JP6422243B2 - Information processing apparatus, information processing apparatus control method, and program - Google Patents

Description

  The present invention relates to an information processing apparatus, a control method for the information processing apparatus, and a program.

  When a user uses an information processing apparatus such as a personal computer or a multifunction peripheral, it is generally performed to perform personal authentication and permit an operation.

  As a method, there are a method for allowing a user to input a password and a method for using biometric information such as a personal fingerprint or a vein pattern as authentication information. There is also an authentication system in which authentication is performed by an IC card holding a user ID and password and reading them (see, for example, Patent Document 1).

More recently, when a user carries a terminal storing authentication information and touches (touches) the receiving unit of the authentication device with a part of the user's hand or body, the user's human body is used as a communication path. Some devices communicate with a terminal and an authentication device.
When communication is established, an authentication technique using a human body for identifying and authenticating a user based on authentication information in the terminal as a communication path has been put into practical use (for example, see Patent Document 2).

This personal authentication using human body communication is easy to operate because it only touches a specific part, and authentication information that is confidential information is exchanged through the human body only at the time of touch. It can be said that it is a high method.
Furthermore, an authentication technique using human body communication that does not require user operation has also been proposed (see, for example, Patent Document 3).

  In this method using human body communication, a floor mat laid at a predetermined position around the authentication information transmitter possessed by the user and the authentication device enables communication by capacitive coupling using the user standing on the floor mat as a medium. When communication is established by this method, the authentication information transmitter transmits the authentication information to the authentication device. On the condition that the user authentication is established, the authentication device permits the login of the user, that is, makes the function and data permitted for the user usable. Thereafter, when the user leaves the authentication device and the communication is disconnected after the processing of the requested job is completed, the user logs out from the information processing device.

JP 2003-178034 A JP 2006-268614 A JP2011-238757A

As described above, in Patent Document 2, a communication method of touching the receiving unit of the authentication device with a part of the user's hand or body, and in Patent Document 3, an authentication technique using a human body communication function that does not require user operation. Has been proposed.
However, in Patent Document 3, if the user logs out when the user leaves the authentication device and the communication is disconnected, the following problem occurs.

  For example, there are many cases where the user temporarily leaves the authentication device, such as paper removal during operation, error handling, and paper jam handling. Security problems such as impersonation can be prevented, but if you frequently leave the authentication device and then come back, you will have to bother to log in each time and make print settings from the beginning. In addition, when leaving during execution of a job such as copying, the job continues even after logging out, so there remains a security problem that the job is interrupted by a third party.

  The present invention has been made to solve the above-described problems, and an object of the present invention is to adapt to a communication state between a terminal device of a logged-in user and an information processing device, and to a user who logs in again or again. It is to provide a mechanism that can accept login processing and operation requests, or restrict acceptance.

The management apparatus of the present invention that achieves the above object has the following configuration.
Communication means for establishing communication with the terminal device through the user's human body, authentication means for authenticating the user with authentication information acquired by communication established with the terminal device, and communication between the communication means and the terminal device are established. In response to the transition from the first state to the second state that has not been established, information on the first operation screen operated by the first user who has logged in by authenticating by the authentication means is stored in the storage means. Saving means for saving , determination means for determining whether or not a predetermined time has elapsed since the transition to the second state, and a result of determination by the determination means that the predetermined time has not elapsed The second user other than the logged-in first user based on the fact that the logged-in first user's logged-in state is maintained and the logged-in first user's job is being executed Restricts log, on the basis of said predetermined time has elapsed, characterized in that it comprises a control unit to log out the first user who has the log.

ADVANTAGE OF THE INVENTION According to this invention, the log-in process and operation request with respect to the user who logs in newly or again can be received or it can restrict | limit according to the communication state of the user's terminal device and information processing apparatus.
Further, it is possible to avoid a situation in which a job of a user who has previously logged in is interrupted by a newly logged-in user.

It is a figure which shows the structure of information processing apparatus. It is a figure explaining the authentication process in information processing apparatus. It is a block diagram which shows an example of the hardware constitutions of information processing apparatus. It is a block diagram which shows an example of the hardware constitutions of a portable terminal. It is a block diagram which shows an example of a structure of the module of a control part. It is a flowchart explaining the control method of information processing apparatus.

