JP6838497B2 - Information processing system and information processing method - Google Patents

Description

The present invention relates to an information processing system and an information processing method.

Cloud systems that provide various services to devices connected to the network are used. For example, there is a system in which a server constituting the cloud performs processing related to the function of the MFP (Multifunction Peripheral), such as processing of input data (scan document, etc.), processing of print data, and the like. In such a system, an authentication process is performed using the account of a user who has the authority to receive the service.

For example, when the MFP remembers the user's account, user password, and login password, changes the login password at a predetermined timing, and accepts the input of the user's account and user password and the login request to the server, the MFP. A configuration is disclosed in which an attempt is made to log in to a cloud server using a login password stored in (Patent Document 1).

By storing the user's account in the device as in the conventional system, it is possible to eliminate the need for the user to enter the account each time the user accesses. However, in such a system, it is necessary to manage the authentication information (accounts) of all users on the cloud side, and as the number of users increases, the load on the management of the authentication information increases. In particular, in a system that provides services related to devices such as MFPs that are often shared by multiple users, the amount of authentication information to be managed becomes enormous, and the cost, workload, resource load, etc. on the cloud side, etc. Is likely to cause an excessive problem.

The present invention has been made in view of the above, and an object of the present invention is to reduce the load on the management of authentication information.

In order to solve the above-mentioned problems and achieve the object, one form of the present invention is an information processing system in which a device and a cloud that provides services related to the functions of the device are connected via a network. The device receives an input unit for inputting registration information, a first transmission unit for transmitting the registration information to the cloud, and access information transmitted from the cloud and assigned to each device. A receiving unit, a first storage unit that stores the access information, and a first processing unit that performs processing for accessing the cloud using the access information stored in the first storage unit. The cloud transmits the access information to the device, a second receiving unit that receives the registration information, a first generation unit that generates the access information based on the registration information, and the access information. A second process of performing a process for accessing the device using the second transmission unit, the second storage unit that stores the access information, and the access information stored in the second storage unit. It is characterized by having a part and.

According to the present invention, it is possible to reduce the load on the management of authentication information.

FIG. 1 is a diagram illustrating a conceptual configuration of an information processing system according to an embodiment. FIG. 2 is a block diagram illustrating a network configuration of an information processing system according to an embodiment. FIG. 3 is a block diagram illustrating a hardware configuration of the MFP according to the embodiment. FIG. 4 is a block diagram illustrating a hardware configuration of a server included in the cloud service and a storage server included in the cloud storage according to the embodiment. FIG. 5 is a block diagram illustrating a functional configuration of the MFP according to the embodiment. FIG. 6 is a block diagram illustrating a functional configuration of the cloud service according to the embodiment. FIG. 7 is a block diagram illustrating a functional configuration of the cloud storage according to the embodiment. FIG. 8 is a diagram illustrating a data structure of registered device information according to the embodiment. FIG. 9 is a diagram illustrating a data structure of registered cloud information according to the embodiment. FIG. 10 is a flowchart illustrating processing when the MFP makes an access request to the cloud service that does not include access information in the information processing system according to the embodiment. FIG. 11 is a diagram illustrating a registration screen according to the embodiment. FIG. 12 is a flowchart illustrating processing when the MFP makes an access request including access information to the cloud service in the information processing system according to the embodiment. FIG. 13 is a diagram illustrating an access error display screen according to the embodiment. FIG. 14 is a diagram illustrating a tenant error display screen according to the embodiment. FIG. 15 is a diagram illustrating a registration mode selection screen according to the embodiment. FIG. 16 is a diagram illustrating a conceptual configuration of an information processing system according to a comparative example. FIG. 17 is a diagram illustrating a process for registering an MFP that can use a service in the conceptual configuration of the information processing system according to the embodiment. FIG. 18 is a diagram illustrating processing when the MFP uses a service in the conceptual configuration of the information processing system according to the embodiment.

An embodiment of the information processing system and the information processing method will be described in detail with reference to the accompanying drawings. The present invention is not limited by the following embodiments, and the components in the following embodiments include those easily conceived by those skilled in the art, substantially the same, and so-called equivalent ranges. .. Various omissions, substitutions, changes, and combinations of components can be made without departing from the gist of the following embodiments.

