print data (S14).

  According to such confidential printing, printing is executed only when it is confirmed that the user who issued the print instruction is on the image forming apparatus 10 side. Therefore, it is particularly effective for preventing information leakage when printing a highly confidential document. In such confidential printing, in this embodiment, an example in which the operation burden on the user at the time of printing instruction is reduced will be described.

  FIG. 3 is a diagram illustrating a functional configuration example of the image forming apparatus according to the embodiment of the present invention. In FIG. 1, the image forming apparatus 10 includes a main body function unit 111, a confidential printing application 112, a card authentication application 113, a main body authentication unit 114, an external device control unit 115, an external device information acquisition unit 116, a main body authentication control unit 117, an external authentication. A processing unit 118, an authentication notification unit 119, an application management unit 120, and the like are included.

  The main body function unit 111 is a set of applications that realize functions that are standardly mounted on the main body of the image forming apparatus 10. In the drawing, as applications included in the main body function unit 111, a printer application 111a, a copy application 111b, a scan application 111c, and the like are illustrated. The printer application 111a controls a print job. The copy application 111b controls copy jobs. The scan application 111c controls a scan job.

  The confidential printing application 112 is an application that controls execution of confidential printing. That is, the confidential printing application 112 receives print data transmitted from the user PC 20 and temporarily stores (accumulates) the print data in the job list 1121. The job list 1121 is a predetermined storage area formed on the recording medium 113. The confidential printing application 112 displays a list of print data stored in the job list 1121 on the display unit 108 in response to a user login. Further, the confidential print application 112 causes the printer application 111a to execute a print job related to the print data selected in the list. Note that the print data is generated by the printer driver 21 in the user PC 20.

  The card authentication application 113 is an application that controls user authentication using the card 50. The card authentication application 113 uses the mapping table 1132 to specify the user name and password corresponding to the card ID. That is, in the mapping table 1132, a user name and a password are registered in advance for each card ID. The mapping table 1132 is recorded on the recording medium 103, for example.

  The card authentication application 113 can incorporate an arbitrary authentication processing unit 1131. The arbitrary authentication processing unit 1131 is a program module that executes customized authentication processing, and arbitrary authentication processing can be implemented as the name implies.

  The main body authentication unit 114 includes a user list 1141, a built-in authentication processing unit 1142, and the like, and is built in the image forming apparatus 10 to realize an authentication function. The built-in authentication function refers to an authentication function incorporated in advance in the image forming apparatus 10. The built-in authentication processing unit 1142 controls a built-in authentication process (built-in authentication) using the user list 1141.

  The user list 1141 is a list of user information for each user, and is recorded in the recording medium 108, for example. The user information includes a user name, a password, usage authority information, and the like. In other words, the built-in authentication processing unit 1142 performs authentication by comparing the user name password input together with the authentication request with the user names and passwords registered in the user list 1141. In addition, the built-in authentication processing unit 1142 permits the use of the function within the range permitted in the use authority information registered in the user list 1141 for the authenticated user.

  The external device control unit 115 controls the card reader 30 and communicates with the card reader 30. The external device information acquisition unit 116 acquires information (card ID and the like) recorded on the card 50 set in the card reader 30 via the external device control unit 115. The setting of the card 50 to the card reader 30 means that the card reader 30 can read the information recorded on the card 50, such as inserting the card 50 into the card reader 30 or deceiving the card 50. To do.

  The main body authentication control unit 117 controls authentication processing (authentication processing by the main body authentication unit 114 in the present embodiment) executed in the image forming apparatus 10. Authentication performed in the image forming apparatus 10 is referred to as “main body authentication”.

  The external authentication processing unit 118 communicates with an external authentication device such as an authentication server (for example, an LDAP (Lightweight Directory Access Protocol) server) via the network, and controls authentication processing using, for example, the authentication server. Authentication performed by the external authentication processing unit 118 using an external authentication device is referred to as “external authentication”.

  The authentication notification unit 119 receives the user name and password of the authenticated user from the authentication unit 114 and notifies the confidential printing application 112 of the user name and password.

  The application management unit 120 manages list information of applications installed in the image forming apparatus 10. Therefore, the presence or absence of each application can be confirmed by making an inquiry to the application management unit 120. In the present embodiment, the application management unit 120 manages list information such as each application included in the main body authentication unit 111, the confidential printing application 112, and the card authentication application 113.

  Hereinafter, a processing procedure of the image forming apparatus 10 will be described. FIG. 4 is a sequence diagram for explaining the processing procedure of the image forming apparatus according to the first embodiment.

  In the user PC 20, the printer driver 21 causes the user to input at least the user name of the user name and the password in response to the input of the confidential print job execution request (S101). The user name and the like are input via an authentication information input screen.

  FIG. 5 is a diagram illustrating a display example of an authentication information input screen displayed by the printer driver. In the figure, an authentication information input screen 410 has a user name input area 411, a password input area 412 and the like. In this embodiment, the password input can be omitted. Therefore, only the user name is input here. The authentication information input screen 410 is displayed when a predetermined button on the print setting screen for setting print conditions is pressed.

  Subsequently, the printer driver 21 generates print data of document data to be printed, sets the input user name in the print data, and transmits the print data to the image forming apparatus 10 (S102).