Next, the best mode for carrying out the present invention will be described with reference to the drawings.
<Description of system configuration>
[First Embodiment]

  FIG. 1 is a diagram illustrating the configuration of the information processing apparatus according to the present embodiment. In this example, a general composite image forming apparatus having various functions such as a copy function, a scan function, a FAX function, and a print function is used as an information processing apparatus. In addition, the information processing apparatus 1 includes an operation unit 2 for inputting an operation instruction by a user and a floor mat 3 disposed at a predetermined position around the information processing apparatus 1. In the example shown in the figure, the floor mat 3 is laid at a predetermined position on the front side of the information processing apparatus 1.

In FIG. 1, the information processing apparatus 1 employs a human body communication method in which data communication is performed via a user's human body when performing data communication with a portable terminal possessed by the user. The floor mat 3 described above is configured to function as an interface for connecting the user and the information processing apparatus 1 to a state capable of data communication when performing such human body communication.
That is, the floor mat 3 incorporates a mat communication unit 3a as an interface for performing human body communication from the user's feet standing on the floor mat 3. The human body communication interface of the information processing apparatus 1 may be configured as a floor mat 3 or may be a touch panel type device (not shown) capable of communicating by touching with a hand or part of the body. . In the present embodiment, the floor mat 3 is configured.

  For human body communication, for example, an electric field method is used in which data communication is performed using a change in the strength of an electric field that appears on the surface of the human body. This electric field system transmits data by changing the intensity of the electric field appearing on the surface of the human body via an electrode in contact with the human body or an electrode close to the human body, and detects a change in the intensity of the electric field appearing on the surface of the human body. This is a method for receiving data.

FIG. 2 is a diagram for explaining an authentication process in the information processing apparatus shown in FIG. In this example, a place where user authentication is performed on the information processing apparatus 1 is illustrated.
In FIG. 2, for example, the information processing apparatus 1 starts processing for performing human body communication when the user 7 stands on the floor mat 3, and performs user authentication via the floor mat 3. That is, the information processing apparatus 1 acquires authentication information from the portable terminal 8 via the floor mat 3 and the human body of the user 7 and performs user authentication based on the authentication information. If the user authentication is successful, the information processing apparatus 1 is in a state in which various processes such as scanning can be executed based on an operation instruction from the user 7.

FIG. 3 is a block diagram illustrating an example of a hardware configuration of the information processing apparatus 1 illustrated in FIG. The information processing apparatus 1 includes a control unit 12 that controls the operation of the information processing apparatus 1, a human body communication unit 1210 that performs human body communication, a reading unit 11 that reads a document and outputs image data, and prints based on the image data. The print processing unit 10 executes processing.
Furthermore, it includes a ROM 1203 or HDD 1208 for storing various information, and the above-described operation unit 2 and mat communication unit 3a, and these can be communicated with each other by being connected via a system bus 1206 and an IO bus 1212. Composed. Details will be described below.

  In FIG. 3, the control unit 12 is connected to a reading unit 11 that is an image reading device and a print processing unit 10 that is an image output device. On the other hand, it is a controller for inputting / outputting image information and information related to communication control with an external device (not shown) such as a server, a PC (personal computer), and other external devices by connecting to a LAN.

A CPU 1201 is a controller that controls the entire system. A RAM 1202 is a system work memory for the CPU 1201 to operate, and is also an image memory for temporarily storing image data. A ROM 1203 is a boot ROM, and stores a system boot program. An operation unit I / F 1204 is an interface unit with the operation unit 2 and outputs image data to be displayed on the operation unit 2 to the operation unit 2. Also, it plays a role of transmitting information input by the user from the operation unit 2 to the CPU 1201. The above devices are arranged on the system bus 1206.
The IO control 1207 is an I / F that controls each IO chip and communicates with the CPU 1201 and the RAM 1202, and has a bus bridge function of the system bus 1206 and the IO bus 1212.

  An HDD 1208 is a hard disk drive and stores system software, image data, software counter values, and the like. As the software counter value, a value obtained by counting up the number of output images is stored. The counter value is not limited to the HDD 1208 and may be stored in a non-illustrated nonvolatile memory or a battery backup function memory as long as it can be stored and retained even when the power is turned off.