FIG. 1 is a diagram illustrating a conceptual configuration of the information processing system 1 according to the embodiment. The information processing system 1 according to the present embodiment is a system that provides services related to the functions of the MFP 11 by accessing the cloud 12 by the MFP 11 (device).

The MFP 11 is an information processing device having functions such as a copier, a printer, a scanner, and a facsimile, and is an example of a device that receives a service provided by the cloud 12. In this example, one MFP 11 is shared by a plurality of users 15.

The cloud 12 is a computer network including one or more servers that perform processing for realizing a service related to the function of the MFP 11. The cloud 12 according to this example performs processing related to printing, scanning, data conversion, data transmission / distribution, and the like.

Although FIG. 1 shows a state in which one MFP 11 is connected to the cloud 12, a plurality of MFPs 11 may be connected or a device other than the MFP 11 may be connected.

FIG. 2 is a block diagram illustrating a network configuration of the information processing system 1 according to the embodiment. In this example, two MFPs 11 are connected to the local network 17, the cloud 12 is connected to the Internet 18, and the local network 17 and the Internet 18 are connected via a router or the like. The cloud 12 according to this example includes a cloud service 12A and a cloud storage 12B. The cloud service 12A is a network that executes services related to the functions of the MFP 11, and is composed of a server 13 or the like that performs processing necessary for executing the services. The cloud storage 12B is a network that stores various data, and is composed of a storage server 14 and the like. Normally, the MFP 11 connected to the local network 17 can access the server 13 connected to the Internet 18, but the server 13 cannot directly access the MFP 11.

FIG. 3 is a block diagram illustrating a hardware configuration of the MFP 11 according to the embodiment. The MFP 11 according to this example includes a main body unit 20 and an operation unit 30. The main body 20 realizes a printer function, a copy function, a scanner function, a facsimile function, and the like. The operation unit 30 is a user interface for operating the MFP 11. The main body 20 and the operation unit 30 are connected to each other so as to be able to communicate with each other via the connection I / F29, the communication path 41, and the connection I / F36.

The main body 20 performs an operation according to the operation received by the operation unit 30. The main body 20 can also communicate with an external device such as a PC (Personal Computer), and may be configured to perform an operation in response to an instruction (printing instruction or the like) received from the external device.

The main body 20 includes a reading unit 21, a communication unit 23, a printing unit 24, a CPU (Central Processing Unit) 25, a ROM (Read Only Memory) 26, a RAM (Random Access Memory) 27, an HDD 28, and a connection I / F 29. .. The reading unit 21, the communication unit 23, the printing unit 24, the CPU 25, the ROM 26, the RAM 27, the HDD 28, and the connection I / F 29 are connected to each other via the system bus 22.

The reading unit 21 is hardware that performs processing for realizing a copy function, a scanner function, and a facsimile function. The reading unit 21 includes, for example, a scanner that scans and reads an image of a document.

The communication unit 23 is an interface for connecting to the local network 17.

The printing unit 24 is hardware that performs processing for realizing the printer function. The printing unit 24 includes, for example, a plotter that prints on a medium. The printing unit 24 may further include hardware for realizing specific options such as a finisher for sorting printed media and an ADF (Auto Document Feeder) for automatically feeding documents.

The CPU 25 comprehensively controls the operation of the main body 20. The CPU 25 controls the operation of the entire main unit 20 by executing a program stored in the ROM 26, HDD 28, etc. using the RAM 27 as a work area, and has various functions such as the above-mentioned printer function, copy function, scanner function, and facsimile function. To realize.

The connection I / F 29 is an interface for communicating with the operation unit 30 via the communication path 41.

The operation unit 30 includes a CPU 31, a ROM 32, a RAM 33, a flash memory 34, a communication unit 35, a connection I / F 36, an operation panel 37, and an external connection I / F 38. The CPU 31, ROM 32, RAM 33, flash memory 34, communication unit 35, connection I / F 36, operation panel 37, and external connection I / F 38 are connected to each other via the system bus 39.

The CPU 31 comprehensively controls the operation of the operation unit 30. The CPU 31 controls the operation of the entire operation unit 30 by executing a program stored in the ROM 32, the flash memory 34, etc. using the RAM 33 as a work area, and realizes display of information according to the input received from the user. ..

The communication unit 35 is an interface for connecting to the local network 17. The connection I / F 36 is an interface for communicating with the main body 20 via the communication path 41.