  FIG. 6 is a diagram illustrating a configuration example of print data generated by the printer driver in the first embodiment. As shown in the figure, the print data has an authentication user name setting area and an authentication password setting area. The user name input by the user is set in the authentication user name setting area. In this embodiment, since no password is input, the authentication password setting area is blank, but when a password is input, the password is set in the authentication password setting area.

  Upon receiving the print data, the confidential print application 112 of the image forming apparatus 10 stores the print data in the job list 121 (S103). As a result, the print job based on the print data is not executed immediately but is locked.

  Thereafter, the user goes to the arrangement position of the image forming apparatus 10 to execute the locked print job. When the user presses a login button arranged on the operation unit 109 as an operator of the image forming apparatus 10, the card authentication application 113 causes the display unit 108 to display a login screen.

  FIG. 7 is a diagram illustrating a display example of a login screen in the image forming apparatus. In the figure, a message prompting the user to input a user name and password or set the card 50 is displayed on the login screen 510.

  When the user sets the card 50 in the card reader 30 while the login screen 510 is displayed on the display unit 108, the external device information acquisition unit 116 receives the card ID from the card 50 via the external device control unit 115. Is acquired (read) (S104). Subsequently, the external device information acquisition unit 116 inputs the acquired card ID to the card authentication application 113 (S105).

  The card authentication application 113 converts the card ID into a user name and a password using the mapping table 1132 (S106).

  FIG. 8 is a diagram illustrating a configuration example of the mapping table. As shown in the figure, in the mapping table 1132, a user name and a password are associated and registered for each card ID. Therefore, the card authentication application 113 converts the card ID into the user name and password by searching the mapping table 1132 for the user name and password corresponding to the input card ID.

  Subsequently, the card authentication application 113 requests the main body authentication control unit 117 to execute the main body authentication by inputting the user name and password converted based on the card ID to the main body authentication control unit 117 (S107). The body authentication control unit 117 inputs the user name and password to the body authentication unit 114 in response to a request for executing body authentication (S108). Subsequently, the built-in authentication processing unit 1142 of the main body authentication unit 114 performs authentication of the operator by checking the input user name and password against the user name and password included in the user list 1141 (S109). ). When the authentication by the built-in authentication processing unit 1142 is successful, the main body authentication unit 114 notifies the authentication notification unit 119 of the user name and password that are subject to authentication (S110). The authentication notification unit 119 notifies the confidential printing application 112 of the notified user name and password (S111).

  With this notification, the confidential printing application 112 recognizes that the operator associated with the notified user name has logged into the image forming apparatus 10. Therefore, the confidential printing application 112 prints data in which an authentication user name that matches the user name of the authenticated user (hereinafter referred to as “login user”) is set (that is, the print requested by the login user for confidential printing). Data) is searched from the job list 1121, and a print data list screen including the search result is displayed on the display unit 108 (S112).

  FIG. 9 is a diagram illustrating a display example of the print data list screen. In the figure, the print data list screen 520 has a print data list display area 521, a print button 522, a delete button 523, and the like.

  The print data list display area 521 displays a list of print data (document names) related to the login user among the print data stored in the job list 1121. When the delete button 523 is pressed, the confidential print application 112 deletes the print data selected in the print data list display area 521 from the job list 1121. Therefore, in this case, the print job related to the print data is canceled.

  When the print button 522 is pressed (S113), the confidential printing application 112 acquires the authentication password setting area (see FIG. 6) in the print data selected in the print data list display area 521 from the authentication notification unit 119. The set password is set (recorded) (S114). As a result, the print data is set with the authentication user name and the authentication password. In the first embodiment, by executing step S114, it is possible to omit the password input at the time of printing instruction.

  Subsequently, the confidential printing application 112 requests execution of a print job by inputting the print data in which the authentication user name and the authentication password are set to the printer application 111a (S115). The printer application 111a requests the main body authentication unit 114 to authenticate the print data by inputting the authentication user name and the authentication password set in the input print data to the main body authentication unit 114 (S116). The built-in authentication processing unit 1142 of the main body authentication unit 114 verifies the input authentication user name and authentication password against the user name and password included in the user list 1141, thereby executing print data authentication (S117). . The main body authentication unit 114 returns the authentication result to the printer application 111a (S118). If the authentication is successful, the printer application 111a causes the image output unit 105 to print the print data (S119). If the authentication fails, the printer application 111a does not print the print data. Note that steps S114 to S119 are performed for each print data selected as a print target.

  As described above, according to the first embodiment, the confidential printing application 112 automatically sets the password registered in the mapping table 1132 in the print data. Therefore, the user can save the trouble of inputting a password when instructing printing.

  It should be noted that a print job related to print data targeted for confidential printing can be executed only when the operator has successfully logged in. Therefore, printing of the print data by an unspecified person is avoided. Therefore, even if the password input at the time of printing is omitted, the security regarding the print data is maintained.

  Next, a second embodiment will be described. In the second embodiment, differences from the first embodiment will be described. Accordingly, the points not particularly mentioned may be the same as those in the first embodiment.

  FIG. 10 is a sequence diagram for explaining the processing procedure of the image forming apparatus according to the second embodiment.

  In the user PC 20, the printer driver 21 accepts an input of a confidential print job execution request from the user without displaying the authentication information input screen 410, and generates print data of document data to be printed (S201). That is, in the second embodiment, the input of the user name as well as the password is omitted.