  The HDD 1208 stores authentication information 4 in addition to the system software described above. The authentication information 4 is information related to a user registered in advance by an administrator or the like, and is referred to when performing user authentication. The authentication information 4 includes, for example, identification information for identifying a user holding the mobile terminal 8.

  A network 1209 is connected to the LAN, and inputs / outputs various data related to the output image and information related to device control. It is possible to output image data by receiving output image data in response to an input operation by the operation unit 2 from a PC (not shown) on the network or an apparatus for managing external output image data by an input operation in the operation unit 2. is there. A scanner / printer communication I / F 1211 is an I / F for communicating with the CPU of the reading unit 11 and the print processing unit 10.

  The human body communication unit 1210 is a communication module that performs human body communication. The human body communication unit 1210 outputs data to be transmitted to the mobile terminal 8 to the mat communication unit 3a, receives data output from the mobile terminal 8, and outputs the information to the control unit 12. It is a structure to be.

The mat communication unit 3a is configured to include electrodes for performing human body communication. The floor mat 3 in which the mat communication unit 3 a is built is laid at a location corresponding to the position when the user operates the operation unit 2. Therefore, the user inevitably stands on the floor mat 3 when operating the operation unit 2 in a natural posture.

  The reading unit 11 is a processing unit that reads a document image and outputs image data. For example, the reading unit 11 includes a document transport unit that transports a plurality of documents placed on a document placing table one by one from the top, an image data output unit that converts a read document image into image data, and the like. I have.

  The print processing unit 10 is a processing unit that outputs a printed matter by executing print processing based on image data. For example, the print processing unit 10 forms an image based on image data on a sheet fed one by one, and a transfer that transfers a toner image (image) formed by the image forming unit to the sheet. A part. Further, the image forming apparatus includes a fixing unit that fixes the toner image transferred onto the paper, and a printed material conveyance unit that discharges the printed material.

  As described above, the operation unit 2 has a configuration for inputting an operation instruction by a user. That is, the operation unit 2 includes a display unit configured by, for example, a liquid crystal panel and the like, and an operation input unit that inputs an operation instruction by the user by detecting an operation on the display unit.

FIG. 4 is a block diagram illustrating an example of a hardware configuration of the mobile terminal 8 illustrated in FIG.
In FIG. 4, a mobile terminal 8 includes a control unit 8a for controlling the operation of the mobile terminal 8, a human body communication unit 8b for performing human body communication, and a storage device 8c for storing various information such as programs and image data. It has. Moreover, although not shown in figure, the portable terminal 8 is equipped with the structure required in order to carry, such as a battery and a power supply control part. The control unit 8a includes a CPU, a memory, and the like, and executes processing associated with human body communication by reading and executing various programs stored in the storage device 8c.

  The human body communication unit 8 b is a communication module that performs human body communication with the information processing apparatus 1. The storage device 8c stores authentication information in which identification information of the user holding the portable terminal 8 is recorded. As a result, the information processing apparatus 1 can perform user authentication based on the authentication information 4 stored in the HDD 1208 and the authentication information received from the portable terminal 8.

  The configuration shown in FIG. 4 may be incorporated in, for example, a mobile phone or an IC card. For example, when the portable terminal 8 is incorporated in an IC card, when the portable terminal 8 receives an authentication request from the information processing apparatus 1, the portable terminal 8 reads the authentication information recorded in advance on the IC card and reads the read authentication information. Is transmitted to the information processing apparatus 1.

FIG. 5 is a block diagram illustrating an example of a module configuration of the control unit 12 in the information processing apparatus 1 illustrated in FIG. 3.
In FIG. 5, the control unit 12 functions as the authentication unit 5 when the CPU 1201 executes system software (not shown) in the HDD 1208. The authentication unit 5 is a processing unit that performs user authentication through human body communication.

FIG. 6 is a flowchart illustrating a method for controlling the information processing apparatus according to the present embodiment. This example is a login process example when the floor mat 3 is used as a human body communication interface. Hereinafter, the processing procedure of the control unit 12 will be described in detail with reference to the drawings. Each step is realized by the CPU 1201 executing a control program stored in the HDD 1208 or the like.
In S1400, the control unit 12 determines whether the user authentication using the floor mat 3 is OK in the human body communication using the mat communication unit 3A.