The operation panel 37 accepts various inputs according to the user's operation and displays various information (for example, information according to the accepted operation, information indicating the operating status of the MFP 11, information indicating the setting state, and the like). The operation panel 37 may be configured by using a liquid crystal display device equipped with a touch panel mechanism, an organic EL display device, or the like. The operation unit 30 may further include a hardware key (button), a lamp, or the like as a user interface.

The external connection I / F 38 is an interface such as NFC (Near Field Communication) used for connecting to another device such as a smart device.

FIG. 4 is a block diagram illustrating the hardware configurations of the server 13 included in the cloud service 12A and the storage server 14 included in the cloud storage 12B according to the embodiment. The server 13 and the storage server 14 according to this example include a CPU 51, a ROM 52, a RAM 53, an HDD 54, an input device 55, an output device 56, a communication I / F 57, and a bus 58. The CPU 51 performs a predetermined calculation process using the RAM 53 as a work area according to a program stored in the ROM 52 or the HDD 54. The input device 55 is a device for inputting information from the outside, such as a keyboard, a mouse, and a touch panel. The output device 56 is a device for outputting internally generated information to the outside, and is, for example, a display, a printer, or the like. The communication I / F 57 is a device that enables information to be transmitted / received to / from an external device via the Internet 18.

FIG. 5 is a block diagram illustrating a functional configuration of the MFP 11 according to the embodiment. The MFP 11 according to this example includes a UI (User Interface) unit 101, a cloud access processing unit 102, a registered cloud information storage unit 103 (first storage unit), a scanning unit 104, a printing unit 105, and a data transmitting / receiving unit 106. ..

The UI unit 101 provides a user interface for the user 15 to operate the MFP 11. The UI unit 101 is composed of CPUs 25, 31, an operation panel 37, and the like.

The cloud access processing unit 102 performs processing for accessing the cloud service 12A (server 13). The cloud access processing unit 102 establishes access with the cloud service 12A based on the registered cloud information stored in the registered cloud information storage unit 103. Specifically, the cloud access processing unit 102 accesses the cloud service 12A by using the access information included in the registered cloud information as authentication information. The cloud access processing unit 102 is composed of a CPU 25, a communication unit 23, and the like.

The registration cloud information storage unit 103 stores the registration cloud information for the MFP 11 to access the cloud service 12A. The registered cloud information includes access information. The access information is information generated by the cloud service 12A and transmitted to the MFP 11. Access information will be described in detail later. The registration cloud information storage unit 103 is composed of a CPU 25, an HDD 28, and the like.

The scanning unit 104 realizes the reading function of the MFP 11. The scanning unit 104 includes a CPU 25, a reading unit 21, and the like.

The print unit 105 realizes the printing function of the MFP 11. The print unit 105 is composed of a CPU 25, a print unit 24, and the like.

The data transmission / reception unit 106 transmits / receives data to / from the cloud 12 via the local network 17 and the Internet 18. The data transmission / reception unit 106 includes a CPU 25, a communication unit 23, and the like.

FIG. 6 is a block diagram illustrating a functional configuration of the cloud service 12A according to the embodiment. The cloud service 12A according to this example includes a UI unit 111, a registration processing unit 112, an access information generation unit 113, a distributed processing unit 114, a service processing unit 115, a user management unit 116, a device access processing unit 117, and a data transmission / reception unit 118. including.

The UI unit 111 provides a user interface for the administrator of the cloud service 12A to operate resources such as the server 13. The UI unit 111 includes a CPU 51, an input device 55, an output device 56, and the like.

The registration processing unit 112 performs a process for registering the MFP 11 having the authority to use the service before starting the provision of the service by the cloud service 12A. The registration of the MFP 11 is performed based on the registration information input by the user 15. The content of the registration information is not particularly limited, but may be, for example, an account that identifies the user 15, tenant information that identifies the tenant to which the MFP 11 belongs, and the like. The registration processing unit 112 is composed of a CPU 51, a communication I / F 57, and the like.

The access information generation unit 113 generates access information for the MFP 11 registered by the registration processing unit 112. The access information is information uniquely assigned to each MFP 11, and is used as authentication information when the MFP 11 accesses to receive the service by the cloud service 12A. The access information generation unit 113 is composed of a CPU 51 and the like.