  Subsequently, the printer driver 21 acquires login information for the user PC 20 from the OS (Operating System) of the user PC 20, and sets the user name included in the login information in the authentication user name setting area of the print data (S202). ). That is, in the second embodiment, a user name (login user name) input at the time of login to an OS such as Windows (registered trademark) is set as the authentication user name for the print data. Subsequently, the printer driver 21 transmits the print data in which the authentication user name is set to the image forming apparatus 10 (S203).

  Thereafter, the same processing as steps S103 to S119 described in FIG. 4 is executed.

  As described above, according to the second embodiment, the login user name for the user PC 20 is set in the print data as the authentication user name by the printer driver 21. Therefore, the user can omit not only the user name but also the password input.

  Next, a third embodiment will be described. In the third embodiment, differences from the first embodiment will be described. Accordingly, the points not particularly mentioned may be the same as those in the first embodiment.

  FIG. 11 is a sequence diagram for explaining the processing procedure of the image forming apparatus according to the third embodiment.

  In the user PC 20, the printer driver 21 accepts an input of a confidential print job execution request from the user without displaying the authentication information input screen 410, and generates print data of document data to be printed (S301). Similarly to the second embodiment, in the third embodiment, the input of the user name as well as the password is omitted.

  Subsequently, the printer driver 21 obtains login information for the user PC 20 from the OS (Operating System) of the user PC 20, and uses a user name (login user name) included in the login information as a login user name setting area for print data. (S302).

  FIG. 12 is a diagram illustrating a configuration example of print data generated by the printer driver in the third embodiment. As shown in the figure, the print data in the third embodiment has a login user name setting area. In step S302, the login user name is set not in the authentication user name setting area but in the login user name setting area. Therefore, the authentication user name setting area and the authentication password setting area remain blank.

  Subsequently, the printer driver 21 transmits the print data in which the login user name is set to the image forming apparatus 10 (S303). When the confidential print application 112 of the image forming apparatus 10 receives the print data, the login user name set in the print data is transferred (copied) to the authentication user name setting area of the print data (S304). As a result, the authentication user name is set in the print data.

  Thereafter, the same processing as steps S103 to S119 described in FIG. 4 is performed thereafter.

  As described above, according to the third embodiment, the login user name for the user PC 20 is set in the print data by the printer driver 21. Further, the login user name set in the print data is set in the print data as the authentication user name by the confidential print application 112. Therefore, the user can omit not only the user name but also the password input.

  Next, a fourth embodiment will be described. FIG. 13 is a sequence diagram for explaining the processing procedure of the image forming apparatus according to the fourth embodiment. In the fourth embodiment, differences from the first embodiment will be described. Accordingly, the points not particularly mentioned may be the same as those in the first embodiment.

  First, processing similar to steps S <b> 101 to S <b> 112 in FIG. 4 is executed, and a print data list screen 520 is displayed on the display unit 108 of the image forming apparatus 10. At this point, an authentication user name is set for each print data stored in the job list 1121. In place of steps S101 to S102, steps S201 to S203 (FIG. 10) or steps S301 to S304 (FIG. 11) may be executed.

  Subsequently, when the print button 522 is pressed (S401), the confidential print application 112 requests execution of a print job by inputting the print data selected in the print data list display area 521 to the printer application 111a. (S402). Note that the processing similar to step S114, that is, the authentication password setting processing for the print data by the confidential printing application 112 is not performed before the print job execution request.

  Subsequently, the printer application 111a requests the main body authentication unit 114 to authenticate the print data by inputting the authentication user name set in the input print data to the main body authentication unit 114 (S403). At this time, the printer application 111a inputs identification information (for example, application name) of the printer application 111a to the main body authentication unit 114 as identification information of the authentication request source. Since no authentication password is set for the print data, the authentication password is not input to the main body authentication unit 114.

  Subsequently, when the main body authenticating unit 117 recognizes that the authentication request source is the printer application 111a based on the identification information of the authentication request source, the confidential printing application 112 is transferred to the image forming apparatus 10 without performing normal authentication processing. The application management unit 120 is inquired whether it exists (whether it is installed) (S404). The inquiry is made by specifying identification information (for example, application name) of the confidential printing application 112.

  Subsequently, the application management unit 120 determines whether the confidential printing application 112 exists based on the application list information recorded on the recording medium 103, and returns the determination result to the main body authentication unit 117 (S405). If the identification information specified in the inquiry is included in the application list information, the application management unit 120 determines that the confidential printing application 112 exists.

  Subsequently, when the confidential printing application 112 exists, the main body authentication unit 114 does not perform the authentication process based on the authentication user name input in step S403, and responds to the printer application 111a that the authentication is successful. (S406). However, when the confidential printing application 112 does not exist, normal authentication processing is executed. If the authentication is successful, the printer application 111a causes the image output unit 105 to print the print data (S407).

  As described above, according to the fourth embodiment, when the confidential printing application 112 exists in the image forming apparatus 10, the authentication process by the main body authentication unit 114 based on the authentication request from the printer application 111a is invalidated. (Success is determined without checking the user name and password). Therefore, the user can omit at least the password input at the time of the print instruction.

  It should be noted that a print job related to print data targeted for confidential printing can be executed only when the operator has successfully logged in. Therefore, printing of the print data by an unspecified person is avoided. Therefore, even when the authentication process by the main body authentication unit 114 is invalidated, security regarding the print data is maintained.