  Specifically, when the human body communication unit 1210 recognizes that the user has stood with respect to the mat communication unit 3a, the mat communication unit 3a detects that human body communication is possible. The mat communication unit 3a instructs the authentication unit 5 to perform authentication processing through the human body communication unit 1210.

  Upon receiving the authentication request from the mat communication unit 3a through the human body communication unit 1210, the authentication unit 5 requests authentication information from the portable terminal 8 through the human body communication unit 1210. The human body communication unit 1210 transmits an authentication request received from the authentication unit 5 to the mobile terminal 8 via the mat communication unit 3a.

The authentication unit 5 receives authentication information output when the portable terminal 8 responds from the mat communication unit 3a via the human body communication unit 1210. Then, the HDD 1208 is searched to determine whether or not the same authentication information 4 as the authentication information received from the mobile terminal 8 is stored in the HDD 1208. If the same authentication information 4 as the authentication information received from the mobile terminal 8 is stored in the HDD 1208, the authentication unit 5 determines that the user authentication has been successful. As a result, the user logs in to the information processing apparatus 1 and can give various operation instructions to the information processing apparatus 1.
On the other hand, if the same authentication information 4 as the authentication information received from the mobile terminal 8 is not stored in the HDD 1208 (NO in S1400), the authentication unit 5 determines that the user authentication has failed.

  When the user authentication is successful, for example, the control unit 12 notifies the operation unit 2 that login is permitted for the user, and displays a menu screen or the like to allow the user to select a process to be executed. (S1401).

In S1402, the control unit 12 determines whether or not the logged-in user has left the floor mat 3. Thereby, the control part 12 can judge whether the communication state is changing from the 1st state which has established communication to the 2nd state which has not established communication.
The human body communication is disconnected when the user leaves the floor mat 3, but the control unit 12 includes means for monitoring the communication disconnection. One method for monitoring the disconnection of communication is to periodically send a signal indicating connection from the portable terminal 8 via the mat communication unit 3a, and the CPU 1201 of the control unit 12 that receives this signal transmits the received signal. If it is not received, it is determined that the communication is disconnected.

When the logged-in user moves away from the floor mat 3, the display contents of the operation screen that has been operated on the operation unit 2 or information on the setting contents is saved in the HDD 1208 to save the operation, and the operation input of the operation unit 2 is performed. Are locked (operation disabled state) (S1403).
Then, while the operation input unit of the operation unit 2 is locked, the control unit 12 executes display control for displaying a message such as “logging in with xxx (login user's unique code)” on the display unit.

  In S1404, the control unit 12 determines whether or not a predetermined time has elapsed since the transition to the second state. Here, if a registered user including a logged-in user within a predetermined time does not return the logged-in user in the facility area of the floor mat 3, the logged-in user is logged out, and a default screen is displayed on the display unit of the operation unit 2. Is displayed (S1405). Thereafter, the information processing apparatus 1 enters a login waiting state. If registered users including the login user enter the floor mat 3 within a predetermined time in S1404, the process proceeds to S1406.

In S1406, when the login user who has been temporarily separated returns, the authentication unit 5 performs simple authentication (the login user information is stored in the RAM 1202 which is a cache memory). Thereafter, the CPU 1201 loads the display unit contents or the setting content information saved on the HDD 1208 to the operation unit 2, and continues to perform an operation instruction for the login user (S 1407).
In S1406, when a registered user other than the login user enters the floor mat 3, authentication is performed based on the authentication procedure by the authentication unit 5 described above.
Here, even when the authentication is OK, the login user does not immediately log out and another registered user logs in, but the login is established by the next action of the other registered user.

  For example, when another registered user is confirmed in the next S1408, a confirmation screen indicating the content of “Touch the display unit to log in” is displayed on the display unit of the operation unit 2 and login is performed. Prompt the user whether or not. In the present embodiment, the display unit touch is used as a secondary trigger for login, but the means is not limited to this.

In S1409, when the control unit 12 determines that another registered user does not touch the operation unit 2, that is, when the user leaves the floor mat 3 without performing any action, the process proceeds to S1410. Returning to S1404 while the logged-in user is logged in, the control unit 12 waits for the user to return to the floor mat 3.
In S1409, when the control unit 12 determines that another registered user has touched the operation unit 2, the process proceeds to S1411 and the operation flow changes depending on the status of the information processing apparatus 1.