The distributed processing unit 114 requests the processing required for executing the service to another server (another cloud) as necessary, and conversely executes the processing requested by the other server. The distributed processing unit 114 is composed of a CPU 51, a communication I / F 57, and the like.

The service processing unit 115 performs processing for executing the service requested by the MFP 11. The service processing unit 115 is composed of a CPU 51, a communication I / F 57, and the like.

The user management unit 116 manages information about the user 15 who uses the MFP 11. The content of the information about the user is not particularly limited, but for example, the registration information (registration user ID, password, tenant to which the MFP 11 belongs, etc.) input during the registration process by the registration processing unit 112, the mail of the user 15. It can be an address or the like. The user management unit 116 is composed of a CPU 51, an HDD 54, and the like.

When the MFP 11 requests access to the cloud service 12A, the device access processing unit 117 uses the access information included in the access request and the registered device information stored in the registered device information storage unit 123 of the cloud storage 12B. Determine whether to establish access based on the included access information. That is, the device access processing unit 117 determines whether or not the accessing MFP 11 has the authority to use the service based on the access information. The device access processing unit 117 is composed of a CPU 51, a communication I / F 57, and the like.

The data transmission / reception unit 118 transmits / receives various data via the Internet 18 and the local network 17. For example, the data transmission / reception unit 118 transmits the access information generated by the access information generation unit 113 to the MFP 11 and the cloud storage 12B, receives the access request including the access information transmitted from the MFP 11, and transmits the access request from the cloud storage 12B. Receive registered device information including access information. The data transmission / reception unit 118 is composed of a CPU 51, a communication I / F 57, and the like.

FIG. 7 is a block diagram illustrating a functional configuration of the cloud storage 12B according to the embodiment. The cloud storage 12B according to this example is used to store various data used for processing by the cloud service 12A, and includes a UI unit 121, a user storage unit 122, a registered device information storage unit 123 (second storage unit), and a second storage unit. The file management unit 124 and the data storage unit 125 are included.

The UI unit 121 provides a user interface for the administrator of the cloud storage 12B to operate resources such as the storage server 14 included in the cloud storage 12B. The UI unit 121 includes a CPU 51, an input device 55, an output device 56, and the like.

The user storage unit 122 stores information about a user (cloud service 12A) who uses the storage function of the cloud storage 12B. For example, the user storage unit 122 manages account information and the like when the cloud service 12A (server 13) accesses the cloud storage 12B (storage server 14). The user storage unit 122 is composed of a CPU 51, an HDD 54, and the like.

The registered device information storage unit 123 stores the registered device information regarding the MFP 11 having the authority to use the service of the cloud service 12A. The registered device information includes access information transmitted from the cloud service 12A. The configuration of the registered device information is not particularly limited, but may be, for example, a configuration in which the identification number of the MFP 11 and the access information are associated with each other. The registered device information storage unit 123 is composed of a CPU 51, an HDD 54, and the like.

The file management unit 124 reads and writes a file related to a user (cloud service 12A) who uses the function of the cloud storage 12B. The file management unit 124 is composed of a CPU 51, an HDD 54, an input device 55, and the like.

The data storage unit 125 stores data related to the service provided by the cloud service 12A. The data storage unit 125 is composed of a CPU 51, an HDD 54, and the like.

FIG. 8 is a diagram illustrating the data structure of the registered device information 151 according to the embodiment. The registered device information 151 is stored in the registered device information storage unit 123 of the cloud service 12B, and is information used by the device access processing unit 117 of the cloud service 12A when the MFP 11 accesses the cloud service 12A.

The registered device information 151 according to this example is information that associates a device ID (device identification information), a tenant ID (tenant information), access information, and a registration refusal flag. The device ID is information that identifies a device (in this example, the MFP 11) that accesses the cloud service 12A. The tenant ID is information that identifies the tenant to which the device belongs. As described above, the access information is information generated by the access information generation unit 113 of the cloud service 12A and used as authentication information when the MFP 11 uses the service of the cloud service 12A.

The registration refusal flag is information for restricting access to a specific device or a specific tenant. The registration denial flag "OFF" indicates that access is not restricted, and the registration denial flag "ON" indicates that access is restricted. For example, the registration refusal flag "ON" of the entry located second from the bottom indicates that the access of the device corresponding to the device ID "DEVICE_2222" is restricted (prohibited). The registration refusal flag "ON" of the entry located at the bottom indicates that the device corresponding to the device ID "DEVICE_3333" is restricted from accessing the tenant corresponding to the tenant ID "TENANT_XYZ".