  The authentication process by the main body authentication unit 114 is invalidated when the authentication request source is the printer application 111a and the confidential printing application 112 exists. Therefore, when the authentication request source is another application, the authentication process is not invalidated. Therefore, security related to the function of the image forming apparatus 10 is also maintained.

  Next, a fifth embodiment will be described. FIG. 14 is a sequence diagram for explaining the processing procedure of the image forming apparatus according to the fifth embodiment. In the fifth embodiment, differences from the first embodiment will be described. Accordingly, the points not particularly mentioned may be the same as those in the first embodiment.

  In the fifth embodiment, a setting process for the main body authentication unit 114 is required in advance. The setting process is indicated by steps S501 to S503.

  First, the user inputs a setting instruction for changing the control subject of authentication processing from the main body authentication unit 114 to the arbitrary authentication processing unit 1131 via the operation unit 109 of the image forming apparatus 10 (S501). The setting instruction is notified to the main body authentication unit 114 via the card authentication application 113 and the main body authentication control unit 117 (S502, S503). In response to the setting instruction, the main body authentication unit 114 uses identification information (for example, a program module name or a class name) of the arbitrary authentication processing unit 1131 as identification information of the authentication subject (hereinafter referred to as “authentication subject identification information”). Recording is performed on the recording medium 103.

  After the processing as described above is performed, confidential printing is executed. First, processing similar to steps S101 to S108 in FIG. 4 is executed, and an authentication request using the user name and password acquired from the mapping table 1132 as parameters based on the card ID of the card 50 is input to the main body authentication unit 114. The In place of steps S101 to S102, steps S201 to S203 (FIG. 10) or steps S301 to S304 (FIG. 11) may be executed.

  Subsequently, the main body authentication unit 114 refers to the authentication subject identification information and determines that the execution subject of the authentication processing is the arbitrary authentication processing unit 1131. Therefore, the main body authentication unit 114 delegates (transfers) the input authentication request to the arbitrary authentication processing unit 1131 (S511).

  In the present embodiment, it is assumed that the arbitrary authentication processing unit 1131 is implemented so as to delegate the authentication processing for a normal authentication request to the external authentication processing unit 118. Therefore, the arbitrary authentication processing unit 1131 delegates the authentication request to the external authentication processing unit 118 (S512). In the present embodiment, the normal authentication request refers to an authentication request other than the printer application 111a as the authentication request source.

  The external authentication processing unit 118 executes predetermined authentication processing (for example, authentication processing by an external authentication server) based on the user name and password included in the authentication request, and returns the authentication result to the arbitrary authentication processing unit 1131. (S513). Subsequently, the arbitrary authentication processing unit 1131 returns the returned authentication result to the main body authentication unit 114 (S514). If the authentication is successful, the main body authentication unit 114 notifies the authentication notification unit 119 of the user name to be authenticated (S515). The authentication notification unit 119 notifies the confidential printing application 112 of the notified user name (S516). Subsequently, the confidential printing application 112 searches the job list 1121 for print data in which the authentication user name that matches the user name of the authenticated user (login user) is set, and print data list screen including the search result 520 (see FIG. 9) is displayed on the display unit 108 (S517).

  Subsequently, when the print button 522 is pressed (S518), the confidential print application 112 requests execution of a print job by inputting the print data selected in the print data list display area 521 to the printer application 111a. (S519). As in the fourth embodiment, the authentication password setting process for the print data by the confidential printing application 112 is not performed before the print job execution request.

  Subsequently, the printer application 111a requests the main body authentication unit 114 to authenticate the print data by inputting the authentication user name set in the input print data to the main body authentication unit 114 (S520). At this time, the printer application 111 a also inputs identification information (for example, application name) of the printer application 111 a to the main body authentication unit 114 as identification information of the authentication request source. Since no authentication password is set for the print data, the authentication password is not input to the main body authentication unit 114. Subsequently, based on the authentication subject identification information, the main body authentication unit 114 also delegates authentication processing for the authentication request to the arbitrary authentication processing unit 1131 (S521). Along with the authentication request, the authentication user name and the identification information of the printer application 111a are also input to the arbitrary authentication processing unit 1131 of the authentication request source.

  Subsequently, when the arbitrary authentication processing unit 1131 recognizes that the authentication request source is the printer application 111a based on the identification information of the authentication request source, the confidential printing application 112 performs the normal authentication processing and the image forming apparatus 10 does not perform normal authentication processing. (S522), the application management unit 120 is inquired whether or not the application management unit 120 exists (whether it is installed). The inquiry is made by specifying identification information (for example, application name) of the confidential printing application 112.

  Subsequently, the application management unit 120 determines whether the confidential printing application 112 exists based on the application list information recorded in the recording medium 103, and returns the determination result to the arbitrary authentication processing unit 1131 (S523).

  Subsequently, if the confidential printing application 112 exists, the arbitrary authentication processing unit 1131 does not perform the authentication process based on the authentication user name or the like input in step S520, and notifies the main body authentication unit 114 that the authentication has succeeded. A response is made (S524). However, when the confidential printing application 112 does not exist, normal authentication processing is executed. Subsequently, the main body authentication unit 114 returns the authentication result by the arbitrary authentication processing unit 1131 to the printer application 111a (S525). If the authentication is successful, the printer application 111a causes the image output unit 105 to print the print data (S526).