  In S1411, when the control unit 12 determines that the information processing apparatus 1 is in a standby state (a state where there is no operation for a job by the user), the logged-in user logs out and another registered user logs in (S1414).

In S1411, if the information processing apparatus 1 is executing any job by the logged-in user, the control unit 12 is prohibited from operating the operation unit 2 and enters a login reservation (waiting for job end) state (S1412).
In step S1413, when the job ends, the login user logs out and another registered user logs in. When another registered user logs in, the display unit and setting contents of the operation unit 2 are cleared (deleted), the process proceeds to the default screen (S1415), and this process ends.

  Each process of the present invention can also be realized by executing software (program) acquired via a network or various storage media by a processing device (CPU, processor) such as a personal computer (computer).

  The present invention is not limited to the above embodiment, and various modifications (including organic combinations of the embodiments) are possible based on the spirit of the present invention, and these are excluded from the scope of the present invention. is not.

DESCRIPTION OF SYMBOLS 1 Information processing apparatus 2 Operation part 3 Floor mat

Claims (9)

Communication means for establishing communication with the terminal device through the user's human body;
Authentication means for authenticating a user with authentication information acquired by communication established with the terminal device;
In response to the transition from the first state in which communication between the communication unit and the terminal device is established to the second state in which the communication unit is not established, the first user who has logged in by authenticating by the authentication unit operates Storage means for storing the information of the first operation screen thus performed in the storage means;
Determination means for determining whether or not a predetermined time has elapsed since the transition to the second state;
If the result of determination by the determination means is that the predetermined time has not elapsed, the login state of the logged-in first user is retained, and the job of the logged-in first user is being executed. A control unit that restricts a second user other than the logged-in first user from logging in, and logs out the logged-in first user based on the elapse of the predetermined time ;
An information processing apparatus comprising: The result of the determination by the determination unit, when a predetermined time has elapsed, according to claim 1, characterized in that it comprises a deletion means for deleting the information of the first operation screen stored in the storage means Information processing device. If the communication unit before the predetermined time has elapsed has established communications with any of the terminal devices, based on the authentication information obtained from established terminal apparatus, first the user who established communication logs previously Means for determining whether the user is the same as ,
If the user who established communication is determined to be identical to the first user who has logged in before, the Table shows means in response to the first operation screen information displayed on the user logged and stored in the storage means Display the first operation screen,
As a result of the determination, if the user who established the communication is not the same as the logged-in user, a display control unit that displays on the display unit a confirmation screen for confirming whether to log in to the second user;
The information processing apparatus according to claim 2, further comprising: Means for determining whether or not the confirmation screen is in a standby state where a new job can be accepted when an instruction to execute login is received from the second user;
The result of the determination, if the non-standby state until said standby state is confirmed, a reservation unit for performing login reservation without executing the login from the second user,
The information processing apparatus according to claim 3, further comprising: In response to the standby state is confirmed, when said authenticating means authenticates the second user, said display control means displays the second operation screen for receiving an instruction operation from the second user The information processing apparatus according to claim 3.   The information processing apparatus according to claim 1, wherein the information processing apparatus includes an image forming apparatus, a printing apparatus, and a composite image forming apparatus.   The information processing apparatus according to claim 1, wherein the terminal device includes an IC card and a data communication device. A method for controlling an information processing apparatus,
A communication step of establishing communication with a terminal device through the user's human body;
An authentication step of authenticating a user with authentication information acquired by communication established with the terminal device;
In response to a transition to a second state in which no established from a first state in which communication with the terminal device is established, first a first user who has logged in to be authenticated in the authentication process has operated A storage step of storing information on the operation screen in the storage means;
A determination step of determining whether a predetermined time has elapsed since the transition to the second state;
If the result of determination in the determination step is that the predetermined time has not elapsed, the login state of the logged-in first user is retained, and the job of the logged-in first user is being executed. A control step of restricting a second user other than the logged-in first user from logging in, and logging out the logged-in first user based on the passage of the predetermined time ;
An information processing apparatus control method comprising:   A program causing a computer to execute the control method of the information processing apparatus according to claim 8.

Images