FIG. 9 is a diagram illustrating the data structure of the registered cloud information 161 according to the embodiment. The registered cloud information 161 is stored in the registered cloud information storage unit 103 of the MFP 11, and is information used by the cloud access processing unit 102 of the MFP 11 when the MFP 11 accesses the cloud service 12A.

The registered cloud information 161 according to this example associates a cloud service URL (address information), a tenant ID, and access information. The cloud service URL is information indicating a URL accessed by the MFP 11 when receiving the service. The tenant ID and access information included in the registered cloud information 161 are the same as the tenant ID and access information included in the registered device information 151.

As described above, the access information is included in both the registered device information 151 and the registered cloud information 161. The cloud service 12A has access information registered on the MFP 11 side (stored in the registered cloud information storage unit 103 of the MFP 11) and registered on the cloud 12 side (registered device information storage unit 123 of the cloud storage 12B). By comparing with the access information (stored in), it is determined whether or not the MFP 11 has the authority to receive the service.

In the present embodiment, when the MFP 11 makes an access request to the cloud service 12A that does not include the access information, new access information is generated and the generated access information is registered in the MFP 11 and the cloud storage 12B. Processing is performed. On the other hand, when the MFP 11 makes an access request including access information to the cloud service 12A, the cloud service 12A has the access information transmitted from the MFP 11 and the registered device information 151 stored in the cloud storage 12B. Based on the above, processing such as service execution, access denial, and re-registration of access information is performed.

FIG. 10 is a flowchart illustrating processing when the MFP 11 makes an access request to the cloud service 12A that does not include access information in the information processing system 1 according to the embodiment. When the cloud access processing unit 102 of the MFP 11 transmits an access request that does not include access information to the cloud service 12A (S101), the registration processing unit 112 of the cloud service 12A displays a registration screen for inputting the registration information in the UI unit 101 of the MFP 11. Is displayed (S102).

FIG. 11 is a diagram illustrating the registration screen 201 according to the embodiment. The registration screen 201 according to this example includes a field 202 for inputting a tenant ID, a field 203 for inputting a user ID for registration, a field 204 for inputting a password, and an execution button 205. The tenant ID is information that identifies the tenant to which the MFP 11 to be registered belongs. The registration user ID is information that identifies the user 15 who uses the MFP 11 to be registered. The password is authentication information uniquely associated with the registration user ID. The execution button 205 is an operation unit for confirming the information input in each of the fields 202 to 204 and transmitting the information to the cloud service 12A.

Returning to the flowchart of FIG. 10, when the user 15 of the MFP 11 inputs the registration information on the registration screen 201 (S103), the cloud access processing unit 102 of the MFP 11 cloud the device ID for identifying the own device and the input registration information. It is transmitted to the service 12A (S104). The device ID may be stored in the ROM 26 or the like. When the access information generation unit 113 of the cloud service 12A receives the device ID and the registration information from the MFP 11, the access information is generated (S105), and the registration processing unit 112 transmits the generated access information to the MFP 11 (S106).

When the cloud access processing unit 102 of the MFP 11 receives the access information transmitted from the cloud service 12A, the cloud access processing unit 102 generates the registered cloud information 161 including the access information (S107), and stores the registered cloud information 161 in the registered cloud information storage unit 103. (S108).

FIG. 12 is a flowchart illustrating processing when the MFP 11 makes an access request including access information to the cloud service 12A in the information processing system 1 according to the embodiment. When the cloud access processing unit 102 of the MFP 11 transmits an access request including access information to the cloud service 12A (S201), the device access processing unit 117 of the cloud service 12A has an entry corresponding to the access request in the registered device information 151. Whether or not it is determined (S202). At this time, the access request transmitted from the MFP 11 includes the access information, the tenant ID associated with the access information in the registered cloud information 161 and the device ID that identifies the MFP 11.