  As described above, according to the fifth embodiment, when the confidential printing application 112 exists in the image forming apparatus 10, the authentication process by the arbitrary authentication processing unit 1131 related to the authentication request from the printer application 111a is invalid. It becomes. Therefore, the user can omit at least the password input at the time of the print instruction.

  It should be noted that a print job related to print data targeted for confidential printing can be executed only when the operator has successfully logged in. Therefore, printing of the print data by an unspecified person is avoided. Therefore, even when the authentication processing by the arbitrary authentication processing unit 1131 is invalidated, security regarding the print data is maintained.

  The authentication processing by the arbitrary authentication processing unit 1131 is invalidated when the authentication request source is the printer application 111a and the confidential printing application 112 exists. Therefore, when the authentication request source is another application, the authentication process is not invalidated. Therefore, security related to the function of the image forming apparatus 10 is also maintained.

  Further, the optional authentication processing unit 1131 is a part that is implemented by customization. Therefore, the invalidation of the authentication process can be implemented according to the user operation.

  Next, a sixth embodiment will be described. FIG. 15 is a sequence diagram for explaining the processing procedure of the image forming apparatus according to the sixth embodiment. In the sixth embodiment, differences from the first embodiment will be described. Accordingly, the points not particularly mentioned may be the same as those in the first embodiment.

  In the sixth embodiment, as in the fifth embodiment, steps S501 to S503 are executed in advance as setting processing for the main body authentication unit 114. As a result, the identification information of the arbitrary authentication processing unit 1131 is recorded on the recording medium 103 as authentication subject identification information.

  Thereafter, processing similar to steps S <b> 101 to S <b> 105 of FIG. The card authentication application 113 converts the card ID into a user name using the mapping table 1132 (S601). In the sixth embodiment, the user name may be acquired based on the card ID. Therefore, the password does not have to be registered in the mapping table 1132.

  Subsequently, the card authentication application 113 requests the main body authentication control unit 117 to execute the main body authentication by inputting the user name converted based on the card ID to the main body authentication control unit 117 (S602). The body authentication control unit 117 inputs the user name to the body authentication unit 114 in response to a request for executing body authentication (S603). The main body authentication unit 114 refers to the authentication subject identification information, and determines that the authentication subject is the arbitrary authentication processing unit 1131. Therefore, the main body authentication unit 114 delegates (transfers) the input authentication request to the arbitrary authentication processing unit 1131 (S604).

  In the present embodiment, the arbitrary authentication processing unit 1131 is implemented so as to request proxy authentication from the external authentication processing unit 118 and determine success or failure of authentication according to the presence or absence of the user name related to the authentication request for itself. Suppose that Therefore, the arbitrary authentication processing unit 1131 inquires of the external authentication processing unit 118 whether or not the user name related to the authentication request exists after successful proxy authentication to the external authentication processing unit 118 (S605). Note that proxy authentication refers to authentication using a user name and password (a proxy user name and a proxy password) of a proxy user (for example, an administrator user) who has the authority to inquire about the existence of a user name. The proxy user name and proxy password are registered in advance in a storage area that can be referred to by the arbitrary authentication processing unit 1131 in the recording medium 103.

  The external authentication processing unit 118 causes an external authentication server or the like to perform authentication based on the proxy user name and the proxy password in response to the proxy authentication request. Further, in response to the inquiry about the existence of the user name, the external authentication processing unit 118 inquires to an authentication server or the like (predetermined user information management means) whether or not the user name is registered, and the result (the existence of the user name Is returned to the arbitrary authentication processing unit 1131 (S606). If the user name exists, the arbitrary authentication processing unit 1131 determines that the authentication is successful. If the user name does not exist, the arbitrary authentication processing unit 1131 determines that the authentication has failed.

  If the authentication is successful, processing similar to steps S514 to S519 in FIG. 14 is executed, and the print data selected on the print data list screen 520 is input to the printer application 111a. Therefore, in the sixth embodiment, the authentication password setting process for the print data by the confidential printing application 112 is not performed.

  Subsequently, the printer application 111a requests the main body authentication unit 114 to authenticate the print data by inputting the authentication user name set in the input print data to the main body authentication unit 114 (S611). Since no authentication password is set for the print data, the authentication password is not input to the main body authentication unit 114. Subsequently, the main body authentication unit 114 also delegates authentication processing for the authentication request to the arbitrary authentication processing unit 1131 based on the authentication subject identification information (S612).

  Subsequently, similarly to step S605, the arbitrary authentication processing unit 1131 inquires of the external authentication processing unit 118 about the existence of the user name related to the authentication request after successful proxy authentication to the external authentication processing unit 118 (S613). In response to the proxy authentication request, the external authentication processing unit 118 executes authentication based on the proxy user name and proxy password on an external authentication server or the like. Further, in response to the inquiry about the existence of the user name, the external authentication processing unit 118 makes an inquiry to the authentication server or the like as to whether or not the user name is registered, and arbitrarily authenticates the result (information indicating the existence of the user name). It returns to the part 1131 (S614). If the user name exists, the arbitrary authentication processing unit 1131 determines that the authentication is successful. If the user name does not exist, the arbitrary authentication processing unit 1131 determines that the authentication has failed.

  Subsequently, the arbitrary authentication processing unit 1131 returns the authentication result to the main body authentication unit 114 (S615). The main body authentication unit 114 returns the authentication result by the arbitrary authentication processing unit 1131 to the printer application 111a (S616). If the authentication is successful, the printer application 111a causes the image output unit 105 to print the print data (S617).