When the entry corresponding to the received access request is in the registered device information 151 (S202: Yes), the device access processing unit 117 determines whether or not the registration refusal flag of the entry is ON (S203). When the registration refusal flag is not ON (OFF) (S203: No), the service processing unit 115 of the cloud service 12A executes the requested service (S204). On the other hand, when the registration refusal flag is ON (S203: Yes), the device access processing unit 117 determines whether the refusal tenant is specified (whether the tenant ID is included in the entry for which the registration refusal flag is ON). Judgment (S205). When the denial tenant is not specified (the tenant ID is not included in the entry for which the registration denial flag is ON) (S205: No), the device access processing unit 117 is the UI unit 101 of the MFP 11 that sent the access request. Displays an access error message indicating that it is inaccessible (S206).

FIG. 13 is a diagram illustrating an access error display screen 211 according to the embodiment. The access error display screen 211 includes an access error message and is displayed on the display (operation panel 37) of the MFP 11 whose access is denied.

Returning to the flowchart of FIG. 12, when a rejected tenant is specified (the tenant ID is included in the entry in which the registration refusal flag is ON) (S205: Yes), the device access processing unit 117 makes the access request. The registration screen 201 is displayed on the UI unit 101 of the transmitted MFP 11 (S207). When the user 15 inputs the registration information on the registration screen 201 (S208) and the cloud service 12A receives the registration information (S209), the device access processing unit 117 determines whether or not the designated tenant ID is a rejected tenant (S208). Whether or not the tenant ID included in the received registration information matches the tenant ID included in the entry for which the registration refusal flag is ON) is determined (S210). When the specified tenant ID is a rejected tenant (S210: Yes), the device access processing unit 117 causes the UI unit 101 of the MFP 11 to display a tenant specification error message indicating that the specified tenant cannot access the tenant. (S211), step S207 is executed again.

FIG. 14 is a diagram illustrating a tenant error display screen 221 according to the embodiment. The tenant error display screen 221 includes a tenant designation error message and is displayed on the display (operation panel 37) of the MFP 11 for which the registration information has been input in step S208.

Returning to the flowchart of FIG. 12, when the specified tenant is not a rejected tenant (the tenant ID included in the received registration information does not match the tenant ID included in the entry in which the registration refusal flag is ON) (S210: No). , The registration processing unit 112 of the cloud service 12A generates an entry of the registered device information 151 based on the registration information input in step S208 (S216), and adds the generated entry to the registered device information 151 (S217). , The service processing unit 115 executes the requested service (S218).

When there is no entry corresponding to the access request transmitted from the MFP 11 in the registered device information 151 (S202: No), the device access processing unit 117 of the cloud service 12A causes the UI unit 101 of the MFP 11 to display the registration mode selection screen. (S212). The registration mode indicates a method of adding a new entry to the registered device information 151, and in this example, there are a continuous use mode and a re-registration mode. The continuous use mode is a mode in which a new entry is added to the registered device information 151 by using the existing registration information (tenant ID, registration user ID, password, etc.). In the present embodiment, the existing registration information is managed by the user management unit 116 of the cloud service 12A, but it may be managed in the cloud storage 12B, for example. The re-registration mode is a mode in which a new entry is added to the registered device information 151 based on the newly input registration information.

FIG. 15 is a diagram illustrating a registration mode selection screen 231 according to the embodiment. The registration mode selection screen 231 is formed with a "continuous use of registration information" button operated when selecting a continuous use mode and a "device registration re-execution" button operated when selecting a re-registration mode. Has been done. The user 15 can select either the continuous use mode or the re-registration mode by pressing either button on the operation panel 37 of the MFP 11.

Returning to the flowchart of FIG. 12, after the registration mode selection screen 231 is displayed on the MFP 11 (S212), the registration processing unit 112 of the cloud service 12A determines the registration mode selected by the user 15 (S213). When the continuous use mode is selected (S213: continuous use), the registration processing unit 112 generates a new entry of the registered device information 151 based on the existing registration information corresponding to the received access request (S216) and generates it. The added entry is added to the registered device information 151 (S217), and then the service processing unit 115 executes the requested service (S218). On the other hand, when the re-registration mode is selected (S213: re-registration), the registration processing unit 112 causes the UI unit 101 of the MFP 11 to display the registration screen 201 (S214), and causes the user 15 to input the registration information (S215). After that, the device access processing unit 117 generates a new entry of the registered device information 151 based on the input registration information (S216), adds the generated entry to the registered device information 151 (S217), and then adds the generated entry to the registered device information 151 (S217). The service processing unit 115 executes the requested service (S218).

(Modification example)
In the process shown in FIG. 12, the registration processing unit 112 of the cloud service 12A uses the access information received from the MFP 11 even when the access information received from the MFP 11 is not registered in the registered device information 151. Processing is being performed to enable access to the MFP 11. However, the registration processing unit 112 is not limited to those that perform such processing. For example, when the access information received from the MFP 11 is not registered in the registered device information 151, the registration processing unit 112 stores the access information in the registration cloud information storage unit 103 of the MFP 11. A process for deleting an entry including access information not registered in the registered device information 151 may be performed from the registered cloud information 161. By performing such a process, it is possible to easily and surely prohibit the use of the service by the MFP 11 that is not registered on the cloud 12 side only by accessing the cloud service 12A from the MFP 11.

The program that realizes the functions of the information processing system 1 according to the present embodiment is a file in an installable format or an executable format, and is a computer such as a CD-ROM, a memory card, a CD-R, or a DVD (Digital Versatile Disk). It is stored on a readable storage medium and provided as a computer program product.

Further, the program may be stored on a computer connected to a network such as the Internet and provided by downloading via the network. Further, the program may be configured to be provided via a network such as the Internet without being downloaded. Further, the program may be configured to be provided by incorporating it into ROMs 26, 52 and the like in advance. Further, the program may have a module configuration including functions that can be realized by the program among the functional units included in the information processing system 1. The function realized by the program is loaded into the main storage device (RAM 27, 53, etc.) by reading the program from the storage medium and executing the program. That is, the functions realized by the program are generated on the main storage device.

As described above, according to the present embodiment, access information is generated for each MFP 11, and the access information is stored in the storage unit (registered cloud information storage unit 103) included in the MFP 11 and the storage unit (registered device information storage unit 103) included in the cloud 12. It is stored in 123) and used as authentication information when the MFP 11 uses the service of the cloud 12.

FIG. 16 is a diagram illustrating the conceptual configuration of the information processing system 1001 according to the comparative example. FIG. 16 shows a problem in the conventional configuration. The tenant 1011 set in the cloud 1002 according to this comparative example manages the account information 1021 of a plurality of users 15 who share one MFP 11. When using the service of the cloud 1002, each user 15 inputs his / her account information and requests access to the cloud 1002. Therefore, the administrator 16 of the cloud 1002 needs to register and manage the account information 1021 of all the users 15 in advance. According to such a configuration, as the number of users 15 increases, the load on the management of the account information 1021 becomes large.

FIG. 17 is a diagram illustrating a process for registering an MFP 11 that can use a service in the conceptual configuration of the information processing system 1 according to the embodiment. First, when the registration information is transmitted from the MFP 11 (1), the cloud service 12A generates access information for each MFP 11 based on the registration information (2). The generated access information is transmitted to the cloud storage 12B and stored as a part of the registered device information 151 (3). Further, the generated access information is transmitted to the MFP 11 (4) and stored as a part of the registered cloud information 161 (5).

FIG. 18 is a diagram illustrating processing when the MFP 11 uses a service in the conceptual configuration of the information processing system 1 according to the embodiment. After the above registration process is completed, when the MFP 11 uses the service of the cloud service 12A, the MFP 11 acquires access information from the registered cloud information 161 stored in the own machine (6), and the access including the access information is included. The request is transmitted to the cloud service 12A (7). When the cloud service 12A receives the access request from the MFP 11, the MFP 11 (device) is registered based on the access information included in the access request and the access information included in the device registration information 151 stored in the cloud storage 12B. Confirm whether or not (whether or not you have the authority to use the service) (8). Then, the access of the MFP 11 confirmed to be registered is permitted (9), and the service is started to be provided.

According to the above embodiment, the authentication information for accessing the cloud 12 can be managed for each MFP 11, so that even when there are many users 15 who use the MFP 11, the authentication information can be managed. It is possible to provide a highly convenient cloud service without increasing the load.

Although the embodiments of the present invention have been described above, the above-described embodiments are presented as examples and are not intended to limit the scope of the invention. This novel embodiment can be implemented in various other embodiments and can be variously omitted, replaced, modified and combined without departing from the gist of the invention. This embodiment and its modifications are included in the scope and gist of the invention, and are included in the scope of the invention described in the claims and the equivalent scope thereof.