  As described above, according to the sixth embodiment, the success or failure of authentication is determined based on the presence or absence of the user name. Therefore, the user can omit at least the password input at the time of the print instruction.

  However, a print job related to print data targeted for confidential printing can be executed only when the operator has successfully logged in. Therefore, printing of the print data by an unspecified person is avoided. Therefore, even when authentication is successful based on the presence / absence of the user name, security regarding the print data is maintained.

  Further, according to the sixth embodiment, since it is not necessary to register a password in the mapping table 1132, password registration work can be reduced.

  In the sixth embodiment, the arbitrary authentication processing unit 1131 confirms the existence of the proxy authentication and the user name only when the authentication request source is the printer application 111a and the confidential printing application 112 exists. Otherwise, normal authentication processing may be performed.

  Next, a seventh embodiment will be described. FIG. 16 is a sequence diagram for explaining the processing procedure of the image forming apparatus according to the seventh embodiment. In the seventh embodiment, differences from the first embodiment will be described. Accordingly, the points not particularly mentioned may be the same as those in the first embodiment.

  First, processing similar to steps S101 to S103 in FIG. 4 is executed, and print data is stored in the job list 1121. In place of steps S101 to S102, steps S201 to S203 (FIG. 10) or steps S301 to S304 (FIG. 11) may be executed.

  Thereafter, the user goes to the arrangement position of the image forming apparatus 10 to execute the locked print job. When the login screen 510 is displayed on the display unit 108 and the card 50 is set by the user in the card reader 30, the external device information acquisition unit 116 receives the user name from the card 50 via the external device control unit 115. Then, the password is acquired (read) (S701). Subsequently, the external device information acquisition unit 116 inputs the acquired user name and password to the card authentication application 113 (S702). That is, in the seventh embodiment, the user name and password are recorded on the card 50.

  Thereafter, processing similar to steps S107 to S119 in FIG. 4 is executed. At this time, in step S107, the user name and password acquired from the card 50 are input to the main body authentication control unit 117. Accordingly, the password acquired from the card 50 is set in the print data by the confidential printing application 112.

  As described above, according to the seventh embodiment, the password recorded on the card 50 is automatically set in the print data by the confidential printing application 112. Therefore, the user can save at least the trouble of inputting the password at the time of printing instruction.

  As mentioned above, although the Example of this invention was explained in full detail, this invention is not limited to such specific embodiment, In the range of the summary of this invention described in the claim, various deformation | transformation・ Change is possible.

1 is a diagram illustrating an example of a hardware configuration of an image forming apparatus according to an embodiment of the present invention. It is a figure for demonstrating the outline | summary of confidential printing. 1 is a diagram illustrating a functional configuration example of an image forming apparatus according to an embodiment of the present invention. FIG. 6 is a sequence diagram for explaining a processing procedure of the image forming apparatus according to the first embodiment. 6 is a diagram illustrating a display example of an authentication information input screen displayed by the printer driver. FIG. 3 is a diagram illustrating a configuration example of print data generated by a printer driver in the first embodiment. FIG. 6 is a diagram illustrating a display example of a login screen in the image forming apparatus. FIG. It is a figure which shows the structural example of a mapping table. FIG. 10 is a diagram illustrating a display example of a print data list screen. FIG. 10 is a sequence diagram for explaining a processing procedure of an image forming apparatus according to a second embodiment. FIG. 10 is a sequence diagram for explaining a processing procedure of an image forming apparatus according to a third embodiment. FIG. 10 is a diagram illustrating a configuration example of print data generated by a printer driver in a third embodiment. FIG. 10 is a sequence diagram for explaining a processing procedure of an image forming apparatus according to a fourth embodiment. FIG. 10 is a sequence diagram for explaining a processing procedure of an image forming apparatus according to a fifth embodiment. FIG. 20 is a sequence diagram for explaining a processing procedure of an image forming apparatus according to a sixth embodiment. FIG. 20 is a sequence diagram for explaining a processing procedure of an image forming apparatus according to a seventh embodiment.

Explanation of symbols

10 Image forming apparatus 20 User PC
30 Card reader 50 Card 101 CPU
102 Memory 103 Recording medium 104 Network I / F
105 Image output unit 106 Image processing unit 107 External device I / F
108 Display unit 109 Operation unit 111 Main unit function unit 111a Printer application 111b Copy application 111c Scan application 112 Confidential printing application 113 Card authentication application 114 Main unit authentication unit 115 External device control unit 116 External device information acquisition unit 117 Main unit authentication control unit 118 External authentication Processing unit 119 Authentication notification unit 120 Application management unit 1131 Optional authentication processing unit 1132 Mapping table

Claims (12)

Print data receiving means for receiving print data including user identification information and storing the print data in a print data storage means;
The user corresponding to the input medium identification information from the corresponding information management means that receives the input of the medium identification information of the recording medium carried by the operator and manages the correspondence information between the medium identification information, the user identification information, and the password User authentication means for acquiring identification information and a password, and authenticating the operator by comparing the acquired user identification information and password with previously stored user identification information and password;
Print data selection means for acquiring print data including user identification information matching the user identification information of the operator from the print data storage means, and selecting print data to be printed from the acquired print data;
Password recording means for recording a password corresponding to the medium identification information in print data to be printed;
Print data authentication means for authenticating the print data based on the user identification information and password included in the print data to be printed;
An image forming apparatus comprising: a print control unit that prints the authenticated print data. Print data receiving means for receiving print data including user identification information and storing the print data in a print data storage means;
An authentication means for performing authentication by checking the user identification information and password against the user identification information and password stored in advance in response to the input of the user identification information and password;
The user corresponding to the input medium identification information from the corresponding information management means that receives the input of the medium identification information of the recording medium carried by the operator and manages the correspondence information between the medium identification information, the user identification information, and the password User authentication means for acquiring identification information and a password, and inputting the acquired user identification information and password to the authentication means to authenticate the operator;
Print data authentication means for authenticating the print data by inputting user identification information included in the print data to be printed into the authentication means;
Print control means for printing the authenticated print data,
Print data selection means for acquiring print data including user identification information that matches the user identification information of the operator from the print data storage means and selecting print data to be printed from the acquired print data. Is possible and
When the user identification information is input from the print data authentication unit, the authentication unit inquires about the existence of the print data selection unit. When the print data selection unit is present, the authentication unit verifies the user identification information and the password. An image forming apparatus in which authentication is successful without performing authentication. Print data receiving means for receiving print data including user identification information and storing the print data in a print data storage means;
User identification information corresponding to the input medium identification information from the corresponding information management means for receiving the medium identification information of the recording medium carried by the operator and managing the correspondence information between the medium identification information and the user identification information User authentication means for authenticating the operator based on whether or not the acquired user identification information is registered in a predetermined user information management means;
Print data selection means for acquiring print data including user identification information matching the user identification information of the operator from the print data storage means, and selecting print data to be printed from the acquired print data;
Print data authentication means for authenticating the print data based on whether or not user identification information included in the print data to be printed is registered in the predetermined user information management means;
An image forming apparatus comprising: a print control unit that prints the authenticated print data. Print data receiving means for receiving print data including user identification information and storing the print data in a print data storage means;
An authentication means for performing authentication by checking the user identification information and password against the user identification information and password stored in advance in response to the input of the user identification information and password;
The user corresponding to the input medium identification information from the corresponding information management means that receives the input of the medium identification information of the recording medium carried by the operator and manages the correspondence information between the medium identification information, the user identification information, and the password User authentication means for acquiring identification information and a password, and inputting the acquired user identification information and password to the authentication means to authenticate the operator;
Print data authentication means for authenticating the print data by inputting user identification information included in the print data to be printed into the authentication means;
Print control means for printing the authenticated print data,
Print data selection means for acquiring print data including user identification information that matches the user identification information of the operator from the print data storage means and selecting print data to be printed from the acquired print data. Is possible and
When the user identification information is input from the print data authentication unit, the authentication unit inquires about the existence of the print data selection unit. When the print data selection unit is present, the authentication unit verifies the user identification information and the password. An image forming apparatus that authenticates the print data based on whether or not the user identification information is registered in the predetermined user information management unit without performing authentication. A printing control method executed by an image forming apparatus,
A print data reception procedure for receiving print data including user identification information and storing the print data in a print data storage unit;
The user corresponding to the input medium identification information from the corresponding information management means that receives the input of the medium identification information of the recording medium carried by the operator and manages the correspondence information between the medium identification information, the user identification information, and the password A user authentication procedure for acquiring identification information and a password, and performing authentication by comparing the acquired user identification information and password with previously stored user identification information and password;
A print data selection procedure for acquiring print data including user identification information matching the user identification information of the operator from the print data storage unit, and selecting print data to be printed from the acquired print data;
A password recording procedure for recording a password corresponding to the medium identification information in the print data to be printed;
A print data authentication procedure for authenticating the print data based on the user identification information and password included in the print data to be printed;
And a print control procedure for printing the authenticated print data. A print control method executed by an image forming apparatus having an authentication unit that performs authentication by checking the user identification information and password against the user identification information and password stored in advance in response to input of the user identification information and password. And
A print data reception procedure for receiving print data including user identification information and storing the print data in a print data storage unit;
The user corresponding to the input medium identification information from the corresponding information management means that receives the input of the medium identification information of the recording medium carried by the operator and manages the correspondence information between the medium identification information, the user identification information, and the password A user authentication procedure for acquiring identification information and a password, and inputting the acquired user identification information and password to the authentication means to authenticate the operator;
A print data authentication procedure for authenticating the print data by inputting user identification information included in the print data to be printed into the authentication unit;
A print control procedure for printing the authenticated print data,
The image forming apparatus acquires print data including user identification information that matches the user identification information of the operator from the print data storage unit, and selects print data to be printed from the acquired print data. It is possible to have print data selection means,
When the user identification information is input in the print data authentication procedure, the authentication unit inquires about the presence or absence of the print data selection unit. When the print data selection unit is present, the authentication unit verifies the user identification information and the password. A print control method in which authentication is successful without performing authentication. A printing control method executed by an image forming apparatus,