1,1001 Information processing system 11 MFP
12 Cloud 12A Cloud service 12B Cloud storage 13 Server 14 Storage server 15 User 16 Administrator 17 Local network 18 Internet 20 Main unit 21 Reading unit 23 Communication unit 24 Printing unit 25 CPU
26 ROM
27 RAM
28 HDD
29 Connection I / F
30 Operation unit 31 CPU
32 ROM
33 RAM
34 Flash memory 35 Communication unit 36 Connection I / F
37 Operation panel 38 External connection I / F
41 communication path 51 CPU
52 ROM
53 RAM
54 HDD
55 Input device 56 Output device 57 Communication I / F
101 UI unit 102 Cloud access processing unit 103 Registered cloud information storage unit 104 Scan unit 105 Print unit 106 Data transmission / reception unit 111 UI unit 112 Registration processing unit 113 Access information generation unit 114 Distributed processing unit 115 Service processing unit 116 User management unit 117 Equipment Access processing unit 118 Data transmission / reception unit 121 UI unit 122 User storage unit 123 Registered device information storage unit 124 File management unit 125 Data storage unit 151 Registered device information 161 Registration cloud information 201 Registration screen 211 Access error display screen 221 Tenant error display screen 231 Registration mode selection screen

Japanese Unexamined Patent Publication No. 2015-141691

Claims (9)

An information processing system in which a device and a cloud that provides services related to the functions of the device are connected via a network.
The device is
Input section for entering registration information and
A first transmission unit that transmits the registration information to the cloud, and
A first receiving unit that receives access information transmitted from the cloud and assigned to each device, and
A first storage unit that stores the access information and
A first processing unit that performs processing for accessing the cloud using the access information stored in the first storage unit, and
With
The cloud
A second receiving unit that receives the registration information and
A first generation unit that generates the access information based on the registration information,
A second transmitter that transmits the access information to the device,
A second storage unit that stores the access information,
A second processing unit that performs processing for accessing the device using the access information stored in the second storage unit, and
To prepare
Information processing system. The second storage unit selectively stores the access information generated by the first generation unit, and stores the access information.
The second processing unit receives an access request including the access information from the device, and when the received access information is not stored in the second storage unit, the second processing unit uses the received access information. Perform processing to access the device.
The information processing system according to claim 1. The second storage unit selectively stores the access information generated by the first generation unit, and stores the access information.
The second processing unit receives an access request including the access information from the device, and sends the access request when the received access information is not stored in the second storage unit. Performs a process for deleting the access information from the first storage unit of the above.
The information processing system according to claim 1. The second storage unit selectively stores the access information generated by the first generation unit, and stores the access information.
The second processing unit receives an access request including the access information from the device, and when the received access information is not stored in the second storage unit, the second processing unit uses the received access information. The first mode for accessing the device or the second mode for deleting the access information from the first storage unit and accessing the device using the newly generated access information is selectively executed. Configured to be able to
The information processing system according to claim 1. When the second processing unit receives an access request that does not include the access information from the device, the second processing unit performs a process for generating new access information.
The information processing system according to any one of claims 1 to 4. The second processing unit performs processing for restricting access to the specific device.
The information processing system according to any one of claims 1 to 5. The second processing unit performs processing for restricting access to the device for each tenant corresponding to the device.
The information processing system according to any one of claims 1 to 6. In the first storage unit, address information corresponding to the service, tenant information indicating a tenant corresponding to the device, and information associated with the access information are stored.
In the second storage unit, device identification information for identifying the device, information in which the tenant information and the access information are associated with each other are stored.
The information processing system according to any one of claims 1 to 7. An information processing method performed using a system in which a device and a cloud that provides services related to the functions of the device are connected via a network.
Steps to enter registration information using the device,
A step of transmitting the registration information from the device to the cloud, and
When the cloud receives the registration information,
A step in which the cloud generates access information assigned to each device based on the registration information, and
A step of transmitting the access information from the cloud to the device,
When the device receives the access information,
A step of storing the access information in a first storage unit provided in the device, and
A step of storing the access information in a second storage unit provided in the cloud, and
A step in which the device performs a process for establishing a connection with the cloud using the access information stored in the first storage unit.
A step in which the cloud performs a process for establishing a connection with the device using the access information stored in the second storage unit.
Information processing methods including.

Images