A print data reception procedure for receiving print data including user identification information and storing the print data in a print data storage unit;
User identification information corresponding to the input medium identification information from the corresponding information management means for receiving the medium identification information of the recording medium carried by the operator and managing the correspondence information between the medium identification information and the user identification information A user authentication procedure for performing authentication for authenticating the operator based on whether or not the acquired user identification information is registered in a predetermined user information management means;
A print data selection procedure for acquiring print data including user identification information matching the user identification information of the operator from the print data storage unit, and selecting print data to be printed from the acquired print data;
A print data authentication procedure for authenticating the print data based on whether or not user identification information included in the print data to be printed is registered in the predetermined user information management means;
And a print control procedure for printing the authenticated print data. A print control method executed by an image forming apparatus having an authentication unit that performs authentication by checking the user identification information and password against the user identification information and password stored in advance in response to input of the user identification information and password. And
A print data reception procedure for receiving print data including user identification information and storing the print data in a print data storage unit;
The user corresponding to the input medium identification information from the corresponding information management means that receives the input of the medium identification information of the recording medium carried by the operator and manages the correspondence information between the medium identification information, the user identification information, and the password A user authentication procedure for acquiring identification information and a password, and inputting the acquired user identification information and password to the authentication means to authenticate the operator;
A print data authentication procedure for authenticating the print data by inputting user identification information included in the print data to be printed into the authentication unit;
A print control procedure for printing the authenticated print data,
The image forming apparatus acquires print data including user identification information that matches the user identification information of the operator from the print data storage unit, and selects print data to be printed from the acquired print data. It is possible to have print data selection means,
When the user identification information is input in the print data authentication procedure, the authentication unit inquires about the presence or absence of the print data selection unit. When the print data selection unit is present, the authentication unit verifies the user identification information and the password. A print control method for authenticating the print data based on whether or not the user identification information is registered in a predetermined user information management unit without performing authentication. In the image forming device,
A print data reception procedure for receiving print data including user identification information and storing the print data in a print data storage unit;
The user corresponding to the input medium identification information from the corresponding information management means that receives the input of the medium identification information of the recording medium carried by the operator and manages the correspondence information between the medium identification information, the user identification information, and the password A user authentication procedure for acquiring identification information and a password, and performing authentication by comparing the acquired user identification information and password with previously stored user identification information and password;
A print data selection procedure for acquiring print data including user identification information matching the user identification information of the operator from the print data storage unit, and selecting print data to be printed from the acquired print data;
A password recording procedure for recording a password corresponding to the medium identification information in the print data to be printed;
A print data authentication procedure for authenticating the print data based on the user identification information and password included in the print data to be printed;
A program for executing a print control procedure for printing the authenticated print data. In response to the input of user identification information and password, an image forming apparatus having an authentication unit that performs authentication by comparing the user identification information and password with user identification information and password stored in advance.
A print data reception procedure for receiving print data including user identification information and storing the print data in a print data storage unit;
The user corresponding to the input medium identification information from the corresponding information management means that receives the input of the medium identification information of the recording medium carried by the operator and manages the correspondence information between the medium identification information, the user identification information, and the password A user authentication procedure for acquiring identification information and a password, and inputting the acquired user identification information and password to the authentication means to authenticate the operator;
A print data authentication procedure for authenticating the print data by inputting user identification information included in the print data to be printed into the authentication unit;
A print control procedure for printing the authenticated print data;
The image forming apparatus acquires print data including user identification information that matches the user identification information of the operator from the print data storage unit, and selects print data to be printed from the acquired print data. It is possible to have print data selection means,
When the user identification information is input in the print data authentication procedure, the authentication unit inquires about the presence or absence of the print data selection unit. When the print data selection unit is present, the authentication unit verifies the user identification information and the password. A program that succeeds in authentication without authentication. In the image forming device,
A print data reception procedure for receiving print data including user identification information and storing the print data in a print data storage unit;
User identification information corresponding to the input medium identification information from the corresponding information management means for receiving the medium identification information of the recording medium carried by the operator and managing the correspondence information between the medium identification information and the user identification information A user authentication procedure for authenticating the operator based on whether or not the acquired user identification information is registered in a predetermined user information management means;
A print data selection procedure for acquiring print data including user identification information matching the user identification information of the operator from the print data storage unit, and selecting print data to be printed from the acquired print data;
A print data authentication procedure for authenticating the print data based on whether or not user identification information included in the print data to be printed is registered in a predetermined user information management means;
A program for executing a print control procedure for printing the authenticated print data. In response to the input of user identification information and password, an image forming apparatus having an authentication unit that performs authentication by comparing the user identification information and password with user identification information and password stored in advance.
A print data reception procedure for receiving print data including user identification information and storing the print data in a print data storage unit;
The user corresponding to the input medium identification information from the corresponding information management means that receives the input of the medium identification information of the recording medium carried by the operator and manages the correspondence information between the medium identification information, the user identification information, and the password A user authentication procedure for acquiring identification information and a password, and inputting the acquired user identification information and password to the authentication means to authenticate the operator;
A print data authentication procedure for authenticating the print data by inputting user identification information included in the print data to be printed into the authentication unit;
A print control procedure for printing the authenticated print data;
The image forming apparatus acquires print data including user identification information that matches the user identification information of the operator from the print data storage unit, and selects print data to be printed from the acquired print data. It is possible to have print data selection means,
When the user identification information is input in the print data authentication procedure, the authentication unit inquires about the presence or absence of the print data selection unit. When the print data selection unit is present, the authentication unit verifies the user identification information and the password. A program for authenticating the print data based on whether or not the user identification information is registered in a predetermined user information management means without performing authentication.

Images